Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
File:                     7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft (raw, json)
Hash identifier:          3h/YKTR7Iy5PqpNNUwI62/I9EyTbzym2AfYCU0dB3W8=
Subject key identifier:   BC:14:A8:6E:47:38:FB:E1:F5:97:82:47:55:29:16:68:39:70:FD:AD
Authority key identifier: EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19
Certificate issuer:       /CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
Certificate serial:       019D2B4ECB26330C798ABE169CB207F325F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
Manifest number:          10DF
Signing time:             Thu 26 Mar 2026 18:01:17 +0000
Manifest this update:     Thu 26 Mar 2026 18:01:17 +0000
Manifest next update:     Fri 27 Mar 2026 18:01:17 +0000
Files and hashes:         1: 7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl (hash: Oit2PjCjNcqomTLUrQokBQ9vH+sEcxozAJlmk/wAllY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:4e:cb:26:33:0c:79:8a:be:16:9c:b2:07:f3:25:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
        Validity
            Not Before: Mar 26 18:01:17 2026 GMT
            Not After : Mar 27 18:01:17 2026 GMT
        Subject: CN=bc14a86e4738fbe1f5978247552916683970fdad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1c:96:0b:8e:25:61:6c:d1:b1:f1:cf:64:bb:
                    53:f7:42:1c:da:83:2c:39:52:d1:49:1a:5a:bb:f4:
                    d7:ce:f9:d8:7f:70:64:11:44:2a:2f:a5:56:74:f2:
                    6a:db:dd:e9:30:e5:d9:12:ac:d8:b8:f0:d0:c9:11:
                    af:33:bc:0f:e0:50:4f:6f:90:b1:c4:a1:0f:76:23:
                    fc:20:27:c2:fd:16:87:c9:46:9d:ee:d0:92:5b:33:
                    bb:8a:1c:a9:1a:87:50:22:8c:81:94:6a:90:a0:67:
                    0e:97:b6:b4:1b:3b:54:85:eb:71:29:b0:99:d7:2b:
                    7e:45:17:e4:23:e8:65:84:8b:02:4f:e4:36:0a:2b:
                    1f:66:6a:83:01:14:8f:41:ef:1e:4d:83:b4:21:43:
                    f1:b6:65:63:07:f2:ba:0e:b9:4d:fc:c4:2a:36:e7:
                    79:e7:28:0a:34:b8:4d:45:a0:e5:85:db:7c:83:84:
                    e5:3e:87:17:32:e4:5f:c0:07:20:a1:e8:ec:73:c6:
                    6e:20:a5:72:28:10:6d:ed:73:8c:bf:13:34:10:c1:
                    0a:31:de:5d:ef:8b:76:96:27:8c:32:b6:97:03:b7:
                    b6:d5:9d:5f:1d:e4:ae:6f:c2:fa:75:c0:5e:a8:81:
                    3d:7b:2d:74:c1:d4:35:88:dd:75:aa:d0:1a:c4:0c:
                    1c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:14:A8:6E:47:38:FB:E1:F5:97:82:47:55:29:16:68:39:70:FD:AD
            X509v3 Authority Key Identifier:
                keyid:EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:da:21:69:7d:b2:ca:a7:3c:8f:57:69:3d:95:c9:8f:df:9d:
         24:ee:35:d5:ce:e8:8c:c1:3f:07:24:72:25:34:1c:89:db:22:
         84:46:c1:b4:95:e5:36:27:ae:d8:ce:53:a4:16:e2:14:75:24:
         85:8b:e3:9a:46:e3:46:64:48:fa:5f:b8:fa:a2:96:63:e7:b8:
         e7:e2:de:6a:93:c4:02:ef:86:1f:d5:a1:ce:a3:8d:4a:cb:f8:
         5a:aa:4f:85:00:37:44:19:b5:4e:7c:66:de:72:25:4e:17:63:
         07:8b:99:f7:e7:1b:1c:2d:73:7a:81:8b:25:c5:59:c7:2e:c1:
         0a:de:a9:20:00:2e:81:c1:65:53:09:78:bd:12:d3:96:3d:f2:
         0c:b9:d1:93:ab:9b:b4:b4:13:3f:ef:2f:01:1e:a9:7e:d7:9b:
         8c:f4:05:e7:f8:e3:b3:64:5f:28:87:60:60:5b:27:da:f1:f4:
         66:00:e4:a7:21:c6:db:dd:11:0e:01:be:71:9d:17:81:b5:5c:
         2e:09:da:cd:20:ef:f5:af:be:ef:0d:05:70:35:bf:b7:99:c4:
         7b:f2:b4:e0:09:72:71:ed:d9:f0:4a:30:1e:8c:8f:6b:50:3e:
         15:8f:7c:a0:12:d5:a4:22:93:cd:a4:bf:00:19:64:bd:cd:7d:
         ac:91:e3:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rTssmMwx5ir4WnLIH8yX1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZmM4YTZmM2M0NGI4ZWRkMTc3ZmU1MWE1OTk5MTU4Yjhk
Y2Y4MTkwHhcNMjYwMzI2MTgwMTE3WhcNMjYwMzI3MTgwMTE3WjAzMTEwLwYDVQQD
EyhiYzE0YTg2ZTQ3MzhmYmUxZjU5NzgyNDc1NTI5MTY2ODM5NzBmZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xyWC44lYWzRsfHPZLtT90Ic2oMs
OVLRSRpau/TXzvnYf3BkEUQqL6VWdPJq293pMOXZEqzYuPDQyRGvM7wP4FBPb5Cx
xKEPdiP8ICfC/RaHyUad7tCSWzO7ihypGodQIoyBlGqQoGcOl7a0GztUhetxKbCZ
1yt+RRfkI+hlhIsCT+Q2CisfZmqDARSPQe8eTYO0IUPxtmVjB/K6DrlN/MQqNud5
5ygKNLhNRaDlhdt8g4TlPocXMuRfwAcgoejsc8ZuIKVyKBBt7XOMvxM0EMEKMd5d
74t2lieMMraXA7e21Z1fHeSub8L6dcBeqIE9ey10wdQ1iN11qtAaxAwc8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwUqG5HOPvh9ZeCR1UpFmg5cP2tMB8GA1UdIwQY
MBaAFO/8im88RLjt0Xf+UaWZkVi43PgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN195S2J6eEV1TzNSZF81UnBabVJXTGpjLUJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hZDI2YmEtMDMxNC00ZmY5LWEzOWQt
NmRkOTM4NzE0MWE4LzEvN195S2J6eEV1TzNSZF81UnBabVJXTGpjLUJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9hZDI2YmEtMDMxNC00ZmY5LWEzOWQtNmRkOTM4NzE0MWE4
LzEvN195S2J6eEV1TzNSZF81UnBabVJXTGpjLUJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdohaX2y
yqc8j1dpPZXJj9+dJO411c7ojME/ByRyJTQcidsihEbBtJXlNieu2M5TpBbiFHUk
hYvjmkbjRmRI+l+4+qKWY+e45+LeapPEAu+GH9WhzqONSsv4WqpPhQA3RBm1Tnxm
3nIlThdjB4uZ9+cbHC1zeoGLJcVZxy7BCt6pIAAugcFlUwl4vRLTlj3yDLnRk6ub
tLQTP+8vAR6pftebjPQF5/jjs2RfKIdgYFsn2vH0ZgDkpyHG290RDgG+cZ0XgbVc
LgnazSDv9a++7w0FcDW/t5nEe/K04Alyce3Z8EowHoyPa1A+FY98oBLVpCKTzaS/
ABlkvc19rJHj9g==
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:35:55 2026 by rpki-client