Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
File:                     w6PDZsu4xcf3NZGdFQovrwwI-F8.mft (raw, json)
Hash identifier:          5ki4BNlav9DwLByQDFC54sjm6mzp6/PUeBXnqrUs86M=
Subject key identifier:   44:24:D1:B5:9E:8B:7D:52:14:06:F9:02:7D:56:A2:47:05:85:E0:15
Authority key identifier: C3:A3:C3:66:CB:B8:C5:C7:F7:35:91:9D:15:0A:2F:AF:0C:08:F8:5F
Certificate issuer:       /CN=c3a3c366cbb8c5c7f735919d150a2faf0c08f85f
Certificate serial:       019D37531E351F3CE40845CC840C5339637B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
Manifest number:          0815
Signing time:             Sun 29 Mar 2026 02:01:27 +0000
Manifest this update:     Sun 29 Mar 2026 02:01:27 +0000
Manifest next update:     Mon 30 Mar 2026 02:01:27 +0000
Files and hashes:         1: w6PDZsu4xcf3NZGdFQovrwwI-F8.crl (hash: T4qY3tCTwvdltNzryopAJLn1mYnY7AXdq3ZPaHjTXB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:53:1e:35:1f:3c:e4:08:45:cc:84:0c:53:39:63:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a3c366cbb8c5c7f735919d150a2faf0c08f85f
        Validity
            Not Before: Mar 29 02:01:27 2026 GMT
            Not After : Mar 30 02:01:27 2026 GMT
        Subject: CN=4424d1b59e8b7d521406f9027d56a2470585e015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cd:36:63:21:ed:c5:1d:7a:e7:39:3c:7b:03:
                    0f:b0:4c:69:6f:f0:dc:e9:46:95:b3:88:72:c9:75:
                    52:2a:26:03:36:09:db:88:b8:3e:56:e8:c1:6b:9c:
                    48:74:78:b6:59:17:a9:1d:b7:43:21:37:9f:6d:09:
                    4e:51:31:15:5d:3c:c8:83:ba:75:95:f7:bd:04:22:
                    1d:a3:fb:41:c6:4c:2e:a4:38:60:ae:b8:e4:57:f0:
                    b0:1b:dd:79:9a:23:1d:ff:4c:42:04:d5:c8:f5:1f:
                    f4:d5:5f:f4:c2:96:ce:42:f4:a1:12:d4:f7:02:bf:
                    67:b6:05:d1:81:a0:aa:4a:36:2f:df:cf:5e:55:f8:
                    82:72:69:fc:03:5b:c4:33:83:19:15:aa:9f:20:0b:
                    00:9a:fc:01:e7:c1:9c:e1:49:71:da:a2:90:a0:8e:
                    e3:9f:9e:80:6d:88:a6:be:fd:cc:fc:fb:0b:01:35:
                    fa:0c:b2:c7:1f:89:ef:93:27:a8:08:78:03:30:7d:
                    b2:dd:de:d7:4a:42:38:d4:72:06:df:03:7c:c3:8f:
                    3d:33:e4:e0:23:48:d6:f3:45:58:69:c1:70:0b:6e:
                    86:22:b2:eb:f9:5d:50:e0:f4:db:a2:54:15:f8:ff:
                    69:99:3e:56:81:f3:2f:f9:41:45:74:93:c1:04:59:
                    c5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:24:D1:B5:9E:8B:7D:52:14:06:F9:02:7D:56:A2:47:05:85:E0:15
            X509v3 Authority Key Identifier:
