Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.mft
File:                     vPI0wEREFriFL7NHh4rTdtCBjWQ.mft (raw, json)
Hash identifier:          sKnXX/tfgyDb9G9opjRRf/d/fy9GAdnWI9o9Ivt+7mM=
Subject key identifier:   40:23:57:D5:FC:FE:09:84:92:97:01:BF:35:95:28:AB:AC:6C:C8:DC
Authority key identifier: BC:F2:34:C0:44:44:16:B8:85:2F:B3:47:87:8A:D3:76:D0:81:8D:64
Certificate issuer:       /CN=bcf234c0444416b8852fb347878ad376d0818d64
Certificate serial:       019D265F689AC7DC11D79F57E18D2066705D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vPI0wEREFriFL7NHh4rTdtCBjWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.mft
Manifest number:          0C10
Signing time:             Wed 25 Mar 2026 19:01:20 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:20 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:20 +0000
Files and hashes:         1: vPI0wEREFriFL7NHh4rTdtCBjWQ.crl (hash: Xyi7XO2W3dkdHL099jEUuJTucp+yUFjDj2Oy/Fe7Ngk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vPI0wEREFriFL7NHh4rTdtCBjWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:68:9a:c7:dc:11:d7:9f:57:e1:8d:20:66:70:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcf234c0444416b8852fb347878ad376d0818d64
        Validity
            Not Before: Mar 25 19:01:20 2026 GMT
            Not After : Mar 26 19:01:20 2026 GMT
        Subject: CN=402357d5fcfe0984929701bf359528abac6cc8dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8d:c1:b8:c3:a9:04:da:27:4b:69:28:eb:bb:
                    56:b0:9f:6b:3c:ad:f1:f5:9c:b9:75:ae:81:40:f9:
                    7c:62:2f:0f:ae:22:46:ca:a6:47:42:58:45:4d:ba:
                    32:7a:00:b6:c4:21:ec:33:ec:73:c1:99:c5:0a:d1:
                    1a:11:2d:8e:c2:38:6e:5e:59:ea:97:2d:17:f1:97:
                    6a:89:21:19:5c:fc:bf:8d:47:5d:70:1e:9b:89:af:
                    be:9a:6a:d2:84:71:9c:33:c3:8c:0b:a7:06:dc:ae:
                    3c:96:2f:f3:6e:e8:32:d5:3b:6e:94:35:61:11:34:
                    7b:f2:5d:eb:25:97:e3:04:64:07:dc:7d:cb:a8:79:
                    5e:bf:5f:7b:71:f1:6a:f8:4a:d5:96:97:92:81:7c:
                    4c:13:66:52:d5:28:c1:ad:ab:88:80:96:63:dd:3e:
                    aa:74:24:3b:bf:1a:f0:4d:f2:20:0a:f2:dc:d6:4e:
                    5e:2f:3a:3c:30:c0:a7:16:9d:ba:2a:2a:f0:f7:31:
                    ee:d7:86:92:05:bc:c9:89:22:ac:3c:af:97:74:5a:
                    0e:90:bc:a3:85:04:f9:96:f0:89:c0:e0:32:70:10:
                    61:52:a9:c3:ab:4c:03:ed:4d:db:3e:8e:1e:08:e8:
                    6c:fb:09:59:31:3e:33:95:e6:fd:0b:fb:fd:ff:33:
                    b1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:23:57:D5:FC:FE:09:84:92:97:01:BF:35:95:28:AB:AC:6C:C8:DC
            X509v3 Authority Key Identifier:
