Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
File:                     SRrcI2V17CPX67-9wgQ5kYAmvvw.mft (raw, json)
Hash identifier:          Yk0xSc6XIg5bIXheqjsJRca1vQhqQUkui1JkCFvvLrQ=
Subject key identifier:   1D:E0:EB:C9:24:20:CB:50:DD:0C:21:9C:AA:58:DC:94:BF:4D:74:F7
Authority key identifier: 49:1A:DC:23:65:75:EC:23:D7:EB:BF:BD:C2:04:39:91:80:26:BE:FC
Certificate issuer:       /CN=491adc236575ec23d7ebbfbdc20439918026befc
Certificate serial:       019D38656619595398419D4C8B37F4EF9631
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
Manifest number:          15B6
Signing time:             Sun 29 Mar 2026 07:01:02 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:02 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:02 +0000
Files and hashes:         1: SRrcI2V17CPX67-9wgQ5kYAmvvw.crl (hash: AE7xKHICDmeI2c8dYPjqH/WM8dO0P1FOCZAoDi3NHQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:66:19:59:53:98:41:9d:4c:8b:37:f4:ef:96:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491adc236575ec23d7ebbfbdc20439918026befc
        Validity
            Not Before: Mar 29 07:01:02 2026 GMT
            Not After : Mar 30 07:01:02 2026 GMT
        Subject: CN=1de0ebc92420cb50dd0c219caa58dc94bf4d74f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:87:89:da:04:47:b9:7e:4f:90:02:87:d2:10:
                    a6:1b:f3:c5:40:4d:05:81:d1:f7:b0:80:0d:de:69:
                    48:9c:f1:9e:5e:77:21:58:41:87:0c:13:e7:d6:f0:
                    b0:21:36:17:84:dc:07:a0:dc:cc:33:03:0f:5a:fa:
                    a4:09:5b:20:d7:b2:17:d0:57:c4:eb:5e:1b:7b:d4:
                    5f:ef:d9:34:e4:8a:82:d3:8c:46:b9:3a:6e:86:3d:
                    0d:4e:a2:53:6e:a9:62:5a:74:e3:62:aa:91:06:d8:
                    c5:9c:eb:c3:fa:bc:c2:c8:1b:8a:92:5d:52:48:42:
                    10:2f:16:22:8e:10:d7:8e:da:17:d8:15:a4:70:f3:
                    f9:fe:1e:80:12:f5:2f:70:0e:e9:f6:51:52:bd:0f:
                    1a:b4:b4:ad:86:42:34:f9:af:88:03:98:44:ea:5a:
                    5e:28:ca:4b:e9:8e:b9:6c:dd:8c:ad:9a:e5:20:f5:
                    c4:2e:37:e5:c6:ce:b5:c4:90:e9:bb:09:27:06:12:
                    47:69:50:5a:57:47:91:7c:2f:ae:44:4b:af:e9:8c:
                    ff:5a:11:d6:91:d4:aa:53:0a:c6:ea:c2:e2:38:50:
                    e8:8d:f5:33:ea:63:d9:60:6e:22:4c:5f:a5:86:a9:
                    e1:db:7f:0c:6b:cc:73:01:06:0b:ef:77:7c:4b:d7:
                    25:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E0:EB:C9:24:20:CB:50:DD:0C:21:9C:AA:58:DC:94:BF:4D:74:F7
            X509v3 Authority Key Identifier:
                keyid:49:1A:DC:23:65:75:EC:23:D7:EB:BF:BD:C2:04:39:91:80:26:BE:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:99:eb:70:b1:99:fa:65:40:2d:d4:ed:4b:58:14:cb:f9:61:
         d8:9f:f8:4a:0c:cc:9d:bf:64:fe:f3:98:8b:b9:e4:a8:a7:58:
         04:bb:f4:fd:cd:89:d6:8c:46:fd:47:cd:bc:f6:72:4c:4b:77:
         97:f6:91:78:6e:78:13:8b:f7:84:ae:27:36:83:62:bd:c5:fc:
         52:53:1e:07:27:3c:68:2f:68:86:b4:74:21:d3:4e:c7:df:b4:
         4c:f4:c5:f7:df:b2:a0:fa:0f:4c:29:32:bb:3d:fb:e1:d3:8c:
         ed:dd:47:91:61:4a:ee:b3:30:b3:77:a5:59:ea:ba:75:e2:41:
         a1:10:fd:8e:19:12:70:d5:b4:6f:73:9e:9a:90:ef:c3:b6:66:
         1a:9c:f1:27:f4:5e:c1:b5:cd:f9:49:97:3b:e8:e5:f5:0f:73:
         41:40:24:c5:fc:82:a3:0a:c1:02:78:0c:81:d6:fe:dd:ed:26:
         f1:eb:f5:13:57:90:28:05:9c:bf:5e:33:99:48:a6:99:36:47:
         b6:94:98:9e:20:2b:fe:59:c7:90:14:23:e1:d0:58:6a:8d:ac:
         9f:ac:fd:8c:09:c4:d7:c3:2b:0a:f8:f3:f6:04:95:88:4f:54:
         36:c5:0b:9f:fa:6a:ed:b1:1c:52:e4:a7:e9:6e:17:c2:29:2a:
         0e:bb:d8:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZWYZWVOYQZ1Mizf075YxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MWFkYzIzNjU3NWVjMjNkN2ViYmZiZGMyMDQzOTkxODAy
NmJlZmMwHhcNMjYwMzI5MDcwMTAyWhcNMjYwMzMwMDcwMTAyWjAzMTEwLwYDVQQD
EygxZGUwZWJjOTI0MjBjYjUwZGQwYzIxOWNhYTU4ZGM5NGJmNGQ3NGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIeJ2gRHuX5PkAKH0hCmG/PFQE0F
gdH3sIAN3mlInPGeXnchWEGHDBPn1vCwITYXhNwHoNzMMwMPWvqkCVsg17IX0FfE
614be9Rf79k05IqC04xGuTpuhj0NTqJTbqliWnTjYqqRBtjFnOvD+rzCyBuKkl1S
SEIQLxYijhDXjtoX2BWkcPP5/h6AEvUvcA7p9lFSvQ8atLSthkI0+a+IA5hE6lpe
KMpL6Y65bN2MrZrlIPXELjflxs61xJDpuwknBhJHaVBaV0eRfC+uREuv6Yz/WhHW
kdSqUwrG6sLiOFDojfUz6mPZYG4iTF+lhqnh238Ma8xzAQYL73d8S9cluwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3g68kkIMtQ3QwhnKpY3JS/TXT3MB8GA1UdIwQY
MBaAFEka3CNldewj1+u/vcIEOZGAJr78MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1JyY0kyVjE3Q1BYNjctOXdnUTVrWUFtdnZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8yZTIxOTQtM2Y5MS00OTM5LWE4MzAt
YWE4MGI0ZTdmMmZkLzEvU1JyY0kyVjE3Q1BYNjctOXdnUTVrWUFtdnZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8yZTIxOTQtM2Y5MS00OTM5LWE4MzAtYWE4MGI0ZTdmMmZk
LzEvU1JyY0kyVjE3Q1BYNjctOXdnUTVrWUFtdnZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvJnrcLGZ
+mVALdTtS1gUy/lh2J/4SgzMnb9k/vOYi7nkqKdYBLv0/c2J1oxG/UfNvPZyTEt3
l/aReG54E4v3hK4nNoNivcX8UlMeByc8aC9ohrR0IdNOx9+0TPTF99+yoPoPTCky
uz374dOM7d1HkWFK7rMws3elWeq6deJBoRD9jhkScNW0b3OempDvw7ZmGpzxJ/Re
wbXN+UmXO+jl9Q9zQUAkxfyCowrBAngMgdb+3e0m8ev1E1eQKAWcv14zmUimmTZH
tpSYniAr/lnHkBQj4dBYao2sn6z9jAnE18MrCvjz9gSViE9UNsULn/pq7bEcUuSn
6W4XwikqDrvY2w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:30 2026 by rpki-client