Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
File:                     1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft (raw, json)
Hash identifier:          Qn8jWyWhJ7hKiZ9jvYyb0WWCV7/KpU8G/b62+K8iBoI=
Subject key identifier:   F7:7C:C8:D9:BE:E7:43:D4:3E:2A:28:90:9D:FE:B0:1B:95:2C:1E:20
Authority key identifier: D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA
Certificate issuer:       /CN=d46c9be46cba3051066233ca4f9628a26df8fcca
Certificate serial:       019D38D3DEB3A906511A2628C789CF6FA335
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
Manifest number:          120B
Signing time:             Sun 29 Mar 2026 09:01:42 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:42 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:42 +0000
Files and hashes:         1: 1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl (hash: ASWrNwSEzbOAuZcyC7yQq+4sA36iDJ9CKc+X0CT+F8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:de:b3:a9:06:51:1a:26:28:c7:89:cf:6f:a3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46c9be46cba3051066233ca4f9628a26df8fcca
        Validity
            Not Before: Mar 29 09:01:42 2026 GMT
            Not After : Mar 30 09:01:42 2026 GMT
        Subject: CN=f77cc8d9bee743d43e2a28909dfeb01b952c1e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:59:63:5b:c2:35:3c:06:a1:bd:bb:cc:7e:06:
                    5a:ec:cd:67:8d:8e:9e:7d:07:2e:35:b2:13:e5:1b:
                    23:c4:a5:3b:30:ee:a9:0e:7c:61:33:98:42:88:cd:
                    91:49:37:67:b5:b5:62:60:95:b7:f6:e5:e1:6c:a2:
                    c4:3d:37:fe:8b:cf:ab:52:d9:f7:95:e8:5b:63:9c:
                    58:47:bd:8a:a0:58:6a:50:03:a1:10:88:cb:7a:e9:
                    86:2c:dc:7c:44:21:f5:88:b1:c7:ef:38:fe:18:b5:
                    54:92:e0:b2:5f:05:5e:2d:d7:6a:8f:88:35:dd:97:
                    0c:47:9e:a4:f8:b3:22:0a:e0:5a:32:00:36:47:5f:
                    25:3d:8c:33:96:7a:de:59:4d:d8:a7:06:ab:a1:f7:
                    e7:5a:66:89:92:c1:c8:5e:86:6b:70:1f:8c:c3:27:
                    2e:ed:53:c5:c6:d9:cf:be:29:bd:0d:35:60:7d:8b:
                    2e:0a:39:e9:24:54:76:84:49:c5:68:eb:04:2b:95:
                    a6:35:e7:66:b4:98:ad:c4:b7:d1:52:65:31:f9:11:
                    33:8e:95:84:37:7d:22:1a:ea:1b:ee:ad:52:e2:d1:
                    3a:d6:9d:14:5d:4c:ab:1c:e9:41:1e:8e:c0:9f:47:
                    56:5e:70:9b:82:c9:0b:15:7e:2d:9a:78:ae:9a:99:
                    c9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7C:C8:D9:BE:E7:43:D4:3E:2A:28:90:9D:FE:B0:1B:95:2C:1E:20
            X509v3 Authority Key Identifier:
                keyid:D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:f9:a1:c9:7a:28:a5:f4:38:cd:ba:6d:32:65:2a:eb:73:63:
         3c:85:10:93:a3:97:00:59:88:c8:be:48:06:28:4f:fa:b8:73:
         b4:4a:11:15:26:dc:49:5b:74:ef:72:52:59:4b:98:d0:7a:5a:
         f2:ae:1a:f4:c7:b8:aa:07:f8:3c:b4:39:2e:a0:97:75:f6:00:
         26:91:44:ca:2f:61:5b:89:77:eb:c8:b7:22:4f:6e:1e:57:26:
         f8:4f:e0:e6:13:b9:54:e0:c3:0e:3e:33:ce:98:de:d3:38:09:
         6c:db:3c:44:84:49:dc:05:a5:21:0f:ed:39:a2:f1:ff:ea:a1:
         ff:73:49:49:69:82:39:f5:bc:49:4e:ed:3a:ce:12:91:38:05:
         d9:a3:88:b3:d9:08:3e:db:92:97:49:b9:98:36:53:d0:46:d4:
         16:76:e1:07:a4:a0:f2:ab:94:7b:58:d0:a1:31:38:be:5d:21:
         97:42:1f:82:74:ac:15:53:78:08:7c:9e:a0:a8:79:da:20:a0:
         60:ef:cb:5c:df:66:1c:bc:49:d8:eb:b9:48:ca:d8:91:ad:2c:
         d2:9f:91:67:e2:e9:49:1e:9b:52:4c:7c:86:f1:f8:be:54:1a:
         10:3f:ac:7c:ed:e8:b0:4b:4b:91:88:31:ab:96:b0:22:a4:a5:
         52:30:73:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04096zqQZRGiYox4nPb6M1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NmM5YmU0NmNiYTMwNTEwNjYyMzNjYTRmOTYyOGEyNmRm
OGZjY2EwHhcNMjYwMzI5MDkwMTQyWhcNMjYwMzMwMDkwMTQyWjAzMTEwLwYDVQQD
EyhmNzdjYzhkOWJlZTc0M2Q0M2UyYTI4OTA5ZGZlYjAxYjk1MmMxZTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lljW8I1PAahvbvMfgZa7M1njY6e
fQcuNbIT5RsjxKU7MO6pDnxhM5hCiM2RSTdntbViYJW39uXhbKLEPTf+i8+rUtn3
lehbY5xYR72KoFhqUAOhEIjLeumGLNx8RCH1iLHH7zj+GLVUkuCyXwVeLddqj4g1
3ZcMR56k+LMiCuBaMgA2R18lPYwzlnreWU3YpwaroffnWmaJksHIXoZrcB+Mwycu
7VPFxtnPvim9DTVgfYsuCjnpJFR2hEnFaOsEK5WmNedmtJitxLfRUmUx+REzjpWE
N30iGuob7q1S4tE61p0UXUyrHOlBHo7An0dWXnCbgskLFX4tmniumpnJGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPd8yNm+50PUPiookJ3+sBuVLB4gMB8GA1UdIwQY
MBaAFNRsm+RsujBRBmIzyk+WKKJt+PzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUd5YjVHeTZNRkVHWWpQS1Q1WW9vbTM0X01vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kYmIyZGMtZGEwNi00NjdiLWIzMTIt
NzNjODY3MWE5MGY2LzEvMUd5YjVHeTZNRkVHWWpQS1Q1WW9vbTM0X01vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9kYmIyZGMtZGEwNi00NjdiLWIzMTItNzNjODY3MWE5MGY2
LzEvMUd5YjVHeTZNRkVHWWpQS1Q1WW9vbTM0X01vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfmhyXoo
pfQ4zbptMmUq63NjPIUQk6OXAFmIyL5IBihP+rhztEoRFSbcSVt073JSWUuY0Hpa
8q4a9Me4qgf4PLQ5LqCXdfYAJpFEyi9hW4l368i3Ik9uHlcm+E/g5hO5VODDDj4z
zpje0zgJbNs8RIRJ3AWlIQ/tOaLx/+qh/3NJSWmCOfW8SU7tOs4SkTgF2aOIs9kI
PtuSl0m5mDZT0EbUFnbhB6Sg8quUe1jQoTE4vl0hl0IfgnSsFVN4CHyeoKh52iCg
YO/LXN9mHLxJ2Ou5SMrYka0s0p+RZ+LpSR6bUkx8hvH4vlQaED+sfO3osEtLkYgx
q5awIqSlUjBzdw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:17 2026 by rpki-client