Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
File:                     E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft (raw, json)
Hash identifier:          Rn2xI/qtebWXAxsDK9WhJ8n4n/7WDe7VvX7iX6o5GN4=
Subject key identifier:   F7:94:96:10:0B:F2:FE:78:D4:71:15:71:C4:BF:E4:5C:57:76:F5:59
Authority key identifier: 13:FF:8A:93:4A:EB:59:AA:45:A1:E5:54:88:E3:B8:8B:E1:E0:13:5B
Certificate issuer:       /CN=13ff8a934aeb59aa45a1e55488e3b88be1e0135b
Certificate serial:       019D27A860F45B48E2642E3453D4DDBC1312
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
Manifest number:          0CA7
Signing time:             Thu 26 Mar 2026 01:00:39 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:39 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:39 +0000
Files and hashes:         1: E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl (hash: u3mn0kQepWvBqvyqWmoHq9T69SilBVOVh9yMjtw591I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:60:f4:5b:48:e2:64:2e:34:53:d4:dd:bc:13:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ff8a934aeb59aa45a1e55488e3b88be1e0135b
        Validity
            Not Before: Mar 26 01:00:39 2026 GMT
            Not After : Mar 27 01:00:39 2026 GMT
        Subject: CN=f79496100bf2fe78d4711571c4bfe45c5776f559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:27:ee:e8:bb:e0:34:ca:28:16:6a:81:2a:
                    62:6d:7b:08:e6:90:44:df:eb:79:76:4f:87:81:e4:
                    ab:ec:7c:01:3c:a0:c5:9c:fb:03:44:38:bf:5f:29:
                    ad:e1:95:88:88:1d:4d:91:37:05:f3:e3:b3:a3:79:
                    ff:aa:c0:f0:7f:e1:75:2f:c5:0d:28:4a:9b:82:a7:
                    a3:de:26:e3:ed:0d:97:85:73:b6:08:39:59:09:fb:
                    e8:fd:c7:d0:a3:0b:d7:97:12:ea:1e:78:24:f7:b7:
                    11:48:d2:2d:1c:86:c1:92:62:bf:c0:e9:ef:30:dd:
                    54:c4:f5:01:5b:4c:8e:92:4b:a1:9d:ab:ad:d3:89:
                    2c:6e:5e:01:e2:97:5a:14:4e:ae:61:09:64:e5:54:
                    08:a5:75:67:97:63:d1:28:bb:02:d2:f9:49:17:04:
                    c0:2f:43:88:df:de:3f:e6:52:f0:e7:51:60:67:30:
                    f5:94:38:a7:a1:54:7c:5d:2b:5e:be:7f:57:c2:98:
                    9d:38:8a:02:46:50:df:47:a6:0a:6c:0d:3a:39:d1:
                    65:4e:87:81:fd:01:62:aa:9d:00:ea:dd:18:c0:de:
                    28:56:a2:18:b4:5b:8e:1f:ad:25:d2:7f:6b:ac:ba:
                    dc:9a:17:c3:06:5a:d5:4e:91:99:de:ef:52:ae:c8:
                    ac:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:94:96:10:0B:F2:FE:78:D4:71:15:71:C4:BF:E4:5C:57:76:F5:59
            X509v3 Authority Key Identifier:
                keyid:13:FF:8A:93:4A:EB:59:AA:45:A1:E5:54:88:E3:B8:8B:E1:E0:13:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:58:a3:2c:25:44:f5:b8:cf:39:52:28:fe:ab:88:d2:88:df:
         31:a6:a8:1a:43:ac:df:c4:da:0c:c4:45:27:2d:11:72:d0:af:
         8a:67:f0:8c:17:44:4b:e0:12:d0:4c:e0:f0:ae:d4:5d:3e:31:
         33:0b:26:d8:24:be:eb:ba:25:39:31:fe:83:d6:86:08:27:5f:
         4b:39:fe:dd:d1:30:69:35:c7:02:01:fb:61:ce:86:9c:55:6a:
         6e:e9:04:ee:e2:d6:f4:d7:66:6a:d5:21:b5:e3:ce:50:04:40:
         81:49:b0:6f:3b:0d:0d:25:d3:7c:d2:8e:f9:27:73:41:4c:06:
         78:22:d9:f4:49:31:d7:8d:fe:99:21:7b:81:91:ac:7f:9d:4d:
         58:a5:83:9f:78:26:37:b5:32:f2:99:1b:8e:f5:20:46:34:3e:
         cf:a6:64:e1:bf:d6:e9:2a:ba:80:8f:e1:1b:be:dd:2f:cf:0a:
         6b:1c:75:3c:fa:33:84:9e:a9:a7:b4:76:34:4d:08:4c:51:4a:
         59:02:a8:da:11:f9:ec:d9:df:13:8f:df:b5:dc:4c:60:91:fa:
         1e:b2:90:84:25:56:82:94:7a:c1:63:36:16:cc:98:76:ae:65:
         45:b9:c0:fb:eb:ef:61:ea:9d:11:b4:74:8c:45:c9:4a:84:34:
         ab:bc:34:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqGD0W0jiZC40U9TdvBMSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZmY4YTkzNGFlYjU5YWE0NWExZTU1NDg4ZTNiODhiZTFl
MDEzNWIwHhcNMjYwMzI2MDEwMDM5WhcNMjYwMzI3MDEwMDM5WjAzMTEwLwYDVQQD
EyhmNzk0OTYxMDBiZjJmZTc4ZDQ3MTE1NzFjNGJmZTQ1YzU3NzZmNTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9cn7ui74DTKKBZqgSpibXsI5pBE
3+t5dk+HgeSr7HwBPKDFnPsDRDi/Xymt4ZWIiB1NkTcF8+Ozo3n/qsDwf+F1L8UN
KEqbgqej3ibj7Q2XhXO2CDlZCfvo/cfQowvXlxLqHngk97cRSNItHIbBkmK/wOnv
MN1UxPUBW0yOkkuhnaut04ksbl4B4pdaFE6uYQlk5VQIpXVnl2PRKLsC0vlJFwTA
L0OI394/5lLw51FgZzD1lDinoVR8XStevn9XwpidOIoCRlDfR6YKbA06OdFlToeB
/QFiqp0A6t0YwN4oVqIYtFuOH60l0n9rrLrcmhfDBlrVTpGZ3u9SrsisCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeUlhAL8v541HEVccS/5FxXdvVZMB8GA1UdIwQY
MBaAFBP/ipNK61mqRaHlVIjjuIvh4BNbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRV8tS2swcnJXYXBGb2VWVWlPTzRpLUhnRTFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jOTJjNTgtYzcyNy00ZGUwLTg0YTYt
N2NmNGRjNjdhYTcwLzEvRV8tS2swcnJXYXBGb2VWVWlPTzRpLUhnRTFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jOTJjNTgtYzcyNy00ZGUwLTg0YTYtN2NmNGRjNjdhYTcw
LzEvRV8tS2swcnJXYXBGb2VWVWlPTzRpLUhnRTFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFijLCVE
9bjPOVIo/quI0ojfMaaoGkOs38TaDMRFJy0RctCvimfwjBdES+AS0Ezg8K7UXT4x
Mwsm2CS+67olOTH+g9aGCCdfSzn+3dEwaTXHAgH7Yc6GnFVqbukE7uLW9NdmatUh
tePOUARAgUmwbzsNDSXTfNKO+SdzQUwGeCLZ9Ekx143+mSF7gZGsf51NWKWDn3gm
N7Uy8pkbjvUgRjQ+z6Zk4b/W6Sq6gI/hG77dL88Kaxx1PPozhJ6pp7R2NE0ITFFK
WQKo2hH57NnfE4/ftdxMYJH6HrKQhCVWgpR6wWM2FsyYdq5lRbnA++vvYeqdEbR0
jEXJSoQ0q7w0Ew==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:58:35 2026 by rpki-client