Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
File:                     5llE5PrhnBWib8tfJzL_G6I9NU0.mft (raw, json)
Hash identifier:          TUkpqK86oLXo8STEiOb6+kmtqjHaav8rIlIyqNteltY=
Subject key identifier:   EE:E7:51:E7:CA:B7:2D:CB:3B:F9:D8:C2:71:78:3A:E7:BB:DA:F5:34
Authority key identifier: E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D
Certificate issuer:       /CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d
Certificate serial:       019D2B4F0124CCA82021D2A885498FBF860C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
Manifest number:          0547
Signing time:             Thu 26 Mar 2026 18:01:31 +0000
Manifest this update:     Thu 26 Mar 2026 18:01:31 +0000
Manifest next update:     Fri 27 Mar 2026 18:01:31 +0000
Files and hashes:         1: 5llE5PrhnBWib8tfJzL_G6I9NU0.crl (hash: GBRC0hehwi91H8Z5F2DcKNXKXwCBsRtjUGiH4P1fQc8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:4f:01:24:cc:a8:20:21:d2:a8:85:49:8f:bf:86:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d
        Validity
            Not Before: Mar 26 18:01:31 2026 GMT
            Not After : Mar 27 18:01:31 2026 GMT
        Subject: CN=eee751e7cab72dcb3bf9d8c271783ae7bbdaf534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d8:2a:fc:c2:ae:38:7b:e7:53:75:0e:24:2f:
                    e1:15:01:93:68:43:ff:41:a9:8c:7a:ac:d0:26:26:
                    30:3a:7d:9c:18:30:3e:98:64:38:14:3e:bb:55:0a:
                    2f:9e:fc:0c:96:5d:fe:3c:ff:fd:45:ec:55:58:16:
                    e2:83:ac:44:de:0f:78:8b:39:22:39:10:b0:1a:c8:
                    00:b1:29:38:aa:bb:e1:9b:9e:1e:26:20:b3:24:3c:
                    2a:bb:3e:70:24:f7:7a:5a:a1:1c:bc:73:7b:4b:27:
                    60:4f:c0:e6:ee:32:b1:7f:89:ad:bc:da:0a:1f:50:
                    1b:0c:65:a7:f5:95:fc:62:11:ae:16:42:af:87:8f:
                    8c:cb:83:f0:ca:5d:7d:f7:62:9f:8e:e9:02:48:d9:
                    25:f6:59:f6:33:d1:77:48:e0:55:85:4f:cc:76:17:
                    35:0c:b7:a1:f9:42:ad:b9:6b:1e:49:74:63:ea:ed:
                    d5:d5:d6:4a:83:12:17:2d:74:7b:ed:45:5d:f4:71:
                    29:5c:46:68:f0:a7:1e:09:68:fd:37:2c:b1:44:42:
                    73:0d:02:9c:ca:71:d3:f8:8a:3b:2d:59:36:06:5a:
                    9b:a8:00:10:5e:ee:27:08:1d:64:87:38:6d:0e:70:
                    f4:43:74:c5:be:fb:66:a1:1a:15:66:dc:54:74:58:
                    ad:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E7:51:E7:CA:B7:2D:CB:3B:F9:D8:C2:71:78:3A:E7:BB:DA:F5:34
            X509v3 Authority Key Identifier:
