Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
File:                     GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft (raw, json)
Hash identifier:          VJOmBqbUsZ8aelUebN4Ccndu3jYC3ZnEgMvVESYgJCU=
Subject key identifier:   F3:78:6C:21:1A:08:35:8B:57:C8:AF:00:AD:37:CF:E3:39:79:1B:FD
Authority key identifier: 19:66:28:61:7C:00:E8:DF:F2:0C:A6:69:93:13:AF:79:FA:D0:AF:C6
Certificate issuer:       /CN=196628617c00e8dff20ca6699313af79fad0afc6
Certificate serial:       019CAD59F56C8D0CB515CFE52F70119ECA83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
Manifest number:          110C
Signing time:             Mon 02 Mar 2026 07:01:19 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:19 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:19 +0000
Files and hashes:         1: GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl (hash: V0hvGTr7KhT9XyelyDiHUpV6PHCVOVzk1gwW1AwPAgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:f5:6c:8d:0c:b5:15:cf:e5:2f:70:11:9e:ca:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196628617c00e8dff20ca6699313af79fad0afc6
        Validity
            Not Before: Mar  2 07:01:19 2026 GMT
            Not After : Mar  3 07:01:19 2026 GMT
        Subject: CN=f3786c211a08358b57c8af00ad37cfe339791bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:78:9e:21:6c:6b:ad:a1:ec:48:34:88:d4:c8:
                    a1:15:3f:9e:b5:75:ba:26:1f:72:15:4f:6c:61:05:
                    33:d9:a4:26:3e:2b:34:e2:a5:29:d0:c5:f3:d7:11:
                    05:33:40:d6:17:09:fd:d3:c8:7d:93:99:b0:8e:9b:
                    9d:b4:4e:5f:ce:09:b3:1b:58:44:1b:23:00:6e:5c:
                    a3:03:4e:eb:c2:4f:bc:07:c9:c5:b4:c9:85:4b:b1:
                    fd:8c:0a:58:0f:f1:ad:4f:13:fe:1c:d3:2a:9b:90:
                    62:5b:84:bf:bb:d2:73:7f:b8:58:74:43:4d:15:fb:
                    81:d2:8e:91:a6:6f:94:a9:34:9d:d7:5c:c6:84:d4:
                    73:ad:8e:59:5a:82:b0:67:6a:2a:0d:77:57:49:61:
                    2e:a7:d0:50:79:48:30:6b:90:e5:d2:8c:1a:8b:e2:
                    81:87:3f:a6:af:06:26:0d:d4:b6:df:7e:67:3c:8a:
                    31:38:e1:dc:e7:41:30:b3:99:8c:cb:74:3f:c7:3d:
                    fd:ab:cd:63:58:f0:5a:f1:8c:1e:69:2f:98:9f:1f:
                    b8:93:2d:4d:0c:88:e5:0a:5a:55:ef:40:e9:2c:8c:
                    97:1f:d7:18:a2:97:85:ec:36:26:10:dd:1e:99:f6:
                    ed:21:3a:1a:6f:86:de:c8:96:ba:b7:bf:31:60:51:
                    8d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:78:6C:21:1A:08:35:8B:57:C8:AF:00:AD:37:CF:E3:39:79:1B:FD
            X509v3 Authority Key Identifier:
                keyid:19:66:28:61:7C:00:E8:DF:F2:0C:A6:69:93:13:AF:79:FA:D0:AF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:72:e7:ec:88:99:15:df:81:2b:6b:51:2b:8c:da:a4:93:75:
         fb:8b:85:32:c1:9f:af:54:c9:98:1c:2a:f4:f5:dd:2f:70:e8:
         5a:e0:37:3f:f0:1d:0c:7a:97:ee:4e:c3:f7:4f:52:47:61:88:
         7c:bf:f3:e7:0c:52:1a:78:a5:d5:8d:ca:f9:6f:c0:e1:44:8f:
         b2:30:90:5a:9a:93:e6:cf:94:52:8f:29:e8:4c:eb:86:99:a1:
         28:5c:26:ee:ae:c8:73:46:45:9f:e1:4d:c9:0e:ba:ac:0f:58:
         12:1d:45:ca:3f:8d:84:37:b8:42:4f:31:67:3b:88:85:2f:35:
         2f:e5:a2:78:2b:b6:a8:da:5c:51:8a:b5:21:2c:61:c5:98:89:
         3d:9f:6a:54:5e:ca:ae:cc:63:8e:d5:ee:76:86:57:97:35:9d:
         78:4e:a2:83:11:6e:bb:d3:23:8c:5c:8a:9f:ab:95:f9:31:38:
         39:55:c0:bf:94:a4:e6:6b:43:f5:5c:73:de:01:e9:c4:51:9b:
         71:5f:1a:70:1c:6c:53:0e:3f:2b:45:b3:d9:6e:d4:df:12:58:
         84:10:ea:a1:11:77:ff:b9:25:8a:a4:2e:64:b5:38:b5:a2:58:
         db:7f:08:a6:0e:ad:1f:e6:dc:b9:b8:54:16:40:cf:56:02:0f:
         1b:59:0d:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWfVsjQy1Fc/lL3ARnsqDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NjYyODYxN2MwMGU4ZGZmMjBjYTY2OTkzMTNhZjc5ZmFk
MGFmYzYwHhcNMjYwMzAyMDcwMTE5WhcNMjYwMzAzMDcwMTE5WjAzMTEwLwYDVQQD
EyhmMzc4NmMyMTFhMDgzNThiNTdjOGFmMDBhZDM3Y2ZlMzM5NzkxYmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXieIWxrraHsSDSI1MihFT+etXW6
Jh9yFU9sYQUz2aQmPis04qUp0MXz1xEFM0DWFwn908h9k5mwjpudtE5fzgmzG1hE
GyMAblyjA07rwk+8B8nFtMmFS7H9jApYD/GtTxP+HNMqm5BiW4S/u9Jzf7hYdENN
FfuB0o6Rpm+UqTSd11zGhNRzrY5ZWoKwZ2oqDXdXSWEup9BQeUgwa5Dl0owai+KB
hz+mrwYmDdS2335nPIoxOOHc50Ews5mMy3Q/xz39q81jWPBa8YweaS+Ynx+4ky1N
DIjlClpV70DpLIyXH9cYopeF7DYmEN0emfbtIToab4beyJa6t78xYFGN/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPN4bCEaCDWLV8ivAK03z+M5eRv9MB8GA1UdIwQY
MBaAFBlmKGF8AOjf8gymaZMTr3n60K/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1dZb1lYd0E2Tl95REtacGt4T3ZlZnJRcjhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iMDlhY2ItNjM2Yy00NTU3LTgwYTgt
NmQ5Mjk2OTVhNWJjLzEvR1dZb1lYd0E2Tl95REtacGt4T3ZlZnJRcjhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9iMDlhY2ItNjM2Yy00NTU3LTgwYTgtNmQ5Mjk2OTVhNWJj
LzEvR1dZb1lYd0E2Tl95REtacGt4T3ZlZnJRcjhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO3Ln7IiZ
Fd+BK2tRK4zapJN1+4uFMsGfr1TJmBwq9PXdL3DoWuA3P/AdDHqX7k7D909SR2GI
fL/z5wxSGnil1Y3K+W/A4USPsjCQWpqT5s+UUo8p6EzrhpmhKFwm7q7Ic0ZFn+FN
yQ66rA9YEh1Fyj+NhDe4Qk8xZzuIhS81L+WieCu2qNpcUYq1ISxhxZiJPZ9qVF7K
rsxjjtXudoZXlzWdeE6igxFuu9MjjFyKn6uV+TE4OVXAv5Sk5mtD9Vxz3gHpxFGb
cV8acBxsUw4/K0Wz2W7U3xJYhBDqoRF3/7kliqQuZLU4taJY238Ipg6tH+bcubhU
FkDPVgIPG1kNCA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:12:15 2026 by rpki-client