Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
File:                     Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft (raw, json)
Hash identifier:          p/9r1Bs3KvQ3moGFVo2HDopCTiCwEmepLzTpTGrHRzI=
Subject key identifier:   EE:4A:26:80:BD:40:E8:76:36:11:20:D1:F2:59:E5:D6:F9:CA:91:78
Authority key identifier: 46:F6:EE:BF:80:BD:64:DF:F5:AB:10:12:B9:0A:55:68:65:A8:48:DB
Certificate issuer:       /CN=46f6eebf80bd64dff5ab1012b90a556865a848db
Certificate serial:       019D273B1F20A149AB61D0EA655C74D8782A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
Manifest number:          0728
Signing time:             Wed 25 Mar 2026 23:01:19 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:19 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:19 +0000
Files and hashes:         1: Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl (hash: MkfRFeIdrB1WzbUSn72XpW4+J6Gfr8sB+76Wdchqiq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:1f:20:a1:49:ab:61:d0:ea:65:5c:74:d8:78:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46f6eebf80bd64dff5ab1012b90a556865a848db
        Validity
            Not Before: Mar 25 23:01:19 2026 GMT
            Not After : Mar 26 23:01:19 2026 GMT
        Subject: CN=ee4a2680bd40e876361120d1f259e5d6f9ca9178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:01:24:44:08:8b:bd:be:77:6d:d1:44:34:d1:
                    60:aa:3c:3b:e6:47:94:b6:08:d1:f2:c1:57:f7:fd:
                    65:08:db:8a:c9:a3:87:42:dd:ae:ce:6b:c1:2e:8b:
                    64:b9:f4:4b:e9:fa:89:c7:8d:d4:91:6b:8c:9e:25:
                    be:bf:56:c4:a6:31:04:33:93:f1:ba:d6:6b:aa:77:
                    66:af:ce:bf:98:70:87:25:ac:93:d0:88:b3:ca:48:
                    b6:64:15:00:96:b2:80:7b:74:23:c1:ab:40:64:d8:
                    49:97:97:79:b9:92:e8:34:19:6b:67:26:e2:c1:0a:
                    dd:15:7a:76:0f:67:fd:72:46:03:ca:7e:36:7b:44:
                    42:c4:f0:35:de:de:c7:0d:8a:bf:47:cb:99:2e:3f:
                    50:ab:0f:ae:29:91:d3:74:5a:44:59:90:00:a4:c2:
                    c8:4c:bd:98:44:e6:74:13:47:f8:17:3d:f0:49:5a:
                    ea:ae:a2:74:78:d7:86:70:31:a8:c4:28:a5:a2:1a:
                    b6:73:c1:74:4d:a2:89:92:f2:c2:a6:f6:b9:83:df:
                    e0:b1:ba:67:44:c3:4c:c2:02:73:b6:4c:f8:b1:8f:
                    bf:81:28:9c:97:d7:c0:6c:e6:60:a2:f7:26:e3:9c:
                    23:fd:00:0a:f0:52:9b:1e:13:5a:a4:4b:d4:02:8f:
                    c9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4A:26:80:BD:40:E8:76:36:11:20:D1:F2:59:E5:D6:F9:CA:91:78
            X509v3 Authority Key Identifier:
