Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/mJtzAF6_GeDG34diTlXwcnr0P_U.mft
File:                     mJtzAF6_GeDG34diTlXwcnr0P_U.mft (raw, json)
Hash identifier:          5PQ1ehM0uskDTlX/cdNVP2vSXp2ofw96LBWqsdsnZgQ=
Subject key identifier:   F3:02:80:05:9E:B2:15:2D:80:C9:B5:39:76:C8:EB:6D:1B:79:7A:09
Authority key identifier: 98:9B:73:00:5E:BF:19:E0:C6:DF:87:62:4E:55:F0:72:7A:F4:3F:F5
Certificate issuer:       /CN=989b73005ebf19e0c6df87624e55f0727af43ff5
Certificate serial:       019D371BDF176E4858D5FD3C68646E615C76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJtzAF6_GeDG34diTlXwcnr0P_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/mJtzAF6_GeDG34diTlXwcnr0P_U.mft
Manifest number:          FD
Signing time:             Sun 29 Mar 2026 01:01:06 +0000
Manifest this update:     Sun 29 Mar 2026 01:01:06 +0000
Manifest next update:     Mon 30 Mar 2026 01:01:06 +0000
Files and hashes:         1: mJtzAF6_GeDG34diTlXwcnr0P_U.crl (hash: dRTywO4MiLlj7ctxqd3RlC38676TVzHSCgAhkQ+G348=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/mJtzAF6_GeDG34diTlXwcnr0P_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/mJtzAF6_GeDG34diTlXwcnr0P_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mJtzAF6_GeDG34diTlXwcnr0P_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 01:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:1b:df:17:6e:48:58:d5:fd:3c:68:64:6e:61:5c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989b73005ebf19e0c6df87624e55f0727af43ff5
        Validity
            Not Before: Mar 29 01:01:06 2026 GMT
            Not After : Mar 30 01:01:06 2026 GMT
        Subject: CN=f30280059eb2152d80c9b53976c8eb6d1b797a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5f:8c:e0:12:47:81:86:f1:90:ab:43:d8:3f:
                    1e:f4:24:3a:6c:30:04:33:0d:36:1d:43:c7:08:17:
                    ea:28:39:8e:d8:fa:a4:47:a2:36:85:32:1c:10:2b:
                    1d:4e:d1:52:54:c4:24:f8:3c:49:05:b9:0e:aa:89:
                    36:18:58:cb:0b:cc:a9:27:cf:6f:4c:4f:c8:54:f7:
                    c1:85:21:0e:f4:d3:be:07:1a:18:ff:5f:0b:57:3e:
                    65:81:0e:89:a1:b8:dd:ce:bb:c8:98:f4:d4:03:20:
                    16:8b:09:71:b9:8d:6d:dd:e2:c7:c9:56:02:df:c1:
                    77:c4:68:25:d2:80:43:0f:87:dc:67:ab:51:ca:ff:
                    12:45:b8:a4:89:5a:fe:e9:38:48:b5:08:3c:ba:fa:
                    21:75:e1:b4:53:50:e0:42:da:ef:10:3e:91:86:f6:
                    3c:72:93:e5:99:12:5f:62:55:9d:4c:65:07:6f:0f:
                    62:72:96:a8:a4:68:92:4b:c9:ac:d6:95:3c:14:18:
                    e1:e2:64:d6:bd:dc:5f:9c:cf:ef:31:1e:25:65:32:
                    d5:ec:ec:39:e3:20:d4:ae:46:0a:1d:90:9b:c2:e1:
                    fb:02:38:66:3c:b0:08:4c:95:71:a5:57:9f:3f:64:
                    91:db:ca:ce:bd:8d:6f:10:86:20:50:73:30:f2:ea:
                    9a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:02:80:05:9E:B2:15:2D:80:C9:B5:39:76:C8:EB:6D:1B:79:7A:09
