Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
File:                     1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft (raw, json)
Hash identifier:          3clom0aRpUIDWk88g+52ZUtHnNbFLP2MEQFRDZ72I84=
Subject key identifier:   82:C6:75:8D:E4:A4:43:0D:C8:03:9A:01:F6:A0:75:AB:09:6C:55:C2
Authority key identifier: D6:0C:E3:44:38:60:A7:F7:0D:43:35:07:76:90:9A:48:10:A4:86:21
Certificate issuer:       /CN=d60ce3443860a7f70d43350776909a4810a48621
Certificate serial:       019CAD5999DFF5294226130073E74D5ADB7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
Manifest number:          0D8C
Signing time:             Mon 02 Mar 2026 07:00:56 +0000
Manifest this update:     Mon 02 Mar 2026 07:00:56 +0000
Manifest next update:     Tue 03 Mar 2026 07:00:56 +0000
Files and hashes:         1: 1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl (hash: k0qNapVYe92jUBuXMOwpccTJhed4xIdjWe76HwMsPqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:99:df:f5:29:42:26:13:00:73:e7:4d:5a:db:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d60ce3443860a7f70d43350776909a4810a48621
        Validity
            Not Before: Mar  2 07:00:56 2026 GMT
            Not After : Mar  3 07:00:56 2026 GMT
        Subject: CN=82c6758de4a4430dc8039a01f6a075ab096c55c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:b2:46:c9:24:99:e7:30:98:78:0a:2c:53:89:
                    21:b8:6c:98:6b:e8:9c:88:48:01:d4:9c:0a:7d:72:
                    20:7b:ea:2a:cd:37:f6:1e:b8:56:81:d6:6e:a5:b0:
                    59:c8:3e:ac:a8:40:f6:aa:03:04:35:64:a0:8a:84:
                    ab:bc:c8:47:9c:db:f7:a0:25:99:15:b9:3d:d7:cb:
                    47:62:d3:ea:19:13:02:64:4b:83:43:04:f9:2d:40:
                    23:03:eb:21:17:94:68:57:2b:01:f9:93:23:db:19:
                    55:11:dd:6e:7a:7d:1e:93:83:ba:89:b4:ac:5a:e1:
                    b1:c5:2a:4f:8c:f0:f2:39:85:db:c2:4d:ce:45:59:
                    d4:e9:b8:b4:fa:12:8d:a2:a4:1b:35:b3:23:0f:b0:
                    29:9c:f6:67:33:09:7a:9c:c9:c3:d6:0f:6b:37:0f:
                    82:0c:a4:23:0f:9d:21:14:d6:95:15:3d:bd:05:2e:
                    53:e2:81:6a:ee:35:91:fe:00:26:71:a9:03:98:f3:
                    d5:f2:79:37:93:60:cd:05:59:bb:fb:d4:2e:95:d8:
                    22:6f:38:dc:03:4e:05:34:59:be:c7:69:72:cc:91:
                    4b:e6:a3:c4:be:53:5d:61:c7:3e:33:89:1d:09:b2:
                    58:29:7f:62:13:7c:2a:9e:71:ca:bd:59:b3:99:00:
                    25:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C6:75:8D:E4:A4:43:0D:C8:03:9A:01:F6:A0:75:AB:09:6C:55:C2
            X509v3 Authority Key Identifier:
                keyid:D6:0C:E3:44:38:60:A7:F7:0D:43:35:07:76:90:9A:48:10:A4:86:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:59:94:a5:db:13:fc:8c:e5:d4:6a:9b:c1:8c:87:3a:98:b9:
         b1:7f:36:61:af:45:c8:0f:7d:6d:53:14:c8:62:66:e0:f9:b9:
         6f:e7:5f:ab:4d:5d:78:70:80:2e:47:4e:bf:3b:76:7a:a0:d4:
         8e:ea:e4:44:ce:4d:b1:47:da:5d:28:9a:9c:db:87:77:6c:61:
         f1:83:0f:fa:12:0f:ba:07:48:17:9f:a8:35:f8:0b:ba:52:3a:
         97:c6:af:70:47:04:bc:ca:94:50:4b:83:10:ff:b9:7d:01:79:
         15:77:f6:74:a9:8c:d5:68:f7:a1:85:8f:43:92:ee:b5:d2:f1:
         1d:db:f8:5c:43:fb:a2:36:7e:bb:33:e5:0f:02:0e:52:33:92:
         a2:f7:14:45:5e:c0:b8:48:22:3a:76:0d:95:5c:d2:12:9f:6b:
         0c:3d:29:22:71:ed:a9:72:a9:6d:b9:70:d8:04:a6:92:29:31:
         1c:0b:47:67:10:2b:6f:f5:64:56:08:40:f1:24:f2:76:9c:10:
         61:01:e5:65:d7:91:0f:77:83:04:25:00:32:9a:fc:b6:7d:b2:
         9f:69:38:fb:5b:c4:97:22:36:f0:16:a8:9c:cb:20:6c:60:31:
         e2:9a:5a:9b:68:d1:52:1c:13:48:f7:f8:b9:41:80:5d:9f:68:
         ef:a3:53:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWZnf9SlCJhMAc+dNWtt8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MGNlMzQ0Mzg2MGE3ZjcwZDQzMzUwNzc2OTA5YTQ4MTBh
NDg2MjEwHhcNMjYwMzAyMDcwMDU2WhcNMjYwMzAzMDcwMDU2WjAzMTEwLwYDVQQD
Eyg4MmM2NzU4ZGU0YTQ0MzBkYzgwMzlhMDFmNmEwNzVhYjA5NmM1NWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87JGySSZ5zCYeAosU4khuGyYa+ic
iEgB1JwKfXIge+oqzTf2HrhWgdZupbBZyD6sqED2qgMENWSgioSrvMhHnNv3oCWZ
Fbk918tHYtPqGRMCZEuDQwT5LUAjA+shF5RoVysB+ZMj2xlVEd1uen0ek4O6ibSs
WuGxxSpPjPDyOYXbwk3ORVnU6bi0+hKNoqQbNbMjD7ApnPZnMwl6nMnD1g9rNw+C
DKQjD50hFNaVFT29BS5T4oFq7jWR/gAmcakDmPPV8nk3k2DNBVm7+9Quldgibzjc
A04FNFm+x2lyzJFL5qPEvlNdYcc+M4kdCbJYKX9iE3wqnnHKvVmzmQAllwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILGdY3kpEMNyAOaAfagdasJbFXCMB8GA1UdIwQY
MBaAFNYM40Q4YKf3DUM1B3aQmkgQpIYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWd6alJEaGdwX2NOUXpVSGRwQ2FTQkNraGlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8wODY0YzMtODYwYi00MWMwLTk0MTct
ZGFmZmU1MmI5ZjBkLzEvMWd6alJEaGdwX2NOUXpVSGRwQ2FTQkNraGlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8wODY0YzMtODYwYi00MWMwLTk0MTctZGFmZmU1MmI5ZjBk
LzEvMWd6alJEaGdwX2NOUXpVSGRwQ2FTQkNraGlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1mUpdsT
/Izl1GqbwYyHOpi5sX82Ya9FyA99bVMUyGJm4Pm5b+dfq01deHCALkdOvzt2eqDU
jurkRM5NsUfaXSianNuHd2xh8YMP+hIPugdIF5+oNfgLulI6l8avcEcEvMqUUEuD
EP+5fQF5FXf2dKmM1Wj3oYWPQ5LutdLxHdv4XEP7ojZ+uzPlDwIOUjOSovcURV7A
uEgiOnYNlVzSEp9rDD0pInHtqXKpbblw2ASmkikxHAtHZxArb/VkVghA8STydpwQ
YQHlZdeRD3eDBCUAMpr8tn2yn2k4+1vElyI28BaonMsgbGAx4ppam2jRUhwTSPf4
uUGAXZ9o76NTew==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:28 2026 by rpki-client