                keyid:46:F6:EE:BF:80:BD:64:DF:F5:AB:10:12:B9:0A:55:68:65:A8:48:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:dc:75:fa:68:ec:33:79:20:c4:0b:23:24:fb:93:4b:6b:cd:
         b2:12:55:b7:b1:9e:8a:41:8d:5d:80:27:05:da:91:9e:29:46:
         c4:4e:27:8b:99:bc:05:d1:3a:f1:3f:e6:c5:8c:99:c4:72:d9:
         00:7a:de:2b:ab:a6:12:8c:b8:25:cc:ca:c2:c1:d3:03:6f:93:
         d4:58:35:08:6a:ea:c1:aa:70:c3:62:f5:79:fc:df:be:13:d0:
         16:d5:9a:34:f0:81:fe:cd:70:fd:91:4d:e7:1b:5e:c6:6d:c4:
         79:99:2a:f3:0d:ee:c1:90:30:b5:c8:be:33:ee:a2:fa:81:2e:
         13:89:93:a7:12:85:3b:fb:61:5a:95:06:3e:d3:db:6a:e0:9a:
         11:2d:81:f8:df:44:d1:a2:c2:e8:9b:71:5c:81:27:5f:bd:75:
         34:64:2c:05:35:4f:d4:3c:6a:e4:4b:f2:f0:1b:a9:6e:da:9d:
         69:c0:b2:06:d8:1e:46:ea:73:3f:e5:14:ec:b6:2a:4c:6f:ac:
         3a:54:32:c0:b1:5c:f0:38:ba:50:3c:c0:0e:6a:ae:65:98:ca:
         1c:37:8f:c0:bb:4e:c9:85:25:96:fb:aa:cb:83:10:d6:64:b9:
         bb:16:10:4c:03:30:95:3b:1a:bf:b0:d4:03:41:26:bb:72:4b:
         9d:af:3d:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOx8goUmrYdDqZVx02HgqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZjZlZWJmODBiZDY0ZGZmNWFiMTAxMmI5MGE1NTY4NjVh
ODQ4ZGIwHhcNMjYwMzI1MjMwMTE5WhcNMjYwMzI2MjMwMTE5WjAzMTEwLwYDVQQD
EyhlZTRhMjY4MGJkNDBlODc2MzYxMTIwZDFmMjU5ZTVkNmY5Y2E5MTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QEkRAiLvb53bdFENNFgqjw75keU
tgjR8sFX9/1lCNuKyaOHQt2uzmvBLotkufRL6fqJx43UkWuMniW+v1bEpjEEM5Px
utZrqndmr86/mHCHJayT0Iizyki2ZBUAlrKAe3QjwatAZNhJl5d5uZLoNBlrZybi
wQrdFXp2D2f9ckYDyn42e0RCxPA13t7HDYq/R8uZLj9Qqw+uKZHTdFpEWZAApMLI
TL2YROZ0E0f4Fz3wSVrqrqJ0eNeGcDGoxCilohq2c8F0TaKJkvLCpva5g9/gsbpn
RMNMwgJztkz4sY+/gSicl9fAbOZgovcm45wj/QAK8FKbHhNapEvUAo/JuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5KJoC9QOh2NhEg0fJZ5db5ypF4MB8GA1UdIwQY
MBaAFEb27r+AvWTf9asQErkKVWhlqEjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnZidXY0QzlaTl8xcXhBU3VRcFZhR1dvU05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81NzhmYWEtMGEwMy00NmFjLWJiNWMt
OWJkYmI2MjZiNTk1LzEvUnZidXY0QzlaTl8xcXhBU3VRcFZhR1dvU05zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81NzhmYWEtMGEwMy00NmFjLWJiNWMtOWJkYmI2MjZiNTk1
LzEvUnZidXY0QzlaTl8xcXhBU3VRcFZhR1dvU05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU9x1+mjs
M3kgxAsjJPuTS2vNshJVt7GeikGNXYAnBdqRnilGxE4ni5m8BdE68T/mxYyZxHLZ
AHreK6umEoy4JczKwsHTA2+T1Fg1CGrqwapww2L1efzfvhPQFtWaNPCB/s1w/ZFN
5xtexm3EeZkq8w3uwZAwtci+M+6i+oEuE4mTpxKFO/thWpUGPtPbauCaES2B+N9E
0aLC6JtxXIEnX711NGQsBTVP1Dxq5Evy8BupbtqdacCyBtgeRupzP+UU7LYqTG+s
OlQywLFc8Di6UDzADmquZZjKHDePwLtOyYUllvuqy4MQ1mS5uxYQTAMwlTsav7DU
A0Emu3JLna89Uw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:26 2026 by rpki-client