Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
File:                     61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft (raw, json)
Hash identifier:          lOJO2gkKEjJJiUZPYNA5uKmd2Bt6efX6lcF32gyc3J4=
Subject key identifier:   15:50:C6:FD:C9:B9:44:B1:C2:35:39:E5:EC:E5:81:C1:F3:20:3A:BA
Authority key identifier: EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B
Certificate issuer:       /CN=eb50b439d488e1b1a69e3586098621956c0edc7b
Certificate serial:       019CAB6B4E5DB00ABD3D5D3F73ED5B2FAD4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
Manifest number:          0E40
Signing time:             Sun 01 Mar 2026 22:01:02 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:02 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:02 +0000
Files and hashes:         1: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl (hash: 2/sG/AAd3aOGInamj4xeYfZC0LdS+Lp0HeOQP33z8ek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:4e:5d:b0:0a:bd:3d:5d:3f:73:ed:5b:2f:ad:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb50b439d488e1b1a69e3586098621956c0edc7b
        Validity
            Not Before: Mar  1 22:01:02 2026 GMT
            Not After : Mar  2 22:01:02 2026 GMT
        Subject: CN=1550c6fdc9b944b1c23539e5ece581c1f3203aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:25:30:f2:36:a9:f4:e3:7f:84:85:dc:f9:9f:
                    51:7c:d1:17:7e:e7:48:3d:87:f0:40:4e:67:39:ac:
                    60:5d:e6:8d:0f:b0:34:bd:bf:14:65:6d:26:86:6d:
                    2e:91:9d:4b:4f:59:0b:18:85:a2:03:d7:2c:c3:ba:
                    86:8d:71:a1:ff:1a:a8:c9:50:94:00:00:44:b7:35:
                    8c:b3:6a:89:57:86:38:a6:5f:a0:2e:c5:ba:f8:74:
                    91:29:77:36:95:76:37:a2:a0:de:76:20:fc:37:58:
                    0c:07:9a:fb:d2:ab:73:5a:f9:1f:87:ae:cb:bb:0f:
                    04:84:b8:cb:50:9d:6f:54:f4:99:dd:09:1b:0c:8f:
                    7c:6a:af:96:4c:65:1e:57:53:ab:f1:b8:eb:c4:07:
                    99:ff:59:4d:75:24:e0:4b:d0:c3:39:34:76:3b:ab:
                    be:37:e8:ec:c5:18:f0:85:1a:5b:f4:73:25:6e:12:
                    4b:3d:a5:fc:31:8d:5c:36:d5:ae:2c:33:31:52:11:
                    d6:64:ab:05:d3:74:ee:08:d8:44:95:5e:be:05:c9:
                    f4:25:91:c4:0d:85:8e:5c:5b:89:df:5b:12:c0:03:
                    fe:d9:f3:c5:65:f8:5f:e1:65:96:95:0d:65:7a:27:
                    a9:e7:4e:b9:0d:d6:be:3c:75:d3:7c:5c:d5:22:78:
                    86:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:50:C6:FD:C9:B9:44:B1:C2:35:39:E5:EC:E5:81:C1:F3:20:3A:BA
            X509v3 Authority Key Identifier:
                keyid:EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:21:95:c2:a8:b3:aa:fe:ee:cd:2a:5b:04:d5:c0:7c:3d:bd:
         10:17:44:5c:fb:96:99:0c:9e:fe:d4:57:5a:bb:b3:b8:27:08:
         5d:55:12:93:ed:a2:62:d8:3c:b2:02:85:54:f5:87:3c:c9:81:
         ad:4b:12:c2:e6:2a:df:24:06:e4:27:e4:ff:19:97:f8:5f:79:
         7b:17:dd:19:05:a7:8e:19:22:f2:59:46:3a:20:21:08:11:9a:
         99:29:16:b9:fb:7f:39:39:cc:02:69:c0:f6:ed:8c:16:b7:4d:
         8c:0d:2e:e9:ad:06:7e:4f:bc:5b:f3:9c:3f:21:3f:2b:99:6e:
         ac:0d:f7:bb:66:15:70:6d:7d:75:b5:a4:60:4e:d7:df:5a:30:
         f8:75:a6:1f:fe:25:a6:fd:72:ab:3d:03:33:ce:83:ad:7f:b4:
         e1:b9:a5:c5:5f:b4:bf:40:2f:83:90:44:97:f6:f5:27:4f:15:
         b6:c0:d3:36:25:5c:6c:1a:6f:46:d1:de:d0:46:c4:a5:ae:e1:
         b7:11:ec:71:50:d5:a9:a7:f8:be:c3:7a:d7:85:4a:d8:fb:a1:
         59:1b:7e:4e:1c:76:37:d7:72:ea:84:6e:9e:2c:b1:a3:6b:06:
         68:fc:71:a9:73:f0:41:14:73:c1:aa:28:86:ab:d5:5a:23:2a:
         bf:58:7e:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra05dsAq9PV0/c+1bL61NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNTBiNDM5ZDQ4OGUxYjFhNjllMzU4NjA5ODYyMTk1NmMw
ZWRjN2IwHhcNMjYwMzAxMjIwMTAyWhcNMjYwMzAyMjIwMTAyWjAzMTEwLwYDVQQD
EygxNTUwYzZmZGM5Yjk0NGIxYzIzNTM5ZTVlY2U1ODFjMWYzMjAzYWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliUw8jap9ON/hIXc+Z9RfNEXfudI
PYfwQE5nOaxgXeaND7A0vb8UZW0mhm0ukZ1LT1kLGIWiA9csw7qGjXGh/xqoyVCU
AABEtzWMs2qJV4Y4pl+gLsW6+HSRKXc2lXY3oqDediD8N1gMB5r70qtzWvkfh67L
uw8EhLjLUJ1vVPSZ3QkbDI98aq+WTGUeV1Or8bjrxAeZ/1lNdSTgS9DDOTR2O6u+
N+jsxRjwhRpb9HMlbhJLPaX8MY1cNtWuLDMxUhHWZKsF03TuCNhElV6+Bcn0JZHE
DYWOXFuJ31sSwAP+2fPFZfhf4WWWlQ1leiep5065Dda+PHXTfFzVIniGUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVQxv3JuUSxwjU55ezlgcHzIDq6MB8GA1UdIwQY
MBaAFOtQtDnUiOGxpp41hgmGIZVsDtx7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjFDME9kU0k0YkdtbmpXR0NZWWhsV3dPM0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jODNlOGYtMjQ1Ny00ZThhLWE2YmMt
M2E3OTgwMzE0ZWEyLzEvNjFDME9kU0k0YkdtbmpXR0NZWWhsV3dPM0hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9jODNlOGYtMjQ1Ny00ZThhLWE2YmMtM2E3OTgwMzE0ZWEy
LzEvNjFDME9kU0k0YkdtbmpXR0NZWWhsV3dPM0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASiGVwqiz
qv7uzSpbBNXAfD29EBdEXPuWmQye/tRXWruzuCcIXVUSk+2iYtg8sgKFVPWHPMmB
rUsSwuYq3yQG5Cfk/xmX+F95exfdGQWnjhki8llGOiAhCBGamSkWuft/OTnMAmnA
9u2MFrdNjA0u6a0Gfk+8W/OcPyE/K5lurA33u2YVcG19dbWkYE7X31ow+HWmH/4l
pv1yqz0DM86DrX+04bmlxV+0v0Avg5BEl/b1J08VtsDTNiVcbBpvRtHe0EbEpa7h
txHscVDVqaf4vsN614VK2PuhWRt+Thx2N9dy6oRuniyxo2sGaPxxqXPwQRRzwaoo
hqvVWiMqv1h+GA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:16 2026 by rpki-client