Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
File:                     32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json)
Hash identifier:          R6U4LhVUgY1CUvoM/s+CultRm/nFba7Kem819hy2kug=
Subject key identifier:   B8:4F:0B:B6:19:B0:6D:60:EB:83:FB:6C:E3:C4:29:5B:7A:6D:0C:D6
Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Certificate issuer:       /CN=df6a9267b18b36d828890a86387f310b84c04b63
Certificate serial:       019D26963EF070679E85A4724988DF199788
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
Manifest number:          101F
Signing time:             Wed 25 Mar 2026 20:01:13 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:13 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:13 +0000
Files and hashes:         1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: au18jXI9GMwuRQa5yHb6pvxtX1GBNF9tqZ6WMJnstec=)
                          2: eZW6Hra3VKDaHpIw4oWeb7v-Ing.asa (hash: prXq7zIRsAV9jtqOkMC/JnDXSMdKIhkp+Aj/pefkjkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 20:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:3e:f0:70:67:9e:85:a4:72:49:88:df:19:97:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63
        Validity
            Not Before: Mar 25 20:01:13 2026 GMT
            Not After : Mar 26 20:01:13 2026 GMT
        Subject: CN=b84f0bb619b06d60eb83fb6ce3c4295b7a6d0cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:81:f6:27:3b:65:31:0e:15:59:8e:98:13:a1:
                    67:7d:5d:b7:9a:28:a6:34:c7:9b:27:3c:31:db:4d:
                    75:6c:04:ad:ae:f2:f1:6f:6e:2d:bf:15:b8:3b:66:
                    a5:ff:83:71:32:73:a7:a6:65:f7:c0:b1:b8:aa:6d:
                    fd:a2:52:76:57:a2:af:60:d3:c2:40:10:89:7e:20:
                    c5:b6:51:25:63:b7:5e:f5:d9:49:8a:f0:ca:16:9d:
                    db:82:fa:8d:ad:eb:05:8b:ee:09:c8:2a:8b:d0:be:
                    10:a6:5b:03:50:3d:ec:e0:f2:28:4f:b7:03:ec:8e:
                    d0:d3:6a:c4:27:5a:9f:06:46:4b:ac:2e:d0:3c:4d:
                    c9:aa:c9:8a:5d:31:a2:db:51:87:c3:5f:df:f9:bb:
                    dd:c6:58:b5:8c:60:d8:9a:32:6a:b2:6d:c2:8f:9d:
                    3b:49:55:01:19:56:89:3b:9d:5a:d1:63:da:3d:0a:
                    f4:ef:ee:52:b0:2a:40:aa:8c:7d:c5:63:32:e4:df:
                    12:5f:a6:62:d8:9b:42:5c:47:b2:e0:86:53:69:4c:
                    18:72:23:b7:bf:2f:e3:99:45:b0:45:c4:4c:64:f6:
                    ac:e8:0e:bf:54:2e:84:89:b2:b3:4d:a7:8e:39:8e:
                    90:6f:f6:f5:b5:53:f9:a6:5f:4a:82:fc:db:80:c2:
                    17:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4F:0B:B6:19:B0:6D:60:EB:83:FB:6C:E3:C4:29:5B:7A:6D:0C:D6
