Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
File:                     dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft (raw, json)
Hash identifier:          9RweNRHF6058P7iJfRSdjIC5Aob6MzM6l7BdVdWXqMA=
Subject key identifier:   A9:59:16:13:F5:3D:69:86:4B:BD:A7:86:E8:10:66:EF:1D:4C:32:CC
Authority key identifier: 75:92:3E:C5:46:DF:37:1D:09:E6:8C:6B:06:02:5E:A3:12:61:23:4A
Certificate issuer:       /CN=75923ec546df371d09e68c6b06025ea31261234a
Certificate serial:       019CAB6BA80093E0CD64DD3FC19F1C6D4DA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
Manifest number:          1843
Signing time:             Sun 01 Mar 2026 22:01:25 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:25 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:25 +0000
Files and hashes:         1: dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl (hash: dWUct4DRxoh2EvhZxymkqc1iIRuXAMWbi8r6zlxCEyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:a8:00:93:e0:cd:64:dd:3f:c1:9f:1c:6d:4d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75923ec546df371d09e68c6b06025ea31261234a
        Validity
            Not Before: Mar  1 22:01:25 2026 GMT
            Not After : Mar  2 22:01:25 2026 GMT
        Subject: CN=a9591613f53d69864bbda786e81066ef1d4c32cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e0:38:28:86:5c:56:20:59:db:b6:22:71:e9:
                    bc:bf:2c:20:11:d8:05:ac:25:5b:a7:51:da:16:89:
                    a6:ff:bc:d3:a5:15:37:f3:65:03:5d:dd:82:bb:a5:
                    76:b0:68:7b:5f:47:7e:2b:4e:26:72:d5:68:8f:8c:
                    e9:9b:68:00:3c:3c:b1:76:fe:3c:1c:da:c4:b8:82:
                    0c:6c:0f:94:78:2a:11:a3:b2:aa:42:43:2e:09:cb:
                    ad:8d:09:ce:97:42:4d:58:4e:a2:da:04:4b:03:b2:
                    3e:4a:26:d3:10:3d:65:35:2c:11:34:cd:45:ac:9d:
                    2d:35:49:0a:3a:c8:31:e1:0b:56:87:50:81:a3:6c:
                    bd:52:bd:f1:ec:5c:55:e5:51:c7:ef:d7:5e:ad:5d:
                    1f:19:7a:cc:3b:24:3d:11:95:b1:8f:65:6f:b5:02:
                    cd:49:4e:7e:8f:c7:07:d2:a8:31:86:4f:b2:6f:9b:
                    0e:11:40:a5:2a:0b:4c:99:1c:dc:9a:18:8d:25:aa:
                    cb:8e:dc:82:fa:de:46:63:50:f5:19:f3:46:d1:bf:
                    83:c6:a7:6a:39:d3:f6:d5:e7:43:ca:03:7d:49:70:
                    7f:9a:9a:5e:4e:40:da:e8:02:87:25:f7:56:09:1b:
                    5b:69:3b:0b:d4:63:a7:93:bf:26:2a:3d:d1:73:c9:
                    ba:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:59:16:13:F5:3D:69:86:4B:BD:A7:86:E8:10:66:EF:1D:4C:32:CC
            X509v3 Authority Key Identifier:
