Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
File:                     0_ULT8CViQuDHAPZliXA7lQZ01o.mft (raw, json)
Hash identifier:          QCqDkHvZaWc9tteOo/Ry3BUoPYByFc73vUSgV1bSzho=
Subject key identifier:   D7:3A:9A:03:A1:F2:5B:AD:5D:2C:49:F5:21:7E:51:B3:13:60:81:EF
Authority key identifier: D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A
Certificate issuer:       /CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
Certificate serial:       019CAA593369AC4829FA8F648820AAAA60FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
Manifest number:          16F7
Signing time:             Sun 01 Mar 2026 17:01:38 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:38 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:38 +0000
Files and hashes:         1: 0_ULT8CViQuDHAPZliXA7lQZ01o.crl (hash: DfTcBaIUp7YbqX8a7NlgsYYWgZxaH2Q4528S1hdLOYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:59:33:69:ac:48:29:fa:8f:64:88:20:aa:aa:60:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
        Validity
            Not Before: Mar  1 17:01:38 2026 GMT
            Not After : Mar  2 17:01:38 2026 GMT
        Subject: CN=d73a9a03a1f25bad5d2c49f5217e51b3136081ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0b:fe:c7:9c:e6:e4:2a:52:a7:47:55:56:d6:
                    93:0a:99:ae:dc:94:7b:90:fb:2f:1f:cb:25:ff:e9:
                    1f:5d:5c:7e:6d:f5:48:3e:f2:da:31:6e:05:65:6f:
                    3c:e7:d3:6e:bf:25:b2:4c:21:2f:19:30:e8:ba:6f:
                    5c:00:85:78:40:ed:84:c0:40:7b:25:0a:d5:9d:18:
                    e7:2e:f2:86:00:3d:59:ae:0a:3f:df:e9:1f:c3:b7:
                    49:90:46:ba:f4:bd:58:7d:fa:3f:a4:73:1b:a1:78:
                    83:8a:77:9b:03:82:e1:d7:44:aa:2a:a7:df:35:19:
                    8f:fb:d3:8c:b3:84:53:8b:f4:aa:b6:61:1f:c9:6c:
                    5f:74:b7:f5:10:a4:24:2c:47:f5:c6:49:4e:55:74:
                    5b:23:09:2b:ab:83:50:1d:ab:41:8d:51:d9:63:99:
                    bd:96:9f:9b:df:99:bc:c7:ff:6b:d0:0c:6d:69:17:
                    33:a8:52:bf:78:3a:41:82:f6:43:4d:8e:e6:7d:47:
                    76:af:ac:ea:3f:76:ff:b5:75:9e:14:98:7d:d8:cb:
                    16:d5:c5:0c:72:0e:71:26:03:fe:01:30:37:7b:a6:
                    7d:78:75:39:09:d7:bb:15:06:ee:2a:62:2b:2d:88:
                    1a:48:62:ed:14:66:63:4e:cc:10:5f:d4:ab:8f:a0:
                    d4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3A:9A:03:A1:F2:5B:AD:5D:2C:49:F5:21:7E:51:B3:13:60:81:EF
            X509v3 Authority Key Identifier:
                keyid:D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:97:df:35:37:60:7b:be:76:23:a4:23:b1:78:d5:bb:a4:da:
         22:9c:62:3e:fe:77:0c:74:5c:d3:f8:66:78:2a:13:45:fc:96:
         f6:40:3b:52:f4:62:4f:32:84:c3:e8:d1:4d:b7:8a:97:41:ec:
         c8:76:72:c4:87:37:ca:5d:27:34:c8:3d:73:ae:fc:3d:f9:ca:
         b4:84:75:ba:22:e8:a8:83:60:fe:2b:b0:fe:83:dd:cd:aa:00:
         cc:68:5a:7e:90:e2:47:aa:91:15:d4:fd:6c:11:19:f5:91:1d:
         9e:b8:1f:0c:80:98:78:84:9b:7e:db:2a:e4:d4:79:8e:48:a4:
         c9:91:ff:c0:08:09:ba:a7:a8:18:59:58:f7:b7:a7:2f:d2:f6:
         17:2e:89:f6:7a:e7:3e:c9:b4:0f:77:b1:72:52:6b:88:80:98:
         0b:b0:cb:bc:66:98:07:ab:f5:ab:3e:86:a1:44:86:48:b2:d1:
         b9:fb:7e:f3:fb:09:0e:b1:77:57:74:2c:86:07:6e:1f:22:ef:
         94:84:f0:9b:fd:91:9f:5e:76:c8:69:fa:bb:ca:0b:01:c2:03:
         e6:e8:f2:60:cf:d2:ae:36:a5:48:ec:4a:49:0b:11:79:83:77:
         42:e7:71:10:51:d8:c9:a7:0c:95:db:7e:6c:9b:d3:5d:5f:12:
         37:40:6c:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWTNprEgp+o9kiCCqqmD7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZjUwYjRmYzA5NTg5MGI4MzFjMDNkOTk2MjVjMGVlNTQx
OWQzNWEwHhcNMjYwMzAxMTcwMTM4WhcNMjYwMzAyMTcwMTM4WjAzMTEwLwYDVQQD
EyhkNzNhOWEwM2ExZjI1YmFkNWQyYzQ5ZjUyMTdlNTFiMzEzNjA4MWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQv+x5zm5CpSp0dVVtaTCpmu3JR7
kPsvH8sl/+kfXVx+bfVIPvLaMW4FZW8859NuvyWyTCEvGTDoum9cAIV4QO2EwEB7
JQrVnRjnLvKGAD1Zrgo/3+kfw7dJkEa69L1Yffo/pHMboXiDinebA4Lh10SqKqff
NRmP+9OMs4RTi/SqtmEfyWxfdLf1EKQkLEf1xklOVXRbIwkrq4NQHatBjVHZY5m9
lp+b35m8x/9r0AxtaRczqFK/eDpBgvZDTY7mfUd2r6zqP3b/tXWeFJh92MsW1cUM
cg5xJgP+ATA3e6Z9eHU5Cde7FQbuKmIrLYgaSGLtFGZjTswQX9Srj6DUoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNc6mgOh8lutXSxJ9SF+UbMTYIHvMB8GA1UdIwQY
MBaAFNP1C0/AlYkLgxwD2ZYlwO5UGdNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMF9VTFQ4Q1ZpUXVESEFQWmxpWEE3bFFaMDFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zYjMwMzctNjJiZC00YjRkLWFmNGQt
NzdlMzIxN2NkMzlmLzEvMF9VTFQ4Q1ZpUXVESEFQWmxpWEE3bFFaMDFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8zYjMwMzctNjJiZC00YjRkLWFmNGQtNzdlMzIxN2NkMzlm
LzEvMF9VTFQ4Q1ZpUXVESEFQWmxpWEE3bFFaMDFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZffNTdg
e752I6QjsXjVu6TaIpxiPv53DHRc0/hmeCoTRfyW9kA7UvRiTzKEw+jRTbeKl0Hs
yHZyxIc3yl0nNMg9c678PfnKtIR1uiLoqINg/iuw/oPdzaoAzGhafpDiR6qRFdT9
bBEZ9ZEdnrgfDICYeISbftsq5NR5jkikyZH/wAgJuqeoGFlY97enL9L2Fy6J9nrn
Psm0D3exclJriICYC7DLvGaYB6v1qz6GoUSGSLLRuft+8/sJDrF3V3QshgduHyLv
lITwm/2Rn152yGn6u8oLAcID5ujyYM/SrjalSOxKSQsReYN3QudxEFHYyacMldt+
bJvTXV8SN0BsgA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:04 2026 by rpki-client