Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
File:                     wsVutD8iDrUUHthhUwr_JSGyHu0.mft (raw, json)
Hash identifier:          /1VoXXCYXFQiT3p0356wnKnfc1Jgek7W2vPmmrTZ1wI=
Subject key identifier:   31:50:FD:A6:0C:01:CA:EB:98:C6:3B:A0:C6:0A:F3:CA:4F:10:D5:41
Authority key identifier: C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED
Certificate issuer:       /CN=c2c56eb43f220eb5141ed861530aff2521b21eed
Certificate serial:       019D37C0553F77C696FA938B7063E632F806
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
Manifest number:          188B
Signing time:             Sun 29 Mar 2026 04:00:44 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:44 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:44 +0000
Files and hashes:         1: wsVutD8iDrUUHthhUwr_JSGyHu0.crl (hash: j4Oju7UQfWUm97mgQm6ZT5ZYX2F2kXUasYUTPfmOpjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:55:3f:77:c6:96:fa:93:8b:70:63:e6:32:f8:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c56eb43f220eb5141ed861530aff2521b21eed
        Validity
            Not Before: Mar 29 04:00:44 2026 GMT
            Not After : Mar 30 04:00:44 2026 GMT
        Subject: CN=3150fda60c01caeb98c63ba0c60af3ca4f10d541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a5:4b:6b:92:d6:ce:cf:75:c7:6a:27:a5:f4:
                    be:fa:4a:6b:00:f9:69:0a:9d:b9:b2:c5:72:d5:5c:
                    7b:55:68:21:f1:4a:26:6f:89:8e:36:e2:48:f8:44:
                    d5:d0:83:21:db:b5:df:9b:05:cc:32:34:b8:bf:c7:
                    35:7a:e9:33:98:ba:c4:d4:13:3d:51:1f:3c:7c:da:
                    bd:ca:3b:89:1c:6f:cb:af:a5:e1:34:26:a6:d9:39:
                    b1:c5:89:83:c3:24:cf:a2:30:d4:f1:18:06:c6:6c:
                    cd:53:18:6d:d4:b7:4c:d8:da:77:f8:1f:34:bc:f0:
                    67:7c:51:cb:c9:04:54:7a:14:e5:81:48:45:fa:5e:
                    8b:d2:43:bb:ce:c4:01:69:a3:47:a1:54:7b:63:44:
                    f5:41:9f:6f:b4:b9:d1:1a:67:fb:d4:bb:e4:8d:80:
                    04:bc:5e:e1:fc:37:8e:aa:42:83:4e:52:50:6d:a6:
                    4b:17:f3:eb:f9:a8:86:4d:a9:91:66:ca:21:95:1f:
                    ff:df:b2:7e:29:65:ad:95:2f:ee:a3:57:e2:f9:19:
                    61:3c:9e:c4:ff:ea:49:53:c4:7e:cc:0f:e7:c7:f9:
                    24:ac:36:50:6b:54:30:ac:47:f5:8e:56:f3:1a:bd:
                    fd:55:07:1b:ec:b6:62:97:79:df:b0:04:56:79:67:
                    00:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:50:FD:A6:0C:01:CA:EB:98:C6:3B:A0:C6:0A:F3:CA:4F:10:D5:41
            X509v3 Authority Key Identifier:
