Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/0d0cfe-4a26-4128-84ba-242ec7733e2a/1/x5bFLqluqP2iU7sEBw8ZNvrsdsE.mft
File:                     x5bFLqluqP2iU7sEBw8ZNvrsdsE.mft (raw, json)
Hash identifier:          6ZFw5TYXGXZQJJeZATt2I70da03eYj3CrQ1K/d0p2Q8=
Subject key identifier:   98:B4:83:90:4F:65:D5:3C:18:6B:75:8A:61:6A:7E:13:26:A7:F3:FC
Authority key identifier: C7:96:C5:2E:A9:6E:A8:FD:A2:53:BB:04:07:0F:19:36:FA:EC:76:C1
Certificate issuer:       /CN=c796c52ea96ea8fda253bb04070f1936faec76c1
Certificate serial:       019D389BCE085DC2CFB1B07F0C02E27BAE70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x5bFLqluqP2iU7sEBw8ZNvrsdsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/0d0cfe-4a26-4128-84ba-242ec7733e2a/1/x5bFLqluqP2iU7sEBw8ZNvrsdsE.mft
Manifest number:          55
Signing time:             Sun 29 Mar 2026 08:00:27 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:27 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:27 +0000
Files and hashes:         1: x5bFLqluqP2iU7sEBw8ZNvrsdsE.crl (hash: 6A1HbysX07sB3NDEZLN3A72vTixo7D43zShCa7bh3+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/0d0cfe-4a26-4128-84ba-242ec7733e2a/1/x5bFLqluqP2iU7sEBw8ZNvrsdsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/0d0cfe-4a26-4128-84ba-242ec7733e2a/1/x5bFLqluqP2iU7sEBw8ZNvrsdsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x5bFLqluqP2iU7sEBw8ZNvrsdsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9b:ce:08:5d:c2:cf:b1:b0:7f:0c:02:e2:7b:ae:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c796c52ea96ea8fda253bb04070f1936faec76c1
        Validity
            Not Before: Mar 29 08:00:27 2026 GMT
            Not After : Mar 30 08:00:27 2026 GMT
        Subject: CN=98b483904f65d53c186b758a616a7e1326a7f3fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:56:24:49:43:8d:fe:51:10:ae:03:77:39:a2:
                    de:2c:45:63:a6:c3:dd:59:a1:0f:54:61:1a:f4:c7:
                    c9:52:fd:3b:7a:8f:81:87:35:6a:31:6e:54:29:79:
                    d2:e1:ee:d9:b1:6e:72:b4:a0:37:c2:e0:24:f7:39:
                    80:99:63:7a:5d:fc:77:7b:ce:95:00:af:49:55:60:
                    b0:ad:4a:cd:d2:ef:25:40:16:0a:44:c2:c8:3d:16:
                    3b:1e:bc:22:72:ef:e3:dc:40:8e:d2:fa:c5:69:f7:
                    58:90:d4:dd:3d:41:9e:13:84:ca:62:a7:29:9c:52:
                    b6:bc:7f:34:7f:af:71:ff:f2:34:d9:90:31:e2:f6:
                    2b:fb:35:99:3a:cc:5c:4c:f9:db:89:df:2c:07:95:
                    37:7f:36:e3:d4:c6:9b:a1:93:1e:2e:98:97:74:e3:
                    f4:98:67:84:63:a5:bd:12:c1:fa:7d:00:c9:fc:25:
                    9d:96:22:57:8a:19:b7:73:47:b7:36:0a:29:1c:d6:
                    49:f1:44:08:49:9a:96:84:2b:0e:7a:ac:66:13:0b:
                    4e:7c:00:ca:b1:9f:5a:94:80:f0:4e:94:5c:f4:46:
                    56:27:6a:fb:db:3c:ac:70:c9:94:c2:dd:ce:8c:df:
                    09:68:02:4b:3b:9c:35:f9:ac:15:5a:48:c9:b3:a2:
                    c6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B4:83:90:4F:65:D5:3C:18:6B:75:8A:61:6A:7E:13:26:A7:F3:FC
