Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
File:                     Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft (raw, json)
Hash identifier:          KtwflZZ/Y6TvvJala0Clz5bnKzbc8eRDfL+GP1dyXyE=
Subject key identifier:   BE:2D:C6:1F:80:39:5B:D0:09:EE:A7:9F:CE:A2:C8:23:2A:8D:05:3E
Authority key identifier: 26:4E:E8:D2:A3:70:D2:3E:24:11:BD:4A:E3:9F:F3:4A:9D:3F:0F:EE
Certificate issuer:       /CN=264ee8d2a370d23e2411bd4ae39ff34a9d3f0fee
Certificate serial:       019CB1369F4AE6E272BCF12FC26E94C2381B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
Manifest number:          1844
Signing time:             Tue 03 Mar 2026 01:01:12 +0000
Manifest this update:     Tue 03 Mar 2026 01:01:12 +0000
Manifest next update:     Wed 04 Mar 2026 01:01:12 +0000
Files and hashes:         1: Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl (hash: 9d4HA0QQApOBmsYvWkbSHSU4VzF++xKsVbLaC2lm/YU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b1:36:9f:4a:e6:e2:72:bc:f1:2f:c2:6e:94:c2:38:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=264ee8d2a370d23e2411bd4ae39ff34a9d3f0fee
        Validity
            Not Before: Mar  3 01:01:12 2026 GMT
            Not After : Mar  4 01:01:12 2026 GMT
        Subject: CN=be2dc61f80395bd009eea79fcea2c8232a8d053e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0b:6b:7a:e0:36:fa:03:3b:d8:43:1f:df:03:
                    09:1c:34:6e:18:fc:aa:98:dc:45:f7:1a:cd:3d:20:
                    21:0c:09:cb:c6:0b:68:e7:88:9f:86:cc:ac:c7:f5:
                    d9:7e:4f:ba:05:8b:9d:26:9e:cc:51:2a:4e:ad:da:
                    54:95:cf:1d:1e:4c:ca:fd:b3:06:5a:d6:88:f3:d0:
                    25:d7:48:4f:e9:dc:5f:65:20:75:b3:79:cd:96:d0:
                    04:a6:8e:2b:d1:a3:6b:c7:d9:b6:c2:7a:af:8e:38:
                    a2:0f:a0:36:a8:1b:5d:b0:bc:42:71:cd:fc:f4:ad:
                    9d:df:92:bc:7d:25:ff:49:32:5c:d7:53:71:98:7a:
                    6f:13:cd:99:b4:eb:4c:44:5f:cc:ae:cf:7c:43:1f:
                    f6:bc:1b:0b:28:df:30:f3:ee:5e:27:ab:2c:5b:aa:
                    d9:63:9e:1c:d6:79:31:98:e3:d9:cc:ee:e9:10:22:
                    9f:9f:f4:ac:6c:eb:fa:58:c0:76:2b:2c:50:d3:fa:
                    29:db:7a:10:6b:93:bb:b1:90:2e:a8:41:1a:ca:70:
                    f0:ae:7b:8c:1f:f4:50:97:fb:d2:91:59:5f:54:62:
                    b2:0d:30:c5:1a:2c:cd:6b:10:bb:12:8d:39:d7:62:
                    65:81:a8:1d:cc:72:55:8e:52:85:10:ee:d6:c0:76:
                    92:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2D:C6:1F:80:39:5B:D0:09:EE:A7:9F:CE:A2:C8:23:2A:8D:05:3E
            X509v3 Authority Key Identifier:
                keyid:26:4E:E8:D2:A3:70:D2:3E:24:11:BD:4A:E3:9F:F3:4A:9D:3F:0F:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:64:df:a2:6d:ca:a8:f1:a6:4e:9a:01:c6:11:90:8e:0c:0a:
         6b:35:b0:78:f5:55:1c:a6:34:a7:53:72:c5:94:ba:bd:80:cf:
         6b:34:11:01:fa:94:78:17:df:0f:81:23:3a:41:ab:85:1d:8d:
         96:89:11:17:dd:c4:33:6a:65:23:9e:47:37:82:7b:d8:0a:40:
         05:be:59:1e:72:54:02:7b:10:a0:02:53:13:46:b6:8d:6d:03:
         b3:77:a8:4d:54:56:95:23:7f:20:6a:d1:4b:d4:f7:00:7c:2a:
         76:26:a0:d1:7d:9e:22:15:51:57:ed:f0:cf:b2:b2:dd:17:bc:
         95:52:7e:e3:d8:c9:39:6e:3c:98:69:4c:bc:50:71:85:9a:e2:
         16:91:06:25:e7:1b:be:ba:d6:22:6a:6b:85:82:33:4c:9c:cf:
         ec:38:f4:91:6c:4c:2b:25:45:f1:15:1c:63:14:05:b1:42:a1:
         62:82:30:f9:1c:e6:77:6f:f8:22:60:f6:91:ea:ca:51:4f:24:
         08:c0:91:b5:06:39:55:2c:30:09:8f:7c:71:ac:6d:9f:3f:36:
         aa:6a:41:f4:00:49:e7:db:17:37:79:85:27:2d:58:bf:6c:c3:
         d0:86:c6:88:e3:9b:08:b8:6a:8d:39:90:c5:36:d5:fd:0e:16:
         15:db:46:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyxNp9K5uJyvPEvwm6UwjgbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NGVlOGQyYTM3MGQyM2UyNDExYmQ0YWUzOWZmMzRhOWQz
ZjBmZWUwHhcNMjYwMzAzMDEwMTEyWhcNMjYwMzA0MDEwMTEyWjAzMTEwLwYDVQQD
EyhiZTJkYzYxZjgwMzk1YmQwMDllZWE3OWZjZWEyYzgyMzJhOGQwNTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowtreuA2+gM72EMf3wMJHDRuGPyq
mNxF9xrNPSAhDAnLxgto54ifhsysx/XZfk+6BYudJp7MUSpOrdpUlc8dHkzK/bMG
WtaI89Al10hP6dxfZSB1s3nNltAEpo4r0aNrx9m2wnqvjjiiD6A2qBtdsLxCcc38
9K2d35K8fSX/STJc11NxmHpvE82ZtOtMRF/Mrs98Qx/2vBsLKN8w8+5eJ6ssW6rZ
Y54c1nkxmOPZzO7pECKfn/SsbOv6WMB2KyxQ0/op23oQa5O7sZAuqEEaynDwrnuM
H/RQl/vSkVlfVGKyDTDFGizNaxC7Eo0512JlgagdzHJVjlKFEO7WwHaScQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4txh+AOVvQCe6nn86iyCMqjQU+MB8GA1UdIwQY
MBaAFCZO6NKjcNI+JBG9SuOf80qdPw/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSms3bzBxTncwajRrRWIxSzQ1X3pTcDBfRC00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83MGUzNDEtNDU2Ni00NWRhLTgyNzMt
ZjU1MWIxYTA0NjJjLzEvSms3bzBxTncwajRrRWIxSzQ1X3pTcDBfRC00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy83MGUzNDEtNDU2Ni00NWRhLTgyNzMtZjU1MWIxYTA0NjJj
LzEvSms3bzBxTncwajRrRWIxSzQ1X3pTcDBfRC00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwWTfom3K
qPGmTpoBxhGQjgwKazWwePVVHKY0p1NyxZS6vYDPazQRAfqUeBffD4EjOkGrhR2N
lokRF93EM2plI55HN4J72ApABb5ZHnJUAnsQoAJTE0a2jW0Ds3eoTVRWlSN/IGrR
S9T3AHwqdiag0X2eIhVRV+3wz7Ky3Re8lVJ+49jJOW48mGlMvFBxhZriFpEGJecb
vrrWImprhYIzTJzP7Dj0kWxMKyVF8RUcYxQFsUKhYoIw+Rzmd2/4ImD2kerKUU8k
CMCRtQY5VSwwCY98caxtnz82qmpB9ABJ59sXN3mFJy1Yv2zD0IbGiOObCLhqjTmQ
xTbV/Q4WFdtGFg==
-----END CERTIFICATE-----
Generated at Tue Mar 3 03:50:01 2026 by rpki-client