Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft
File:                     adSSvj_PjMWoWckEjFD9QL_bd4c.mft (raw, json)
Hash identifier:          1griHxkWHoXJvV02bNddPIjUhd6MLAxyr8FZwtWYjPw=
Subject key identifier:   D7:EC:88:AD:0E:04:C9:16:A0:30:18:A0:CC:62:AD:94:15:E3:18:DB
Authority key identifier: 69:D4:92:BE:3F:CF:8C:C5:A8:59:C9:04:8C:50:FD:40:BF:DB:77:87
Certificate issuer:       /CN=69d492be3fcf8cc5a859c9048c50fd40bfdb7787
Certificate serial:       019CAAC6837A7A07D37DE0D82308F932467A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft
Manifest number:          0537
Signing time:             Sun 01 Mar 2026 19:01:02 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:02 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:02 +0000
Files and hashes:         1: adSSvj_PjMWoWckEjFD9QL_bd4c.crl (hash: vMisGisn2SCd0XF48BOE8W1FlR2v/2FrB4K2C5FhEFk=)
                          2: n-ZAT-Ul9tbkaV0CLaWA-XT411U.roa (hash: TtS8MXUMjryS2KglqrPI9cFZLS1rb1BrcZ1YrWA74zE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:83:7a:7a:07:d3:7d:e0:d8:23:08:f9:32:46:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d492be3fcf8cc5a859c9048c50fd40bfdb7787
        Validity
            Not Before: Mar  1 19:01:02 2026 GMT
            Not After : Mar  2 19:01:02 2026 GMT
        Subject: CN=d7ec88ad0e04c916a03018a0cc62ad9415e318db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:43:f8:ca:17:38:59:a3:07:11:89:40:0a:67:
                    42:50:de:0a:b3:42:46:e8:23:7f:55:ec:e0:02:f1:
                    5a:66:3b:8e:fb:77:7a:6b:2f:49:e5:68:53:24:06:
                    31:c7:b8:7b:dc:bc:5a:33:ae:93:d6:e5:4c:00:76:
                    8d:60:2d:36:32:d1:10:43:ad:a7:f8:a3:69:87:45:
                    f6:a0:e0:b5:f7:f8:2d:75:52:e9:0a:c8:24:6e:d4:
                    90:33:56:44:ac:6e:c6:93:f9:12:b6:4f:6f:77:35:
                    14:59:ae:03:d2:8c:4d:ce:1d:93:47:a1:15:7a:2c:
                    36:70:f3:fc:bf:36:96:9d:04:0e:c9:9c:97:ef:4f:
                    b6:04:d3:45:2e:d7:f4:0d:cb:78:fd:75:f3:3b:c0:
                    d4:19:d6:9a:17:2b:c5:98:12:ac:44:c3:b8:73:14:
                    61:02:a3:77:1f:8c:71:57:86:d6:c6:b9:71:65:3f:
                    76:4c:34:df:b7:e4:46:09:36:b0:9a:fc:6d:e6:f0:
                    ed:2c:05:03:86:07:c8:5e:bd:2c:0c:f5:08:22:05:
                    44:df:bc:65:4c:d3:68:08:e3:50:ce:6c:45:60:85:
                    a4:69:63:f6:6e:2f:60:c5:ac:57:d5:21:d8:a6:25:
                    ce:4e:92:25:c6:87:3f:30:93:b7:ce:5c:46:72:48:
                    14:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EC:88:AD:0E:04:C9:16:A0:30:18:A0:CC:62:AD:94:15:E3:18:DB
            X509v3 Authority Key Identifier:
                keyid:69:D4:92:BE:3F:CF:8C:C5:A8:59:C9:04:8C:50:FD:40:BF:DB:77:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:1d:33:fc:4d:cd:79:cf:d0:d3:05:53:bd:30:57:bf:d6:13:
         84:f3:d7:39:a9:a3:a3:1c:cc:bb:5d:3a:27:c1:80:e2:b6:b4:
         80:3d:db:07:67:13:05:eb:af:bd:35:93:a3:ac:e5:46:22:0e:
         a0:82:7e:13:1e:4b:7a:88:d1:38:f0:d6:20:79:63:39:8a:43:
         9c:92:58:f4:18:c6:31:75:72:1e:2f:38:94:94:dc:1d:d5:34:
         6a:dc:3f:61:98:29:1b:a5:11:c8:e2:f1:34:e4:ae:b1:04:59:
         b9:af:05:86:71:ac:72:9e:a8:95:5b:77:13:61:64:08:38:01:
         59:f0:9e:12:4e:1f:ed:97:c8:1a:9f:6f:cc:2f:12:82:9b:d3:
         69:fc:04:cd:87:f6:d4:b7:a3:cf:d9:9d:93:63:90:a0:51:47:
         22:fb:49:bf:ae:58:54:1b:06:01:20:bf:42:fd:19:85:2b:9a:
         23:9c:7b:dd:fd:f5:1f:31:b3:70:9a:6c:1f:e9:3e:96:b9:92:
         c5:0a:38:8e:05:18:b7:41:c1:c5:d6:0d:7b:64:ed:6c:93:da:
         ff:bf:3b:cc:80:98:ea:6f:e2:a7:77:3f:05:78:fe:4e:bc:1b:
         28:4b:ad:4e:35:a1:f4:e1:ca:55:a0:c4:05:38:e6:cf:7e:cb:
         e5:0c:51:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxoN6egfTfeDYIwj5MkZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZDQ5MmJlM2ZjZjhjYzVhODU5YzkwNDhjNTBmZDQwYmZk
Yjc3ODcwHhcNMjYwMzAxMTkwMTAyWhcNMjYwMzAyMTkwMTAyWjAzMTEwLwYDVQQD
EyhkN2VjODhhZDBlMDRjOTE2YTAzMDE4YTBjYzYyYWQ5NDE1ZTMxOGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEP4yhc4WaMHEYlACmdCUN4Ks0JG
6CN/VezgAvFaZjuO+3d6ay9J5WhTJAYxx7h73LxaM66T1uVMAHaNYC02MtEQQ62n
+KNph0X2oOC19/gtdVLpCsgkbtSQM1ZErG7Gk/kStk9vdzUUWa4D0oxNzh2TR6EV
eiw2cPP8vzaWnQQOyZyX70+2BNNFLtf0Dct4/XXzO8DUGdaaFyvFmBKsRMO4cxRh
AqN3H4xxV4bWxrlxZT92TDTft+RGCTawmvxt5vDtLAUDhgfIXr0sDPUIIgVE37xl
TNNoCONQzmxFYIWkaWP2bi9gxaxX1SHYpiXOTpIlxoc/MJO3zlxGckgUkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfsiK0OBMkWoDAYoMxirZQV4xjbMB8GA1UdIwQY
MBaAFGnUkr4/z4zFqFnJBIxQ/UC/23eHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWRTU3ZqX1BqTVdvV2NrRWpGRDlRTF9iZDRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iNThkNTEtMWFjZS00OTBlLThjMmUt
NTkyMDhiYWJlYjEzLzEvYWRTU3ZqX1BqTVdvV2NrRWpGRDlRTF9iZDRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9iNThkNTEtMWFjZS00OTBlLThjMmUtNTkyMDhiYWJlYjEz
LzEvYWRTU3ZqX1BqTVdvV2NrRWpGRDlRTF9iZDRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACR0z/E3N
ec/Q0wVTvTBXv9YThPPXOamjoxzMu106J8GA4ra0gD3bB2cTBeuvvTWTo6zlRiIO
oIJ+Ex5LeojROPDWIHljOYpDnJJY9BjGMXVyHi84lJTcHdU0atw/YZgpG6URyOLx
NOSusQRZua8FhnGscp6olVt3E2FkCDgBWfCeEk4f7ZfIGp9vzC8SgpvTafwEzYf2
1Lejz9mdk2OQoFFHIvtJv65YVBsGASC/Qv0ZhSuaI5x73f31HzGzcJpsH+k+lrmS
xQo4jgUYt0HBxdYNe2TtbJPa/787zICY6m/ip3c/BXj+TrwbKEutTjWh9OHKVaDE
BTjmz37L5QxROw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:28:34 2026 by rpki-client