            X509v3 Authority Key Identifier:
                keyid:C7:96:C5:2E:A9:6E:A8:FD:A2:53:BB:04:07:0F:19:36:FA:EC:76:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5bFLqluqP2iU7sEBw8ZNvrsdsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0d0cfe-4a26-4128-84ba-242ec7733e2a/1/x5bFLqluqP2iU7sEBw8ZNvrsdsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0d0cfe-4a26-4128-84ba-242ec7733e2a/1/x5bFLqluqP2iU7sEBw8ZNvrsdsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:c2:c8:b3:bb:e3:06:ca:a4:e5:ea:7d:ed:16:1c:d0:a2:33:
         9e:53:ee:25:d3:08:c6:ed:60:bb:83:ec:ec:a5:46:97:ad:4e:
         f5:c8:1f:58:a7:48:b0:8f:f5:a5:a5:9a:d3:f8:1d:47:c6:ac:
         b6:85:be:a8:55:86:26:2e:81:8a:27:1b:bd:46:07:38:82:ac:
         e7:b0:a4:3f:5a:47:a9:40:6e:d3:4c:b0:57:bd:e4:ab:ba:6b:
         4d:bd:64:eb:86:3a:91:84:75:d1:71:0a:0d:c3:ce:78:52:5c:
         0f:26:1f:ee:d4:fb:27:36:dc:cb:05:ed:84:01:ec:f4:f9:02:
         ac:5e:ed:f6:52:32:6d:c6:89:fa:ef:13:a1:d6:c8:f3:4f:6f:
         f3:79:1b:16:55:fd:d7:1d:9d:9c:42:23:2e:58:04:88:15:bb:
         53:a6:e9:03:e5:98:94:15:4a:0e:4c:92:ae:bd:2e:50:a5:9b:
         55:16:67:fc:a9:eb:31:65:b4:8b:2b:b4:72:89:67:0d:8d:1d:
         89:41:59:f9:95:9d:e6:6d:f3:5a:a0:98:70:d6:8a:d8:02:7f:
         50:35:77:8b:ec:03:5f:0b:18:3a:96:15:16:2d:31:e6:ca:59:
         7d:1e:15:7f:92:da:c8:ae:db:17:49:29:4d:da:d1:fe:0a:62:
         e4:28:54:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m84IXcLPsbB/DALie65wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3OTZjNTJlYTk2ZWE4ZmRhMjUzYmIwNDA3MGYxOTM2ZmFl
Yzc2YzEwHhcNMjYwMzI5MDgwMDI3WhcNMjYwMzMwMDgwMDI3WjAzMTEwLwYDVQQD
Eyg5OGI0ODM5MDRmNjVkNTNjMTg2Yjc1OGE2MTZhN2UxMzI2YTdmM2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlYkSUON/lEQrgN3OaLeLEVjpsPd
WaEPVGEa9MfJUv07eo+BhzVqMW5UKXnS4e7ZsW5ytKA3wuAk9zmAmWN6Xfx3e86V
AK9JVWCwrUrN0u8lQBYKRMLIPRY7Hrwicu/j3ECO0vrFafdYkNTdPUGeE4TKYqcp
nFK2vH80f69x//I02ZAx4vYr+zWZOsxcTPnbid8sB5U3fzbj1MaboZMeLpiXdOP0
mGeEY6W9EsH6fQDJ/CWdliJXihm3c0e3NgopHNZJ8UQISZqWhCsOeqxmEwtOfADK
sZ9alIDwTpRc9EZWJ2r72zyscMmUwt3OjN8JaAJLO5w1+awVWkjJs6LGawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJi0g5BPZdU8GGt1imFqfhMmp/P8MB8GA1UdIwQY
MBaAFMeWxS6pbqj9olO7BAcPGTb67HbBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDViRkxxbHVxUDJpVTdzRUJ3OFpOdnJzZHNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8wZDBjZmUtNGEyNi00MTI4LTg0YmEt
MjQyZWM3NzMzZTJhLzEveDViRkxxbHVxUDJpVTdzRUJ3OFpOdnJzZHNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8wZDBjZmUtNGEyNi00MTI4LTg0YmEtMjQyZWM3NzMzZTJh
LzEveDViRkxxbHVxUDJpVTdzRUJ3OFpOdnJzZHNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMLIs7vj
Bsqk5ep97RYc0KIznlPuJdMIxu1gu4Ps7KVGl61O9cgfWKdIsI/1paWa0/gdR8as
toW+qFWGJi6BiicbvUYHOIKs57CkP1pHqUBu00ywV73kq7prTb1k64Y6kYR10XEK
DcPOeFJcDyYf7tT7JzbcywXthAHs9PkCrF7t9lIybcaJ+u8TodbI809v83kbFlX9
1x2dnEIjLlgEiBW7U6bpA+WYlBVKDkySrr0uUKWbVRZn/KnrMWW0iyu0colnDY0d
iUFZ+ZWd5m3zWqCYcNaK2AJ/UDV3i+wDXwsYOpYVFi0x5spZfR4Vf5LayK7bF0kp
TdrR/gpi5ChUyw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:27:47 2026 by rpki-client