Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
File:                     SLo3AWkdKSivrTobVzWib0yZz_Y.mft (raw, json)
Hash identifier:          iOtttUwJ2CaQ4Wy7PsLd+OlIFkMrRkW1sc4QhbJtFi4=
Subject key identifier:   92:7A:BA:B5:9B:96:72:49:FD:92:50:A5:7C:7C:94:43:37:CF:B9:AD
Authority key identifier: 48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6
Certificate issuer:       /CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
Certificate serial:       019CAAFD70D2F85D4DA3DDD5D5EE1B51A4E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
Manifest number:          1756
Signing time:             Sun 01 Mar 2026 20:01:01 +0000
Manifest this update:     Sun 01 Mar 2026 20:01:01 +0000
Manifest next update:     Mon 02 Mar 2026 20:01:01 +0000
Files and hashes:         1: SLo3AWkdKSivrTobVzWib0yZz_Y.crl (hash: oQ2DUnsHQ0QwrvSf4MchsuNFjRl6WWB3sJxOmLk/uxE=)
                          2: v3K9X62S23EsPXBUv8o5_0MHn4Y.roa (hash: 6AkfovE+X2QIgtQd8B7GXkBK4tknFic/hJn5uV1siEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 20:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:70:d2:f8:5d:4d:a3:dd:d5:d5:ee:1b:51:a4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
        Validity
            Not Before: Mar  1 20:01:01 2026 GMT
            Not After : Mar  2 20:01:01 2026 GMT
        Subject: CN=927abab59b967249fd9250a57c7c944337cfb9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:36:85:b7:0d:e4:e5:f2:20:35:f6:84:9f:81:
                    cc:5c:1f:21:09:b2:86:aa:ad:16:b5:b0:aa:8e:0a:
                    31:64:cd:ba:4c:e1:93:da:9a:c9:6b:c1:7c:a1:25:
                    5c:c4:88:99:55:39:8d:98:30:18:5c:78:38:29:e1:
                    21:c4:34:2d:2c:79:39:c9:7a:73:94:a4:f9:cb:93:
                    f2:5c:6c:8f:0d:f2:e4:ca:d1:50:b6:09:df:f6:2c:
                    ff:9b:11:a1:40:0a:8f:d1:06:3f:f2:d6:51:b5:10:
                    27:4c:5c:4c:92:ee:fa:35:62:6d:a8:5d:fb:ee:ad:
                    88:df:c7:d9:73:86:2f:36:e0:4c:3a:fc:d9:8e:f8:
                    f1:b9:4d:64:33:9a:7b:75:a4:43:01:16:16:58:11:
                    0c:28:6b:d4:ac:d0:5b:32:cd:18:27:0f:cf:b2:f9:
                    b3:ef:c6:07:bc:56:f7:6f:1d:c5:79:54:01:d8:d3:
                    11:57:9c:13:10:bd:ed:56:5a:ed:63:4e:77:1f:05:
                    01:9a:36:bf:a9:f3:9d:0b:6a:67:a7:36:91:51:97:
                    dd:fe:05:17:84:74:c2:ed:50:42:75:4e:8d:f4:f0:
                    f5:f5:ad:be:4c:5e:04:de:71:7c:b3:1d:a8:fe:9e:
                    2a:ad:c8:69:02:5c:f9:6a:10:be:e5:0d:36:4d:09:
                    e4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7A:BA:B5:9B:96:72:49:FD:92:50:A5:7C:7C:94:43:37:CF:B9:AD
