Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.mft
File:                     H65TutIFt6PYV3Frsky_DVW_D2w.mft (raw, json)
Hash identifier:          iTA9JgwZ89s1weyBec6DSlkHIAFk3NqeBH5MG8akfOs=
Subject key identifier:   8C:E2:77:DD:22:F2:07:DD:68:3F:40:C8:6B:85:FB:40:61:07:6B:83
Authority key identifier: 1F:AE:53:BA:D2:05:B7:A3:D8:57:71:6B:B2:4C:BF:0D:55:BF:0F:6C
Certificate issuer:       /CN=1fae53bad205b7a3d857716bb24cbf0d55bf0f6c
Certificate serial:       019D26CD2ADA8B3604713F9B99D01A04CB1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H65TutIFt6PYV3Frsky_DVW_D2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.mft
Manifest number:          0C3B
Signing time:             Wed 25 Mar 2026 21:01:13 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:13 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:13 +0000
Files and hashes:         1: H65TutIFt6PYV3Frsky_DVW_D2w.crl (hash: lmK6AfEesCwm2EPqINf6ubjHrjopoxWNgPx1K8VBIGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H65TutIFt6PYV3Frsky_DVW_D2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:2a:da:8b:36:04:71:3f:9b:99:d0:1a:04:cb:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fae53bad205b7a3d857716bb24cbf0d55bf0f6c
        Validity
            Not Before: Mar 25 21:01:13 2026 GMT
            Not After : Mar 26 21:01:13 2026 GMT
        Subject: CN=8ce277dd22f207dd683f40c86b85fb4061076b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:12:17:4d:28:39:2a:31:c7:03:ee:1e:3f:26:
                    38:79:7b:8d:99:47:7e:f0:09:e2:db:1a:20:82:2c:
                    11:ae:8c:37:63:bd:46:98:fa:34:83:b3:c3:8c:ab:
                    bd:24:76:3a:69:4b:d1:96:8b:99:21:80:9c:0f:5c:
                    69:d0:00:8e:33:ec:b5:f2:12:2d:11:e0:fd:79:97:
                    d9:b4:58:95:d5:76:dc:0f:c1:c5:7b:b1:13:b6:a0:
                    3e:fb:27:99:4d:36:be:ce:d8:cf:1c:9b:6d:8f:06:
                    93:8c:ff:ca:51:99:47:f7:cd:f2:1e:bd:c8:15:73:
                    9c:88:19:5b:12:35:73:1b:38:42:6a:32:e8:06:ab:
                    c9:a6:1a:39:8f:9b:3b:90:d7:df:1c:1c:0b:31:41:
                    ee:ef:67:70:56:66:f2:38:cd:7b:de:78:83:2f:ee:
                    75:db:02:21:51:d0:3d:a5:6b:96:93:42:87:04:f4:
                    93:20:aa:12:6a:7e:60:40:5e:69:32:0a:4b:15:07:
                    dd:3a:98:9c:9f:d1:4c:5a:c4:61:f8:fa:89:be:4c:
                    3c:6e:43:ed:e9:92:57:92:52:6e:cb:25:4d:24:7a:
                    ef:82:bc:ff:0f:4b:6f:eb:9f:02:d6:de:6f:2c:c7:
                    fa:0f:0e:b2:95:7f:c9:90:ab:6b:7c:62:90:61:a5:
                    6c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E2:77:DD:22:F2:07:DD:68:3F:40:C8:6B:85:FB:40:61:07:6B:83
            X509v3 Authority Key Identifier:
                keyid:1F:AE:53:BA:D2:05:B7:A3:D8:57:71:6B:B2:4C:BF:0D:55:BF:0F:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H65TutIFt6PYV3Frsky_DVW_D2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:76:28:7c:c0:51:a0:ec:ef:49:a6:dc:f4:b6:1b:b6:25:e7:
         ef:3c:2a:8c:5b:00:72:23:5c:36:a0:37:d4:a1:86:e4:70:6a:
         0a:16:c1:5a:aa:bb:eb:c9:ee:9c:f0:90:58:a4:9a:13:da:46:
         8b:ee:2c:53:df:2c:67:eb:23:d3:92:80:ed:aa:e9:48:38:2b:
         83:41:86:19:7b:0d:f2:da:9f:92:2c:27:2f:fe:1d:e5:b8:36:
         26:2a:66:ce:e5:f4:ae:e5:23:33:e7:31:47:2d:63:6f:4f:eb:
         f3:e9:37:3a:51:ee:be:6f:2a:0c:e4:c6:1c:06:75:08:06:7b:
         43:a0:5e:fc:68:cc:ad:e9:e5:ed:13:c5:95:38:4d:45:f0:e1:
         28:ad:10:f4:6f:87:80:84:b0:b6:a4:94:29:92:dc:5f:24:03:
         81:c6:9d:5b:c2:ea:27:3b:c1:2d:ca:89:da:1b:e7:5d:3f:3a:
         d3:b9:d8:cf:fa:35:d5:01:58:ac:f9:5c:89:9b:db:3a:6f:31:
         56:99:56:9f:69:72:12:e3:8e:a9:92:13:24:26:74:69:57:8a:
         b7:f1:f6:27:8b:f8:53:a9:4b:45:3e:19:19:07:6b:d7:28:51:
         8a:62:a4:b6:58:52:87:bf:a9:69:d8:64:a9:1e:08:01:95:98:
         30:0c:77:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzSraizYEcT+bmdAaBMseMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYWU1M2JhZDIwNWI3YTNkODU3NzE2YmIyNGNiZjBkNTVi
ZjBmNmMwHhcNMjYwMzI1MjEwMTEzWhcNMjYwMzI2MjEwMTEzWjAzMTEwLwYDVQQD
Eyg4Y2UyNzdkZDIyZjIwN2RkNjgzZjQwYzg2Yjg1ZmI0MDYxMDc2YjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxIXTSg5KjHHA+4ePyY4eXuNmUd+
8Ani2xoggiwRrow3Y71GmPo0g7PDjKu9JHY6aUvRlouZIYCcD1xp0ACOM+y18hIt
EeD9eZfZtFiV1XbcD8HFe7ETtqA++yeZTTa+ztjPHJttjwaTjP/KUZlH983yHr3I
FXOciBlbEjVzGzhCajLoBqvJpho5j5s7kNffHBwLMUHu72dwVmbyOM173niDL+51
2wIhUdA9pWuWk0KHBPSTIKoSan5gQF5pMgpLFQfdOpicn9FMWsRh+PqJvkw8bkPt
6ZJXklJuyyVNJHrvgrz/D0tv658C1t5vLMf6Dw6ylX/JkKtrfGKQYaVsOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzid90i8gfdaD9AyGuF+0BhB2uDMB8GA1UdIwQY
MBaAFB+uU7rSBbej2Fdxa7JMvw1Vvw9sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDY1VHV0SUZ0NlBZVjNGcnNreV9EVldfRDJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy84NmM3ODktNzRmZi00NDU2LWI3NWEt
M2FjNGFkMjllNDZlLzEvSDY1VHV0SUZ0NlBZVjNGcnNreV9EVldfRDJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy84NmM3ODktNzRmZi00NDU2LWI3NWEtM2FjNGFkMjllNDZl
LzEvSDY1VHV0SUZ0NlBZVjNGcnNreV9EVldfRDJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo3YofMBR
oOzvSabc9LYbtiXn7zwqjFsAciNcNqA31KGG5HBqChbBWqq768nunPCQWKSaE9pG
i+4sU98sZ+sj05KA7arpSDgrg0GGGXsN8tqfkiwnL/4d5bg2JipmzuX0ruUjM+cx
Ry1jb0/r8+k3OlHuvm8qDOTGHAZ1CAZ7Q6Be/GjMrenl7RPFlThNRfDhKK0Q9G+H
gISwtqSUKZLcXyQDgcadW8LqJzvBLcqJ2hvnXT8607nYz/o11QFYrPlciZvbOm8x
VplWn2lyEuOOqZITJCZ0aVeKt/H2J4v4U6lLRT4ZGQdr1yhRimKktlhSh7+padhk
qR4IAZWYMAx3vQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:16 2026 by rpki-client