Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
File:                     pyDgfSiyYVg7b_sWSYzefUfjQlw.mft (raw, json)
Hash identifier:          Dvcbt8q+I6uKZBanqUIvNUv1G4zk3+JoevrjpcINmnc=
Subject key identifier:   84:A4:B3:0C:CB:3A:46:F0:EA:1F:34:04:18:8F:5D:D3:D0:41:7D:62
Authority key identifier: A7:20:E0:7D:28:B2:61:58:3B:6F:FB:16:49:8C:DE:7D:47:E3:42:5C
Certificate issuer:       /CN=a720e07d28b261583b6ffb16498cde7d47e3425c
Certificate serial:       019D2703FC10747132666C266DD037969FF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
Manifest number:          1050
Signing time:             Wed 25 Mar 2026 22:01:05 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:05 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:05 +0000
Files and hashes:         1: pyDgfSiyYVg7b_sWSYzefUfjQlw.crl (hash: 1jfQI7+APkToJ4iaR1BODEn3RHA9PdvB2tMbViBd4vs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:fc:10:74:71:32:66:6c:26:6d:d0:37:96:9f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a720e07d28b261583b6ffb16498cde7d47e3425c
        Validity
            Not Before: Mar 25 22:01:05 2026 GMT
            Not After : Mar 26 22:01:05 2026 GMT
        Subject: CN=84a4b30ccb3a46f0ea1f3404188f5dd3d0417d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:26:4c:5f:9f:bc:66:5b:5a:2f:47:a3:2d:6a:
                    81:8d:69:25:cc:bf:37:7a:bb:95:14:9c:ac:ab:c0:
                    e1:44:38:20:a6:7d:64:01:31:59:c9:52:9b:0e:6e:
                    e4:11:5f:f5:56:8a:cd:d5:2b:44:d3:9d:c3:c7:41:
                    91:ca:ee:28:93:17:78:9e:b5:2a:59:09:be:bb:6c:
                    a9:6c:54:4f:4b:63:da:cc:76:20:dd:c3:50:bd:09:
                    61:81:ba:60:ab:fb:fd:2f:99:ce:a6:b4:54:ff:ec:
                    c4:95:42:ec:51:2e:85:71:b3:f3:66:7a:4e:db:18:
                    02:5e:9d:3c:c5:72:d3:3d:40:77:60:d6:73:db:c5:
                    cc:7b:a7:3c:83:d0:d1:61:c8:14:16:32:0c:c2:ef:
                    ef:76:1c:9b:45:d7:b6:4c:6c:73:c2:a1:2e:c7:a6:
                    14:f4:cd:e4:c4:4e:97:61:83:c6:a1:ae:63:5a:d1:
                    d6:02:40:60:2c:39:bd:7c:69:48:ee:78:d1:4e:f9:
                    24:ff:bd:cb:9d:5c:f8:0e:0c:91:be:df:f9:4c:37:
                    14:8a:bd:ca:59:b8:28:76:7e:cc:34:d8:8f:b5:ed:
                    29:f2:87:c7:4c:f7:a3:f6:41:8e:d3:2e:b6:57:26:
                    db:87:1e:d1:48:f5:79:47:2d:ac:24:f5:e3:7b:b6:
                    b6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A4:B3:0C:CB:3A:46:F0:EA:1F:34:04:18:8F:5D:D3:D0:41:7D:62
            X509v3 Authority Key Identifier:
