Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft
File:                     SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft (raw, json)
Hash identifier:          T6/3Msa1Whql2KF2MUqsOv6Xn1aBEOpYY5zq0dNO3GA=
Subject key identifier:   23:47:2B:61:E5:90:6F:9E:D9:C2:DD:01:07:0E:6D:FE:C9:00:36:F0
Authority key identifier: 49:24:0B:59:BB:F6:90:6A:55:5E:10:74:C5:AE:73:EC:62:DF:FC:5F
Certificate issuer:       /CN=49240b59bbf6906a555e1074c5ae73ec62dffc5f
Certificate serial:       019D39AEA296169134BEA48B5DA73EDEF556
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SSQLWbv2kGpVXhB0xa5z7GLf_F8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft
Manifest number:          10ED
Signing time:             Sun 29 Mar 2026 13:00:39 +0000
Manifest this update:     Sun 29 Mar 2026 13:00:39 +0000
Manifest next update:     Mon 30 Mar 2026 13:00:39 +0000
Files and hashes:         1: SSQLWbv2kGpVXhB0xa5z7GLf_F8.crl (hash: CE0HwLtYlPGD4Wo37SiYZb72Zihvmh5dgyAH7IhdBU4=)
                          2: eV6wkJYvTipwS74hcSPc9TEbri4.roa (hash: qvV8QNZesKrTKjT1jMdBk3XycGEjQ9dQSr88ZevrXoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SSQLWbv2kGpVXhB0xa5z7GLf_F8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:ae:a2:96:16:91:34:be:a4:8b:5d:a7:3e:de:f5:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49240b59bbf6906a555e1074c5ae73ec62dffc5f
        Validity
            Not Before: Mar 29 13:00:39 2026 GMT
            Not After : Mar 30 13:00:39 2026 GMT
        Subject: CN=23472b61e5906f9ed9c2dd01070e6dfec90036f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3b:d0:f2:a2:35:13:ef:d5:6d:6a:55:02:7d:
                    76:27:c0:d6:2a:bf:09:a7:de:62:8c:74:e3:8b:cc:
                    bb:b0:8e:d1:18:74:fb:35:e6:85:2a:27:55:2c:60:
                    4a:22:23:0a:82:2d:6d:3e:22:9f:6f:06:93:72:f4:
                    15:f9:b9:3b:1a:9f:dd:eb:54:23:d2:3a:ac:13:22:
                    64:f9:b5:60:81:3b:11:6a:22:fd:7c:ea:0d:79:1d:
                    4e:07:1d:f6:ae:d8:99:11:c5:e8:a1:c4:96:71:b9:
                    80:db:1e:c3:c2:d6:33:dc:0c:b2:d7:6e:77:2f:f7:
                    63:9f:5c:1b:aa:3e:7d:9f:d3:49:68:a1:ad:52:4d:
                    84:f5:98:57:4e:81:08:92:06:eb:e5:a3:76:5f:50:
                    58:32:8b:2b:31:4a:73:5a:d8:8a:9a:6c:78:15:37:
                    b8:15:13:e9:6a:d4:a0:3b:15:ab:13:8c:ea:55:46:
                    db:e2:d7:7b:fa:0c:46:95:c3:3f:c6:03:16:56:03:
                    81:0b:bd:df:74:8f:17:aa:19:83:6e:99:c3:18:2e:
                    6c:c5:40:6d:24:6f:c5:ed:97:89:e6:54:b6:d9:de:
                    49:f3:c0:43:f3:92:2f:e8:6b:db:d3:ff:b9:51:2c:
                    07:96:7a:79:e6:d9:bc:47:bc:bc:fc:2e:95:1b:1c:
                    d6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:47:2B:61:E5:90:6F:9E:D9:C2:DD:01:07:0E:6D:FE:C9:00:36:F0