                keyid:BC:F2:34:C0:44:44:16:B8:85:2F:B3:47:87:8A:D3:76:D0:81:8D:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPI0wEREFriFL7NHh4rTdtCBjWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:83:91:eb:96:9b:99:c6:5b:34:f9:d7:71:8e:9f:a7:de:3b:
         d4:ff:02:65:30:5c:8a:2f:9d:7e:d6:bd:93:b0:51:72:3c:36:
         72:e2:a4:b7:7f:26:2f:60:7e:86:43:c4:10:23:2f:c7:0d:fd:
         f4:f9:c4:9e:e8:c5:35:70:4a:4e:89:67:51:16:c6:1d:34:0c:
         9e:55:19:11:84:9b:4a:04:bb:10:c4:1d:36:9c:5e:80:41:df:
         39:b9:7c:fc:74:14:fe:3a:bd:7e:b8:d5:ef:2f:30:84:8f:77:
         11:44:de:e1:fa:2e:2d:bf:30:d0:a1:d7:94:ae:87:31:8a:d0:
         0b:72:b1:5f:91:bd:dc:f6:19:6b:3b:c1:09:7c:13:bd:66:37:
         cf:6a:ba:b1:69:1a:d5:7c:3a:3c:a5:0e:62:1a:59:26:f8:ae:
         dc:b8:2d:63:99:bd:5c:44:db:ce:94:35:a8:2f:15:f1:92:76:
         55:37:88:6b:4b:c6:59:da:07:c0:02:4b:00:1c:6e:8d:ce:1a:
         af:7f:6d:9d:ec:69:e1:e0:bc:11:7e:18:7c:94:20:7a:04:ff:
         56:c6:b7:62:0e:be:53:6b:40:4a:3e:d3:5a:33:3c:68:73:ea:
         34:d4:11:a6:83:c0:00:26:53:a0:7f:96:d3:c1:b3:f6:91:b3:
         e4:9d:09:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX2iax9wR159X4Y0gZnBdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZjIzNGMwNDQ0NDE2Yjg4NTJmYjM0Nzg3OGFkMzc2ZDA4
MThkNjQwHhcNMjYwMzI1MTkwMTIwWhcNMjYwMzI2MTkwMTIwWjAzMTEwLwYDVQQD
Eyg0MDIzNTdkNWZjZmUwOTg0OTI5NzAxYmYzNTk1MjhhYmFjNmNjOGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI3BuMOpBNonS2ko67tWsJ9rPK3x
9Zy5da6BQPl8Yi8PriJGyqZHQlhFTboyegC2xCHsM+xzwZnFCtEaES2OwjhuXlnq
ly0X8ZdqiSEZXPy/jUddcB6bia++mmrShHGcM8OMC6cG3K48li/zbugy1TtulDVh
ETR78l3rJZfjBGQH3H3LqHlev197cfFq+ErVlpeSgXxME2ZS1SjBrauIgJZj3T6q
dCQ7vxrwTfIgCvLc1k5eLzo8MMCnFp26Kirw9zHu14aSBbzJiSKsPK+XdFoOkLyj
hQT5lvCJwOAycBBhUqnDq0wD7U3bPo4eCOhs+wlZMT4zleb9C/v9/zOxNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAjV9X8/gmEkpcBvzWVKKusbMjcMB8GA1UdIwQY
MBaAFLzyNMBERBa4hS+zR4eK03bQgY1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlBJMHdFUkVGcmlGTDdOSGg0clRkdENCaldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iYjdhN2EtMzAzZi00MjM0LTgyYTEt
OWFjYTdiZDhlYzBmLzEvdlBJMHdFUkVGcmlGTDdOSGg0clRkdENCaldRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9iYjdhN2EtMzAzZi00MjM0LTgyYTEtOWFjYTdiZDhlYzBm
LzEvdlBJMHdFUkVGcmlGTDdOSGg0clRkdENCaldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAloOR65ab
mcZbNPnXcY6fp9471P8CZTBcii+dfta9k7BRcjw2cuKkt38mL2B+hkPEECMvxw39
9PnEnujFNXBKTolnURbGHTQMnlUZEYSbSgS7EMQdNpxegEHfObl8/HQU/jq9frjV
7y8whI93EUTe4fouLb8w0KHXlK6HMYrQC3KxX5G93PYZazvBCXwTvWY3z2q6sWka
1Xw6PKUOYhpZJviu3LgtY5m9XETbzpQ1qC8V8ZJ2VTeIa0vGWdoHwAJLABxujc4a
r39tnexp4eC8EX4YfJQgegT/Vsa3Yg6+U2tASj7TWjM8aHPqNNQRpoPAACZToH+W
08Gz9pGz5J0JqA==
-----END CERTIFICATE-----