Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
File:                     k0F7oKbrs_OxuCr3UPviioakGzU.mft (raw, json)
Hash identifier:          c/oXzTDc9Ax/Qo80VUywEbtryHgJXbo3SG2HVG2bMjc=
Subject key identifier:   CE:76:B7:17:47:FE:9E:86:6E:64:5B:B9:16:AB:66:4C:D5:D5:E5:06
Authority key identifier: 93:41:7B:A0:A6:EB:B3:F3:B1:B8:2A:F7:50:FB:E2:8A:86:A4:1B:35
Certificate issuer:       /CN=93417ba0a6ebb3f3b1b82af750fbe28a86a41b35
Certificate serial:       019CAD59F479D7EAC08F290ED04CC5D99215
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
Manifest number:          0B68
Signing time:             Mon 02 Mar 2026 07:01:19 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:19 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:19 +0000
Files and hashes:         1: k0F7oKbrs_OxuCr3UPviioakGzU.crl (hash: 4t3wE/zsdb4hE0h9IxSSchStsCVjl3CM9zhszJQYAPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:f4:79:d7:ea:c0:8f:29:0e:d0:4c:c5:d9:92:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93417ba0a6ebb3f3b1b82af750fbe28a86a41b35
        Validity
            Not Before: Mar  2 07:01:19 2026 GMT
            Not After : Mar  3 07:01:19 2026 GMT
        Subject: CN=ce76b71747fe9e866e645bb916ab664cd5d5e506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:26:c1:bc:ea:40:22:4f:d2:77:f0:56:58:82:
                    be:c8:9b:d0:47:dd:1a:13:13:a9:81:36:3d:df:62:
                    f6:f4:35:69:14:b9:db:1d:1b:0c:27:9c:11:bd:46:
                    d7:9a:8e:c2:8c:5c:89:a8:bf:59:06:86:dc:20:96:
                    57:49:55:7a:c7:18:ca:5a:ce:8e:51:be:89:0a:6f:
                    fe:e4:bd:af:87:ed:96:47:cc:75:5c:93:aa:78:67:
                    bd:25:52:a0:f2:57:4d:99:a6:3d:c4:6b:dd:1d:89:
                    bc:7a:e1:62:83:a6:f8:6a:b4:6a:cd:90:0f:a9:f2:
                    09:e9:e5:83:67:c7:a9:28:bd:8e:da:1d:8f:27:e7:
                    87:e1:ac:d5:b6:a0:d2:29:4a:d0:1e:ff:fa:7d:c7:
                    ca:5b:4e:72:36:79:af:9a:6c:1c:ae:cc:21:9b:10:
                    19:fa:93:82:ed:cf:18:74:4a:d7:3a:74:40:af:90:
                    0d:d2:f7:bf:60:95:66:59:0a:d9:58:79:33:d3:0d:
                    a0:bb:cf:cd:d6:70:76:f8:37:bc:81:41:47:e7:8d:
                    85:51:7e:cf:c3:ab:09:58:c3:27:ae:72:27:02:27:
                    66:5b:9f:18:bb:5b:76:e5:07:07:eb:d8:80:8b:9d:
                    6a:a4:ca:d0:20:30:bc:8a:a5:23:36:77:f9:31:88:
                    4f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:76:B7:17:47:FE:9E:86:6E:64:5B:B9:16:AB:66:4C:D5:D5:E5:06
            X509v3 Authority Key Identifier:
                keyid:93:41:7B:A0:A6:EB:B3:F3:B1:B8:2A:F7:50:FB:E2:8A:86:A4:1B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:07:2f:5f:c1:f3:a4:15:57:3c:2d:ae:83:f0:26:58:82:54:
         23:4f:e1:de:80:2c:bc:53:c1:05:18:68:91:6f:cc:85:18:29:
         d0:a9:0c:4e:b0:24:45:a8:9f:71:3c:0f:78:00:49:ea:5b:ce:
         9a:52:e9:50:43:88:67:24:80:e4:8f:de:a7:b7:9e:18:92:5c:
         81:bf:72:ca:f2:85:44:1f:f9:5b:69:a6:cd:d1:62:0a:87:dd:
         cc:c2:10:16:78:10:14:4c:07:d8:5b:b0:de:e2:62:38:03:c9:
         97:26:ac:84:ea:1e:f1:70:ec:6f:02:6e:4d:4a:b9:7f:ec:71:
         bd:24:bc:55:01:2f:dd:b8:a1:85:e9:d1:fe:17:bd:c4:b9:d3:
         6b:cc:52:56:d7:00:3b:5d:01:bd:12:ad:21:f8:ca:82:37:70:
         f8:91:63:50:31:b4:58:54:80:27:c3:b5:60:f2:44:2b:d2:34:
         fc:2c:74:66:e6:d9:00:c7:97:9c:ce:08:4b:18:03:20:2a:29:
         d0:cd:c9:ae:e3:e3:44:c8:83:62:a0:42:f6:cd:3a:27:ff:ee:
         fe:5e:45:28:01:95:cc:9d:ef:0c:2d:42:34:6f:a5:cf:f7:b6:
         80:0f:52:59:af:c7:ae:6d:a8:17:7b:73:0b:ce:28:5b:cb:63:
         29:29:f3:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWfR51+rAjykO0EzF2ZIVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNDE3YmEwYTZlYmIzZjNiMWI4MmFmNzUwZmJlMjhhODZh
NDFiMzUwHhcNMjYwMzAyMDcwMTE5WhcNMjYwMzAzMDcwMTE5WjAzMTEwLwYDVQQD
EyhjZTc2YjcxNzQ3ZmU5ZTg2NmU2NDViYjkxNmFiNjY0Y2Q1ZDVlNTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CbBvOpAIk/Sd/BWWIK+yJvQR90a
ExOpgTY932L29DVpFLnbHRsMJ5wRvUbXmo7CjFyJqL9ZBobcIJZXSVV6xxjKWs6O
Ub6JCm/+5L2vh+2WR8x1XJOqeGe9JVKg8ldNmaY9xGvdHYm8euFig6b4arRqzZAP
qfIJ6eWDZ8epKL2O2h2PJ+eH4azVtqDSKUrQHv/6fcfKW05yNnmvmmwcrswhmxAZ
+pOC7c8YdErXOnRAr5AN0ve/YJVmWQrZWHkz0w2gu8/N1nB2+De8gUFH542FUX7P
w6sJWMMnrnInAidmW58Yu1t25QcH69iAi51qpMrQIDC8iqUjNnf5MYhPVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM52txdH/p6GbmRbuRarZkzV1eUGMB8GA1UdIwQY
MBaAFJNBe6Cm67Pzsbgq91D74oqGpBs1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazBGN29LYnJzX094dUNyM1VQdmlpb2FrR3pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xOGM5OTktYjczYS00MjE0LWEyMmMt
NzI4ZmQ2YmFiYWZmLzEvazBGN29LYnJzX094dUNyM1VQdmlpb2FrR3pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8xOGM5OTktYjczYS00MjE0LWEyMmMtNzI4ZmQ2YmFiYWZm
LzEvazBGN29LYnJzX094dUNyM1VQdmlpb2FrR3pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYgcvX8Hz
pBVXPC2ug/AmWIJUI0/h3oAsvFPBBRhokW/MhRgp0KkMTrAkRaifcTwPeABJ6lvO
mlLpUEOIZySA5I/ep7eeGJJcgb9yyvKFRB/5W2mmzdFiCofdzMIQFngQFEwH2Fuw
3uJiOAPJlyashOoe8XDsbwJuTUq5f+xxvSS8VQEv3bihhenR/he9xLnTa8xSVtcA
O10BvRKtIfjKgjdw+JFjUDG0WFSAJ8O1YPJEK9I0/Cx0ZubZAMeXnM4ISxgDICop
0M3JruPjRMiDYqBC9s06J//u/l5FKAGVzJ3vDC1CNG+lz/e2gA9SWa/Hrm2oF3tz
C84oW8tjKSnzBA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:39:00 2026 by rpki-client