Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
File:                     syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft (raw, json)
Hash identifier:          fKQhm4lpjL7fWQbA5jyNhhflBQOibyIHUhtPgXD/jLo=
Subject key identifier:   5C:FE:B7:E0:4C:7F:27:E2:A8:90:4E:A7:C4:FB:5D:41:D3:B1:3B:A2
Authority key identifier: B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7
Certificate issuer:       /CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7
Certificate serial:       019CAD2290623D6BBEE9D8CCEA0924923A54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
Manifest number:          0550
Signing time:             Mon 02 Mar 2026 06:00:49 +0000
Manifest this update:     Mon 02 Mar 2026 06:00:49 +0000
Manifest next update:     Tue 03 Mar 2026 06:00:49 +0000
Files and hashes:         1: syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl (hash: h8bttdhpZYLRLNYzjQwtumsh5uBUcp0Qpne8pj4BLi0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 06:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:90:62:3d:6b:be:e9:d8:cc:ea:09:24:92:3a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7
        Validity
            Not Before: Mar  2 06:00:49 2026 GMT
            Not After : Mar  3 06:00:49 2026 GMT
        Subject: CN=5cfeb7e04c7f27e2a8904ea7c4fb5d41d3b13ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:40:0d:99:3b:ee:9d:d1:b3:83:7c:1c:f9:10:
                    42:29:ca:5f:76:45:f5:91:78:44:36:18:19:53:9d:
                    18:6b:ec:b0:15:3f:9b:73:5d:2d:86:08:f1:ac:1c:
                    1b:15:38:57:c4:6e:93:6c:e8:0e:ce:98:f6:25:15:
                    c1:f4:31:dc:9e:f2:f5:af:96:2c:d7:33:9d:a7:a9:
                    01:81:69:92:a5:d4:02:16:96:5c:91:b1:1c:24:a8:
                    dd:fb:95:22:bc:b4:51:ca:b8:a9:c8:18:6e:a2:60:
                    4b:4c:3e:62:7a:90:01:1c:2f:33:c4:df:48:7b:a8:
                    0c:45:2c:85:dc:9a:83:ac:d5:10:ca:50:3d:69:68:
                    b3:c5:53:9f:3b:70:42:eb:40:0f:63:b5:e1:c9:68:
                    70:d7:1c:09:1b:29:9e:f7:86:44:cc:50:b3:68:cd:
                    76:bd:a1:04:21:0e:e0:2c:54:a1:de:3f:a3:32:ce:
                    95:fc:56:43:18:5e:36:c2:8a:e2:8a:70:b6:7a:a3:
                    17:00:ab:29:3e:2d:94:30:09:bf:74:53:e9:df:4e:
                    07:de:98:18:61:35:bb:f0:ca:11:5a:65:bc:c2:06:
                    06:75:a7:a0:1f:f2:de:72:65:00:67:59:06:ad:07:
                    46:e2:d0:d5:f7:9e:70:d9:c0:b3:b5:97:de:fe:87:
                    f0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FE:B7:E0:4C:7F:27:E2:A8:90:4E:A7:C4:FB:5D:41:D3:B1:3B:A2
            X509v3 Authority Key Identifier:
                keyid:B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:c1:53:18:38:1a:f6:d1:7c:ef:0b:cf:13:67:1a:5a:e1:51:
         b1:32:f3:8c:bd:06:8a:14:5b:44:1a:66:5b:41:e1:ea:42:24:
         96:84:4c:4a:33:bb:dc:f3:f1:5b:f0:c5:a7:b2:17:01:35:0e:
         f5:b9:28:ba:61:7f:3c:ed:36:40:d8:7a:1d:fc:d7:c6:cd:41:
         4d:c3:8d:b4:26:2d:27:c5:54:d9:30:18:02:73:e0:4c:91:52:
         fd:f7:fb:48:6d:4c:c2:77:94:f8:fd:a5:c9:ea:25:e9:27:59:
         54:95:db:02:2c:b6:99:cd:e2:57:d2:20:65:ef:2d:d9:cf:93:
         ed:9f:65:dc:6f:58:ba:ac:5a:a1:d9:7e:5c:71:04:f2:b2:b8:
         6d:52:0b:ec:85:32:9e:52:d3:56:03:63:d9:c0:7f:7a:7c:f3:
         fa:1a:31:e3:94:af:ee:1e:b4:d6:66:82:7f:e5:fd:2d:6c:43:
         c8:fd:1c:0d:05:70:2b:9e:d0:aa:9f:ff:b7:1c:2e:16:c0:af:
         1c:23:c3:ed:75:bd:b7:0c:45:6e:dd:ad:10:13:06:9a:5d:f3:
         55:70:04:78:32:2c:ff:2b:0c:59:c0:21:74:f5:eb:78:60:4e:
         34:a5:25:a8:62:58:ad:7e:ca:9c:5d:61:5d:0d:0d:6f:68:13:
         76:e0:05:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIpBiPWu+6djM6gkkkjpUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMjI5NGEzOTAxYmVjZmYyYWZlODBlYjkzM2UyYjkxZmRk
N2U4ZjcwHhcNMjYwMzAyMDYwMDQ5WhcNMjYwMzAzMDYwMDQ5WjAzMTEwLwYDVQQD
Eyg1Y2ZlYjdlMDRjN2YyN2UyYTg5MDRlYTdjNGZiNWQ0MWQzYjEzYmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUANmTvundGzg3wc+RBCKcpfdkX1
kXhENhgZU50Ya+ywFT+bc10thgjxrBwbFThXxG6TbOgOzpj2JRXB9DHcnvL1r5Ys
1zOdp6kBgWmSpdQCFpZckbEcJKjd+5UivLRRyripyBhuomBLTD5iepABHC8zxN9I
e6gMRSyF3JqDrNUQylA9aWizxVOfO3BC60APY7XhyWhw1xwJGyme94ZEzFCzaM12
vaEEIQ7gLFSh3j+jMs6V/FZDGF42woriinC2eqMXAKspPi2UMAm/dFPp304H3pgY
YTW78MoRWmW8wgYGdaegH/LecmUAZ1kGrQdG4tDV955w2cCztZfe/ofw6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFz+t+BMfyfiqJBOp8T7XUHTsTuiMB8GA1UdIwQY
MBaAFLMilKOQG+z/Kv6A65M+K5H91+j3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3lLVW81QWI3UDhxX29Ecmt6NHJrZjNYNlBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mY2U4OGEtMGZhOC00MmEzLWIwNmEt
MDE5NDhkNGFjNzA1LzEvc3lLVW81QWI3UDhxX29Ecmt6NHJrZjNYNlBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9mY2U4OGEtMGZhOC00MmEzLWIwNmEtMDE5NDhkNGFjNzA1
LzEvc3lLVW81QWI3UDhxX29Ecmt6NHJrZjNYNlBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcFTGDga
9tF87wvPE2caWuFRsTLzjL0GihRbRBpmW0Hh6kIkloRMSjO73PPxW/DFp7IXATUO
9bkoumF/PO02QNh6HfzXxs1BTcONtCYtJ8VU2TAYAnPgTJFS/ff7SG1MwneU+P2l
yeol6SdZVJXbAiy2mc3iV9IgZe8t2c+T7Z9l3G9Yuqxaodl+XHEE8rK4bVIL7IUy
nlLTVgNj2cB/enzz+hox45Sv7h601maCf+X9LWxDyP0cDQVwK57Qqp//txwuFsCv
HCPD7XW9twxFbt2tEBMGml3zVXAEeDIs/ysMWcAhdPXreGBONKUlqGJYrX7KnF1h
XQ0Nb2gTduAFmg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:48:39 2026 by rpki-client