            X509v3 Authority Key Identifier:
                keyid:98:9B:73:00:5E:BF:19:E0:C6:DF:87:62:4E:55:F0:72:7A:F4:3F:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJtzAF6_GeDG34diTlXwcnr0P_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/mJtzAF6_GeDG34diTlXwcnr0P_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/mJtzAF6_GeDG34diTlXwcnr0P_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d0:ba:64:e3:06:f4:36:64:1f:8f:f0:09:29:f1:78:e2:8b:
         3c:d0:e9:20:9c:7f:10:1d:04:64:a7:d1:e8:0f:ee:8f:61:9c:
         42:d9:ae:5e:db:ba:fa:d3:c4:31:a1:1f:5b:60:f2:d1:65:2f:
         42:54:9c:78:43:a5:6c:73:8d:38:9c:23:f9:ca:1f:43:27:a3:
         93:6f:94:09:2d:33:5a:3d:79:10:c2:d0:dd:13:26:54:85:28:
         48:ca:c4:d2:82:c1:3b:61:0f:7a:53:c3:45:43:57:97:6c:7a:
         f1:21:9c:e4:8f:e5:3d:30:e7:9a:ad:74:db:a4:d7:80:ed:00:
         a3:fe:d8:c5:ef:9e:f6:4a:1b:f9:ba:bb:cd:74:0a:6e:08:9e:
         3d:21:b1:91:25:d3:36:eb:b7:d9:4e:c4:90:a7:e5:c8:5b:8f:
         28:be:c3:86:63:08:5c:aa:72:dc:fb:6d:9b:4b:de:86:51:68:
         11:b2:18:df:eb:35:13:9e:ec:52:d8:59:3e:b7:04:11:be:0f:
         6c:36:b8:1b:4b:b0:85:e8:c8:f8:e4:c5:f0:50:41:aa:46:f0:
         f2:48:34:26:ba:d5:99:23:52:fc:4f:4b:28:b2:9d:04:8d:a3:
         1b:91:a1:ab:cb:3c:e9:58:e5:88:79:14:55:2f:cd:7a:70:2e:
         d4:5b:7d:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G98XbkhY1f08aGRuYVx2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OWI3MzAwNWViZjE5ZTBjNmRmODc2MjRlNTVmMDcyN2Fm
NDNmZjUwHhcNMjYwMzI5MDEwMTA2WhcNMjYwMzMwMDEwMTA2WjAzMTEwLwYDVQQD
EyhmMzAyODAwNTllYjIxNTJkODBjOWI1Mzk3NmM4ZWI2ZDFiNzk3YTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV+M4BJHgYbxkKtD2D8e9CQ6bDAE
Mw02HUPHCBfqKDmO2PqkR6I2hTIcECsdTtFSVMQk+DxJBbkOqok2GFjLC8ypJ89v
TE/IVPfBhSEO9NO+BxoY/18LVz5lgQ6JobjdzrvImPTUAyAWiwlxuY1t3eLHyVYC
38F3xGgl0oBDD4fcZ6tRyv8SRbikiVr+6ThItQg8uvohdeG0U1DgQtrvED6RhvY8
cpPlmRJfYlWdTGUHbw9icpaopGiSS8ms1pU8FBjh4mTWvdxfnM/vMR4lZTLV7Ow5
4yDUrkYKHZCbwuH7AjhmPLAITJVxpVefP2SR28rOvY1vEIYgUHMw8uqaJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMCgAWeshUtgMm1OXbI620beXoJMB8GA1UdIwQY
MBaAFJibcwBevxngxt+HYk5V8HJ69D/1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUp0ekFGNl9HZURHMzRkaVRsWHdjbnIwUF9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MmQ3YTgtOWUwYi00ZWQ1LWI1OTkt
NzY0M2Y0YmRkYjNmLzEvbUp0ekFGNl9HZURHMzRkaVRsWHdjbnIwUF9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82MmQ3YTgtOWUwYi00ZWQ1LWI1OTktNzY0M2Y0YmRkYjNm
LzEvbUp0ekFGNl9HZURHMzRkaVRsWHdjbnIwUF9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtC6ZOMG
9DZkH4/wCSnxeOKLPNDpIJx/EB0EZKfR6A/uj2GcQtmuXtu6+tPEMaEfW2Dy0WUv
QlSceEOlbHONOJwj+cofQyejk2+UCS0zWj15EMLQ3RMmVIUoSMrE0oLBO2EPelPD
RUNXl2x68SGc5I/lPTDnmq1026TXgO0Ao/7Yxe+e9kob+bq7zXQKbgiePSGxkSXT
Nuu32U7EkKflyFuPKL7DhmMIXKpy3Pttm0vehlFoEbIY3+s1E57sUthZPrcEEb4P
bDa4G0uwhejI+OTF8FBBqkbw8kg0JrrVmSNS/E9LKLKdBI2jG5Ghq8s86VjliHkU
VS/NenAu1Ft97g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:43 2026 by rpki-client