Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
File:                     eSttblvaBSZfwM6XGaYzvgSm6Xk.mft (raw, json)
Hash identifier:          /hoOzt0kxFawSGJ45c9EDalxU+fmfkKRRTvXQgDNJVw=
Subject key identifier:   73:51:B7:17:5B:75:63:6C:CD:1E:C4:65:23:6D:FF:85:AF:FE:41:DE
Authority key identifier: 79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
Certificate issuer:       /CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Certificate serial:       019CAB6AF778B5EC002DD6F168988793F9D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
Manifest number:          1842
Signing time:             Sun 01 Mar 2026 22:00:39 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:39 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:39 +0000
Files and hashes:         1: eSttblvaBSZfwM6XGaYzvgSm6Xk.crl (hash: oqUSH/UBtE4GHg/7gaJxzkqc2xUGEWs0atUwkRhu6os=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6a:f7:78:b5:ec:00:2d:d6:f1:68:98:87:93:f9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
        Validity
            Not Before: Mar  1 22:00:39 2026 GMT
            Not After : Mar  2 22:00:39 2026 GMT
        Subject: CN=7351b7175b75636ccd1ec465236dff85affe41de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:38:63:83:c9:82:62:0c:f0:f9:08:6b:88:f7:
                    34:61:a2:ac:1b:60:98:b9:c6:6c:c5:9e:dd:d0:79:
                    1f:eb:a2:07:ca:87:83:64:c4:fd:24:94:fa:d2:0c:
                    23:c6:02:27:cc:aa:51:06:58:1f:ab:6f:44:18:a4:
                    5f:7e:1f:63:5b:09:06:9a:4a:7b:ce:a8:43:4a:27:
                    66:18:40:e6:a6:af:fa:a6:fb:3f:0b:9b:ea:64:b1:
                    57:06:76:8d:b4:4f:7b:96:ec:b1:95:0e:b7:36:8a:
                    4d:77:61:c8:6c:86:22:84:10:21:ed:b9:a8:72:57:
                    d4:9a:c9:fc:65:33:6c:0d:3c:70:0b:71:3b:56:b5:
                    f5:50:81:19:3f:8f:cf:a0:fa:6b:6a:09:1c:3e:f3:
                    39:77:2a:54:4b:b3:c4:b6:8b:57:39:97:93:de:cb:
                    35:23:9f:eb:97:ec:8b:e4:07:57:fa:eb:1d:fb:f0:
                    64:7c:70:ab:47:45:83:12:db:51:eb:1c:51:06:59:
                    25:d9:61:76:42:06:53:3a:3f:c5:7c:be:23:d0:16:
                    9b:0c:ef:f1:66:42:72:79:29:6c:1d:b1:b4:8a:23:
                    05:59:91:75:d7:8b:3a:1b:e9:4d:85:ab:44:4b:fb:
                    7d:1c:dc:9c:c6:b0:67:2d:3b:a7:73:ea:8c:f6:89:
                    ad:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:51:B7:17:5B:75:63:6C:CD:1E:C4:65:23:6D:FF:85:AF:FE:41:DE
            X509v3 Authority Key Identifier:
                keyid:79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b2:f4:05:a8:f1:48:c8:ce:bd:c4:d6:e3:e4:16:e3:55:3d:
         87:0e:89:7d:c3:3b:7c:17:c6:d2:f8:de:57:f2:d8:dc:eb:38:
         2a:ec:45:01:7b:7e:e5:00:0d:4f:99:4f:09:ff:a4:a8:f6:d3:
         58:31:56:7a:81:29:0a:12:33:e3:04:9e:28:81:27:58:d2:95:
         d1:54:6f:22:e0:8b:83:a9:6f:15:14:0d:70:64:ef:6b:ca:10:
         d7:6b:67:84:cb:5b:f0:ef:1a:a3:ec:f4:06:39:7c:70:17:64:
         ea:93:8d:89:11:2e:bb:96:39:70:64:f2:1a:e4:2f:ff:a2:5c:
         62:21:09:01:4f:df:c2:3a:a4:98:98:c3:08:05:dc:ce:99:2b:
         32:c2:d2:9c:25:8d:1f:25:8c:2f:b0:35:76:f3:bb:3b:23:d9:
         4f:b3:7d:39:87:44:88:3c:66:58:73:df:5e:b9:77:a5:65:18:
         a0:58:99:95:1e:25:53:31:2f:5f:7f:6c:cb:9f:7b:ca:9b:72:
         da:41:c9:ae:f8:4d:29:a2:8e:72:3c:06:db:60:a2:ad:7b:3b:
         08:d0:fd:dd:4f:f2:f6:02:45:b3:6d:7f:78:12:19:78:d9:65:
         fd:19:eb:99:b2:61:78:89:43:f6:78:98:50:ff:9d:35:83:58:
         38:d5:f3:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyravd4tewALdbxaJiHk/nQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MmI2ZDZlNWJkYTA1MjY1ZmMwY2U5NzE5YTYzM2JlMDRh
NmU5NzkwHhcNMjYwMzAxMjIwMDM5WhcNMjYwMzAyMjIwMDM5WjAzMTEwLwYDVQQD
Eyg3MzUxYjcxNzViNzU2MzZjY2QxZWM0NjUyMzZkZmY4NWFmZmU0MWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqThjg8mCYgzw+QhriPc0YaKsG2CY
ucZsxZ7d0Hkf66IHyoeDZMT9JJT60gwjxgInzKpRBlgfq29EGKRffh9jWwkGmkp7
zqhDSidmGEDmpq/6pvs/C5vqZLFXBnaNtE97luyxlQ63NopNd2HIbIYihBAh7bmo
clfUmsn8ZTNsDTxwC3E7VrX1UIEZP4/PoPpragkcPvM5dypUS7PEtotXOZeT3ss1
I5/rl+yL5AdX+usd+/BkfHCrR0WDEttR6xxRBlkl2WF2QgZTOj/FfL4j0BabDO/x
ZkJyeSlsHbG0iiMFWZF114s6G+lNhatES/t9HNycxrBnLTunc+qM9omtxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNRtxdbdWNszR7EZSNt/4Wv/kHeMB8GA1UdIwQY
MBaAFHkrbW5b2gUmX8DOlxmmM74Epul5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVN0dGJsdmFCU1pmd002WEdhWXp2Z1NtNlhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9kYWMxZTUtMWZkOS00M2Q0LTg5MjYt
MjEzZGMzOTliZTZmLzEvZVN0dGJsdmFCU1pmd002WEdhWXp2Z1NtNlhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9kYWMxZTUtMWZkOS00M2Q0LTg5MjYtMjEzZGMzOTliZTZm
LzEvZVN0dGJsdmFCU1pmd002WEdhWXp2Z1NtNlhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7L0Bajx
SMjOvcTW4+QW41U9hw6JfcM7fBfG0vjeV/LY3Os4KuxFAXt+5QANT5lPCf+kqPbT
WDFWeoEpChIz4wSeKIEnWNKV0VRvIuCLg6lvFRQNcGTva8oQ12tnhMtb8O8ao+z0
Bjl8cBdk6pONiREuu5Y5cGTyGuQv/6JcYiEJAU/fwjqkmJjDCAXczpkrMsLSnCWN
HyWML7A1dvO7OyPZT7N9OYdEiDxmWHPfXrl3pWUYoFiZlR4lUzEvX39sy597ypty
2kHJrvhNKaKOcjwG22CirXs7CND93U/y9gJFs21/eBIZeNll/RnrmbJheIlD9niY
UP+dNYNYONXz1g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:37 2026 by rpki-client