Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
File:                     g5JNIiU91reGmbxdCgEQJ5E-X3A.mft (raw, json)
Hash identifier:          dEBqdRKmdbHq7AK1gAjDzHNg98hvAvJfXt+Z7gIykE8=
Subject key identifier:   F0:15:CC:06:76:F4:F3:C3:1A:C2:63:14:BC:C1:F6:A9:10:EA:26:32
Authority key identifier: 83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70
Certificate issuer:       /CN=83924d22253dd6b78699bc5d0a011027913e5f70
Certificate serial:       019CAD9043878697BCF8F89E4359A7F5C458
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
Manifest number:          077E
Signing time:             Mon 02 Mar 2026 08:00:38 +0000
Manifest this update:     Mon 02 Mar 2026 08:00:38 +0000
Manifest next update:     Tue 03 Mar 2026 08:00:38 +0000
Files and hashes:         1: g5JNIiU91reGmbxdCgEQJ5E-X3A.crl (hash: 87wCMfBC0DTc012c61ua/BznVDysbKDflE7HZn/4KMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 08:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:43:87:86:97:bc:f8:f8:9e:43:59:a7:f5:c4:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83924d22253dd6b78699bc5d0a011027913e5f70
        Validity
            Not Before: Mar  2 08:00:38 2026 GMT
            Not After : Mar  3 08:00:38 2026 GMT
        Subject: CN=f015cc0676f4f3c31ac26314bcc1f6a910ea2632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3b:31:22:eb:f8:d2:e5:8c:a8:4a:1e:70:45:
                    08:4f:3c:2b:dc:37:7d:dc:c6:27:8a:db:b4:a3:1a:
                    9f:77:ec:ce:55:b6:4c:af:98:45:5b:0d:4e:4d:01:
                    39:3e:17:ea:3f:80:18:12:60:26:1d:99:67:1e:9b:
                    a9:95:8e:e3:71:ed:fc:da:79:06:4a:1b:ae:54:c2:
                    31:69:a4:4a:ad:0d:4a:24:ab:3f:89:24:64:3d:d4:
                    69:5f:1e:6e:a2:3a:ba:da:51:16:22:76:3c:ca:fe:
                    e9:5e:15:f1:92:8c:39:6d:33:3b:ba:d6:35:bd:b2:
                    48:dd:1f:d3:f4:84:90:28:95:4f:d8:73:4e:68:f5:
                    aa:83:41:b8:18:42:51:84:90:2b:a3:66:a4:8f:37:
                    6d:9d:cf:01:63:f6:b9:ca:58:60:de:7c:28:bb:6a:
                    8d:d5:b6:92:cf:22:ef:56:2c:f2:62:a7:1c:02:87:
                    3c:42:ba:96:ed:a2:be:30:02:e4:ea:31:28:be:81:
                    76:e9:ad:f9:a4:e0:70:20:b2:fe:6d:7d:c1:7d:07:
                    4c:0f:ce:8c:9b:b2:48:92:d5:a9:d8:ac:87:68:22:
                    9c:b8:98:39:24:59:4e:a7:cb:17:4e:1d:ee:cd:67:
                    af:80:41:f8:24:de:bb:27:d1:91:fc:fb:99:f2:ad:
                    6b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:15:CC:06:76:F4:F3:C3:1A:C2:63:14:BC:C1:F6:A9:10:EA:26:32
            X509v3 Authority Key Identifier:
