Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
File:                     c_JZnZXskZMn_2h0LWxJwqalSIg.mft (raw, json)
Hash identifier:          /ErGM6IssIkwLAX+yNKzF0hdwxs3MoNOCuKGK8ttepw=
Subject key identifier:   7E:71:67:DE:70:4F:98:6A:5B:D5:63:F7:00:3A:92:73:86:EE:66:30
Authority key identifier: 73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88
Certificate issuer:       /CN=73f2599d95ec919327ff68742d6c49c2a6a54888
Certificate serial:       019CAB6AE8682A98D8A46CFB941AD16FFE72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 22:00:36 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:36 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:36 +0000
Files and hashes:         1: c_JZnZXskZMn_2h0LWxJwqalSIg.crl (hash: VpAC6OrW6C3JpjirqNpWtIs9dY6nDgx/rfFDKllVb5U=)
                          2: lWnR0ekIz7F2D525B-XOkrpQ0YQ.roa (hash: TEzMU5Zsy6F06BlZcKBW0crSHPdy9jGsr3EscjQ6Tys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6a:e8:68:2a:98:d8:a4:6c:fb:94:1a:d1:6f:fe:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2599d95ec919327ff68742d6c49c2a6a54888
        Validity
            Not Before: Mar  1 22:00:36 2026 GMT
            Not After : Mar  2 22:00:36 2026 GMT
        Subject: CN=7e7167de704f986a5bd563f7003a927386ee6630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8f:7a:0b:4e:29:97:37:3c:aa:22:ca:4f:76:
                    48:62:10:85:7d:c1:7c:16:32:61:f1:ae:67:b8:0a:
                    c7:7f:e6:52:82:08:62:5f:0f:e0:ff:d9:28:a5:a8:
                    2a:5f:f9:e3:57:d2:f2:fe:40:da:26:3e:6e:a1:91:
                    d7:89:2b:16:16:b8:54:37:cb:34:4d:d7:bc:90:17:
                    c5:b9:bf:73:aa:88:8a:f4:2e:49:b5:a8:4b:9e:9d:
                    0b:f8:e8:63:a0:eb:6d:ad:84:c3:1d:32:1c:35:5c:
                    ae:04:18:e4:2f:ba:ed:67:78:0a:73:90:d9:7a:25:
                    0e:1a:7f:13:79:17:e9:1a:fd:43:69:fe:c3:59:d4:
                    f0:25:56:59:50:6f:86:8b:b4:16:82:c0:89:d1:a7:
                    4e:aa:fb:7d:0f:e6:6e:22:e8:3b:c3:a3:75:1b:43:
                    d8:17:66:b6:8e:d1:e8:27:a7:8e:37:71:b0:38:84:
                    3f:65:ff:20:9d:09:bd:3c:74:f7:20:f0:5b:8f:66:
                    28:3b:8e:23:72:e2:cf:de:2a:98:69:d5:24:be:e5:
                    d9:e4:f1:7a:89:06:9e:59:15:d8:11:a1:2b:ba:fa:
                    cb:b6:72:6b:58:54:37:88:e8:2a:e3:71:2c:d0:ef:
                    0c:af:79:47:41:55:1e:5e:dd:1d:ec:4d:96:76:d0:
                    ad:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:71:67:DE:70:4F:98:6A:5B:D5:63:F7:00:3A:92:73:86:EE:66:30
            X509v3 Authority Key Identifier:
                keyid:73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b2:a7:a2:49:bf:1b:a3:dd:67:7e:3e:da:f7:da:63:7c:41:
         05:1f:6a:89:f1:9d:5d:2b:c6:98:f6:55:66:0a:7b:87:0b:15:
         6a:7f:7b:cf:e5:09:c4:46:06:07:c0:ce:30:b1:da:d2:f4:1c:
         35:c1:3e:27:a7:35:21:63:5b:5a:91:10:d8:a7:92:90:aa:11:
         1e:9f:a3:65:0a:78:6a:51:42:f2:61:0d:f2:97:4b:c8:68:fd:
         50:cc:0e:28:35:f8:84:6b:50:51:aa:47:d2:3c:04:7d:6b:ba:
         61:16:ce:60:3c:fa:f6:11:b3:55:dc:27:30:31:3c:3b:27:8d:
         8b:e6:e7:da:1a:d8:22:c7:55:43:1d:a6:99:02:86:a3:b2:ea:
         62:6b:a0:50:a7:3c:a7:87:1a:39:74:a4:2e:5e:98:ce:67:f5:
         c6:0d:cb:62:e2:b6:17:eb:ec:d5:23:70:bd:ad:a8:55:d6:a6:
         e1:35:bb:9a:ee:a9:86:ed:44:72:a5:f3:89:9e:dc:73:c1:31:
         fb:3c:63:52:d7:46:76:84:9a:25:f8:bd:68:f4:af:ab:b7:d1:
         ba:5b:8a:e1:3c:3e:3f:d7:7d:52:b6:32:27:73:67:f9:46:2b:
         82:43:86:12:32:0e:6c:30:5d:a3:58:a9:82:fb:45:c8:f4:27:
         e2:12:09:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrauhoKpjYpGz7lBrRb/5yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZjI1OTlkOTVlYzkxOTMyN2ZmNjg3NDJkNmM0OWMyYTZh
NTQ4ODgwHhcNMjYwMzAxMjIwMDM2WhcNMjYwMzAyMjIwMDM2WjAzMTEwLwYDVQQD
Eyg3ZTcxNjdkZTcwNGY5ODZhNWJkNTYzZjcwMDNhOTI3Mzg2ZWU2NjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2496C04plzc8qiLKT3ZIYhCFfcF8
FjJh8a5nuArHf+ZSgghiXw/g/9kopagqX/njV9Ly/kDaJj5uoZHXiSsWFrhUN8s0
Tde8kBfFub9zqoiK9C5JtahLnp0L+OhjoOttrYTDHTIcNVyuBBjkL7rtZ3gKc5DZ
eiUOGn8TeRfpGv1Daf7DWdTwJVZZUG+Gi7QWgsCJ0adOqvt9D+ZuIug7w6N1G0PY
F2a2jtHoJ6eON3GwOIQ/Zf8gnQm9PHT3IPBbj2YoO44jcuLP3iqYadUkvuXZ5PF6
iQaeWRXYEaEruvrLtnJrWFQ3iOgq43Es0O8Mr3lHQVUeXt0d7E2WdtCtPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5xZ95wT5hqW9Vj9wA6knOG7mYwMB8GA1UdIwQY
MBaAFHPyWZ2V7JGTJ/9odC1sScKmpUiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY19KWm5aWHNrWk1uXzJoMExXeEp3cWFsU0lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy81MTA3NjUtZTIyYS00YTVjLWJlMTct
MTgzMDlkOGE0YzYzLzEvY19KWm5aWHNrWk1uXzJoMExXeEp3cWFsU0lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy81MTA3NjUtZTIyYS00YTVjLWJlMTctMTgzMDlkOGE0YzYz
LzEvY19KWm5aWHNrWk1uXzJoMExXeEp3cWFsU0lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErKnokm/
G6PdZ34+2vfaY3xBBR9qifGdXSvGmPZVZgp7hwsVan97z+UJxEYGB8DOMLHa0vQc
NcE+J6c1IWNbWpEQ2KeSkKoRHp+jZQp4alFC8mEN8pdLyGj9UMwOKDX4hGtQUapH
0jwEfWu6YRbOYDz69hGzVdwnMDE8OyeNi+bn2hrYIsdVQx2mmQKGo7LqYmugUKc8
p4caOXSkLl6Yzmf1xg3LYuK2F+vs1SNwva2oVdam4TW7mu6phu1EcqXziZ7cc8Ex
+zxjUtdGdoSaJfi9aPSvq7fRuluK4Tw+P9d9UrYyJ3Nn+UYrgkOGEjIObDBdo1ip
gvtFyPQn4hIJyQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:41:16 2026 by rpki-client