                keyid:E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:35:b9:82:b3:e8:b9:9a:49:57:f9:2b:e9:d6:1a:37:66:76:
         54:cb:d2:1c:d5:be:02:14:f8:2a:8d:4d:88:d2:cb:9b:55:75:
         1f:f4:bb:65:c5:a8:1a:63:a2:38:b5:ea:bf:3a:ac:ef:aa:00:
         8c:74:fb:7e:98:2b:df:0f:ee:81:0e:0c:9e:ff:c2:56:ed:22:
         b4:55:2e:2b:d3:ba:ff:40:24:53:a4:f5:9d:22:b3:52:9a:d6:
         e7:3d:aa:77:d3:1e:66:0a:b9:2a:2e:12:91:06:ff:ff:5a:1a:
         0c:81:b8:23:21:5c:ba:b7:2f:2e:5b:93:4b:1e:17:40:84:d7:
         e0:66:3b:2e:36:2a:33:e2:4e:57:32:1b:b2:fb:da:55:4d:c6:
         64:6a:ef:d0:bd:2a:00:4d:48:bf:72:13:57:bb:7e:30:fb:b6:
         b9:31:bc:60:86:a7:47:ba:ae:2b:5a:04:b3:45:df:27:ba:6c:
         d9:f0:b2:78:f3:8d:a2:71:ee:00:06:36:d1:b9:4c:3d:f5:83:
         65:63:68:12:2c:7e:34:29:30:51:a5:da:89:9b:f5:e6:f7:38:
         5d:92:17:3f:cf:da:b6:10:32:f9:cf:95:e3:3b:78:a1:72:3b:
         4b:c0:2e:2e:dd:45:de:7d:82:17:6f:4f:04:1d:bc:8f:aa:59:
         bf:a8:f0:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rTwEkzKggIdKohUmPv4YMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NTk0NGU0ZmFlMTljMTVhMjZmY2I1ZjI3MzJmZjFiYTIz
ZDM1NGQwHhcNMjYwMzI2MTgwMTMxWhcNMjYwMzI3MTgwMTMxWjAzMTEwLwYDVQQD
EyhlZWU3NTFlN2NhYjcyZGNiM2JmOWQ4YzI3MTc4M2FlN2JiZGFmNTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNgq/MKuOHvnU3UOJC/hFQGTaEP/
QamMeqzQJiYwOn2cGDA+mGQ4FD67VQovnvwMll3+PP/9RexVWBbig6xE3g94izki
ORCwGsgAsSk4qrvhm54eJiCzJDwquz5wJPd6WqEcvHN7SydgT8Dm7jKxf4mtvNoK
H1AbDGWn9ZX8YhGuFkKvh4+My4Pwyl1992KfjukCSNkl9ln2M9F3SOBVhU/Mdhc1
DLeh+UKtuWseSXRj6u3V1dZKgxIXLXR77UVd9HEpXEZo8KceCWj9NyyxREJzDQKc
ynHT+Io7LVk2BlqbqAAQXu4nCB1khzhtDnD0Q3TFvvtmoRoVZtxUdFitOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7nUefKty3LO/nYwnF4Oue72vU0MB8GA1UdIwQY
MBaAFOZZROT64ZwVom/LXycy/xuiPTVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWxsRTVQcmhuQldpYjh0Zkp6TF9HNkk5TlUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83M2RhMGQtZmM4Mi00NTcyLTg4ZDMt
Njk4Y2M3MjY4ODgwLzEvNWxsRTVQcmhuQldpYjh0Zkp6TF9HNkk5TlUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83M2RhMGQtZmM4Mi00NTcyLTg4ZDMtNjk4Y2M3MjY4ODgw
LzEvNWxsRTVQcmhuQldpYjh0Zkp6TF9HNkk5TlUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTW5grPo
uZpJV/kr6dYaN2Z2VMvSHNW+AhT4Ko1NiNLLm1V1H/S7ZcWoGmOiOLXqvzqs76oA
jHT7fpgr3w/ugQ4Mnv/CVu0itFUuK9O6/0AkU6T1nSKzUprW5z2qd9MeZgq5Ki4S
kQb//1oaDIG4IyFcurcvLluTSx4XQITX4GY7LjYqM+JOVzIbsvvaVU3GZGrv0L0q
AE1Iv3ITV7t+MPu2uTG8YIanR7quK1oEs0XfJ7ps2fCyePONonHuAAY20blMPfWD
ZWNoEix+NCkwUaXaiZv15vc4XZIXP8/athAy+c+V4zt4oXI7S8AuLt1F3n2CF29P
BB28j6pZv6jwOg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:47:02 2026 by rpki-client