            X509v3 Authority Key Identifier:
                keyid:49:24:0B:59:BB:F6:90:6A:55:5E:10:74:C5:AE:73:EC:62:DF:FC:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSQLWbv2kGpVXhB0xa5z7GLf_F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:49:2e:60:84:a6:48:c4:a9:fb:93:89:9c:57:8d:99:ad:f5:
         d2:7c:ab:12:34:5b:3e:b3:73:1b:3f:26:8e:26:a4:fc:00:c2:
         88:69:f5:be:13:12:16:21:a8:3b:2c:1f:07:51:61:0d:28:01:
         bf:dd:3e:db:06:db:13:13:c8:36:37:87:e0:f6:97:71:d1:39:
         d1:f1:3a:b4:f9:56:62:be:15:be:35:18:ce:3d:18:fc:18:eb:
         a8:b1:bc:15:53:e1:66:63:54:78:7b:d5:6d:28:75:23:0f:a9:
         a2:02:60:d1:fd:93:e5:1c:93:00:6c:65:3b:3e:a6:74:5c:f3:
         43:47:f2:1a:37:81:98:ad:cd:73:8b:9d:10:dc:d9:44:23:fd:
         87:cf:49:bd:1c:79:16:fb:78:96:7e:e0:18:e5:a3:67:8a:51:
         9a:c9:53:40:d1:aa:17:55:45:45:a4:be:04:88:a3:12:b4:ef:
         3c:70:74:ce:e0:d7:94:29:1b:73:2b:19:19:0e:e2:d3:9e:6c:
         6d:81:95:4f:e2:86:7d:03:66:93:ac:71:c3:f7:06:f1:92:dd:
         0f:55:54:16:17:5b:7d:9e:a1:80:eb:89:09:09:74:57:b0:05:
         3b:6f:8e:36:41:e7:22:84:de:e7:09:df:2f:c3:4b:b7:19:1e:
         be:25:84:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rqKWFpE0vqSLXac+3vVWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MjQwYjU5YmJmNjkwNmE1NTVlMTA3NGM1YWU3M2VjNjJk
ZmZjNWYwHhcNMjYwMzI5MTMwMDM5WhcNMjYwMzMwMTMwMDM5WjAzMTEwLwYDVQQD
EygyMzQ3MmI2MWU1OTA2ZjllZDljMmRkMDEwNzBlNmRmZWM5MDAzNmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTvQ8qI1E+/VbWpVAn12J8DWKr8J
p95ijHTji8y7sI7RGHT7NeaFKidVLGBKIiMKgi1tPiKfbwaTcvQV+bk7Gp/d61Qj
0jqsEyJk+bVggTsRaiL9fOoNeR1OBx32rtiZEcXoocSWcbmA2x7DwtYz3Ayy1253
L/djn1wbqj59n9NJaKGtUk2E9ZhXToEIkgbr5aN2X1BYMosrMUpzWtiKmmx4FTe4
FRPpatSgOxWrE4zqVUbb4td7+gxGlcM/xgMWVgOBC73fdI8XqhmDbpnDGC5sxUBt
JG/F7ZeJ5lS22d5J88BD85Iv6Gvb0/+5USwHlnp55tm8R7y8/C6VGxzWKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNHK2HlkG+e2cLdAQcObf7JADbwMB8GA1UdIwQY
MBaAFEkkC1m79pBqVV4QdMWuc+xi3/xfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1NRTFdidjJrR3BWWGhCMHhhNXo3R0xmX0Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yMjZiZTgtYzdiNy00N2YwLWIwZDUt
ZDE0YWYyY2I4ZmRlLzEvU1NRTFdidjJrR3BWWGhCMHhhNXo3R0xmX0Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yMjZiZTgtYzdiNy00N2YwLWIwZDUtZDE0YWYyY2I4ZmRl
LzEvU1NRTFdidjJrR3BWWGhCMHhhNXo3R0xmX0Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEkuYISm
SMSp+5OJnFeNma310nyrEjRbPrNzGz8mjiak/ADCiGn1vhMSFiGoOywfB1FhDSgB
v90+2wbbExPINjeH4PaXcdE50fE6tPlWYr4VvjUYzj0Y/BjrqLG8FVPhZmNUeHvV
bSh1Iw+pogJg0f2T5RyTAGxlOz6mdFzzQ0fyGjeBmK3Nc4udENzZRCP9h89JvRx5
Fvt4ln7gGOWjZ4pRmslTQNGqF1VFRaS+BIijErTvPHB0zuDXlCkbcysZGQ7i055s
bYGVT+KGfQNmk6xxw/cG8ZLdD1VUFhdbfZ6hgOuJCQl0V7AFO2+ONkHnIoTe5wnf
L8NLtxkeviWE5g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:27 2026 by rpki-client