            X509v3 Authority Key Identifier:
                keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:3a:8c:0b:ec:18:26:db:0b:1b:4e:e5:0c:ed:88:1c:a1:d5:
         d2:dd:68:7f:b2:b4:7a:23:87:12:c5:e0:97:3b:e2:22:d0:73:
         b2:fc:1f:e3:e0:2b:f2:8d:7c:7f:ea:7b:f0:60:92:fb:f3:47:
         8b:87:7d:5c:8d:90:c9:9d:07:3d:55:ec:87:04:ae:29:28:e7:
         27:4f:2f:0a:33:a5:31:50:04:91:cf:4f:6b:3b:f5:ea:1a:af:
         a5:6d:ee:b3:c7:10:58:d1:65:81:b8:46:79:90:07:18:67:0f:
         51:eb:56:50:04:14:ac:70:79:b2:00:fe:c3:f8:2e:79:73:d4:
         12:fa:5e:f9:44:d3:69:b8:68:fb:d6:43:12:4b:9d:e1:2c:33:
         f6:c5:cc:90:a6:6f:a0:13:a6:4f:47:df:5d:83:05:24:31:9c:
         b2:41:57:36:38:17:71:2e:c6:55:d5:ef:51:50:b7:41:cc:75:
         e0:7f:5b:7a:9b:71:e3:eb:d7:00:a0:25:ff:ad:be:ab:99:64:
         b7:97:da:05:dd:07:45:be:ae:88:1a:41:c5:17:1d:d5:7a:80:
         d9:c5:79:be:69:1b:89:2c:73:de:3c:69:90:62:b2:6b:17:bd:
         62:d6:72:b3:e2:de:bf:58:d8:fb:a6:24:30:43:c6:5d:aa:18:
         dd:84:29:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlj7wcGeehaRySYjfGZeIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNmE5MjY3YjE4YjM2ZDgyODg5MGE4NjM4N2YzMTBiODRj
MDRiNjMwHhcNMjYwMzI1MjAwMTEzWhcNMjYwMzI2MjAwMTEzWjAzMTEwLwYDVQQD
EyhiODRmMGJiNjE5YjA2ZDYwZWI4M2ZiNmNlM2M0Mjk1YjdhNmQwY2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4H2JztlMQ4VWY6YE6FnfV23miim
NMebJzwx2011bAStrvLxb24tvxW4O2al/4NxMnOnpmX3wLG4qm39olJ2V6KvYNPC
QBCJfiDFtlElY7de9dlJivDKFp3bgvqNresFi+4JyCqL0L4QplsDUD3s4PIoT7cD
7I7Q02rEJ1qfBkZLrC7QPE3JqsmKXTGi21GHw1/f+bvdxli1jGDYmjJqsm3Cj507
SVUBGVaJO51a0WPaPQr07+5SsCpAqox9xWMy5N8SX6Zi2JtCXEey4IZTaUwYciO3
vy/jmUWwRcRMZPas6A6/VC6EibKzTaeOOY6Qb/b1tVP5pl9KgvzbgMIXAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhPC7YZsG1g64P7bOPEKVt6bQzWMB8GA1UdIwQY
MBaAFN9qkmexizbYKIkKhjh/MQuEwEtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzJxU1o3R0xOdGdvaVFxR09IOHhDNFRBUzJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jNjBjMjAtYmI0Mi00NmJhLWIyMTUt
OTlmN2JlY2E4NzViLzEvMzJxU1o3R0xOdGdvaVFxR09IOHhDNFRBUzJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9jNjBjMjAtYmI0Mi00NmJhLWIyMTUtOTlmN2JlY2E4NzVi
LzEvMzJxU1o3R0xOdGdvaVFxR09IOHhDNFRBUzJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezqMC+wY
JtsLG07lDO2IHKHV0t1of7K0eiOHEsXglzviItBzsvwf4+Ar8o18f+p78GCS+/NH
i4d9XI2QyZ0HPVXshwSuKSjnJ08vCjOlMVAEkc9Pazv16hqvpW3us8cQWNFlgbhG
eZAHGGcPUetWUAQUrHB5sgD+w/gueXPUEvpe+UTTabho+9ZDEkud4Swz9sXMkKZv
oBOmT0ffXYMFJDGcskFXNjgXcS7GVdXvUVC3Qcx14H9beptx4+vXAKAl/62+q5lk
t5faBd0HRb6uiBpBxRcd1XqA2cV5vmkbiSxz3jxpkGKyaxe9YtZys+Lev1jY+6Yk
MEPGXaoY3YQp4g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:35 2026 by rpki-client