Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft
File:                     E-wlUTMqDDL7dyXQaVgta1C-Np8.mft (raw, json)
Hash identifier:          lgLz1Y00xwxSI3i+Ss0sE0CPVGmZgpYu+CuoqSsNyug=
Subject key identifier:   D9:74:F6:D1:EB:5C:1A:6A:51:DA:33:B9:DE:3C:2E:BB:48:8E:DE:B8
Authority key identifier: 13:EC:25:51:33:2A:0C:32:FB:77:25:D0:69:58:2D:6B:50:BE:36:9F
Certificate issuer:       /CN=13ec2551332a0c32fb7725d069582d6b50be369f
Certificate serial:       019CAD59360CF7E51995F5FC314DFACC1993
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-wlUTMqDDL7dyXQaVgta1C-Np8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft
Manifest number:          0B27
Signing time:             Mon 02 Mar 2026 07:00:30 +0000
Manifest this update:     Mon 02 Mar 2026 07:00:30 +0000
Manifest next update:     Tue 03 Mar 2026 07:00:30 +0000
Files and hashes:         1: E-wlUTMqDDL7dyXQaVgta1C-Np8.crl (hash: h5gkRf1V+CLYWwW4LUJ+BccnL2BuYNSbQYGcOajgj/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-wlUTMqDDL7dyXQaVgta1C-Np8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:36:0c:f7:e5:19:95:f5:fc:31:4d:fa:cc:19:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ec2551332a0c32fb7725d069582d6b50be369f
        Validity
            Not Before: Mar  2 07:00:30 2026 GMT
            Not After : Mar  3 07:00:30 2026 GMT
        Subject: CN=d974f6d1eb5c1a6a51da33b9de3c2ebb488edeb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5d:7a:d2:e1:08:d1:db:4a:2b:24:8a:76:73:
                    3f:3c:4a:4f:b3:84:eb:59:0e:94:34:37:f5:e5:95:
                    65:bf:46:1d:d9:f0:a2:01:d9:ee:04:b9:c6:1e:0d:
                    80:67:d9:ca:50:d1:82:69:6c:d6:bf:fe:47:a4:0f:
                    9f:b5:06:44:ee:d8:2b:f4:e9:8c:42:8f:a4:eb:0c:
                    72:9b:28:5f:13:52:22:5b:6f:ee:dd:fa:4b:97:4f:
                    f4:5f:98:17:9b:4a:50:a0:6f:4e:d8:b7:2c:1c:52:
                    f9:f2:96:43:ff:85:2f:c4:a6:91:cc:54:79:28:98:
                    13:75:7b:f6:70:3e:06:e8:59:9c:ee:2c:64:8a:28:
                    6f:04:91:e9:d5:de:8f:6c:6c:15:cf:e3:2a:5c:f8:
                    fb:a0:fe:5f:29:00:5b:30:4a:a0:e4:37:7a:f9:61:
                    d7:40:f0:fe:c3:e1:d1:51:f3:fb:93:12:de:81:15:
                    05:2a:c4:88:7a:32:83:8a:bc:9d:af:ac:b9:17:9e:
                    53:7f:9b:72:38:55:b0:68:e9:6b:f4:f4:d0:96:a7:
                    2e:a5:cf:8e:e5:af:5b:06:a4:14:f1:c6:14:71:10:
                    4e:be:46:0c:11:49:8e:e3:9a:44:05:d2:62:41:cf:
                    b4:c9:42:aa:4b:c6:89:6f:bd:75:a1:0a:5c:b1:47:
                    17:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:74:F6:D1:EB:5C:1A:6A:51:DA:33:B9:DE:3C:2E:BB:48:8E:DE:B8
            X509v3 Authority Key Identifier:
                keyid:13:EC:25:51:33:2A:0C:32:FB:77:25:D0:69:58:2D:6B:50:BE:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-wlUTMqDDL7dyXQaVgta1C-Np8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:f7:3f:3f:c4:65:5c:02:42:b5:1a:89:70:c8:13:d0:95:77:
         86:a1:e1:b7:5c:6b:c7:c8:bb:7d:b6:f8:0d:41:99:c9:57:96:
         02:b9:0a:47:10:72:80:fb:3f:2c:a3:39:3f:aa:dd:24:1a:00:
         70:4e:40:7b:bd:73:53:ea:6e:f7:77:b9:dc:39:61:3b:9a:a1:
         38:54:78:7c:78:2d:86:65:44:18:8d:8b:0a:83:50:e1:4a:ae:
         91:d4:ef:9d:3a:af:a7:66:3e:3c:fb:66:bf:24:5e:83:96:4f:
         d1:25:8b:21:ca:8d:61:8b:e4:dd:ab:73:bd:63:25:eb:36:04:
         1b:1a:81:7c:b4:f8:1d:3e:1f:0a:80:96:79:5f:a5:63:f9:d3:
         8d:0c:17:27:19:74:c8:e9:42:0f:3a:60:c0:af:f2:be:a9:b3:
         77:78:7b:0a:09:73:ab:a0:90:e6:0f:72:53:75:da:27:ac:8d:
         9a:31:eb:f7:ca:2e:92:09:c7:ba:24:b7:46:cb:6f:7b:51:d9:
         60:79:2c:dc:fa:4e:f7:35:4f:76:e2:e5:ad:c0:71:1e:8b:33:
         50:8d:09:8e:a2:db:4a:36:28:fa:d3:b6:09:59:14:c9:58:ef:
         d5:78:21:29:cd:9e:aa:8a:60:cc:2e:35:bf:69:e4:c3:2b:8c:
         6b:31:22:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWTYM9+UZlfX8MU36zBmTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWMyNTUxMzMyYTBjMzJmYjc3MjVkMDY5NTgyZDZiNTBi
ZTM2OWYwHhcNMjYwMzAyMDcwMDMwWhcNMjYwMzAzMDcwMDMwWjAzMTEwLwYDVQQD
EyhkOTc0ZjZkMWViNWMxYTZhNTFkYTMzYjlkZTNjMmViYjQ4OGVkZWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3V160uEI0dtKKySKdnM/PEpPs4Tr
WQ6UNDf15ZVlv0Yd2fCiAdnuBLnGHg2AZ9nKUNGCaWzWv/5HpA+ftQZE7tgr9OmM
Qo+k6wxymyhfE1IiW2/u3fpLl0/0X5gXm0pQoG9O2LcsHFL58pZD/4UvxKaRzFR5
KJgTdXv2cD4G6Fmc7ixkiihvBJHp1d6PbGwVz+MqXPj7oP5fKQBbMEqg5Dd6+WHX
QPD+w+HRUfP7kxLegRUFKsSIejKDirydr6y5F55Tf5tyOFWwaOlr9PTQlqcupc+O
5a9bBqQU8cYUcRBOvkYMEUmO45pEBdJiQc+0yUKqS8aJb711oQpcsUcX6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNl09tHrXBpqUdozud48LrtIjt64MB8GA1UdIwQY
MBaAFBPsJVEzKgwy+3cl0GlYLWtQvjafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS13bFVUTXFEREw3ZHlYUWFWZ3RhMUMtTnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9hNmNkNWUtYmE5NS00MzcxLThkZGIt
MmVlNTY1MTQxYjMyLzEvRS13bFVUTXFEREw3ZHlYUWFWZ3RhMUMtTnA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9hNmNkNWUtYmE5NS00MzcxLThkZGItMmVlNTY1MTQxYjMy
LzEvRS13bFVUTXFEREw3ZHlYUWFWZ3RhMUMtTnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQfc/P8Rl
XAJCtRqJcMgT0JV3hqHht1xrx8i7fbb4DUGZyVeWArkKRxBygPs/LKM5P6rdJBoA
cE5Ae71zU+pu93e53DlhO5qhOFR4fHgthmVEGI2LCoNQ4UqukdTvnTqvp2Y+PPtm
vyReg5ZP0SWLIcqNYYvk3atzvWMl6zYEGxqBfLT4HT4fCoCWeV+lY/nTjQwXJxl0
yOlCDzpgwK/yvqmzd3h7Cglzq6CQ5g9yU3XaJ6yNmjHr98oukgnHuiS3Rstve1HZ
YHks3PpO9zVPduLlrcBxHoszUI0JjqLbSjYo+tO2CVkUyVjv1XghKc2eqopgzC41
v2nkwyuMazEiQw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:18 2026 by rpki-client