Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
File:                     15-SXhc4vDUrxrXPX_lRs9gTrjk.mft (raw, json)
Hash identifier:          6R67yf1KwQsekSwufFnLI+RhZFlNhUK/+ItC1cDIAiQ=
Subject key identifier:   A0:DE:C2:F8:B1:8F:9D:87:98:6C:A1:76:C2:41:9D:20:57:E3:7F:D9
Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
Certificate issuer:       /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Certificate serial:       019E30E07E8ABD06108ABAED8553CE188B95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
Manifest number:          0992
Signing time:             Sat 16 May 2026 13:01:19 +0000
Manifest this update:     Sat 16 May 2026 13:01:19 +0000
Manifest next update:     Sun 17 May 2026 13:01:19 +0000
Files and hashes:         1: 15-SXhc4vDUrxrXPX_lRs9gTrjk.crl (hash: kn6K4d+KxamY5Gj+IBT91PGT6X6KwGf67weSH2IG7og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:7e:8a:bd:06:10:8a:ba:ed:85:53:ce:18:8b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
        Validity
            Not Before: May 16 13:01:19 2026 GMT
            Not After : May 17 13:01:19 2026 GMT
        Subject: CN=a0dec2f8b18f9d87986ca176c2419d2057e37fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2b:d6:81:d9:b1:1c:16:df:e7:34:bd:03:e9:
                    34:f1:53:05:58:1d:75:df:34:d1:74:d7:f2:6e:c5:
                    32:6e:18:1e:b8:ed:e7:6b:c5:81:60:c7:12:31:75:
                    6f:75:07:08:de:12:5a:cc:a5:8c:95:eb:d8:65:86:
                    c7:7c:6d:43:eb:3c:94:19:61:13:2b:05:f7:12:09:
                    a4:5f:79:ff:60:59:07:5f:66:16:7d:69:e8:0f:f1:
                    23:c4:fa:2d:11:f8:09:1a:9c:86:ea:06:a8:76:87:
                    1b:5b:f8:a4:99:35:a2:ee:b4:c5:e2:26:1f:71:9e:
                    61:3b:57:13:b1:35:33:ca:38:60:c1:75:9f:95:23:
                    24:54:98:14:45:52:9b:2b:7d:a1:94:10:6a:b6:1a:
                    48:95:33:32:bd:1c:db:90:fa:70:0c:4f:ee:0f:fb:
                    9d:aa:66:02:7f:42:35:06:91:b7:d3:25:75:de:48:
                    0b:95:97:cc:f7:17:68:f7:6e:c6:39:bd:fa:27:ac:
                    6f:82:db:ac:d6:2f:ec:f0:17:03:59:7d:57:ad:f5:
                    5c:f7:c8:e9:ff:7d:e0:e9:d5:94:c8:9b:94:5d:fd:
                    2a:b7:af:2c:64:8a:86:01:0f:78:28:3c:12:61:d5:
                    78:2b:62:0d:f2:78:6d:44:91:6f:a8:00:a7:e3:71:
                    a4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DE:C2:F8:B1:8F:9D:87:98:6C:A1:76:C2:41:9D:20:57:E3:7F:D9
            X509v3 Authority Key Identifier:
                keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ef:bd:74:f4:74:1a:53:05:50:b6:04:cb:af:70:55:6e:6f:
         01:6d:f3:ac:a0:08:ed:8e:74:84:c5:40:7e:8e:9a:be:13:58:
         c2:88:17:b8:53:d9:51:b8:c8:84:9a:75:cb:07:18:7b:e9:d0:
         9b:e3:f9:95:72:2d:3f:76:40:f4:4f:3c:89:cf:13:d8:c3:9e:
         3d:90:eb:e4:a8:43:e2:af:ea:95:af:bd:56:8e:2d:04:7a:19:
         73:b7:89:f7:2f:9d:52:87:ce:35:df:36:e1:95:62:fa:a5:4a:
         fc:40:85:30:d1:75:6e:ed:87:f1:55:95:60:7c:41:19:9a:ae:
         ba:00:86:c4:b6:41:c6:14:5f:7e:f3:0f:68:02:fe:f5:1c:3e:
         19:51:07:36:b4:6d:a2:40:fe:f4:3c:60:30:0a:bc:90:0a:68:
         88:92:fd:42:10:f3:b7:3e:e1:35:8f:57:c2:32:eb:b0:5c:c0:
         96:44:49:46:a8:c6:3f:50:1c:71:76:f2:46:f1:bd:77:64:25:
         59:72:fe:60:1d:9e:e9:2e:ad:5b:a7:72:30:e3:41:73:1e:9c:
         44:4f:dc:02:65:e8:55:4b:e1:dc:9d:7f:54:9a:25:e3:ff:e3:
         11:41:1e:78:7f:39:db:6c:70:74:5e:11:e0:73:e1:04:54:32:
         57:a3:ec:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4H6KvQYQirrthVPOGIuVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OWY5MjVlMTczOGJjMzUyYmM2YjVjZjVmZjk1MWIzZDgx
M2FlMzkwHhcNMjYwNTE2MTMwMTE5WhcNMjYwNTE3MTMwMTE5WjAzMTEwLwYDVQQD
EyhhMGRlYzJmOGIxOGY5ZDg3OTg2Y2ExNzZjMjQxOWQyMDU3ZTM3ZmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCvWgdmxHBbf5zS9A+k08VMFWB11
3zTRdNfybsUybhgeuO3na8WBYMcSMXVvdQcI3hJazKWMlevYZYbHfG1D6zyUGWET
KwX3EgmkX3n/YFkHX2YWfWnoD/EjxPotEfgJGpyG6gaodocbW/ikmTWi7rTF4iYf
cZ5hO1cTsTUzyjhgwXWflSMkVJgURVKbK32hlBBqthpIlTMyvRzbkPpwDE/uD/ud
qmYCf0I1BpG30yV13kgLlZfM9xdo927GOb36J6xvgtus1i/s8BcDWX1XrfVc98jp
/33g6dWUyJuUXf0qt68sZIqGAQ94KDwSYdV4K2IN8nhtRJFvqACn43GkPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDewvixj52HmGyhdsJBnSBX43/ZMB8GA1UdIwQY
MBaAFNefkl4XOLw1K8a1z1/5UbPYE645MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTUtU1hoYzR2RFVyeHJYUFhfbFJzOWdUcmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zYjJjMDAtOTRiNi00MzRkLWIzNjIt
OTZhMzRiMDIyZjg5LzEvMTUtU1hoYzR2RFVyeHJYUFhfbFJzOWdUcmprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8zYjJjMDAtOTRiNi00MzRkLWIzNjItOTZhMzRiMDIyZjg5
LzEvMTUtU1hoYzR2RFVyeHJYUFhfbFJzOWdUcmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAO+9dPR0
GlMFULYEy69wVW5vAW3zrKAI7Y50hMVAfo6avhNYwogXuFPZUbjIhJp1ywcYe+nQ
m+P5lXItP3ZA9E88ic8T2MOePZDr5KhD4q/qla+9Vo4tBHoZc7eJ9y+dUofONd82
4ZVi+qVK/ECFMNF1bu2H8VWVYHxBGZquugCGxLZBxhRffvMPaAL+9Rw+GVEHNrRt
okD+9DxgMAq8kApoiJL9QhDztz7hNY9XwjLrsFzAlkRJRqjGP1AccXbyRvG9d2Ql
WXL+YB2e6S6tW6dyMONBcx6cRE/cAmXoVUvh3J1/VJol4//jEUEeeH8522xwdF4R
4HPhBFQyV6PsbA==
-----END CERTIFICATE-----
Generated at Sat May 16 20:21:20 2026 by rpki-client