Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
File:                     9V4Fkwjkaz074E0x_V4Q9U80OQw.mft (raw, json)
Hash identifier:          yAbRhyo8IP4CVpvFVce0tePNO39u7FfoMV1ivIzk1VI=
Subject key identifier:   23:66:37:D7:C5:26:09:29:3D:46:D0:4A:60:7A:1F:1B:30:D8:22:3E
Authority key identifier: F5:5E:05:93:08:E4:6B:3D:3B:E0:4D:31:FD:5E:10:F5:4F:34:39:0C
Certificate issuer:       /CN=f55e059308e46b3d3be04d31fd5e10f54f34390c
Certificate serial:       019D333F03E1559F0C7360D0598332B60B88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
Manifest number:          07E8
Signing time:             Sat 28 Mar 2026 07:01:00 +0000
Manifest this update:     Sat 28 Mar 2026 07:01:00 +0000
Manifest next update:     Sun 29 Mar 2026 07:01:00 +0000
Files and hashes:         1: 9V4Fkwjkaz074E0x_V4Q9U80OQw.crl (hash: Lt4fICY5Waw/a5gzeO4UnKoXtF4kHgt5UQyz5APYtRo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 07:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:3f:03:e1:55:9f:0c:73:60:d0:59:83:32:b6:0b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55e059308e46b3d3be04d31fd5e10f54f34390c
        Validity
            Not Before: Mar 28 07:01:00 2026 GMT
            Not After : Mar 29 07:01:00 2026 GMT
        Subject: CN=236637d7c52609293d46d04a607a1f1b30d8223e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c4:d1:94:a4:36:fe:a0:27:c7:02:e9:9c:83:
                    b6:77:e6:74:6b:71:44:bf:fe:53:3c:58:40:35:cf:
                    5e:70:a9:5f:18:77:4b:b6:7f:77:d1:d2:36:b7:10:
                    59:1a:79:31:b9:ea:91:8d:4c:44:3b:15:64:85:a8:
                    a2:24:d3:2d:2f:c2:3d:12:6f:68:64:a0:a9:9e:bc:
                    e0:57:45:64:90:4a:0f:2d:c8:f0:0f:17:5d:6c:bb:
                    35:ca:42:85:0b:22:a9:53:9c:58:87:0e:75:23:84:
                    9c:62:02:9c:b5:9f:26:fb:81:d5:b7:0b:d7:13:b5:
                    fe:69:18:e4:64:e2:d1:cf:23:43:10:1f:23:3a:2c:
                    37:a5:61:12:08:b9:13:03:c0:43:8b:21:5d:40:f3:
                    40:04:03:a2:df:52:8f:92:17:1d:27:d6:b5:68:3a:
                    95:9a:5b:04:74:7b:df:7b:e3:a5:cd:89:0e:b3:f9:
                    b9:88:69:76:9e:50:2d:f3:aa:d4:ca:76:e1:f6:e8:
                    c0:cf:79:dd:b9:76:82:78:8b:2b:3c:aa:49:94:03:
                    15:1d:a0:d4:fc:7b:34:af:7b:ba:c2:a7:04:b1:90:
                    23:9f:7c:73:ad:53:3e:65:b8:92:91:1a:2a:54:cb:
                    b1:1f:5b:40:13:ad:2c:cd:72:30:b3:5c:51:80:7b:
                    75:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:66:37:D7:C5:26:09:29:3D:46:D0:4A:60:7A:1F:1B:30:D8:22:3E
            X509v3 Authority Key Identifier:
                keyid:F5:5E:05:93:08:E4:6B:3D:3B:E0:4D:31:FD:5E:10:F5:4F:34:39:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:d5:b5:09:68:ed:05:af:26:e0:ea:62:4a:dc:aa:51:c8:48:
         b8:07:57:33:e8:e1:27:f6:6a:7a:f8:86:47:84:ce:1b:a6:2b:
         8c:e5:ac:24:f3:52:02:13:6d:ce:6a:7c:95:6c:96:8e:23:b7:
         44:10:0f:32:b7:05:49:ac:1a:fd:3e:0f:1b:b6:92:02:10:f7:
         4a:7d:cd:c6:3b:ae:f7:23:24:a6:f8:bd:af:41:f6:97:45:a4:
         a8:85:af:55:be:80:a8:dc:2e:ef:08:d0:e7:c6:ef:77:96:18:
         85:69:a9:ec:4e:87:a7:4b:a1:df:fc:85:21:9c:c2:05:a8:03:
         df:bf:45:0f:c7:f3:fc:51:4f:8c:9d:b0:2d:c2:fa:f2:05:65:
         67:b3:3c:0b:85:62:f9:ac:a8:85:f2:1c:2d:2a:88:e3:08:86:
         6c:ce:16:62:06:8a:59:ef:ee:30:3f:5b:65:c6:3c:26:29:63:
         97:82:cf:45:45:44:c0:24:a8:0a:fd:47:7d:98:c6:0a:69:64:
         19:ca:5d:29:9f:3d:0e:08:53:8c:8f:a4:1f:9d:18:2a:1c:d3:
         6d:bb:c7:88:61:51:6e:b5:83:55:93:fc:0f:72:f9:4c:1d:a1:
         9c:20:e7:6c:cb:f0:45:4e:c2:fc:50:c4:09:11:a1:d7:3d:7a:
         ce:0a:eb:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zPwPhVZ8Mc2DQWYMytguIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NWUwNTkzMDhlNDZiM2QzYmUwNGQzMWZkNWUxMGY1NGYz
NDM5MGMwHhcNMjYwMzI4MDcwMTAwWhcNMjYwMzI5MDcwMTAwWjAzMTEwLwYDVQQD
EygyMzY2MzdkN2M1MjYwOTI5M2Q0NmQwNGE2MDdhMWYxYjMwZDgyMjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cTRlKQ2/qAnxwLpnIO2d+Z0a3FE
v/5TPFhANc9ecKlfGHdLtn930dI2txBZGnkxueqRjUxEOxVkhaiiJNMtL8I9Em9o
ZKCpnrzgV0VkkEoPLcjwDxddbLs1ykKFCyKpU5xYhw51I4ScYgKctZ8m+4HVtwvX
E7X+aRjkZOLRzyNDEB8jOiw3pWESCLkTA8BDiyFdQPNABAOi31KPkhcdJ9a1aDqV
mlsEdHvfe+OlzYkOs/m5iGl2nlAt86rUynbh9ujAz3nduXaCeIsrPKpJlAMVHaDU
/Hs0r3u6wqcEsZAjn3xzrVM+ZbiSkRoqVMuxH1tAE60szXIws1xRgHt1mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNmN9fFJgkpPUbQSmB6Hxsw2CI+MB8GA1UdIwQY
MBaAFPVeBZMI5Gs9O+BNMf1eEPVPNDkMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVY0Rmt3amthejA3NEUweF9WNFE5VTgwT1F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84ZWVhZGItODJkMS00YjNjLTg0OTgt
NjRlNTYzODBmYmM0LzEvOVY0Rmt3amthejA3NEUweF9WNFE5VTgwT1F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84ZWVhZGItODJkMS00YjNjLTg0OTgtNjRlNTYzODBmYmM0
LzEvOVY0Rmt3amthejA3NEUweF9WNFE5VTgwT1F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtW1CWjt
Ba8m4OpiStyqUchIuAdXM+jhJ/ZqeviGR4TOG6YrjOWsJPNSAhNtzmp8lWyWjiO3
RBAPMrcFSawa/T4PG7aSAhD3Sn3Nxjuu9yMkpvi9r0H2l0WkqIWvVb6AqNwu7wjQ
58bvd5YYhWmp7E6Hp0uh3/yFIZzCBagD379FD8fz/FFPjJ2wLcL68gVlZ7M8C4Vi
+ayohfIcLSqI4wiGbM4WYgaKWe/uMD9bZcY8Jiljl4LPRUVEwCSoCv1HfZjGCmlk
GcpdKZ89DghTjI+kH50YKhzTbbvHiGFRbrWDVZP8D3L5TB2hnCDnbMvwRU7C/FDE
CRGh1z16zgrrcg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:28 2026 by rpki-client