                keyid:75:92:3E:C5:46:DF:37:1D:09:E6:8C:6B:06:02:5E:A3:12:61:23:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:5b:f9:1d:ac:d5:8f:e3:c5:aa:68:7d:17:de:86:6e:e6:a4:
         06:db:1d:3d:d4:51:f2:f6:44:92:ae:0d:7f:93:c1:ce:1e:e3:
         32:5e:8c:13:1f:e7:89:dc:82:c4:05:70:46:e6:14:2d:7a:c0:
         a9:12:99:1d:29:1d:b4:79:a9:6e:b4:89:e4:8e:2b:28:4e:63:
         84:a3:a6:fa:cc:d3:32:1c:a6:55:aa:c4:3f:a8:a7:d8:6b:4c:
         dc:f2:42:85:dd:47:3c:c5:c2:74:d5:af:61:c8:63:85:d1:96:
         56:c6:7b:9c:c8:65:49:77:95:90:0f:86:d3:db:0e:66:31:cf:
         9b:11:a1:5f:60:2a:34:b8:c7:da:da:98:a9:ec:85:38:5e:16:
         d2:53:6a:f6:47:8e:17:fd:bc:c8:d8:65:c7:2a:c2:f9:fb:87:
         a8:a9:7e:36:bd:86:5a:79:2c:d3:01:f2:4f:b3:fa:3d:d5:8c:
         81:d9:a4:ce:26:52:de:8c:87:47:87:90:ce:d8:32:b4:2f:cb:
         31:c2:3c:eb:a7:24:55:75:68:db:cc:3a:27:a7:c8:bc:47:c3:
         ad:0b:e0:ab:d4:db:aa:61:3c:fd:f3:cf:62:eb:b2:0c:97:90:
         df:5a:ef:95:97:99:9a:bc:c6:42:f7:f9:be:72:ae:b5:41:18:
         40:d7:85:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra6gAk+DNZN0/wZ8cbU2lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1OTIzZWM1NDZkZjM3MWQwOWU2OGM2YjA2MDI1ZWEzMTI2
MTIzNGEwHhcNMjYwMzAxMjIwMTI1WhcNMjYwMzAyMjIwMTI1WjAzMTEwLwYDVQQD
EyhhOTU5MTYxM2Y1M2Q2OTg2NGJiZGE3ODZlODEwNjZlZjFkNGMzMmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uA4KIZcViBZ27Yicem8vywgEdgF
rCVbp1HaFomm/7zTpRU382UDXd2Cu6V2sGh7X0d+K04mctVoj4zpm2gAPDyxdv48
HNrEuIIMbA+UeCoRo7KqQkMuCcutjQnOl0JNWE6i2gRLA7I+SibTED1lNSwRNM1F
rJ0tNUkKOsgx4QtWh1CBo2y9Ur3x7FxV5VHH79derV0fGXrMOyQ9EZWxj2VvtQLN
SU5+j8cH0qgxhk+yb5sOEUClKgtMmRzcmhiNJarLjtyC+t5GY1D1GfNG0b+Dxqdq
OdP21edDygN9SXB/mppeTkDa6AKHJfdWCRtbaTsL1GOnk78mKj3Rc8m6+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlZFhP1PWmGS72nhugQZu8dTDLMMB8GA1UdIwQY
MBaAFHWSPsVG3zcdCeaMawYCXqMSYSNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFpJLXhVYmZOeDBKNW94ckJnSmVveEpoSTBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yNmM2OGMtMDQ4Mi00YjYyLWIyYWYt
NDg1NTM2NmVkZmVmLzEvZFpJLXhVYmZOeDBKNW94ckJnSmVveEpoSTBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8yNmM2OGMtMDQ4Mi00YjYyLWIyYWYtNDg1NTM2NmVkZmVm
LzEvZFpJLXhVYmZOeDBKNW94ckJnSmVveEpoSTBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFv5HazV
j+PFqmh9F96GbuakBtsdPdRR8vZEkq4Nf5PBzh7jMl6MEx/nidyCxAVwRuYULXrA
qRKZHSkdtHmpbrSJ5I4rKE5jhKOm+szTMhymVarEP6in2GtM3PJChd1HPMXCdNWv
YchjhdGWVsZ7nMhlSXeVkA+G09sOZjHPmxGhX2AqNLjH2tqYqeyFOF4W0lNq9keO
F/28yNhlxyrC+fuHqKl+Nr2GWnks0wHyT7P6PdWMgdmkziZS3oyHR4eQztgytC/L
McI866ckVXVo28w6J6fIvEfDrQvgq9TbqmE8/fPPYuuyDJeQ31rvlZeZmrzGQvf5
vnKutUEYQNeFGQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:34:04 2026 by rpki-client