Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
File:                     b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft (raw, json)
Hash identifier:          gs5JSH5ORIV3PBiFzLK0R/sBuqhyzl42jTrXiYNhuTs=
Subject key identifier:   47:B8:8A:D9:03:43:19:4B:73:4C:3A:BC:6A:06:1F:C3:16:6D:44:D5
Authority key identifier: 6F:65:54:C4:D8:5B:FD:86:F0:A7:49:C1:CA:0F:5D:0E:96:92:E6:55
Certificate issuer:       /CN=6f6554c4d85bfd86f0a749c1ca0f5d0e9692e655
Certificate serial:       019CAC476279426A344B782BF822C342D5F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
Manifest number:          04ED
Signing time:             Mon 02 Mar 2026 02:01:25 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:25 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:25 +0000
Files and hashes:         1: b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl (hash: NClWManlK/Rq5EIHtr+piPh3Dc+uydbAjlqMwK1IWr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:62:79:42:6a:34:4b:78:2b:f8:22:c3:42:d5:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f6554c4d85bfd86f0a749c1ca0f5d0e9692e655
        Validity
            Not Before: Mar  2 02:01:25 2026 GMT
            Not After : Mar  3 02:01:25 2026 GMT
        Subject: CN=47b88ad90343194b734c3abc6a061fc3166d44d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:70:26:d9:48:09:46:ce:23:ea:35:0b:b6:fb:
                    36:52:58:d2:62:88:ab:8d:7f:5e:52:e1:57:be:ac:
                    1d:3f:2a:17:32:47:ef:b2:1c:f8:3c:23:ee:78:29:
                    b6:f8:dd:a0:a7:4c:de:2a:c7:03:33:f0:05:57:e2:
                    b1:1b:b2:65:1d:0d:ad:c2:ad:82:79:65:b1:1d:7d:
                    e0:6e:5e:c0:0c:3a:73:7f:79:b9:31:75:ed:0a:c9:
                    1e:73:00:a1:8a:74:42:43:c1:76:f8:1e:03:50:5d:
                    13:57:1d:61:2b:02:83:76:cc:5a:ba:4e:b5:03:b2:
                    8a:75:07:de:20:3e:ea:57:26:f0:1b:0f:67:0c:3f:
                    ca:e0:63:33:22:f9:1b:37:c0:fe:56:e5:a4:ad:5f:
                    a4:7e:63:69:ee:e2:1d:9c:dc:ac:5a:7a:6c:65:16:
                    32:8a:d0:94:49:c7:00:e0:e2:8c:8f:d4:25:ba:ad:
                    0d:2f:2c:65:da:a4:dc:f4:92:73:e8:32:ad:4f:50:
                    cd:74:bc:b0:81:af:95:fe:4e:37:e3:da:51:a6:b7:
                    86:88:c1:04:73:a3:95:72:0c:23:ee:63:d0:39:f6:
                    f7:32:98:ce:93:92:ca:4b:0a:4d:7c:38:96:d5:bf:
                    0d:42:81:42:ca:6a:9d:2e:40:ba:07:df:69:89:3f:
                    1b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B8:8A:D9:03:43:19:4B:73:4C:3A:BC:6A:06:1F:C3:16:6D:44:D5
            X509v3 Authority Key Identifier:
                keyid:6F:65:54:C4:D8:5B:FD:86:F0:A7:49:C1:CA:0F:5D:0E:96:92:E6:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:de:32:d8:fa:0f:46:00:38:c7:3c:d3:67:a9:b2:f7:6e:51:
         99:55:ae:7c:c3:13:50:9b:47:bb:a5:cd:9a:e6:51:85:f7:25:
         f4:17:1f:b8:c2:6a:07:18:d7:30:20:f7:42:ea:ed:a8:13:d7:
         75:15:8d:d4:35:a7:d2:30:35:d0:1b:fd:41:5c:4e:59:17:8b:
         e5:ee:f5:5e:9b:2d:ba:e9:57:e3:8e:37:90:bc:a7:35:78:9a:
         74:b9:ca:de:43:33:42:ef:f7:e3:a8:32:87:46:43:4e:1f:6e:
         8e:7d:c2:28:e2:5b:d8:22:ae:c7:85:a7:27:19:3b:c6:2e:a3:
         43:07:76:a6:b4:fd:c2:16:5c:1b:2c:e0:5f:27:06:f1:44:d0:
         12:d6:4e:66:3d:ce:2f:a9:fa:3e:f6:ba:3d:1c:b2:76:9b:25:
         37:69:6e:a4:36:39:5a:ba:d4:52:2c:cc:73:d3:f7:9d:f9:4b:
         b5:98:f0:72:fd:d8:7d:b5:73:0a:9e:ed:23:ee:6e:af:4c:08:
         ec:24:51:72:21:b2:64:2d:2c:0c:fb:31:82:08:c5:bb:dc:fa:
         15:ba:06:65:a4:dd:2b:b6:80:50:77:aa:e0:6c:33:98:1a:7c:
         2b:99:88:79:65:5a:cc:1c:fb:a4:c1:55:ce:ed:32:04:42:7d:
         17:f7:e2:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR2J5Qmo0S3gr+CLDQtX4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNjU1NGM0ZDg1YmZkODZmMGE3NDljMWNhMGY1ZDBlOTY5
MmU2NTUwHhcNMjYwMzAyMDIwMTI1WhcNMjYwMzAzMDIwMTI1WjAzMTEwLwYDVQQD
Eyg0N2I4OGFkOTAzNDMxOTRiNzM0YzNhYmM2YTA2MWZjMzE2NmQ0NGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXAm2UgJRs4j6jULtvs2UljSYoir
jX9eUuFXvqwdPyoXMkfvshz4PCPueCm2+N2gp0zeKscDM/AFV+KxG7JlHQ2twq2C
eWWxHX3gbl7ADDpzf3m5MXXtCskecwChinRCQ8F2+B4DUF0TVx1hKwKDdsxauk61
A7KKdQfeID7qVybwGw9nDD/K4GMzIvkbN8D+VuWkrV+kfmNp7uIdnNysWnpsZRYy
itCUSccA4OKMj9Qluq0NLyxl2qTc9JJz6DKtT1DNdLywga+V/k4349pRpreGiMEE
c6OVcgwj7mPQOfb3MpjOk5LKSwpNfDiW1b8NQoFCymqdLkC6B99piT8bXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEe4itkDQxlLc0w6vGoGH8MWbUTVMB8GA1UdIwQY
MBaAFG9lVMTYW/2G8KdJwcoPXQ6WkuZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjJWVXhOaGJfWWJ3cDBuQnlnOWREcGFTNWxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81YmNhNjAtMTYzZi00MGY4LTg3N2Qt
ODczZGJkMTJjNmEyLzEvYjJWVXhOaGJfWWJ3cDBuQnlnOWREcGFTNWxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy81YmNhNjAtMTYzZi00MGY4LTg3N2QtODczZGJkMTJjNmEy
LzEvYjJWVXhOaGJfWWJ3cDBuQnlnOWREcGFTNWxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk94y2PoP
RgA4xzzTZ6my925RmVWufMMTUJtHu6XNmuZRhfcl9BcfuMJqBxjXMCD3QurtqBPX
dRWN1DWn0jA10Bv9QVxOWReL5e71XpstuulX4443kLynNXiadLnK3kMzQu/346gy
h0ZDTh9ujn3CKOJb2CKux4WnJxk7xi6jQwd2prT9whZcGyzgXycG8UTQEtZOZj3O
L6n6Pva6PRyydpslN2lupDY5WrrUUizMc9P3nflLtZjwcv3YfbVzCp7tI+5ur0wI
7CRRciGyZC0sDPsxggjFu9z6FboGZaTdK7aAUHeq4GwzmBp8K5mIeWVazBz7pMFV
zu0yBEJ9F/fiyg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:12 2026 by rpki-client