Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
File:                     btAxXocokhqZ_GNGtM6PELXbhnw.mft (raw, json)
Hash identifier:          dMUQhlKbSVaiSUWyBJuyRhCSHO24QpkKMdRQIBJEu0I=
Subject key identifier:   F0:D5:02:7B:A3:29:A8:62:1F:53:63:1F:13:3D:02:7A:E2:DE:DE:D1
Authority key identifier: 6E:D0:31:5E:87:28:92:1A:99:FC:63:46:B4:CE:8F:10:B5:DB:86:7C
Certificate issuer:       /CN=6ed0315e8728921a99fc6346b4ce8f10b5db867c
Certificate serial:       019D38662BAB1BEFC6B67AE935C4C01713BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
Manifest number:          0ECF
Signing time:             Sun 29 Mar 2026 07:01:53 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:53 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:53 +0000
Files and hashes:         1: btAxXocokhqZ_GNGtM6PELXbhnw.crl (hash: BUePRsvAKJYrziXCNRgj9t4cUcER4r+ERvbMh89Co7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:2b:ab:1b:ef:c6:b6:7a:e9:35:c4:c0:17:13:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed0315e8728921a99fc6346b4ce8f10b5db867c
        Validity
            Not Before: Mar 29 07:01:53 2026 GMT
            Not After : Mar 30 07:01:53 2026 GMT
        Subject: CN=f0d5027ba329a8621f53631f133d027ae2deded1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d2:46:58:f4:ff:18:6c:6d:19:aa:df:b4:56:
                    6d:0a:ef:90:10:26:e9:47:7e:30:f5:d6:a5:60:0e:
                    e3:55:6a:21:24:f6:1c:7c:09:a3:11:da:1e:05:db:
                    1e:62:d9:d5:fa:24:a9:40:7a:22:cd:df:90:d9:d5:
                    9d:29:f1:5b:d5:57:2d:b0:7b:58:39:83:30:a1:57:
                    bc:4e:6a:cb:6a:b1:cb:ed:58:03:a5:22:d6:e2:02:
                    ca:06:b3:54:da:df:54:6f:0b:d2:8d:d3:14:ee:66:
                    74:1a:28:7f:b3:ca:fc:a3:62:b7:20:4f:de:80:af:
                    00:9b:2e:58:18:b3:b8:4b:c5:66:47:8d:5b:0f:b7:
                    e1:76:e5:e8:a1:63:4e:35:9d:f9:fc:8f:5a:07:f4:
                    e6:63:29:ca:52:db:5e:cc:b8:db:c2:15:cf:6d:40:
                    52:dd:a0:2f:a9:eb:83:a1:3b:92:19:23:3f:43:a1:
                    03:f9:ae:7c:7b:5d:5f:9e:82:60:a4:8d:4c:f2:e4:
                    a7:b7:dd:a0:a8:e3:9c:6d:ff:68:8a:77:9f:1d:bf:
                    5f:c5:27:dc:ec:1f:32:d1:63:3b:8d:95:2f:87:ed:
                    ea:c1:67:9c:e1:11:6b:69:74:39:b8:b1:59:cc:5d:
                    8c:93:81:3d:fc:33:66:68:0d:4a:52:f8:79:d7:0e:
                    af:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D5:02:7B:A3:29:A8:62:1F:53:63:1F:13:3D:02:7A:E2:DE:DE:D1
            X509v3 Authority Key Identifier:
                keyid:6E:D0:31:5E:87:28:92:1A:99:FC:63:46:B4:CE:8F:10:B5:DB:86:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:f1:31:ec:0b:ff:cc:a7:3f:93:3c:38:18:38:c8:88:6c:98:
         6e:75:56:69:f7:10:46:85:64:f1:4f:de:39:ba:48:c6:ec:0b:
         6c:1e:e5:46:97:f0:c8:07:99:db:9a:7d:fa:f8:dc:e4:cf:cf:
         2f:28:fb:af:47:97:60:86:18:7a:27:4f:1e:53:d0:c3:14:1a:
         5d:6d:45:b2:0e:f5:ed:04:a4:06:a6:28:b7:00:72:8c:2e:5d:
         ad:1e:9e:8c:c2:e0:e1:a4:6e:5a:1d:83:89:8e:c5:da:17:bd:
         17:6f:63:66:b0:80:da:62:12:3d:74:a8:aa:40:f2:cc:bf:2c:
         e3:4e:58:39:63:96:91:a0:81:27:52:b3:3d:24:6d:13:02:ee:
         89:6f:fd:ba:a3:49:1a:3f:8e:a5:fb:cc:85:b3:7e:97:5b:78:
         74:70:e4:29:88:6d:2c:1c:a8:f7:f0:ab:1a:b2:79:c9:fb:ac:
         ae:33:24:89:9b:f4:44:73:fb:9a:6f:7e:3e:4b:47:fb:30:46:
         de:ab:58:d0:d0:37:79:4f:5e:75:c1:2a:de:34:4c:d4:c4:e7:
         ca:a2:29:4c:83:2d:fd:97:b6:21:32:b9:f6:ea:a0:02:6d:73:
         55:65:e8:83:58:11:8d:b0:92:95:1b:5c:b4:5a:03:b1:f3:af:
         5c:47:cd:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZiurG+/GtnrpNcTAFxO6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZDAzMTVlODcyODkyMWE5OWZjNjM0NmI0Y2U4ZjEwYjVk
Yjg2N2MwHhcNMjYwMzI5MDcwMTUzWhcNMjYwMzMwMDcwMTUzWjAzMTEwLwYDVQQD
EyhmMGQ1MDI3YmEzMjlhODYyMWY1MzYzMWYxMzNkMDI3YWUyZGVkZWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdJGWPT/GGxtGarftFZtCu+QECbp
R34w9dalYA7jVWohJPYcfAmjEdoeBdseYtnV+iSpQHoizd+Q2dWdKfFb1VctsHtY
OYMwoVe8TmrLarHL7VgDpSLW4gLKBrNU2t9UbwvSjdMU7mZ0Gih/s8r8o2K3IE/e
gK8Amy5YGLO4S8VmR41bD7fhduXooWNONZ35/I9aB/TmYynKUttezLjbwhXPbUBS
3aAvqeuDoTuSGSM/Q6ED+a58e11fnoJgpI1M8uSnt92gqOOcbf9oinefHb9fxSfc
7B8y0WM7jZUvh+3qwWec4RFraXQ5uLFZzF2Mk4E9/DNmaA1KUvh51w6vDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDVAnujKahiH1NjHxM9Anri3t7RMB8GA1UdIwQY
MBaAFG7QMV6HKJIamfxjRrTOjxC124Z8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnRBeFhvY29raHFaX0dOR3RNNlBFTFhiaG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yYTYyYzItMTdkNS00NGNkLTkwZWYt
NWIzMzdhYzJlZjc5LzEvYnRBeFhvY29raHFaX0dOR3RNNlBFTFhiaG53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8yYTYyYzItMTdkNS00NGNkLTkwZWYtNWIzMzdhYzJlZjc5
LzEvYnRBeFhvY29raHFaX0dOR3RNNlBFTFhiaG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPEx7Av/
zKc/kzw4GDjIiGyYbnVWafcQRoVk8U/eObpIxuwLbB7lRpfwyAeZ25p9+vjc5M/P
Lyj7r0eXYIYYeidPHlPQwxQaXW1Fsg717QSkBqYotwByjC5drR6ejMLg4aRuWh2D
iY7F2he9F29jZrCA2mISPXSoqkDyzL8s405YOWOWkaCBJ1KzPSRtEwLuiW/9uqNJ
Gj+OpfvMhbN+l1t4dHDkKYhtLByo9/CrGrJ5yfusrjMkiZv0RHP7mm9+PktH+zBG
3qtY0NA3eU9edcEq3jRM1MTnyqIpTIMt/Ze2ITK59uqgAm1zVWXog1gRjbCSlRtc
tFoDsfOvXEfNjg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:04 2026 by rpki-client