Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
File:                     VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft (raw, json)
Hash identifier:          B2Lv8qrs7TKgti/U7oA7Jfq3e8wnJwLg0I4LOOAG5e0=
Subject key identifier:   67:E1:BD:F2:88:B5:C8:5F:BB:EB:BC:2C:74:7D:5C:AD:1F:C3:07:DE
Authority key identifier: 56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8
Certificate issuer:       /CN=5682c32795f04a43209c68cd70ead248945992f8
Certificate serial:       019D28F283FCA06CD1A53F1ADDB33652B820
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
Manifest number:          1618
Signing time:             Thu 26 Mar 2026 07:01:15 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:15 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:15 +0000
Files and hashes:         1: VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl (hash: GBNZ6u8McC5FS77EGxbBH/IpPLNbm0c+w57UcHfYd0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:83:fc:a0:6c:d1:a5:3f:1a:dd:b3:36:52:b8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5682c32795f04a43209c68cd70ead248945992f8
        Validity
            Not Before: Mar 26 07:01:15 2026 GMT
            Not After : Mar 27 07:01:15 2026 GMT
        Subject: CN=67e1bdf288b5c85fbbebbc2c747d5cad1fc307de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:19:e0:04:14:1a:b0:8a:9b:a0:1f:80:64:21:
                    75:41:9b:90:59:25:ee:f6:33:08:2a:fb:96:45:fb:
                    a0:d7:b1:f5:c9:ea:18:1d:b8:2d:ef:33:07:3a:f0:
                    71:2a:cd:c9:83:6b:d1:f8:58:f9:67:b8:e0:81:c9:
                    80:6f:80:08:24:f5:d2:6b:ec:9e:6f:d2:12:44:40:
                    4d:0e:ae:f7:d4:58:2e:6b:87:4c:26:ba:cb:20:0b:
                    c2:5e:ce:21:68:a1:a5:c2:9c:fd:ca:de:3c:cd:d3:
                    03:ec:15:b0:fa:32:93:a6:da:9f:d7:1a:f0:3c:b6:
                    99:0f:14:4f:cc:e7:29:37:21:5f:03:d4:a3:02:c0:
                    c5:e6:2c:96:4a:f1:c4:ab:d2:ce:d2:f8:e4:e6:94:
                    71:fd:8c:f7:0f:11:32:6e:4c:18:c1:2b:ea:89:25:
                    33:d2:16:39:1a:a3:5e:69:ef:1d:fa:21:9d:d7:dc:
                    5f:a3:84:ae:4d:b9:64:8f:da:8a:55:29:6d:16:08:
                    73:cc:2c:98:e2:de:aa:1a:e2:63:45:da:de:15:f8:
                    cb:9e:6a:e9:c8:7b:c0:a4:2f:26:50:60:13:0d:30:
                    ad:56:c8:7f:3c:ea:88:d6:97:67:4f:94:80:18:ed:
                    32:d4:2f:3a:e5:09:71:39:fd:6f:ca:c7:7a:a4:24:
                    fd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E1:BD:F2:88:B5:C8:5F:BB:EB:BC:2C:74:7D:5C:AD:1F:C3:07:DE
            X509v3 Authority Key Identifier:
                keyid:56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:02:bb:de:8f:c2:54:b0:43:0c:99:cb:97:9d:3a:64:ef:ba:
         f8:e9:35:b0:ef:37:a8:fd:18:a5:a2:a8:90:f8:03:2a:3e:a2:
         14:28:f1:1b:78:8f:78:81:0f:49:7c:53:bf:b9:f8:cc:a5:fd:
         ed:8e:1d:a7:68:bc:70:ca:08:f6:22:70:2f:c0:03:61:76:08:
         db:9d:c8:b7:70:e6:0e:f2:a3:0a:41:c7:e7:3d:59:5d:cb:f4:
         71:a5:cd:9c:be:b4:2c:3c:40:2b:92:ff:ea:9a:49:35:18:1d:
         97:12:08:3f:f6:93:64:97:e9:56:cb:cb:5e:7d:56:bb:33:4c:
         d1:82:f6:b3:96:81:af:e2:cc:56:5e:6e:74:1c:8c:fc:d8:db:
         92:16:b0:c1:ab:92:c7:67:b2:1b:af:d3:9e:92:cb:4f:34:61:
         b1:ce:b7:02:e2:e9:5b:2d:6f:2f:74:93:fc:99:65:24:8b:51:
         d9:28:ce:b7:b4:a5:35:ed:7e:b5:26:9a:3e:5c:2f:92:0b:5c:
         ec:64:15:25:0d:5e:3f:45:75:17:bd:18:53:08:25:7f:b0:f0:
         ce:18:c5:ec:8d:e8:10:a8:a2:84:a8:e8:54:85:51:11:12:5c:
         bf:95:59:cb:62:3e:8d:5f:5d:68:41:82:a0:d7:c1:df:94:f3:
         43:35:04:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8oP8oGzRpT8a3bM2UrggMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ODJjMzI3OTVmMDRhNDMyMDljNjhjZDcwZWFkMjQ4OTQ1
OTkyZjgwHhcNMjYwMzI2MDcwMTE1WhcNMjYwMzI3MDcwMTE1WjAzMTEwLwYDVQQD
Eyg2N2UxYmRmMjg4YjVjODVmYmJlYmJjMmM3NDdkNWNhZDFmYzMwN2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RngBBQasIqboB+AZCF1QZuQWSXu
9jMIKvuWRfug17H1yeoYHbgt7zMHOvBxKs3Jg2vR+Fj5Z7jggcmAb4AIJPXSa+ye
b9ISREBNDq731Fgua4dMJrrLIAvCXs4haKGlwpz9yt48zdMD7BWw+jKTptqf1xrw
PLaZDxRPzOcpNyFfA9SjAsDF5iyWSvHEq9LO0vjk5pRx/Yz3DxEybkwYwSvqiSUz
0hY5GqNeae8d+iGd19xfo4SuTblkj9qKVSltFghzzCyY4t6qGuJjRdreFfjLnmrp
yHvApC8mUGATDTCtVsh/POqI1pdnT5SAGO0y1C865QlxOf1vysd6pCT94wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfhvfKItchfu+u8LHR9XK0fwwfeMB8GA1UdIwQY
MBaAFFaCwyeV8EpDIJxozXDq0kiUWZL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9MREo1WHdTa01nbkdqTmNPclNTSlJaa3ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9hYmFjMjctM2UwOC00NDQ3LWFkMjYt
OWVhYTc2OWU1YzYyLzEvVm9MREo1WHdTa01nbkdqTmNPclNTSlJaa3ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9hYmFjMjctM2UwOC00NDQ3LWFkMjYtOWVhYTc2OWU1YzYy
LzEvVm9MREo1WHdTa01nbkdqTmNPclNTSlJaa3ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAK73o/C
VLBDDJnLl506ZO+6+Ok1sO83qP0YpaKokPgDKj6iFCjxG3iPeIEPSXxTv7n4zKX9
7Y4dp2i8cMoI9iJwL8ADYXYI253It3DmDvKjCkHH5z1ZXcv0caXNnL60LDxAK5L/
6ppJNRgdlxIIP/aTZJfpVsvLXn1WuzNM0YL2s5aBr+LMVl5udByM/NjbkhawwauS
x2eyG6/TnpLLTzRhsc63AuLpWy1vL3ST/JllJItR2SjOt7SlNe1+tSaaPlwvkgtc
7GQVJQ1eP0V1F70YUwglf7DwzhjF7I3oEKiihKjoVIVRERJcv5VZy2I+jV9daEGC
oNfB35TzQzUEnA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:33:35 2026 by rpki-client