Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
File:                     kO4Jv_TXomLQaTBzsll1WOSAdRg.mft (raw, json)
Hash identifier:          qZsApr9t1qCIn9b12ixd2PHDpa4v7MByXQOiNdTZLbw=
Subject key identifier:   38:36:9D:1D:83:28:4F:F6:EE:2D:88:65:EB:09:18:83:49:E3:18:FF
Authority key identifier: 90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18
Certificate issuer:       /CN=90ee09bff4d7a262d0693073b2597558e4807518
Certificate serial:       019D37C0A7AE0B655309BF4708827807A11C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
Manifest number:          181C
Signing time:             Sun 29 Mar 2026 04:01:05 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:05 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:05 +0000
Files and hashes:         1: kO4Jv_TXomLQaTBzsll1WOSAdRg.crl (hash: vr8F9U66H6i4kV/H3/TsePb3/eTZ1qx4kSCNl0SRvpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:a7:ae:0b:65:53:09:bf:47:08:82:78:07:a1:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90ee09bff4d7a262d0693073b2597558e4807518
        Validity
            Not Before: Mar 29 04:01:05 2026 GMT
            Not After : Mar 30 04:01:05 2026 GMT
        Subject: CN=38369d1d83284ff6ee2d8865eb09188349e318ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:89:03:60:93:44:97:4e:95:20:f5:c6:ce:99:
                    7b:bc:9b:99:27:30:0b:7b:af:7b:64:47:9b:fa:8c:
                    02:cb:69:85:1a:c5:d7:11:cc:fd:86:18:01:6e:d2:
                    3d:05:61:65:a7:3e:13:b3:3e:6a:cb:e0:51:47:99:
                    c5:13:43:72:77:1a:2e:cb:75:f0:37:cf:20:0d:3e:
                    3a:ec:82:a3:da:c2:51:ce:26:bd:67:6c:48:f6:3d:
                    14:22:b4:fa:b0:4f:ff:9c:bc:a0:47:f3:db:1c:2a:
                    7d:0a:a5:fd:9c:bf:e3:ca:aa:d4:85:23:e9:00:cc:
                    ee:74:34:9b:d1:97:2b:50:a0:21:c1:3b:57:3a:a8:
                    1b:83:50:db:c8:43:3a:b0:41:17:ae:02:4b:7e:06:
                    22:c7:db:05:52:b1:8a:e3:ac:7f:b7:fb:3a:a9:72:
                    ab:41:03:6a:89:d3:37:8b:eb:85:cf:5d:2c:46:25:
                    1a:bb:c9:8e:23:c4:44:10:a7:35:3e:1c:47:c5:cb:
                    90:7b:ab:7b:61:f2:a3:ba:e1:04:ea:8f:92:5b:4c:
                    a5:16:66:8f:47:ea:eb:61:1e:64:63:ff:8c:48:75:
                    69:de:87:cd:09:f6:00:88:0f:ba:11:07:19:51:2f:
                    df:86:40:12:0e:4b:fa:af:85:14:b0:d1:51:b1:41:
                    48:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:36:9D:1D:83:28:4F:F6:EE:2D:88:65:EB:09:18:83:49:E3:18:FF
            X509v3 Authority Key Identifier:
                keyid:90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:86:cf:a7:40:89:65:90:15:a5:d4:83:73:3f:f5:30:dc:f8:
         99:e0:63:68:40:1d:8c:6b:95:e8:d3:44:e8:64:c7:fd:e7:35:
         da:65:87:5e:0e:b5:88:5d:a9:aa:6a:be:b2:fb:6c:ae:84:b0:
         a9:b9:80:c1:1e:df:db:e4:fb:29:21:95:ec:8c:39:bf:ab:62:
         6c:d5:d7:b9:70:5c:d6:f9:ad:8a:1c:06:a6:35:80:3e:4a:78:
         c1:bd:3a:08:b9:53:d9:42:4a:9d:4c:2d:a5:48:2a:7e:7e:1b:
         0f:8c:fc:86:b9:0d:68:5f:00:bc:bc:94:c2:f5:fb:8b:41:a1:
         42:2d:52:11:15:80:8b:62:05:8c:fd:e6:d3:58:13:ce:86:a5:
         a4:e7:11:f1:39:2f:77:4d:55:d1:1f:b7:94:4d:74:b9:b4:77:
         55:58:d5:5a:87:16:83:84:d8:d1:5b:fb:a9:2a:ab:31:37:6e:
         71:79:13:a5:a1:27:82:a2:c6:d1:03:45:b0:e1:54:fc:5f:a8:
         07:c5:1d:74:f5:39:f0:92:c1:8b:2b:42:e0:40:16:a7:d2:2f:
         01:80:c4:a5:ce:a4:bd:0c:71:87:83:62:ff:7b:a8:a3:50:ba:
         d3:c4:f4:f1:74:47:b7:39:c0:e2:fa:2a:86:f6:94:22:58:e6:
         8d:f8:e1:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wKeuC2VTCb9HCIJ4B6EcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZWUwOWJmZjRkN2EyNjJkMDY5MzA3M2IyNTk3NTU4ZTQ4
MDc1MTgwHhcNMjYwMzI5MDQwMTA1WhcNMjYwMzMwMDQwMTA1WjAzMTEwLwYDVQQD
EygzODM2OWQxZDgzMjg0ZmY2ZWUyZDg4NjVlYjA5MTg4MzQ5ZTMxOGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4okDYJNEl06VIPXGzpl7vJuZJzAL
e697ZEeb+owCy2mFGsXXEcz9hhgBbtI9BWFlpz4Tsz5qy+BRR5nFE0Nydxouy3Xw
N88gDT467IKj2sJRzia9Z2xI9j0UIrT6sE//nLygR/PbHCp9CqX9nL/jyqrUhSPp
AMzudDSb0ZcrUKAhwTtXOqgbg1DbyEM6sEEXrgJLfgYix9sFUrGK46x/t/s6qXKr
QQNqidM3i+uFz10sRiUau8mOI8REEKc1PhxHxcuQe6t7YfKjuuEE6o+SW0ylFmaP
R+rrYR5kY/+MSHVp3ofNCfYAiA+6EQcZUS/fhkASDkv6r4UUsNFRsUFIOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDg2nR2DKE/27i2IZesJGINJ4xj/MB8GA1UdIwQY
MBaAFJDuCb/016Ji0Gkwc7JZdVjkgHUYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva080SnZfVFhvbUxRYVRCenNsbDFXT1NBZFJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mM2NiNzItNGU1YS00ZmJiLTgxZGQt
ZjhkYzk1MzUwYjg1LzEva080SnZfVFhvbUxRYVRCenNsbDFXT1NBZFJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mM2NiNzItNGU1YS00ZmJiLTgxZGQtZjhkYzk1MzUwYjg1
LzEva080SnZfVFhvbUxRYVRCenNsbDFXT1NBZFJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaobPp0CJ
ZZAVpdSDcz/1MNz4meBjaEAdjGuV6NNE6GTH/ec12mWHXg61iF2pqmq+svtsroSw
qbmAwR7f2+T7KSGV7Iw5v6tibNXXuXBc1vmtihwGpjWAPkp4wb06CLlT2UJKnUwt
pUgqfn4bD4z8hrkNaF8AvLyUwvX7i0GhQi1SERWAi2IFjP3m01gTzoalpOcR8Tkv
d01V0R+3lE10ubR3VVjVWocWg4TY0Vv7qSqrMTducXkTpaEngqLG0QNFsOFU/F+o
B8UddPU58JLBiytC4EAWp9IvAYDEpc6kvQxxh4Ni/3uoo1C608T08XRHtznA4voq
hvaUIljmjfjhLA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:34 2026 by rpki-client