                keyid:83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:5b:12:d0:28:7d:5e:18:e3:58:ce:c3:7b:80:8e:40:96:5e:
         04:35:5b:2c:bd:6e:a9:32:7f:80:12:55:e3:be:14:f1:0f:47:
         8f:94:b3:04:e1:0b:d2:60:77:6e:a1:bb:46:a1:8f:4b:37:4e:
         5a:e9:68:cb:f7:3c:76:13:9e:63:70:f5:fd:4b:61:4b:16:57:
         d8:b1:46:46:41:39:f0:e8:ea:09:dd:ff:8a:36:15:3b:39:d3:
         ec:42:75:ed:46:f0:01:10:ca:4a:aa:9c:9a:77:aa:57:22:3f:
         4e:82:ec:ec:25:2f:40:c1:f0:0c:2b:1d:a5:3e:bd:7b:38:b1:
         ed:c4:3b:81:d5:1a:2b:b0:d6:57:71:0d:ec:35:b9:60:ae:27:
         78:24:e5:16:e1:49:79:b0:77:d2:62:ad:61:80:42:b2:88:68:
         8e:77:14:82:2f:98:87:c6:fd:ff:9f:86:d4:8e:99:22:52:3a:
         95:48:03:4e:d4:19:7b:84:50:21:e9:84:21:2b:13:7b:41:79:
         7b:64:91:03:a0:6c:84:1c:5f:1f:ff:60:c1:bb:97:0d:1e:2c:
         95:d0:26:35:86:d4:cc:5c:59:63:63:bf:1d:a2:00:23:a3:42:
         d7:70:c3:46:41:90:8f:2e:4a:34:d4:c6:6c:a6:28:b6:3f:46:
         06:79:e5:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkEOHhpe8+PieQ1mn9cRYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzOTI0ZDIyMjUzZGQ2Yjc4Njk5YmM1ZDBhMDExMDI3OTEz
ZTVmNzAwHhcNMjYwMzAyMDgwMDM4WhcNMjYwMzAzMDgwMDM4WjAzMTEwLwYDVQQD
EyhmMDE1Y2MwNjc2ZjRmM2MzMWFjMjYzMTRiY2MxZjZhOTEwZWEyNjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzsxIuv40uWMqEoecEUITzwr3Dd9
3MYnitu0oxqfd+zOVbZMr5hFWw1OTQE5PhfqP4AYEmAmHZlnHpuplY7jce382nkG
ShuuVMIxaaRKrQ1KJKs/iSRkPdRpXx5uojq62lEWInY8yv7pXhXxkow5bTM7utY1
vbJI3R/T9ISQKJVP2HNOaPWqg0G4GEJRhJAro2akjzdtnc8BY/a5ylhg3nwou2qN
1baSzyLvVizyYqccAoc8QrqW7aK+MALk6jEovoF26a35pOBwILL+bX3BfQdMD86M
m7JIktWp2KyHaCKcuJg5JFlOp8sXTh3uzWevgEH4JN67J9GR/PuZ8q1reQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAVzAZ29PPDGsJjFLzB9qkQ6iYyMB8GA1UdIwQY
MBaAFIOSTSIlPda3hpm8XQoBECeRPl9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzVKTklpVTkxcmVHbWJ4ZENnRVFKNUUtWDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNTFjNzUtZWY3Yi00OGFiLTg3MGYt
NDYwY2JlNjg4Y2U1LzEvZzVKTklpVTkxcmVHbWJ4ZENnRVFKNUUtWDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNTFjNzUtZWY3Yi00OGFiLTg3MGYtNDYwY2JlNjg4Y2U1
LzEvZzVKTklpVTkxcmVHbWJ4ZENnRVFKNUUtWDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVsS0Ch9
XhjjWM7De4COQJZeBDVbLL1uqTJ/gBJV474U8Q9Hj5SzBOEL0mB3bqG7RqGPSzdO
Wuloy/c8dhOeY3D1/UthSxZX2LFGRkE58OjqCd3/ijYVOznT7EJ17UbwARDKSqqc
mneqVyI/ToLs7CUvQMHwDCsdpT69ezix7cQ7gdUaK7DWV3EN7DW5YK4neCTlFuFJ
ebB30mKtYYBCsohojncUgi+Yh8b9/5+G1I6ZIlI6lUgDTtQZe4RQIemEISsTe0F5
e2SRA6BshBxfH/9gwbuXDR4sldAmNYbUzFxZY2O/HaIAI6NC13DDRkGQjy5KNNTG
bKYotj9GBnnlzg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:39:07 2026 by rpki-client