                keyid:C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:22:9e:da:b0:29:3a:f2:7d:1a:50:fa:53:22:81:27:57:d7:
         8f:7e:65:e0:a6:b6:41:f3:c4:f2:cd:5b:e4:44:df:7d:16:fb:
         b0:55:4e:b5:1b:93:ac:c3:42:a5:fa:f2:e4:54:d9:7f:a2:bb:
         5b:74:2c:ed:bb:07:6d:0e:c2:95:45:e4:26:78:32:b3:fd:33:
         5a:1a:e7:f3:82:32:45:fd:bb:4c:f6:61:b9:ae:bc:7f:5f:34:
         70:71:80:53:ea:b4:01:fc:a0:85:1c:f0:43:94:ef:72:2e:6c:
         54:6d:bf:d2:de:84:d8:cc:90:25:58:b3:aa:dc:69:76:76:21:
         33:1b:65:0c:ef:bc:be:c6:3d:cc:ad:3e:e0:6c:75:e8:3d:7b:
         d1:1a:89:d5:2f:bc:b9:40:65:d2:96:8e:13:f1:2c:be:d2:6a:
         fc:d0:b0:15:36:4e:38:03:7e:c8:96:a1:66:e7:2c:d9:ed:8d:
         ee:85:f3:cb:fd:5f:c5:ee:62:92:52:14:d3:6a:7a:f9:b6:a5:
         4c:28:2f:06:d8:35:5f:a2:45:11:56:d2:85:c1:f4:79:cf:79:
         27:56:2a:ab:8b:0d:29:5e:85:16:cc:b6:60:0c:59:5d:c6:9e:
         65:9b:55:ed:93:7a:cb:78:51:4f:be:0e:14:f0:37:69:ca:b6:
         d0:df:62:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wFU/d8aW+pOLcGPmMvgGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYzU2ZWI0M2YyMjBlYjUxNDFlZDg2MTUzMGFmZjI1MjFi
MjFlZWQwHhcNMjYwMzI5MDQwMDQ0WhcNMjYwMzMwMDQwMDQ0WjAzMTEwLwYDVQQD
EygzMTUwZmRhNjBjMDFjYWViOThjNjNiYTBjNjBhZjNjYTRmMTBkNTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqVLa5LWzs91x2onpfS++kprAPlp
Cp25ssVy1Vx7VWgh8Uomb4mONuJI+ETV0IMh27XfmwXMMjS4v8c1eukzmLrE1BM9
UR88fNq9yjuJHG/Lr6XhNCam2TmxxYmDwyTPojDU8RgGxmzNUxht1LdM2Np3+B80
vPBnfFHLyQRUehTlgUhF+l6L0kO7zsQBaaNHoVR7Y0T1QZ9vtLnRGmf71LvkjYAE
vF7h/DeOqkKDTlJQbaZLF/Pr+aiGTamRZsohlR//37J+KWWtlS/uo1fi+RlhPJ7E
/+pJU8R+zA/nx/kkrDZQa1QwrEf1jlbzGr39VQcb7LZil3nfsARWeWcANwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFQ/aYMAcrrmMY7oMYK88pPENVBMB8GA1UdIwQY
MBaAFMLFbrQ/Ig61FB7YYVMK/yUhsh7tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3NWdXREOGlEclVVSHRoaFV3cl9KU0d5SHUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83OTA1YWEtMzU0Ni00YzJkLTkwMzEt
MDk4MmJiZDMxZGQ0LzEvd3NWdXREOGlEclVVSHRoaFV3cl9KU0d5SHUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC83OTA1YWEtMzU0Ni00YzJkLTkwMzEtMDk4MmJiZDMxZGQ0
LzEvd3NWdXREOGlEclVVSHRoaFV3cl9KU0d5SHUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFiKe2rAp
OvJ9GlD6UyKBJ1fXj35l4Ka2QfPE8s1b5ETffRb7sFVOtRuTrMNCpfry5FTZf6K7
W3Qs7bsHbQ7ClUXkJngys/0zWhrn84IyRf27TPZhua68f180cHGAU+q0AfyghRzw
Q5Tvci5sVG2/0t6E2MyQJVizqtxpdnYhMxtlDO+8vsY9zK0+4Gx16D170RqJ1S+8
uUBl0paOE/EsvtJq/NCwFTZOOAN+yJahZucs2e2N7oXzy/1fxe5iklIU02p6+bal
TCgvBtg1X6JFEVbShcH0ec95J1Yqq4sNKV6FFsy2YAxZXcaeZZtV7ZN6y3hRT74O
FPA3acq20N9iFA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:36 2026 by rpki-client