Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
File:                     E3ueCmc-FAe_PmWfLqYlN462Mng.mft (raw, json)
Hash identifier:          HUpqLA0ugN5YnysZ167hCLKfiY8+Qpnn4pYjVxXns8A=
Subject key identifier:   77:35:BE:D2:5F:F7:2D:52:49:28:69:DC:5B:1E:3A:E6:A2:7E:6E:39
Authority key identifier: 13:7B:9E:0A:67:3E:14:07:BF:3E:65:9F:2E:A6:25:37:8E:B6:32:78
Certificate issuer:       /CN=137b9e0a673e1407bf3e659f2ea625378eb63278
Certificate serial:       019D390A025C7979BA9F66397EBCA20AB2B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
Manifest number:          095C
Signing time:             Sun 29 Mar 2026 10:00:50 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:50 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:50 +0000
Files and hashes:         1: E3ueCmc-FAe_PmWfLqYlN462Mng.crl (hash: ivZg1dhpD7GcrWFdYvYQh90zBwEC1Q1t2/X3fv49dIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:02:5c:79:79:ba:9f:66:39:7e:bc:a2:0a:b2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137b9e0a673e1407bf3e659f2ea625378eb63278
        Validity
            Not Before: Mar 29 10:00:50 2026 GMT
            Not After : Mar 30 10:00:50 2026 GMT
        Subject: CN=7735bed25ff72d52492869dc5b1e3ae6a27e6e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:66:b3:27:eb:1f:e5:d3:77:69:63:a3:74:b1:
                    44:e1:a4:ad:0a:19:d0:a1:19:33:de:08:b2:4f:3b:
                    ab:9d:ce:b1:4a:bc:52:62:16:2b:d1:4b:c5:b7:1a:
                    05:20:ff:b9:21:c5:c8:af:40:86:fa:f6:cc:58:5a:
                    f7:e7:af:21:a9:cf:05:15:8f:62:f4:c2:6e:ab:36:
                    47:4a:10:19:03:84:3d:62:39:77:5f:cf:a4:fe:44:
                    6f:a1:11:61:ad:25:f6:9c:22:c4:a7:e2:ca:20:f3:
                    e4:13:90:31:05:cf:d7:54:10:bb:6f:18:5a:62:5a:
                    fe:fe:71:ce:fa:3f:d3:5f:bf:df:5b:4f:25:47:59:
                    42:d0:b1:0e:d1:c4:1e:8a:b9:c2:7d:58:55:a8:ca:
                    35:ca:92:3d:8d:ff:4d:16:82:82:60:e5:4b:79:8a:
                    51:49:9b:66:85:e9:01:9e:44:c0:23:77:5c:ab:3f:
                    e5:3c:78:c9:71:28:b3:65:64:dd:0f:15:14:a1:f5:
                    b2:3d:8d:75:aa:43:2d:10:3a:44:fd:84:dc:d2:78:
                    c2:95:94:6e:5d:1c:14:d4:9e:bb:7b:ee:c5:4c:c5:
                    c5:63:f3:45:23:54:27:5e:02:28:87:ce:79:f5:b1:
                    8f:48:f1:e7:30:1c:12:14:ad:19:f0:d6:1e:b1:52:
                    70:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:35:BE:D2:5F:F7:2D:52:49:28:69:DC:5B:1E:3A:E6:A2:7E:6E:39
            X509v3 Authority Key Identifier:
                keyid:13:7B:9E:0A:67:3E:14:07:BF:3E:65:9F:2E:A6:25:37:8E:B6:32:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:7f:55:bd:63:cc:2c:0e:30:95:ef:6d:74:30:28:df:6e:b1:
         ce:c8:a4:3c:cf:b7:b8:15:77:ac:18:8d:f0:bc:e2:6c:02:14:
         2c:3b:36:f2:11:cf:48:c6:e2:4c:68:4e:55:be:d6:86:d0:9c:
         26:92:58:7c:9a:71:76:de:63:70:fb:21:31:9f:a7:b2:98:11:
         36:53:9f:2c:18:70:ee:86:d8:fc:db:a1:ee:1d:26:ff:7c:93:
         0e:61:d6:26:26:55:ee:26:e3:99:d8:ec:6c:e8:85:72:36:c1:
         a6:7d:4e:98:17:81:70:c0:0f:ae:97:13:3c:d6:e7:dc:3c:24:
         97:ea:71:e4:f3:67:50:3b:7f:27:98:24:16:ed:7d:0a:2b:59:
         2f:55:fc:17:ac:71:3a:5c:fe:bb:39:fc:5f:1d:5f:98:18:dd:
         8d:60:c0:c3:d5:46:b9:24:39:db:f8:80:66:62:97:9d:aa:cb:
         3b:4c:2e:e9:e9:97:52:b1:81:6d:ac:e0:e3:1d:d7:27:3c:01:
         38:bd:01:66:bd:ac:51:2b:de:95:24:e8:ea:98:fd:6c:2e:8e:
         df:8b:2b:7b:cc:a0:0b:5c:3d:50:ee:5c:10:fb:2b:9c:96:79:
         6f:4f:61:5c:4f:c7:8b:78:70:61:68:26:4b:68:f3:6b:04:fd:
         2c:24:c9:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CgJceXm6n2Y5fryiCrK5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzN2I5ZTBhNjczZTE0MDdiZjNlNjU5ZjJlYTYyNTM3OGVi
NjMyNzgwHhcNMjYwMzI5MTAwMDUwWhcNMjYwMzMwMTAwMDUwWjAzMTEwLwYDVQQD
Eyg3NzM1YmVkMjVmZjcyZDUyNDkyODY5ZGM1YjFlM2FlNmEyN2U2ZTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmazJ+sf5dN3aWOjdLFE4aStChnQ
oRkz3giyTzurnc6xSrxSYhYr0UvFtxoFIP+5IcXIr0CG+vbMWFr3568hqc8FFY9i
9MJuqzZHShAZA4Q9Yjl3X8+k/kRvoRFhrSX2nCLEp+LKIPPkE5AxBc/XVBC7bxha
Ylr+/nHO+j/TX7/fW08lR1lC0LEO0cQeirnCfVhVqMo1ypI9jf9NFoKCYOVLeYpR
SZtmhekBnkTAI3dcqz/lPHjJcSizZWTdDxUUofWyPY11qkMtEDpE/YTc0njClZRu
XRwU1J67e+7FTMXFY/NFI1QnXgIoh8559bGPSPHnMBwSFK0Z8NYesVJwtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHc1vtJf9y1SSShp3FseOuaifm45MB8GA1UdIwQY
MBaAFBN7ngpnPhQHvz5lny6mJTeOtjJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTN1ZUNtYy1GQWVfUG1XZkxxWWxONDYyTW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9mZDAwMWMtMzMzOC00MGE3LWFmMWYt
MzYxZWJhMzAzNTVlLzEvRTN1ZUNtYy1GQWVfUG1XZkxxWWxONDYyTW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9mZDAwMWMtMzMzOC00MGE3LWFmMWYtMzYxZWJhMzAzNTVl
LzEvRTN1ZUNtYy1GQWVfUG1XZkxxWWxONDYyTW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqX9VvWPM
LA4wle9tdDAo326xzsikPM+3uBV3rBiN8LzibAIULDs28hHPSMbiTGhOVb7WhtCc
JpJYfJpxdt5jcPshMZ+nspgRNlOfLBhw7obY/Nuh7h0m/3yTDmHWJiZV7ibjmdjs
bOiFcjbBpn1OmBeBcMAPrpcTPNbn3Dwkl+px5PNnUDt/J5gkFu19CitZL1X8F6xx
Olz+uzn8Xx1fmBjdjWDAw9VGuSQ52/iAZmKXnarLO0wu6emXUrGBbazg4x3XJzwB
OL0BZr2sUSvelSTo6pj9bC6O34sre8ygC1w9UO5cEPsrnJZ5b09hXE/Hi3hwYWgm
S2jzawT9LCTJVw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:01 2026 by rpki-client