            X509v3 Authority Key Identifier:
                keyid:48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:06:33:da:f3:c7:13:85:f6:09:33:51:12:85:85:0c:85:56:
         75:71:3a:de:d4:80:b5:09:bd:ff:50:46:0f:97:c7:38:81:44:
         ff:c7:c3:67:2d:e4:6e:f8:7c:e8:1b:c1:08:6d:88:47:d3:37:
         9e:b3:92:c6:a9:86:db:58:06:d7:8e:93:d0:07:93:70:0d:f2:
         81:e0:3b:05:e4:81:9f:4a:2e:af:a2:dc:8e:6c:db:b8:ca:57:
         02:1c:d8:e9:a1:da:8e:f8:d7:05:c4:d4:a0:c7:e9:36:f6:5a:
         e6:9e:2c:bc:c1:85:b4:5d:5b:6e:f9:ec:1f:3a:19:11:25:c3:
         13:2e:e6:7e:15:26:36:4b:1e:45:fb:9f:a0:3a:3d:5d:ed:16:
         a7:c0:0b:87:ac:7f:83:27:d9:1f:5d:6e:96:46:c5:bd:4c:a1:
         5b:87:ee:25:eb:90:2a:c3:f9:49:a1:d0:33:dc:4c:44:f1:dc:
         9c:75:a3:0a:36:3c:c6:36:b0:71:aa:12:1d:cd:44:3a:a6:58:
         09:6e:d1:5f:82:49:e3:a4:cf:17:a4:19:0d:7c:08:b2:3f:25:
         3f:a8:a8:ff:ff:6d:7d:d9:96:b0:fe:3a:e8:3a:32:dc:3e:fd:
         b3:07:44:b7:b5:42:cd:45:c6:47:6b:13:2f:f8:c6:33:9c:63:
         ab:06:71:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/XDS+F1No93V1e4bUaTgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YmEzNzAxNjkxZDI5MjhhZmFkM2ExYjU3MzVhMjZmNGM5
OWNmZjYwHhcNMjYwMzAxMjAwMTAxWhcNMjYwMzAyMjAwMTAxWjAzMTEwLwYDVQQD
Eyg5MjdhYmFiNTliOTY3MjQ5ZmQ5MjUwYTU3YzdjOTQ0MzM3Y2ZiOWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTaFtw3k5fIgNfaEn4HMXB8hCbKG
qq0WtbCqjgoxZM26TOGT2prJa8F8oSVcxIiZVTmNmDAYXHg4KeEhxDQtLHk5yXpz
lKT5y5PyXGyPDfLkytFQtgnf9iz/mxGhQAqP0QY/8tZRtRAnTFxMku76NWJtqF37
7q2I38fZc4YvNuBMOvzZjvjxuU1kM5p7daRDARYWWBEMKGvUrNBbMs0YJw/Psvmz
78YHvFb3bx3FeVQB2NMRV5wTEL3tVlrtY053HwUBmja/qfOdC2pnpzaRUZfd/gUX
hHTC7VBCdU6N9PD19a2+TF4E3nF8sx2o/p4qrchpAlz5ahC+5Q02TQnk4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJ6urWblnJJ/ZJQpXx8lEM3z7mtMB8GA1UdIwQY
MBaAFEi6NwFpHSkor606G1c1om9Mmc/2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0xvM0FXa2RLU2l2clRvYlZ6V2liMHlael9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83YTg3ODEtZTM2My00NmU0LTk3ZWQt
ZTNlODE1MWE4NzYwLzEvU0xvM0FXa2RLU2l2clRvYlZ6V2liMHlael9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83YTg3ODEtZTM2My00NmU0LTk3ZWQtZTNlODE1MWE4NzYw
LzEvU0xvM0FXa2RLU2l2clRvYlZ6V2liMHlael9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAYz2vPH
E4X2CTNREoWFDIVWdXE63tSAtQm9/1BGD5fHOIFE/8fDZy3kbvh86BvBCG2IR9M3
nrOSxqmG21gG146T0AeTcA3ygeA7BeSBn0our6LcjmzbuMpXAhzY6aHajvjXBcTU
oMfpNvZa5p4svMGFtF1bbvnsHzoZESXDEy7mfhUmNkseRfufoDo9Xe0Wp8ALh6x/
gyfZH11ulkbFvUyhW4fuJeuQKsP5SaHQM9xMRPHcnHWjCjY8xjawcaoSHc1EOqZY
CW7RX4JJ46TPF6QZDXwIsj8lP6io//9tfdmWsP466Doy3D79swdEt7VCzUXGR2sT
L/jGM5xjqwZxBQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:45 2026 by rpki-client