Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft
File:                     82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft (raw, json)
Hash identifier:          9lYzoHr28hxh7chMqIUvETky8DV8nhRm0xdCb8eqS7Y=
Subject key identifier:   6C:6C:79:B5:38:CC:53:E0:37:77:2E:0A:9F:2F:C7:C7:EB:72:BA:6D
Authority key identifier: F3:6F:9C:BA:FF:65:3B:60:13:4B:46:AA:70:E7:91:17:09:8A:7C:64
Certificate issuer:       /CN=f36f9cbaff653b60134b46aa70e79117098a7c64
Certificate serial:       019D2771EBD1D874680C3212DA42D406FC41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft
Manifest number:          138D
Signing time:             Thu 26 Mar 2026 00:01:10 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:10 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:10 +0000
Files and hashes:         1: 82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl (hash: NoB3uyNHnJtWKVlc/EqOpNHPbWUthATiuQV2no+p+lo=)
                          2: AWrvYFZRzBwoKUoD2RTwopn0ahg.roa (hash: FIrRNnU7H4yL3fRTOTjvqaEhwxiYCua1DMnPIKZ4Wpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:eb:d1:d8:74:68:0c:32:12:da:42:d4:06:fc:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f36f9cbaff653b60134b46aa70e79117098a7c64
        Validity
            Not Before: Mar 26 00:01:10 2026 GMT
            Not After : Mar 27 00:01:10 2026 GMT
        Subject: CN=6c6c79b538cc53e037772e0a9f2fc7c7eb72ba6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2a:46:45:5f:9e:56:f3:49:3c:d1:dc:24:3f:
                    3d:34:f9:a9:54:9c:c0:21:4b:26:6b:3b:d4:5a:d2:
                    45:27:9a:51:80:c7:bb:fc:d7:b8:3b:23:6e:1d:4b:
                    85:44:01:27:f7:f1:69:22:8f:55:5d:0a:1f:b3:02:
                    2f:b9:de:3a:a8:a2:54:81:59:30:62:3d:26:61:35:
                    5d:a5:54:22:0d:a3:80:14:6a:d3:2a:d0:b1:05:cd:
                    83:05:f5:f3:02:12:ee:e0:ca:03:cb:36:7b:3b:90:
                    f0:d8:38:c9:63:8d:cc:3d:fa:8c:fa:fe:0d:64:65:
                    d1:05:1f:4f:70:5e:07:07:0c:9e:df:e1:ce:f5:0f:
                    9f:04:d0:8f:a5:3f:d3:29:ff:4c:60:6c:dc:50:1b:
                    c2:96:ef:14:97:16:4a:f4:8e:d6:0f:05:32:9f:66:
                    17:7f:67:67:0e:ab:45:ab:31:ee:ff:a5:43:b3:49:
                    5b:cc:0e:07:4a:4b:23:19:db:b5:62:8e:ee:c0:c2:
                    7f:89:0f:95:06:6d:dd:8e:8a:a8:b5:9c:49:30:aa:
                    80:6d:bb:11:2a:e9:a9:6b:4c:75:a6:9d:d9:87:54:
                    5f:0a:1a:5b:2d:b4:6d:cf:db:26:34:6e:c1:5b:33:
                    80:54:26:93:37:7e:bb:37:69:16:72:9c:36:c4:f8:
                    1e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6C:79:B5:38:CC:53:E0:37:77:2E:0A:9F:2F:C7:C7:EB:72:BA:6D
            X509v3 Authority Key Identifier:
                keyid:F3:6F:9C:BA:FF:65:3B:60:13:4B:46:AA:70:E7:91:17:09:8A:7C:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:64:f6:fc:c9:46:4c:c4:7f:0b:64:58:91:0a:3c:60:76:8e:
         7f:6a:73:d7:76:6b:21:38:8b:55:03:90:e2:27:21:13:4b:60:
         34:1d:6c:85:b0:56:71:91:b2:e5:3a:c3:46:46:4a:cd:cf:07:
         e1:f7:3f:fa:18:a6:d1:bb:0f:01:3f:b5:66:42:84:60:11:e5:
         8c:18:7b:52:1f:2a:10:56:bc:f9:81:ed:94:05:3c:64:f9:d9:
         e7:2a:2d:2d:c0:f0:29:01:96:d8:e5:49:a0:c8:53:15:ac:d7:
         f8:01:24:8e:35:81:47:0e:3f:36:a8:ff:6e:9a:84:66:4a:82:
         38:a4:25:a6:0d:bb:96:4c:44:8c:91:bb:91:b3:60:d8:96:45:
         14:fd:00:0b:20:b5:66:9b:cc:2b:3d:8c:71:0f:cf:9c:53:37:
         63:dc:1d:0e:12:fd:b7:7c:f8:40:20:e2:6d:45:cc:e4:e8:7c:
         df:73:ce:3e:06:79:e8:c6:49:f8:57:17:80:44:15:ab:a8:66:
         b2:6c:f4:cd:4c:5f:70:f6:fc:bc:2a:ed:02:ea:0b:72:de:ea:
         cd:03:d0:a8:50:03:a8:e3:09:ad:18:4b:db:2d:87:20:ae:09:
         59:cf:9d:57:e7:5b:bf:57:08:ca:7a:99:dd:35:2a:11:02:f9:
         9c:7c:4c:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncevR2HRoDDIS2kLUBvxBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNmY5Y2JhZmY2NTNiNjAxMzRiNDZhYTcwZTc5MTE3MDk4
YTdjNjQwHhcNMjYwMzI2MDAwMTEwWhcNMjYwMzI3MDAwMTEwWjAzMTEwLwYDVQQD
Eyg2YzZjNzliNTM4Y2M1M2UwMzc3NzJlMGE5ZjJmYzdjN2ViNzJiYTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtypGRV+eVvNJPNHcJD89NPmpVJzA
IUsmazvUWtJFJ5pRgMe7/Ne4OyNuHUuFRAEn9/FpIo9VXQofswIvud46qKJUgVkw
Yj0mYTVdpVQiDaOAFGrTKtCxBc2DBfXzAhLu4MoDyzZ7O5Dw2DjJY43MPfqM+v4N
ZGXRBR9PcF4HBwye3+HO9Q+fBNCPpT/TKf9MYGzcUBvClu8UlxZK9I7WDwUyn2YX
f2dnDqtFqzHu/6VDs0lbzA4HSksjGdu1Yo7uwMJ/iQ+VBm3djoqotZxJMKqAbbsR
Kumpa0x1pp3Zh1RfChpbLbRtz9smNG7BWzOAVCaTN367N2kWcpw2xPge5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxsebU4zFPgN3cuCp8vx8frcrptMB8GA1UdIwQY
MBaAFPNvnLr/ZTtgE0tGqnDnkRcJinxkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODItY3V2OWxPMkFUUzBhcWNPZVJGd21LZkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZGYzMjktMDljNS00YmI4LWFmNmMt
ZDk1YWI5OWZiMGM1LzEvODItY3V2OWxPMkFUUzBhcWNPZVJGd21LZkdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hZGYzMjktMDljNS00YmI4LWFmNmMtZDk1YWI5OWZiMGM1
LzEvODItY3V2OWxPMkFUUzBhcWNPZVJGd21LZkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnGT2/MlG
TMR/C2RYkQo8YHaOf2pz13ZrITiLVQOQ4ichE0tgNB1shbBWcZGy5TrDRkZKzc8H
4fc/+him0bsPAT+1ZkKEYBHljBh7Uh8qEFa8+YHtlAU8ZPnZ5yotLcDwKQGW2OVJ
oMhTFazX+AEkjjWBRw4/Nqj/bpqEZkqCOKQlpg27lkxEjJG7kbNg2JZFFP0ACyC1
ZpvMKz2McQ/PnFM3Y9wdDhL9t3z4QCDibUXM5Oh833POPgZ56MZJ+FcXgEQVq6hm
smz0zUxfcPb8vCrtAuoLct7qzQPQqFADqOMJrRhL2y2HIK4JWc+dV+dbv1cIynqZ
3TUqEQL5nHxMaQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:46:51 2026 by rpki-client