Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft
File:                     bWLDbYdChp-XVVt8mDlPn2XI6CY.mft (raw, json)
Hash identifier:          L3MsGKOGCbcH3sxMFKNkIpQOIU6BI9IdqKpSZ/SVMyw=
Subject key identifier:   29:93:3C:58:54:79:D2:95:90:19:B8:98:84:92:36:5F:56:71:C5:40
Authority key identifier: 6D:62:C3:6D:87:42:86:9F:97:55:5B:7C:98:39:4F:9F:65:C8:E8:26
Certificate issuer:       /CN=6d62c36d8742869f97555b7c98394f9f65c8e826
Certificate serial:       019CAD59BAB1D0BA724B8616105D28452702
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWLDbYdChp-XVVt8mDlPn2XI6CY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft
Manifest number:          17D8
Signing time:             Mon 02 Mar 2026 07:01:04 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:04 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:04 +0000
Files and hashes:         1: bWLDbYdChp-XVVt8mDlPn2XI6CY.crl (hash: sd7XPdEup2KKk08XvwgpZcgUQ4mJAYYdPgc9c3PfHAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWLDbYdChp-XVVt8mDlPn2XI6CY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:ba:b1:d0:ba:72:4b:86:16:10:5d:28:45:27:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d62c36d8742869f97555b7c98394f9f65c8e826
        Validity
            Not Before: Mar  2 07:01:04 2026 GMT
            Not After : Mar  3 07:01:04 2026 GMT
        Subject: CN=29933c585479d2959019b8988492365f5671c540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c2:08:61:75:9c:4a:78:20:bb:09:0a:5b:f8:
                    6f:26:1a:b0:76:6c:c7:69:68:cc:76:e7:9c:fc:6b:
                    56:f2:b7:b3:5e:13:9d:30:80:79:66:49:a0:a1:f6:
                    d6:0a:69:42:5d:7e:fc:68:08:16:43:66:6b:e8:44:
                    b1:32:38:2a:d9:a9:21:96:61:1d:e4:7c:a8:74:c6:
                    84:21:bc:93:15:56:1a:11:10:0a:ca:77:ca:67:04:
                    e1:34:7b:a2:71:ab:ba:db:2a:24:05:e8:35:76:fb:
                    4c:0f:f5:ed:0d:ab:c7:0e:50:a9:b1:0a:a0:e8:37:
                    1f:bc:e7:1e:f6:e5:78:5c:aa:d0:1e:05:01:bb:8f:
                    6a:7e:01:30:cb:5f:7f:6e:bf:e2:af:09:51:f4:62:
                    8e:e7:89:81:79:47:b6:4b:9d:51:b9:01:d1:62:cf:
                    32:3b:88:88:b3:68:ca:99:d2:f5:e4:6b:5a:49:f8:
                    1f:a5:4d:a2:1e:36:f8:cf:3b:a0:f7:66:94:4a:34:
                    29:24:6a:7b:66:3b:48:cc:20:25:4f:d2:12:43:35:
                    0e:08:dc:29:b6:05:73:61:c4:ad:45:3e:7b:75:fa:
                    74:de:e0:a5:34:f0:ec:e3:3b:3d:94:54:11:67:c1:
                    9b:1e:1e:df:ad:39:f0:b9:99:b4:f2:67:69:89:15:
                    38:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:93:3C:58:54:79:D2:95:90:19:B8:98:84:92:36:5F:56:71:C5:40
            X509v3 Authority Key Identifier:
                keyid:6D:62:C3:6D:87:42:86:9F:97:55:5B:7C:98:39:4F:9F:65:C8:E8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWLDbYdChp-XVVt8mDlPn2XI6CY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d1:d7:f8:21:17:f1:08:52:00:80:42:21:1f:56:dc:44:c8:
         ca:24:2b:26:cb:29:09:90:41:c8:b5:52:66:23:32:5d:05:38:
         e9:dd:7f:b9:45:c9:8e:76:d9:8b:42:ea:c7:ef:3c:6b:69:ed:
         55:a3:fc:67:3f:3f:24:33:78:aa:e2:ff:a7:c0:a5:1c:50:ea:
         34:2e:87:32:74:a9:82:77:56:21:ad:7a:93:d8:d3:47:0f:58:
         7b:45:b5:dc:ed:9b:ab:1c:6a:14:6e:35:a5:68:33:04:6b:84:
         a6:b5:5a:09:a6:2e:11:e8:9b:b5:f9:83:62:d2:88:ae:ac:6c:
         52:cb:f4:2d:44:fb:6c:88:30:3e:14:ab:bd:3d:9c:a7:7d:53:
         fb:98:49:43:1b:01:a1:80:5f:f7:90:c3:45:64:1a:56:ce:e0:
         ff:2d:3a:33:8f:4a:21:71:43:76:ad:69:9f:9a:4b:16:7d:7e:
         7b:8e:81:d6:77:f6:df:68:da:9c:26:67:36:6d:f2:9a:e0:2d:
         64:dd:9f:4a:6d:36:8e:41:a6:ed:87:d4:82:3c:50:c6:97:d8:
         27:9d:8c:80:66:61:73:f4:cf:8f:70:9f:3b:3b:c3:ee:36:ac:
         f8:a9:50:bf:62:e6:3e:6a:c9:b6:c4:a3:c6:b9:6b:b7:94:a8:
         09:dd:31:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWbqx0LpyS4YWEF0oRScCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNjJjMzZkODc0Mjg2OWY5NzU1NWI3Yzk4Mzk0ZjlmNjVj
OGU4MjYwHhcNMjYwMzAyMDcwMTA0WhcNMjYwMzAzMDcwMTA0WjAzMTEwLwYDVQQD
EygyOTkzM2M1ODU0NzlkMjk1OTAxOWI4OTg4NDkyMzY1ZjU2NzFjNTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMIIYXWcSngguwkKW/hvJhqwdmzH
aWjMduec/GtW8rezXhOdMIB5ZkmgofbWCmlCXX78aAgWQ2Zr6ESxMjgq2akhlmEd
5HyodMaEIbyTFVYaERAKynfKZwThNHuicau62yokBeg1dvtMD/XtDavHDlCpsQqg
6DcfvOce9uV4XKrQHgUBu49qfgEwy19/br/irwlR9GKO54mBeUe2S51RuQHRYs8y
O4iIs2jKmdL15GtaSfgfpU2iHjb4zzug92aUSjQpJGp7ZjtIzCAlT9ISQzUOCNwp
tgVzYcStRT57dfp03uClNPDs4zs9lFQRZ8GbHh7frTnwuZm08mdpiRU49QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmTPFhUedKVkBm4mISSNl9WccVAMB8GA1UdIwQY
MBaAFG1iw22HQoafl1VbfJg5T59lyOgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYldMRGJZZENocC1YVlZ0OG1EbFBuMlhJNkNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy85NjA5NjMtZjIzZC00OTgzLWJhM2Yt
M2E1ODU4ODZhZTRjLzEvYldMRGJZZENocC1YVlZ0OG1EbFBuMlhJNkNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy85NjA5NjMtZjIzZC00OTgzLWJhM2YtM2E1ODU4ODZhZTRj
LzEvYldMRGJZZENocC1YVlZ0OG1EbFBuMlhJNkNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNHX+CEX
8QhSAIBCIR9W3ETIyiQrJsspCZBByLVSZiMyXQU46d1/uUXJjnbZi0Lqx+88a2nt
VaP8Zz8/JDN4quL/p8ClHFDqNC6HMnSpgndWIa16k9jTRw9Ye0W13O2bqxxqFG41
pWgzBGuEprVaCaYuEeibtfmDYtKIrqxsUsv0LUT7bIgwPhSrvT2cp31T+5hJQxsB
oYBf95DDRWQaVs7g/y06M49KIXFDdq1pn5pLFn1+e46B1nf232janCZnNm3ymuAt
ZN2fSm02jkGm7YfUgjxQxpfYJ52MgGZhc/TPj3CfOzvD7jas+KlQv2LmPmrJtsSj
xrlrt5SoCd0xeA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:22:58 2026 by rpki-client