Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
File:                     jynNHq0DjoW9nTMswYrDCeBiDFE.mft (raw, json)
Hash identifier:          KcrAgWt+uBcn7O7KXUF9MYUPcNfcT1MD/xGCoMl6W/A=
Subject key identifier:   6C:9C:9C:34:69:B6:82:40:1A:47:F9:8D:87:78:22:AD:C5:9F:00:75
Authority key identifier: 8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51
Certificate issuer:       /CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51
Certificate serial:       019CA97C714454583EBDE1A1C85165161718
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
Manifest number:          16AF
Signing time:             Sun 01 Mar 2026 13:00:30 +0000
Manifest this update:     Sun 01 Mar 2026 13:00:30 +0000
Manifest next update:     Mon 02 Mar 2026 13:00:30 +0000
Files and hashes:         1: jynNHq0DjoW9nTMswYrDCeBiDFE.crl (hash: uxunkzQJC4m5KSjzPYDeG2tZedPokLOH0cCjRVnaJso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:7c:71:44:54:58:3e:bd:e1:a1:c8:51:65:16:17:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51
        Validity
            Not Before: Mar  1 13:00:30 2026 GMT
            Not After : Mar  2 13:00:30 2026 GMT
        Subject: CN=6c9c9c3469b682401a47f98d877822adc59f0075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4f:3c:eb:bb:ff:d3:92:76:7a:ce:5f:7d:7b:
                    c0:27:ba:c6:ab:ca:cd:67:07:69:6c:66:f1:28:ee:
                    0c:8a:5d:6f:f2:f5:6b:31:ff:52:cb:82:5d:3f:34:
                    0a:13:d8:d7:16:23:7f:e7:6c:88:ca:7f:bf:11:cd:
                    ff:dd:8a:a4:22:ba:6f:83:fc:b4:00:c8:42:3b:86:
                    3b:52:45:c9:b9:9a:4c:ca:31:6b:0e:97:88:31:6b:
                    9a:91:5a:e6:0b:42:84:46:9c:6d:9a:3a:81:69:6b:
                    91:c3:f2:ae:e7:40:76:b6:45:c5:b3:7c:58:9a:05:
                    6b:ca:6a:3a:83:b6:88:28:dd:2a:43:76:a1:96:16:
                    7b:93:54:2d:69:f4:2e:8f:b9:db:cf:bf:6c:16:c4:
                    3e:b6:c0:4d:03:10:a3:7b:e6:74:9b:d0:85:bd:ab:
                    01:23:5b:d5:07:89:31:16:d9:cd:3d:87:61:4c:18:
                    da:8e:44:ab:63:e0:19:ba:0f:e8:19:20:de:b8:48:
                    cf:fe:b1:c9:b3:66:a3:1c:56:70:dc:ea:5c:46:ff:
                    36:4e:ac:56:74:1a:d1:41:bd:64:43:3c:a5:83:50:
                    72:df:de:9b:f5:74:d3:8f:dd:7a:f8:56:f9:c9:9e:
                    2d:db:8d:08:b8:e2:ff:87:db:26:13:90:71:60:11:
                    e8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9C:9C:34:69:B6:82:40:1A:47:F9:8D:87:78:22:AD:C5:9F:00:75
            X509v3 Authority Key Identifier:
                keyid:8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:7a:80:a7:47:15:3b:85:bb:de:09:44:c2:08:59:05:ee:f5:
         ee:84:da:af:83:cf:aa:1e:97:98:49:da:35:01:1c:4b:de:8c:
         df:95:a4:e7:a6:2b:ee:50:3f:37:4b:7f:e7:4d:21:4a:a0:62:
         fd:a8:45:cc:49:18:ed:c5:cd:71:1f:2f:a7:c5:68:4f:cd:6d:
         61:5f:1e:f7:ba:e6:d2:f8:fe:a8:67:bc:7d:27:8b:bb:3e:35:
         60:8b:40:0e:ac:65:0f:27:f7:23:d1:a6:12:af:d2:04:f5:88:
         70:99:39:b9:fc:c3:b7:af:59:3a:b0:8a:9b:b7:4f:e6:c2:e8:
         66:3d:f9:a1:77:72:e3:3a:60:91:d3:fe:2a:2a:3f:6a:5c:22:
         8a:9c:cf:1b:d4:0d:12:d6:d5:66:b5:78:52:4b:51:64:4b:0f:
         14:78:a3:bc:60:19:ae:e1:0b:07:9e:2b:6a:fa:81:0b:6f:c6:
         bd:e3:2f:8c:19:e5:bb:ed:5d:93:6c:95:c9:2c:c9:28:c4:e7:
         90:5c:ad:4a:6e:32:41:ca:0d:b0:80:a8:1e:ed:84:ac:5c:a2:
         19:02:bd:6d:21:18:65:f5:9a:0e:dd:ff:61:94:5d:88:ea:ff:
         33:7c:9b:22:e1:55:08:fc:b3:d7:2a:60:a0:ba:ed:c8:89:80:
         85:c2:f7:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypfHFEVFg+veGhyFFlFhcYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMjljZDFlYWQwMzhlODViZDlkMzMyY2MxOGFjMzA5ZTA2
MjBjNTEwHhcNMjYwMzAxMTMwMDMwWhcNMjYwMzAyMTMwMDMwWjAzMTEwLwYDVQQD
Eyg2YzljOWMzNDY5YjY4MjQwMWE0N2Y5OGQ4Nzc4MjJhZGM1OWYwMDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA508867v/05J2es5ffXvAJ7rGq8rN
ZwdpbGbxKO4Mil1v8vVrMf9Sy4JdPzQKE9jXFiN/52yIyn+/Ec3/3YqkIrpvg/y0
AMhCO4Y7UkXJuZpMyjFrDpeIMWuakVrmC0KERpxtmjqBaWuRw/Ku50B2tkXFs3xY
mgVrymo6g7aIKN0qQ3ahlhZ7k1QtafQuj7nbz79sFsQ+tsBNAxCje+Z0m9CFvasB
I1vVB4kxFtnNPYdhTBjajkSrY+AZug/oGSDeuEjP/rHJs2ajHFZw3OpcRv82TqxW
dBrRQb1kQzylg1By396b9XTTj916+Fb5yZ4t240IuOL/h9smE5BxYBHoSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGycnDRptoJAGkf5jYd4Iq3FnwB1MB8GA1UdIwQY
MBaAFI8pzR6tA46FvZ0zLMGKwwngYgxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanluTkhxMERqb1c5blRNc3dZckRDZUJpREZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC83MGI3MTUtYTRmNy00OGQ0LTljY2Et
NmQwNzU0NmY3YTVhLzEvanluTkhxMERqb1c5blRNc3dZckRDZUJpREZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC83MGI3MTUtYTRmNy00OGQ0LTljY2EtNmQwNzU0NmY3YTVh
LzEvanluTkhxMERqb1c5blRNc3dZckRDZUJpREZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS3qAp0cV
O4W73glEwghZBe717oTar4PPqh6XmEnaNQEcS96M35Wk56Yr7lA/N0t/500hSqBi
/ahFzEkY7cXNcR8vp8VoT81tYV8e97rm0vj+qGe8fSeLuz41YItADqxlDyf3I9Gm
Eq/SBPWIcJk5ufzDt69ZOrCKm7dP5sLoZj35oXdy4zpgkdP+Kio/alwiipzPG9QN
EtbVZrV4UktRZEsPFHijvGAZruELB54ravqBC2/GveMvjBnlu+1dk2yVySzJKMTn
kFytSm4yQcoNsICoHu2ErFyiGQK9bSEYZfWaDt3/YZRdiOr/M3ybIuFVCPyz1ypg
oLrtyImAhcL3Ng==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:15 2026 by rpki-client