                keyid:C3:A3:C3:66:CB:B8:C5:C7:F7:35:91:9D:15:0A:2F:AF:0C:08:F8:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ef:10:dd:5f:5d:6e:12:12:3c:ea:ce:7d:20:8e:40:d5:c6:
         bd:40:a2:96:1a:b7:65:9c:b2:16:87:db:f9:f3:cb:82:dd:cf:
         b4:82:19:13:05:e6:45:76:64:a8:4d:98:8b:ec:e3:c7:d7:c5:
         12:0f:d5:1e:2d:e4:36:07:d8:4a:9d:f3:49:50:ec:d3:e3:97:
         b1:ad:93:78:77:6f:3b:08:b9:da:0f:25:f3:ae:50:ca:b4:4c:
         10:5b:e1:9a:7c:e2:e4:5b:cb:c1:52:b3:8c:7d:a9:72:ed:40:
         ee:61:53:c6:db:27:29:74:ab:bc:5f:7b:2a:d6:32:94:3a:10:
         e6:e9:a7:8c:a9:01:d9:cc:d8:cf:08:87:67:38:04:29:e9:c5:
         32:67:f9:bf:98:24:ac:39:a0:6a:87:64:8a:7e:b2:4f:b5:9d:
         18:7f:04:36:f3:70:ef:ff:14:ef:16:cb:f6:ce:eb:38:3d:86:
         38:7b:54:55:35:ef:2f:4e:d0:74:a8:a8:74:08:06:12:1e:f1:
         b0:21:31:34:e3:84:b8:e1:b0:fd:b0:97:3c:7f:8d:0a:4e:a5:
         56:45:ec:50:8f:c5:9f:db:f2:26:8a:46:63:e0:40:15:1d:cc:
         2c:0c:b0:76:ec:ad:59:77:1f:5e:dd:65:67:0a:a2:f7:be:21:
         13:6a:ab:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Ux41HzzkCEXMhAxTOWN7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYTNjMzY2Y2JiOGM1YzdmNzM1OTE5ZDE1MGEyZmFmMGMw
OGY4NWYwHhcNMjYwMzI5MDIwMTI3WhcNMjYwMzMwMDIwMTI3WjAzMTEwLwYDVQQD
Eyg0NDI0ZDFiNTllOGI3ZDUyMTQwNmY5MDI3ZDU2YTI0NzA1ODVlMDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1c02YyHtxR165zk8ewMPsExpb/Dc
6UaVs4hyyXVSKiYDNgnbiLg+VujBa5xIdHi2WRepHbdDITefbQlOUTEVXTzIg7p1
lfe9BCIdo/tBxkwupDhgrrjkV/CwG915miMd/0xCBNXI9R/01V/0wpbOQvShEtT3
Ar9ntgXRgaCqSjYv389eVfiCcmn8A1vEM4MZFaqfIAsAmvwB58Gc4Ulx2qKQoI7j
n56AbYimvv3M/PsLATX6DLLHH4nvkyeoCHgDMH2y3d7XSkI41HIG3wN8w489M+Tg
I0jW80VYacFwC26GIrLr+V1Q4PTbolQV+P9pmT5WgfMv+UFFdJPBBFnFaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQk0bWei31SFAb5An1WokcFheAVMB8GA1UdIwQY
MBaAFMOjw2bLuMXH9zWRnRUKL68MCPhfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzZQRFpzdTR4Y2YzTlpHZEZRb3Zyd3dJLUY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8xMDNlNmItMTAzMy00NTJlLTgyYTQt
OTc3NGJjMjI2Y2NlLzEvdzZQRFpzdTR4Y2YzTlpHZEZRb3Zyd3dJLUY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8xMDNlNmItMTAzMy00NTJlLTgyYTQtOTc3NGJjMjI2Y2Nl
LzEvdzZQRFpzdTR4Y2YzTlpHZEZRb3Zyd3dJLUY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+8Q3V9d
bhISPOrOfSCOQNXGvUCilhq3ZZyyFofb+fPLgt3PtIIZEwXmRXZkqE2Yi+zjx9fF
Eg/VHi3kNgfYSp3zSVDs0+OXsa2TeHdvOwi52g8l865QyrRMEFvhmnzi5FvLwVKz
jH2pcu1A7mFTxtsnKXSrvF97KtYylDoQ5umnjKkB2czYzwiHZzgEKenFMmf5v5gk
rDmgaodkin6yT7WdGH8ENvNw7/8U7xbL9s7rOD2GOHtUVTXvL07QdKiodAgGEh7x
sCExNOOEuOGw/bCXPH+NCk6lVkXsUI/Fn9vyJopGY+BAFR3MLAywduytWXcfXt1l
Zwqi974hE2qrbg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:47 2026 by rpki-client