Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
File:                     SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft (raw, json)
Hash identifier:          6x9xc9iDceFQzyUCDSLFgjAsbaQltSHVq+FUtEY11VM=
Subject key identifier:   AD:CE:32:6C:6B:FF:75:4F:46:99:57:77:21:03:F0:8A:0F:39:52:72
Authority key identifier: 4B:38:1B:AA:0A:0A:DD:32:A9:F9:41:4F:9B:2C:9A:5A:32:25:34:2E
Certificate issuer:       /CN=4b381baa0a0add32a9f9414f9b2c9a5a3225342e
Certificate serial:       019D296160FA85D76A253C5471E5A3980A15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
Manifest number:          110F
Signing time:             Thu 26 Mar 2026 09:02:20 +0000
Manifest this update:     Thu 26 Mar 2026 09:02:20 +0000
Manifest next update:     Fri 27 Mar 2026 09:02:20 +0000
Files and hashes:         1: SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl (hash: 7CoHRLK1WsjaNdh4z2r7sVTBaflcpa6UkjNU/xy1gQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:61:60:fa:85:d7:6a:25:3c:54:71:e5:a3:98:0a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b381baa0a0add32a9f9414f9b2c9a5a3225342e
        Validity
            Not Before: Mar 26 09:02:20 2026 GMT
            Not After : Mar 27 09:02:20 2026 GMT
        Subject: CN=adce326c6bff754f469957772103f08a0f395272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:7c:80:cf:52:b0:20:3b:66:8a:83:f2:91:
                    1f:cd:0b:62:21:6c:ed:6e:e1:c0:a4:33:c2:bb:7e:
                    4d:01:c8:48:9b:f9:83:f8:59:45:47:ba:17:f4:a8:
                    19:84:77:e8:d3:10:04:6e:56:e0:2a:51:90:d9:21:
                    9b:d0:0b:09:37:dc:7a:86:c1:f7:30:c1:75:a3:1b:
                    66:e1:b8:56:4c:23:a2:0f:04:b9:3a:ce:6e:6c:ed:
                    8f:43:12:43:c6:bd:47:fc:9a:a2:79:13:6c:98:0e:
                    e6:49:2f:f4:02:02:55:3e:a4:a8:18:ce:f7:c0:6d:
                    a5:12:92:62:42:2d:07:12:4e:34:a5:7e:64:c3:07:
                    a2:56:fb:6a:88:24:07:67:bb:7a:50:f9:70:a0:73:
                    0e:06:d3:c1:5b:47:82:0c:5a:12:61:10:84:8f:ff:
                    01:91:23:20:e1:04:c3:85:dd:bf:ee:a6:4f:45:e1:
                    c2:cc:f9:ec:b8:91:cd:fa:f8:28:9d:e4:42:0a:9b:
                    d1:0f:8b:2d:9d:48:e3:cc:3d:12:63:00:f5:b6:dc:
                    3e:ae:e0:00:02:08:e7:ce:5e:d0:0a:85:7c:94:6d:
                    c2:31:24:3d:c0:3c:95:eb:db:39:22:56:53:e8:93:
                    72:b5:9f:c3:d3:94:a3:01:94:f3:fc:a5:04:b8:cb:
                    d9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CE:32:6C:6B:FF:75:4F:46:99:57:77:21:03:F0:8A:0F:39:52:72
            X509v3 Authority Key Identifier:
                keyid:4B:38:1B:AA:0A:0A:DD:32:A9:F9:41:4F:9B:2C:9A:5A:32:25:34:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:b5:59:ce:36:36:bf:be:71:f6:4b:48:d6:c2:6c:37:7a:31:
         71:e3:92:78:e9:66:11:98:24:52:4a:bc:63:47:b2:fd:8d:9d:
         c2:06:f4:42:3a:8a:a3:eb:14:e4:40:83:88:27:f0:53:11:3c:
         52:84:a6:fe:09:a5:57:6d:79:4f:3f:49:0f:cb:68:8b:af:bd:
         5e:49:b4:f4:73:31:ea:af:d7:a8:d3:5d:35:d9:fd:66:95:d8:
         19:c5:5b:ce:2e:41:6f:bf:95:ec:0f:e6:d2:5c:7f:2b:e4:b0:
         78:4e:7e:b3:c8:6e:07:e6:25:35:d5:d5:3b:79:d3:b9:85:8d:
         9e:ea:fe:72:9c:41:9c:90:c6:1a:d6:53:f6:13:e3:45:a6:7f:
         a4:2f:17:63:25:da:b9:9f:a7:04:9b:ec:70:ea:92:31:8e:cf:
         91:a2:ac:b2:ba:06:00:c1:2f:de:0b:3a:20:bd:60:05:d7:56:
         e1:aa:45:0e:ec:69:43:6c:e1:ae:35:6a:64:84:8f:1d:9c:27:
         c0:e5:51:d6:be:37:f0:0a:93:7e:7e:69:9f:ab:98:30:20:0a:
         51:bd:bd:dc:fa:57:eb:c0:8f:a9:4e:1e:db:b9:21:18:bd:55:
         92:c7:0c:61:f0:28:92:e7:12:ee:69:a9:f6:c4:cb:80:94:55:
         27:52:c6:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYWD6hddqJTxUceWjmAoVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMzgxYmFhMGEwYWRkMzJhOWY5NDE0ZjliMmM5YTVhMzIy
NTM0MmUwHhcNMjYwMzI2MDkwMjIwWhcNMjYwMzI3MDkwMjIwWjAzMTEwLwYDVQQD
EyhhZGNlMzI2YzZiZmY3NTRmNDY5OTU3NzcyMTAzZjA4YTBmMzk1MjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvl8gM9SsCA7ZoqD8pEfzQtiIWzt
buHApDPCu35NAchIm/mD+FlFR7oX9KgZhHfo0xAEblbgKlGQ2SGb0AsJN9x6hsH3
MMF1oxtm4bhWTCOiDwS5Os5ubO2PQxJDxr1H/JqieRNsmA7mSS/0AgJVPqSoGM73
wG2lEpJiQi0HEk40pX5kwweiVvtqiCQHZ7t6UPlwoHMOBtPBW0eCDFoSYRCEj/8B
kSMg4QTDhd2/7qZPReHCzPnsuJHN+vgoneRCCpvRD4stnUjjzD0SYwD1ttw+ruAA
Agjnzl7QCoV8lG3CMSQ9wDyV69s5IlZT6JNytZ/D05SjAZTz/KUEuMvZwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3OMmxr/3VPRplXdyED8IoPOVJyMB8GA1UdIwQY
MBaAFEs4G6oKCt0yqflBT5ssmloyJTQuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3pnYnFnb0szVEtwLVVGUG15eWFXaklsTkM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mMTZjMTUtZGU3Ni00MzNkLWI5N2Yt
NjJmOWY0NDZhZDAxLzEvU3pnYnFnb0szVEtwLVVGUG15eWFXaklsTkM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mMTZjMTUtZGU3Ni00MzNkLWI5N2YtNjJmOWY0NDZhZDAx
LzEvU3pnYnFnb0szVEtwLVVGUG15eWFXaklsTkM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULVZzjY2
v75x9ktI1sJsN3oxceOSeOlmEZgkUkq8Y0ey/Y2dwgb0QjqKo+sU5ECDiCfwUxE8
UoSm/gmlV215Tz9JD8toi6+9Xkm09HMx6q/XqNNdNdn9ZpXYGcVbzi5Bb7+V7A/m
0lx/K+SweE5+s8huB+YlNdXVO3nTuYWNnur+cpxBnJDGGtZT9hPjRaZ/pC8XYyXa
uZ+nBJvscOqSMY7PkaKssroGAMEv3gs6IL1gBddW4apFDuxpQ2zhrjVqZISPHZwn
wOVR1r438AqTfn5pn6uYMCAKUb293PpX68CPqU4e27khGL1VkscMYfAokucS7mmp
9sTLgJRVJ1LG0Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:05:59 2026 by rpki-client