Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft
File:                     a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft (raw, json)
Hash identifier:          BM1D1npwmHzS1M/SQBYkDfym+eBhTfAj0uubcwOOxgo=
Subject key identifier:   EE:CC:90:82:92:1C:46:55:CE:4B:F5:2F:CB:B8:AD:2B:97:A7:AA:36
Authority key identifier: 6B:EB:8E:75:0D:31:BC:CE:AA:88:04:B5:F6:53:25:9D:18:50:E8:1C
Certificate issuer:       /CN=6beb8e750d31bcceaa8804b5f653259d1850e81c
Certificate serial:       019CAAC720A97FFD3864C708CC5878571E64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft
Manifest number:          1842
Signing time:             Sun 01 Mar 2026 19:01:42 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:42 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:42 +0000
Files and hashes:         1: a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.crl (hash: xc3LdlOhtWTosnvcZpNJKogwJcv3w+TrunL+o79SQkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c7:20:a9:7f:fd:38:64:c7:08:cc:58:78:57:1e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6beb8e750d31bcceaa8804b5f653259d1850e81c
        Validity
            Not Before: Mar  1 19:01:42 2026 GMT
            Not After : Mar  2 19:01:42 2026 GMT
        Subject: CN=eecc9082921c4655ce4bf52fcbb8ad2b97a7aa36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3d:45:b4:40:11:d4:ad:fc:12:f8:0c:f0:54:
                    41:97:ef:96:d3:5f:9b:6d:5d:6a:9d:22:ae:a3:2c:
                    77:4e:1a:3e:9b:38:14:fd:5e:e4:1d:c3:93:58:7d:
                    86:6f:96:54:bb:5b:f1:11:87:00:3f:11:23:b6:fa:
                    f9:83:de:02:9a:96:e6:a4:39:02:12:fc:c2:24:fd:
                    17:a3:a7:8f:05:ba:0b:ca:06:ad:24:e9:3d:29:5e:
                    a5:63:68:09:c4:c6:51:4a:49:18:27:63:87:2f:93:
                    d1:4f:30:39:a9:58:3c:05:f9:7a:22:30:f0:8d:6f:
                    7c:a5:a2:ad:ec:8f:46:ca:34:e3:7c:08:90:0a:0a:
                    12:9f:92:22:c0:5c:13:d9:d2:8e:6a:0b:d0:9f:3a:
                    e5:21:39:ab:d3:c9:63:9f:44:97:25:60:0f:8f:93:
                    c5:2a:ab:c2:36:63:2a:da:08:49:7a:28:10:61:0d:
                    43:87:e5:67:87:3b:3f:67:75:82:67:0f:c2:4e:9c:
                    26:5c:0c:3d:aa:f0:25:5f:6f:62:26:33:76:53:cf:
                    cf:a1:e5:98:fc:32:6d:ef:95:88:5c:d9:76:5d:c3:
                    f2:59:d8:f0:43:1e:a2:b2:ea:e7:96:78:ba:6a:ba:
                    25:20:e4:8c:97:3d:5f:0f:30:50:a0:3e:15:04:7d:
                    db:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CC:90:82:92:1C:46:55:CE:4B:F5:2F:CB:B8:AD:2B:97:A7:AA:36
            X509v3 Authority Key Identifier:
                keyid:6B:EB:8E:75:0D:31:BC:CE:AA:88:04:B5:F6:53:25:9D:18:50:E8:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:2f:3b:d8:cc:43:95:19:21:d0:69:71:79:30:9e:ae:c2:c0:
         c1:92:d7:66:fb:03:2c:9e:b8:0a:0a:6f:77:e0:3c:83:39:4e:
         cf:dc:81:76:2c:d5:a6:f5:27:e2:9b:ab:38:d2:3a:ef:62:27:
         0a:fd:26:65:d7:c7:75:ba:3d:70:93:58:e0:1b:45:29:17:52:
         da:50:4a:03:d2:6a:ff:21:96:ae:5b:3f:94:be:d3:d8:8c:b0:
         01:e1:03:cd:28:cf:01:90:be:21:7b:ce:a3:2d:87:87:b0:72:
         b1:c6:c2:f3:41:df:36:d2:be:9f:92:c9:23:cd:ee:b1:32:2b:
         97:2e:be:94:03:d8:a7:01:f4:c9:55:a7:fb:d6:04:10:09:33:
         73:72:cd:93:25:3a:16:24:6f:dc:8a:68:95:0a:14:6f:c3:32:
         e5:2f:7b:42:3f:19:ff:54:18:7f:2f:e0:57:78:0a:cd:56:42:
         60:e3:dd:24:51:22:60:b1:2d:8e:9e:e6:4e:b6:fd:77:05:d9:
         2c:47:5d:ec:66:fd:93:27:90:f7:59:b7:fd:3d:c0:c8:db:0b:
         6b:1f:fb:16:95:f6:ed:9d:67:8e:8b:2e:a6:d0:92:ca:e0:57:
         01:3a:ee:6f:1e:f8:43:24:65:4a:ac:ae:3b:6e:0a:26:58:1d:
         3f:77:90:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxyCpf/04ZMcIzFh4Vx5kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZWI4ZTc1MGQzMWJjY2VhYTg4MDRiNWY2NTMyNTlkMTg1
MGU4MWMwHhcNMjYwMzAxMTkwMTQyWhcNMjYwMzAyMTkwMTQyWjAzMTEwLwYDVQQD
EyhlZWNjOTA4MjkyMWM0NjU1Y2U0YmY1MmZjYmI4YWQyYjk3YTdhYTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j1FtEAR1K38EvgM8FRBl++W01+b
bV1qnSKuoyx3Tho+mzgU/V7kHcOTWH2Gb5ZUu1vxEYcAPxEjtvr5g94CmpbmpDkC
EvzCJP0Xo6ePBboLygatJOk9KV6lY2gJxMZRSkkYJ2OHL5PRTzA5qVg8Bfl6IjDw
jW98paKt7I9GyjTjfAiQCgoSn5IiwFwT2dKOagvQnzrlITmr08ljn0SXJWAPj5PF
KqvCNmMq2ghJeigQYQ1Dh+Vnhzs/Z3WCZw/CTpwmXAw9qvAlX29iJjN2U8/PoeWY
/DJt75WIXNl2XcPyWdjwQx6isurnlni6arolIOSMlz1fDzBQoD4VBH3bRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7MkIKSHEZVzkv1L8u4rSuXp6o2MB8GA1UdIwQY
MBaAFGvrjnUNMbzOqogEtfZTJZ0YUOgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYS11T2RRMHh2TTZxaUFTMTlsTWxuUmhRNkJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81NTIyMjktYjY2My00YTExLWFkNGIt
OWZmMGY5NTRkNzVkLzEvYS11T2RRMHh2TTZxaUFTMTlsTWxuUmhRNkJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi81NTIyMjktYjY2My00YTExLWFkNGItOWZmMGY5NTRkNzVk
LzEvYS11T2RRMHh2TTZxaUFTMTlsTWxuUmhRNkJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARy872MxD
lRkh0GlxeTCersLAwZLXZvsDLJ64Cgpvd+A8gzlOz9yBdizVpvUn4purONI672In
Cv0mZdfHdbo9cJNY4BtFKRdS2lBKA9Jq/yGWrls/lL7T2IywAeEDzSjPAZC+IXvO
oy2Hh7ByscbC80HfNtK+n5LJI83usTIrly6+lAPYpwH0yVWn+9YEEAkzc3LNkyU6
FiRv3IpolQoUb8My5S97Qj8Z/1QYfy/gV3gKzVZCYOPdJFEiYLEtjp7mTrb9dwXZ
LEdd7Gb9kyeQ91m3/T3AyNsLax/7FpX27Z1njosuptCSyuBXATrubx74QyRlSqyu
O24KJlgdP3eQ1g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:10 2026 by rpki-client