                keyid:A7:20:E0:7D:28:B2:61:58:3B:6F:FB:16:49:8C:DE:7D:47:E3:42:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:35:1f:a1:01:b9:e9:b9:a2:3d:24:c6:3e:90:03:68:21:98:
         d3:11:da:16:d1:54:c9:0e:97:c5:9a:8b:86:6e:99:ca:3c:d0:
         37:03:62:71:50:d0:b1:cd:1c:2e:ad:c4:d3:1a:6e:23:b8:2d:
         ac:70:ab:c8:26:3c:10:0f:1b:0d:c9:d9:b9:ab:fc:03:bf:96:
         90:00:48:03:bb:82:95:bd:6a:b7:d9:54:46:83:9a:93:3c:ca:
         60:52:41:fb:16:f1:65:87:7e:d5:9a:47:ea:6b:d1:f7:f7:0c:
         75:d5:bb:5d:20:5b:bc:e0:52:1c:6f:6c:bf:39:34:45:1b:91:
         4e:72:2c:aa:13:08:f9:a9:d6:71:ce:f9:1a:ab:0d:8b:22:96:
         49:c7:a0:47:2e:a5:c8:9e:28:83:69:f7:81:1e:42:ed:59:6f:
         fb:08:20:e6:95:15:63:c2:e5:d9:2f:0e:1b:94:30:76:92:a7:
         b9:9d:f7:5d:94:88:32:1d:de:1b:0d:4f:f1:4c:5f:22:fc:82:
         e6:71:88:9e:61:86:8b:a3:0f:e4:bb:9e:8d:60:f1:55:7c:cc:
         e6:1e:68:21:40:57:29:14:ce:55:72:4d:7f:f8:4b:ae:6f:04:
         00:e7:aa:6b:ee:d6:d8:33:63:60:6c:56:5d:0e:82:18:67:c9:
         a8:e9:a3:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA/wQdHEyZmwmbdA3lp/yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MjBlMDdkMjhiMjYxNTgzYjZmZmIxNjQ5OGNkZTdkNDdl
MzQyNWMwHhcNMjYwMzI1MjIwMTA1WhcNMjYwMzI2MjIwMTA1WjAzMTEwLwYDVQQD
Eyg4NGE0YjMwY2NiM2E0NmYwZWExZjM0MDQxODhmNWRkM2QwNDE3ZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSZMX5+8ZltaL0ejLWqBjWklzL83
eruVFJysq8DhRDggpn1kATFZyVKbDm7kEV/1VorN1StE053Dx0GRyu4okxd4nrUq
WQm+u2ypbFRPS2PazHYg3cNQvQlhgbpgq/v9L5nOprRU/+zElULsUS6FcbPzZnpO
2xgCXp08xXLTPUB3YNZz28XMe6c8g9DRYcgUFjIMwu/vdhybRde2TGxzwqEux6YU
9M3kxE6XYYPGoa5jWtHWAkBgLDm9fGlI7njRTvkk/73LnVz4DgyRvt/5TDcUir3K
Wbgodn7MNNiPte0p8ofHTPej9kGO0y62Vybbhx7RSPV5Ry2sJPXje7a2NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISkswzLOkbw6h80BBiPXdPQQX1iMB8GA1UdIwQY
MBaAFKcg4H0osmFYO2/7FkmM3n1H40JcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHlEZ2ZTaXlZVmc3Yl9zV1NZemVmVWZqUWx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zNmFmNjktOWZiNC00NjIwLWFhYWIt
ZGVjOTRkZTg1OGNmLzEvcHlEZ2ZTaXlZVmc3Yl9zV1NZemVmVWZqUWx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8zNmFmNjktOWZiNC00NjIwLWFhYWItZGVjOTRkZTg1OGNm
LzEvcHlEZ2ZTaXlZVmc3Yl9zV1NZemVmVWZqUWx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApDUfoQG5
6bmiPSTGPpADaCGY0xHaFtFUyQ6XxZqLhm6ZyjzQNwNicVDQsc0cLq3E0xpuI7gt
rHCryCY8EA8bDcnZuav8A7+WkABIA7uClb1qt9lURoOakzzKYFJB+xbxZYd+1ZpH
6mvR9/cMddW7XSBbvOBSHG9svzk0RRuRTnIsqhMI+anWcc75GqsNiyKWScegRy6l
yJ4og2n3gR5C7Vlv+wgg5pUVY8Ll2S8OG5QwdpKnuZ33XZSIMh3eGw1P8UxfIvyC
5nGInmGGi6MP5LuejWDxVXzM5h5oIUBXKRTOVXJNf/hLrm8EAOeqa+7W2DNjYGxW
XQ6CGGfJqOmjjA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:26:43 2026 by rpki-client