Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
File:                     7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft (raw, json)
Hash identifier:          LyBXUKsw0wwxiWYJprxTTEHJtwjiImAdkHwmgn3sLOU=
Subject key identifier:   EE:65:29:CA:FC:82:5E:5F:2E:8C:D5:A9:62:5D:8C:A0:55:F6:41:4D
Authority key identifier: ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8
Certificate issuer:       /CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
Certificate serial:       019D2CCF4F70EC0DA990E19C2422A40D6317
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
Manifest number:          0528
Signing time:             Fri 27 Mar 2026 01:01:16 +0000
Manifest this update:     Fri 27 Mar 2026 01:01:16 +0000
Manifest next update:     Sat 28 Mar 2026 01:01:16 +0000
Files and hashes:         1: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl (hash: TusoIBuPlN8XWXlDQ8jm2cH1NR4EkIQr7mP/o3EMa/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2c:cf:4f:70:ec:0d:a9:90:e1:9c:24:22:a4:0d:63:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
        Validity
            Not Before: Mar 27 01:01:16 2026 GMT
            Not After : Mar 28 01:01:16 2026 GMT
        Subject: CN=ee6529cafc825e5f2e8cd5a9625d8ca055f6414d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:59:b1:38:fe:58:93:85:17:41:1b:e7:1c:33:
                    47:76:02:10:0f:52:fe:65:82:e9:44:bb:e7:b7:c3:
                    c6:c3:df:c4:64:a1:03:a7:9b:25:c6:f8:59:10:96:
                    80:c8:1b:17:be:12:ae:b5:aa:b6:f7:b2:37:18:d0:
                    24:b7:f9:a1:8b:12:3d:f0:ad:f6:db:89:0b:a3:83:
                    57:01:3d:e7:fb:4a:10:0f:a9:4d:39:45:73:82:af:
                    63:f5:39:3b:97:3c:28:55:7b:43:46:e4:c8:81:53:
                    60:45:2d:09:44:b0:54:3e:18:1c:ec:33:ec:e0:43:
                    44:2f:46:60:53:99:b4:22:b4:62:3e:2f:0b:a3:99:
                    cd:70:5d:95:3f:7c:c1:57:a8:db:b7:29:ff:89:43:
                    e3:11:4e:f6:b6:7e:5b:9f:a8:f6:a7:e7:17:6d:65:
                    fd:5b:f0:14:29:8b:25:5f:e5:5c:58:d6:b0:e3:1d:
                    14:5a:79:30:3c:53:81:c1:e3:fb:f9:d5:e7:bd:b5:
                    ad:85:50:59:34:f2:5f:88:1b:b2:0a:aa:00:e2:58:
                    e4:1c:b8:70:9d:27:bc:0e:13:2d:8a:05:7b:16:01:
                    0c:57:2e:75:7b:4e:d4:54:c5:98:1b:db:a6:1c:75:
                    69:8e:84:62:21:94:d2:b6:e2:19:96:bb:50:bc:b9:
                    4f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:65:29:CA:FC:82:5E:5F:2E:8C:D5:A9:62:5D:8C:A0:55:F6:41:4D
            X509v3 Authority Key Identifier:
                keyid:ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ab:6f:a3:38:3c:fb:85:98:24:05:1c:ec:60:17:ca:71:1c:
         78:72:e8:3a:6c:8c:29:aa:cf:ca:af:c0:54:fe:ec:9e:27:42:
         e1:c1:96:3d:32:65:b3:ca:21:b4:1b:35:2d:13:2b:39:15:86:
         ec:ef:e2:df:93:0d:26:69:9e:c1:8a:33:75:27:22:15:9e:e5:
         f2:e6:58:79:8b:a6:fb:4d:70:ba:8a:ce:9f:ba:63:de:58:1c:
         eb:5c:62:ca:8b:55:ba:e6:b1:45:01:aa:c1:8b:39:b6:73:b5:
         8d:bc:5b:ba:11:e1:3f:fb:7b:e0:10:02:eb:c9:02:38:0b:ee:
         8e:ce:15:80:4b:cf:d7:32:9c:64:34:33:da:21:93:72:83:7a:
         2a:5d:ba:a4:ed:3d:a9:b5:37:39:30:70:df:d7:fe:c0:19:95:
         66:f7:bb:8f:13:92:c8:03:a7:70:ee:d0:7c:4a:28:e8:1f:5f:
         f9:6d:04:cc:be:9b:1b:c0:a4:5b:40:af:66:3d:f9:82:9f:f4:
         c0:48:88:67:00:80:eb:91:df:70:e3:9f:22:29:bc:7d:4c:97:
         57:3d:18:8e:2a:c6:2d:69:4b:35:8b:8f:a8:c6:92:6e:53:c7:
         49:4d:a3:fe:d4:38:d5:4e:d1:51:e6:4e:c0:0a:c0:79:36:f4:
         d6:64:7d:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0sz09w7A2pkOGcJCKkDWMXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkMWI2YWRjOTk0OTdmZDFiMzBhMGE0ODJlZGM0MDJiMGM0
ZjBjZjgwHhcNMjYwMzI3MDEwMTE2WhcNMjYwMzI4MDEwMTE2WjAzMTEwLwYDVQQD
EyhlZTY1MjljYWZjODI1ZTVmMmU4Y2Q1YTk2MjVkOGNhMDU1ZjY0MTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFmxOP5Yk4UXQRvnHDNHdgIQD1L+
ZYLpRLvnt8PGw9/EZKEDp5slxvhZEJaAyBsXvhKutaq297I3GNAkt/mhixI98K32
24kLo4NXAT3n+0oQD6lNOUVzgq9j9Tk7lzwoVXtDRuTIgVNgRS0JRLBUPhgc7DPs
4ENEL0ZgU5m0IrRiPi8Lo5nNcF2VP3zBV6jbtyn/iUPjEU72tn5bn6j2p+cXbWX9
W/AUKYslX+VcWNaw4x0UWnkwPFOBweP7+dXnvbWthVBZNPJfiBuyCqoA4ljkHLhw
nSe8DhMtigV7FgEMVy51e07UVMWYG9umHHVpjoRiIZTStuIZlrtQvLlPFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5lKcr8gl5fLozVqWJdjKBV9kFNMB8GA1UdIwQY
MBaAFO0batyZSX/RswoKSC7cQCsMTwz4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1J0cTNKbEpmOUd6Q2dwSUx0eEFLd3hQRFBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy80NjkyYzMtYTkwZC00MWI4LWFhZTgt
MmM5NmZiODU1NTdhLzEvN1J0cTNKbEpmOUd6Q2dwSUx0eEFLd3hQRFBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy80NjkyYzMtYTkwZC00MWI4LWFhZTgtMmM5NmZiODU1NTdh
LzEvN1J0cTNKbEpmOUd6Q2dwSUx0eEFLd3hQRFBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqtvozg8
+4WYJAUc7GAXynEceHLoOmyMKarPyq/AVP7snidC4cGWPTJls8ohtBs1LRMrORWG
7O/i35MNJmmewYozdSciFZ7l8uZYeYum+01wuorOn7pj3lgc61xiyotVuuaxRQGq
wYs5tnO1jbxbuhHhP/t74BAC68kCOAvujs4VgEvP1zKcZDQz2iGTcoN6Kl26pO09
qbU3OTBw39f+wBmVZve7jxOSyAOncO7QfEoo6B9f+W0EzL6bG8CkW0CvZj35gp/0
wEiIZwCA65HfcOOfIim8fUyXVz0YjirGLWlLNYuPqMaSblPHSU2j/tQ41U7RUeZO
wArAeTb01mR9XA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 04:59:13 2026 by rpki-client