Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
File:                     7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft (raw, json)
Hash identifier:          wkQbrRXvP0H/V75KUjwJ+Du4SWvg1y09fE7kF6kSWL4=
Subject key identifier:   30:27:F4:F3:0D:63:0F:65:8F:B5:3D:35:DA:73:C1:1B:BA:BE:E0:F4
Authority key identifier: EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
Certificate issuer:       /CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Certificate serial:       019D265ECAA079413BC18D01357C28B7449D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
Manifest number:          15E5
Signing time:             Wed 25 Mar 2026 19:00:39 +0000
Manifest this update:     Wed 25 Mar 2026 19:00:39 +0000
Manifest next update:     Thu 26 Mar 2026 19:00:39 +0000
Files and hashes:         1: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl (hash: g/VFO7jvz4eCqNsJUGQeVLZeM23F7xi5OjwnFxljt/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5e:ca:a0:79:41:3b:c1:8d:01:35:7c:28:b7:44:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
        Validity
            Not Before: Mar 25 19:00:39 2026 GMT
            Not After : Mar 26 19:00:39 2026 GMT
        Subject: CN=3027f4f30d630f658fb53d35da73c11bbabee0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:42:38:44:77:bd:c8:93:0c:26:b0:a2:2f:5f:
                    62:ea:cf:49:4c:39:4d:36:c0:bd:6f:66:28:c8:9e:
                    8b:f7:8e:16:46:3b:10:65:26:1d:02:f4:ff:ef:ba:
                    52:44:8a:4b:71:87:da:fa:7f:80:03:94:37:5e:07:
                    d1:c5:ac:6d:9c:2b:8d:ee:8e:55:f9:d3:5c:dd:47:
                    af:76:41:7d:02:36:a6:4b:a0:eb:83:4d:9f:c0:77:
                    e0:8a:fb:db:37:6a:7c:b4:78:31:82:79:a4:a4:74:
                    cc:23:49:79:bb:d0:e5:1c:80:4b:a4:80:49:be:d5:
                    25:fe:38:e2:72:89:1b:b5:41:27:43:dd:30:e5:90:
                    cb:75:2c:d2:2d:ca:85:02:cf:24:0f:53:01:58:68:
                    db:2c:39:2d:b3:01:18:9e:5f:a1:67:20:d5:eb:2b:
                    75:b9:09:22:6e:72:40:3c:50:85:e7:89:cb:a1:ee:
                    02:ae:80:19:7d:94:31:19:e2:1e:94:f6:5a:5e:16:
                    df:ea:97:cf:b7:06:a0:aa:d2:e6:7e:3b:77:bb:d3:
                    a9:a4:fd:f4:31:c9:17:42:ff:f9:b7:a2:69:f3:2d:
                    9b:c2:87:ba:ba:c3:7b:e8:6f:f0:99:6e:f7:67:3d:
                    24:da:04:7a:e2:95:eb:7b:b6:fc:4b:2c:d3:a8:02:
                    0b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:27:F4:F3:0D:63:0F:65:8F:B5:3D:35:DA:73:C1:1B:BA:BE:E0:F4
            X509v3 Authority Key Identifier:
                keyid:EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:70:33:42:33:bd:64:15:0f:d5:72:6c:06:25:9c:71:5c:d5:
         45:9d:c7:7b:b7:61:1e:d7:64:a8:e8:89:16:b1:6f:da:cc:71:
         f1:f8:27:45:c3:d6:cd:79:92:b3:c7:3c:7a:4a:c4:77:1a:7b:
         3c:88:d7:40:aa:dd:fe:04:5e:3b:ff:7b:75:7a:6b:d1:a2:51:
         37:5b:64:22:32:a3:35:5f:b0:6e:35:83:4e:b7:0f:dd:56:6e:
         8b:84:fd:88:bf:d0:3c:e6:ca:3b:b0:d7:77:70:91:8c:19:8b:
         60:9c:6e:9f:f4:61:ae:9d:72:7b:e9:cb:da:a0:9d:64:a8:64:
         59:9f:c2:ff:3e:99:a9:f2:21:77:9f:3f:53:61:29:f4:eb:3c:
         ca:2c:3e:c5:8a:23:ba:d9:45:97:37:33:8b:51:81:c4:fe:33:
         6d:f6:c1:36:aa:a9:14:81:a0:f5:1b:b0:2b:7c:d3:03:c4:91:
         58:99:2c:8f:7a:ad:6d:bb:d1:68:aa:50:dd:be:a8:89:1b:38:
         f6:62:4c:2f:3b:1d:f4:e7:aa:4f:93:7e:e5:22:30:09:96:10:
         36:35:b1:7e:cc:c2:89:81:ec:31:45:d4:98:99:e8:70:61:3a:
         74:73:b3:22:78:4c:15:9c:c1:01:29:de:d3:9e:dc:c7:2a:ee:
         25:2e:38:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXsqgeUE7wY0BNXwot0SdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZmQ4ZWFhYjVhZWFjM2NlOTQxZmUxMjU4NTliMzJhMzUy
NTEzNDQwHhcNMjYwMzI1MTkwMDM5WhcNMjYwMzI2MTkwMDM5WjAzMTEwLwYDVQQD
EygzMDI3ZjRmMzBkNjMwZjY1OGZiNTNkMzVkYTczYzExYmJhYmVlMGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0I4RHe9yJMMJrCiL19i6s9JTDlN
NsC9b2YoyJ6L944WRjsQZSYdAvT/77pSRIpLcYfa+n+AA5Q3XgfRxaxtnCuN7o5V
+dNc3UevdkF9AjamS6Drg02fwHfgivvbN2p8tHgxgnmkpHTMI0l5u9DlHIBLpIBJ
vtUl/jjicokbtUEnQ90w5ZDLdSzSLcqFAs8kD1MBWGjbLDktswEYnl+hZyDV6yt1
uQkibnJAPFCF54nLoe4CroAZfZQxGeIelPZaXhbf6pfPtwagqtLmfjt3u9OppP30
MckXQv/5t6Jp8y2bwoe6usN76G/wmW73Zz0k2gR64pXre7b8SyzTqAILfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAn9PMNYw9lj7U9NdpzwRu6vuD0MB8GA1UdIwQY
MBaAFOz9jqq1rqw86UH+ElhZsyo1JRNEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1AyT3FyV3VyRHpwUWY0U1dGbXpLalVsRTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYjg4M2EtNDg2ZC00OTc1LThkYmMt
ZDRiOTBiNmY0NjU5LzEvN1AyT3FyV3VyRHpwUWY0U1dGbXpLalVsRTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iYjg4M2EtNDg2ZC00OTc1LThkYmMtZDRiOTBiNmY0NjU5
LzEvN1AyT3FyV3VyRHpwUWY0U1dGbXpLalVsRTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXAzQjO9
ZBUP1XJsBiWccVzVRZ3He7dhHtdkqOiJFrFv2sxx8fgnRcPWzXmSs8c8ekrEdxp7
PIjXQKrd/gReO/97dXpr0aJRN1tkIjKjNV+wbjWDTrcP3VZui4T9iL/QPObKO7DX
d3CRjBmLYJxun/Rhrp1ye+nL2qCdZKhkWZ/C/z6ZqfIhd58/U2Ep9Os8yiw+xYoj
utlFlzczi1GBxP4zbfbBNqqpFIGg9RuwK3zTA8SRWJksj3qtbbvRaKpQ3b6oiRs4
9mJMLzsd9OeqT5N+5SIwCZYQNjWxfszCiYHsMUXUmJnocGE6dHOzInhMFZzBASne
057cxyruJS44Qw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:42 2026 by rpki-client