Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
File:                     0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft (raw, json)
Hash identifier:          lOxroGfVAQ3zTzOD4prkctJsAoONDs3AYU5TJR2/KRs=
Subject key identifier:   CD:28:D6:F1:44:AF:BE:74:7B:E5:92:CF:30:88:F6:15:50:B3:70:A5
Authority key identifier: D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06
Certificate issuer:       /CN=d2b57f59782f941b5d2eb3d4286d5911b179e006
Certificate serial:       019D27E02FE5ED185AE36819D2EF3B521DF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
Manifest number:          1884
Signing time:             Thu 26 Mar 2026 02:01:36 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:36 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:36 +0000
Files and hashes:         1: 0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl (hash: pzzXkjJrUjVsSBVnU1ZWMzbjDGjK8Dt9sbR4CNYISBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:2f:e5:ed:18:5a:e3:68:19:d2:ef:3b:52:1d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2b57f59782f941b5d2eb3d4286d5911b179e006
        Validity
            Not Before: Mar 26 02:01:36 2026 GMT
            Not After : Mar 27 02:01:36 2026 GMT
        Subject: CN=cd28d6f144afbe747be592cf3088f61550b370a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d7:76:f6:a2:40:eb:fe:75:11:54:1b:53:97:
                    91:dc:ee:2f:e4:b7:e3:7e:0a:27:a8:cf:f8:67:d9:
                    74:e0:9f:ab:68:dd:99:ad:43:c1:39:69:66:68:97:
                    92:49:b0:4e:c0:46:0b:a9:ff:e8:48:25:73:ad:8d:
                    40:ff:01:56:59:9e:00:c5:e2:8c:72:87:b4:27:a8:
                    fa:28:27:87:d3:17:50:9f:9f:b7:b8:d8:76:cf:97:
                    68:8f:a2:2b:14:02:4c:1b:9d:59:72:67:ff:c4:a4:
                    58:f4:b0:c9:61:a3:ad:89:af:e7:e9:35:38:55:45:
                    0b:54:e0:ef:99:34:02:e2:98:83:c8:07:61:a0:76:
                    5a:36:b9:4b:d6:b3:6a:25:8f:c3:a1:5d:07:7d:82:
                    ce:db:f2:d6:88:a0:7d:58:8c:87:ca:26:c8:c4:58:
                    6e:46:f4:33:5b:ca:cf:7f:ea:77:68:d3:e0:3c:92:
                    07:1d:02:2e:97:8b:88:e7:67:a0:70:ae:b7:7c:ae:
                    4c:a0:b7:f3:6a:a2:fa:7d:ef:fc:c5:9e:2c:a1:6b:
                    df:40:37:c7:72:26:37:c8:3e:83:1f:77:21:42:e8:
                    fc:2a:d0:fd:c8:0a:c5:75:b2:ee:05:e1:38:ca:af:
                    a3:5b:90:fc:44:52:26:70:fd:34:db:fd:66:15:e5:
                    c2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:28:D6:F1:44:AF:BE:74:7B:E5:92:CF:30:88:F6:15:50:B3:70:A5
            X509v3 Authority Key Identifier:
                keyid:D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:70:af:bf:8d:12:f0:a2:e0:14:a3:48:23:bb:19:71:4f:87:
         7c:d9:f9:24:9a:c1:0a:93:7e:3a:03:b0:32:fa:1e:9a:1d:a5:
         a3:61:49:53:43:9e:1b:04:fa:72:34:3b:0f:8c:e8:84:05:25:
         19:ab:b3:43:17:5f:40:39:3b:87:d8:0b:09:cb:6a:00:13:8b:
         0f:25:7b:1f:bf:a1:2b:84:82:7d:f3:a5:dd:c1:9f:c1:d5:89:
         15:2b:e6:4b:80:59:bb:52:6a:0d:9a:d1:ab:83:82:91:32:24:
         5b:e6:36:b2:dd:19:6a:c0:eb:6b:a9:59:ae:95:00:7e:bd:18:
         ba:53:d1:4e:4e:06:87:44:7a:47:44:cb:c6:bd:1e:31:0b:fa:
         8b:5b:02:ae:94:f4:74:d4:dc:ce:07:ad:db:50:56:3a:af:ae:
         e5:ca:9d:0e:00:91:83:01:8a:bf:ea:e0:32:43:b7:0e:48:df:
         a9:b4:a9:d7:30:b1:ac:e2:7b:01:12:9d:79:5d:26:89:3e:65:
         6b:69:bb:e4:0b:84:9e:6d:08:c0:f0:0e:29:0a:bb:66:b2:2f:
         4c:5f:a4:31:0d:8f:0a:e8:d0:23:f4:04:8d:67:23:b9:6b:a5:
         92:89:17:ed:77:ef:e7:75:bb:9e:1a:c1:22:b7:dd:a5:ce:cb:
         b5:cd:ab:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4C/l7Rha42gZ0u87Uh34MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYjU3ZjU5NzgyZjk0MWI1ZDJlYjNkNDI4NmQ1OTExYjE3
OWUwMDYwHhcNMjYwMzI2MDIwMTM2WhcNMjYwMzI3MDIwMTM2WjAzMTEwLwYDVQQD
EyhjZDI4ZDZmMTQ0YWZiZTc0N2JlNTkyY2YzMDg4ZjYxNTUwYjM3MGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9d29qJA6/51EVQbU5eR3O4v5Lfj
fgonqM/4Z9l04J+raN2ZrUPBOWlmaJeSSbBOwEYLqf/oSCVzrY1A/wFWWZ4AxeKM
coe0J6j6KCeH0xdQn5+3uNh2z5doj6IrFAJMG51Zcmf/xKRY9LDJYaOtia/n6TU4
VUULVODvmTQC4piDyAdhoHZaNrlL1rNqJY/DoV0HfYLO2/LWiKB9WIyHyibIxFhu
RvQzW8rPf+p3aNPgPJIHHQIul4uI52egcK63fK5MoLfzaqL6fe/8xZ4soWvfQDfH
ciY3yD6DH3chQuj8KtD9yArFdbLuBeE4yq+jW5D8RFImcP002/1mFeXCvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0o1vFEr750e+WSzzCI9hVQs3ClMB8GA1UdIwQY
MBaAFNK1f1l4L5QbXS6z1ChtWRGxeeAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHJWX1dYZ3ZsQnRkTHJQVUtHMVpFYkY1NEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NTVlMzUtODdjYy00NDhlLWI3Yjct
MDdjYjIyYmY0MjRkLzEvMHJWX1dYZ3ZsQnRkTHJQVUtHMVpFYkY1NEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84NTVlMzUtODdjYy00NDhlLWI3YjctMDdjYjIyYmY0MjRk
LzEvMHJWX1dYZ3ZsQnRkTHJQVUtHMVpFYkY1NEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHCvv40S
8KLgFKNII7sZcU+HfNn5JJrBCpN+OgOwMvoemh2lo2FJU0OeGwT6cjQ7D4zohAUl
GauzQxdfQDk7h9gLCctqABOLDyV7H7+hK4SCffOl3cGfwdWJFSvmS4BZu1JqDZrR
q4OCkTIkW+Y2st0ZasDra6lZrpUAfr0YulPRTk4Gh0R6R0TLxr0eMQv6i1sCrpT0
dNTczget21BWOq+u5cqdDgCRgwGKv+rgMkO3DkjfqbSp1zCxrOJ7ARKdeV0miT5l
a2m75AuEnm0IwPAOKQq7ZrIvTF+kMQ2PCujQI/QEjWcjuWulkokX7Xfv53W7nhrB
Irfdpc7Ltc2roA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:54 2026 by rpki-client