Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
File:                     9yjCKwJQJ1-m63NLoA55D343pVA.mft (raw, json)
Hash identifier:          mBRk8AeBxS1w1AXj6cM4zQ/zIMoWavA3nm6iefjk1Lk=
Subject key identifier:   0A:B0:5E:88:A3:84:9A:F9:BB:8A:EA:AE:D2:F4:17:21:29:AA:0F:67
Authority key identifier: F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
Certificate issuer:       /CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Certificate serial:       019CAD59D35E1B3AD6921F79CCA46BDD3D90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
Manifest number:          0B74
Signing time:             Mon 02 Mar 2026 07:01:11 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:11 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:11 +0000
Files and hashes:         1: 9yjCKwJQJ1-m63NLoA55D343pVA.crl (hash: 4mg8IGA1irxWSyfeNlGSMeT2mplvbn9RvdZ2O2PxLeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:d3:5e:1b:3a:d6:92:1f:79:cc:a4:6b:dd:3d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f728c22b0250275fa6eb734ba00e790f7e37a550
        Validity
            Not Before: Mar  2 07:01:11 2026 GMT
            Not After : Mar  3 07:01:11 2026 GMT
        Subject: CN=0ab05e88a3849af9bb8aeaaed2f4172129aa0f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c7:a8:fd:54:2d:e2:4d:75:34:ae:6c:ff:81:
                    19:f7:50:d5:69:ee:a0:8f:5d:1f:7c:48:01:d6:72:
                    04:c0:aa:f8:d1:29:dc:87:6d:5b:14:af:36:4e:92:
                    0b:f4:4b:d6:ce:72:11:1b:00:e7:44:00:f7:c6:ad:
                    a1:11:f4:e6:08:66:6c:b3:f0:96:7f:37:18:e9:23:
                    19:44:d0:58:2f:f3:f2:37:c7:64:17:de:65:33:0b:
                    b0:a4:90:f4:79:d7:db:98:a2:09:5e:9b:8c:9e:b2:
                    f1:1c:c2:b2:21:4d:e0:8f:ec:fd:22:74:93:85:94:
                    63:fe:97:0e:c6:1e:b4:1d:a6:08:22:c5:33:8a:7c:
                    f8:4d:e1:ac:43:c6:2d:2c:b2:ec:68:7b:ff:30:ed:
                    7f:5b:c2:e3:0f:f6:34:98:64:e4:b4:63:ae:5d:bd:
                    a3:ed:32:e1:a3:a2:5e:7a:6f:26:2d:0e:2c:3c:20:
                    fc:17:f8:f1:3c:eb:de:3b:fd:8b:32:24:08:48:e3:
                    01:4b:6a:7e:3a:2d:1d:58:9f:ad:ed:f9:17:4f:62:
                    d9:e0:fe:ce:3a:ec:59:3b:8b:15:6b:f3:a9:b4:7c:
                    a1:1d:db:56:1a:88:32:9c:a0:5f:3e:de:32:78:81:
                    4e:3d:4a:09:d7:16:83:a6:41:2d:0d:92:f7:eb:04:
                    65:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B0:5E:88:A3:84:9A:F9:BB:8A:EA:AE:D2:F4:17:21:29:AA:0F:67
            X509v3 Authority Key Identifier:
                keyid:F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:18:09:a0:11:a1:37:4e:45:4a:05:04:fa:71:02:10:ae:25:
         87:9e:37:89:f6:1a:b6:8c:79:0c:67:be:f2:19:3d:79:a7:09:
         e5:5d:77:0a:38:b3:b7:c5:ce:c4:70:92:58:2a:28:92:59:b2:
         4e:9d:ce:d5:dc:0d:43:4f:9d:42:9c:6b:69:f6:59:96:c7:97:
         fa:3a:d9:36:ce:f0:62:9b:7a:13:1d:2f:67:6c:eb:98:fa:ae:
         41:1b:1e:d0:df:b6:2d:f5:3f:04:bf:5d:3a:5b:c3:38:79:82:
         80:c2:da:93:4c:89:19:90:41:e9:20:90:83:4a:fc:c0:e8:f0:
         3e:d1:85:45:e7:cc:4b:7b:50:39:57:c8:10:9d:d2:d5:42:bc:
         5f:ee:47:18:01:b3:b2:48:67:c8:29:48:79:55:3b:d6:6f:92:
         58:8f:61:70:55:6f:97:46:d2:07:6f:64:20:78:8e:5b:25:13:
         2f:9c:f0:99:cf:93:c1:bb:7c:74:65:04:e6:04:7f:cf:a2:c4:
         66:b8:b9:30:96:48:79:b7:37:a1:9e:ad:90:9b:17:c8:58:5b:
         a0:77:f3:29:4b:ba:ab:40:8c:27:d7:c7:a3:45:ae:de:9d:bf:
         54:27:75:2c:bb:d1:07:09:48:1d:8a:ad:2a:9e:27:63:9d:99:
         79:7a:ed:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWdNeGzrWkh95zKRr3T2QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MjhjMjJiMDI1MDI3NWZhNmViNzM0YmEwMGU3OTBmN2Uz
N2E1NTAwHhcNMjYwMzAyMDcwMTExWhcNMjYwMzAzMDcwMTExWjAzMTEwLwYDVQQD
EygwYWIwNWU4OGEzODQ5YWY5YmI4YWVhYWVkMmY0MTcyMTI5YWEwZjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8eo/VQt4k11NK5s/4EZ91DVae6g
j10ffEgB1nIEwKr40Snch21bFK82TpIL9EvWznIRGwDnRAD3xq2hEfTmCGZss/CW
fzcY6SMZRNBYL/PyN8dkF95lMwuwpJD0edfbmKIJXpuMnrLxHMKyIU3gj+z9InST
hZRj/pcOxh60HaYIIsUzinz4TeGsQ8YtLLLsaHv/MO1/W8LjD/Y0mGTktGOuXb2j
7TLho6Jeem8mLQ4sPCD8F/jxPOveO/2LMiQISOMBS2p+Oi0dWJ+t7fkXT2LZ4P7O
OuxZO4sVa/OptHyhHdtWGogynKBfPt4yeIFOPUoJ1xaDpkEtDZL36wRlDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqwXoijhJr5u4rqrtL0FyEpqg9nMB8GA1UdIwQY
MBaAFPcowisCUCdfputzS6AOeQ9+N6VQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXlqQ0t3SlFKMS1tNjNOTG9BNTVEMzQzcFZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jOTEyZTYtYjM5ZC00MTY4LThjNWYt
MDZmNjRlYjAwNTY2LzEvOXlqQ0t3SlFKMS1tNjNOTG9BNTVEMzQzcFZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9jOTEyZTYtYjM5ZC00MTY4LThjNWYtMDZmNjRlYjAwNTY2
LzEvOXlqQ0t3SlFKMS1tNjNOTG9BNTVEMzQzcFZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRgJoBGh
N05FSgUE+nECEK4lh543ifYatox5DGe+8hk9eacJ5V13Cjizt8XOxHCSWCooklmy
Tp3O1dwNQ0+dQpxrafZZlseX+jrZNs7wYpt6Ex0vZ2zrmPquQRse0N+2LfU/BL9d
OlvDOHmCgMLak0yJGZBB6SCQg0r8wOjwPtGFRefMS3tQOVfIEJ3S1UK8X+5HGAGz
skhnyClIeVU71m+SWI9hcFVvl0bSB29kIHiOWyUTL5zwmc+Twbt8dGUE5gR/z6LE
Zri5MJZIebc3oZ6tkJsXyFhboHfzKUu6q0CMJ9fHo0Wu3p2/VCd1LLvRBwlIHYqt
Kp4nY52ZeXrtdQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:31 2026 by rpki-client