Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft
File:                     b_eJEzFFDchig6CJvZRw5pw37RI.mft (raw, json)
Hash identifier:          UUH9Ju4DK8iXvwNSPnW5UXenPSDne0+mv0xpjAV3nZY=
Subject key identifier:   D4:6D:AE:69:49:A4:06:FD:E1:84:79:CC:1B:45:5E:E5:1A:86:F1:47
Authority key identifier: 6F:F7:89:13:31:45:0D:C8:62:83:A0:89:BD:94:70:E6:9C:37:ED:12
Certificate issuer:       /CN=6ff7891331450dc86283a089bd9470e69c37ed12
Certificate serial:       019D28F2372EB9A049F09E5E17F1675B260B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_eJEzFFDchig6CJvZRw5pw37RI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft
Manifest number:          0456
Signing time:             Thu 26 Mar 2026 07:00:55 +0000
Manifest this update:     Thu 26 Mar 2026 07:00:55 +0000
Manifest next update:     Fri 27 Mar 2026 07:00:55 +0000
Files and hashes:         1: b_eJEzFFDchig6CJvZRw5pw37RI.crl (hash: UnG/jeb1ul0nH3v60nsRhK08N7aOw5chV0OmZSzqIcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_eJEzFFDchig6CJvZRw5pw37RI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:37:2e:b9:a0:49:f0:9e:5e:17:f1:67:5b:26:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ff7891331450dc86283a089bd9470e69c37ed12
        Validity
            Not Before: Mar 26 07:00:55 2026 GMT
            Not After : Mar 27 07:00:55 2026 GMT
        Subject: CN=d46dae6949a406fde18479cc1b455ee51a86f147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:88:a4:cc:50:80:e3:30:31:55:de:b4:91:5d:
                    15:c7:48:0d:f1:78:2c:c9:52:fa:59:78:77:16:d8:
                    1b:0d:13:c3:ce:73:dd:7e:59:9a:c6:64:d8:9b:44:
                    8e:2b:6a:d0:a5:b4:92:9a:ce:df:e9:4d:18:49:20:
                    45:a5:b9:a7:90:cc:b8:42:a8:c5:36:9f:6d:62:7f:
                    f0:e3:d9:03:b1:e6:65:77:52:98:f4:14:7f:c9:90:
                    d9:55:40:66:e1:32:c8:04:ca:fe:32:49:d4:ab:26:
                    dd:72:94:63:25:10:55:c9:91:de:c5:aa:49:3a:b4:
                    79:5d:fe:d4:36:22:e7:9e:64:a8:7e:ba:1a:c0:28:
                    d0:1d:66:bd:e6:c2:3c:06:b5:9e:36:92:f5:1f:fb:
                    2a:c7:a6:a1:2d:c3:fc:17:23:da:8f:60:8c:5c:79:
                    38:71:d0:61:1d:93:36:b3:62:d2:da:07:ad:f4:81:
                    7b:16:4b:88:a4:86:65:5f:ce:dd:69:e7:e7:82:8b:
                    86:e6:6c:dc:ce:d0:15:7d:b8:8c:58:42:c6:12:a1:
                    20:a5:de:a9:dc:b5:a1:30:9d:3a:d3:ab:b3:49:02:
                    02:6c:49:f6:33:b4:e5:29:34:ee:0b:85:1f:70:16:
                    73:fd:3c:43:55:90:2f:6f:8d:54:90:02:6c:2e:76:
                    58:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6D:AE:69:49:A4:06:FD:E1:84:79:CC:1B:45:5E:E5:1A:86:F1:47
            X509v3 Authority Key Identifier:
                keyid:6F:F7:89:13:31:45:0D:C8:62:83:A0:89:BD:94:70:E6:9C:37:ED:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_eJEzFFDchig6CJvZRw5pw37RI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e1:63:0c:a8:37:0c:74:31:f4:34:1e:96:64:64:4a:37:9c:
         6a:be:76:71:af:cc:fc:7d:53:9d:c0:73:2f:b2:c3:4d:d3:c3:
         81:82:b9:0d:5b:9c:83:11:62:52:29:27:08:44:cc:f1:df:7b:
         0f:c7:1d:02:5c:10:b2:41:e2:98:c9:b5:77:67:36:e8:46:ac:
         af:14:48:09:e2:a8:b3:d3:5a:4f:75:b4:57:19:e1:2f:16:60:
         8b:bd:8c:8f:86:48:c8:0a:c7:8b:61:d0:6c:3f:ce:d0:01:22:
         41:85:b6:5a:0c:89:87:42:23:17:e7:07:66:d8:4b:f7:60:63:
         67:12:68:80:ea:78:be:4b:88:5b:88:26:14:49:e8:bb:aa:f1:
         e2:fa:2f:e5:b7:95:1a:b7:c6:bb:23:70:42:87:12:6e:43:17:
         0b:76:7c:6d:b0:f5:7e:53:dd:5d:26:25:97:c0:df:fa:72:1a:
         cc:89:e4:98:e1:61:4a:8e:7a:2d:7f:a2:db:e9:45:16:fc:0d:
         40:0d:ae:e6:33:d0:5e:15:af:23:55:8a:77:61:31:c8:ba:f2:
         70:1e:e3:11:fd:1f:29:91:0f:a5:44:b4:b7:2e:c0:bb:91:74:
         94:33:d4:06:30:00:04:b4:d3:c2:8b:f5:ac:77:1f:0a:ff:18:
         35:5d:c7:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8jcuuaBJ8J5eF/FnWyYLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZjc4OTEzMzE0NTBkYzg2MjgzYTA4OWJkOTQ3MGU2OWMz
N2VkMTIwHhcNMjYwMzI2MDcwMDU1WhcNMjYwMzI3MDcwMDU1WjAzMTEwLwYDVQQD
EyhkNDZkYWU2OTQ5YTQwNmZkZTE4NDc5Y2MxYjQ1NWVlNTFhODZmMTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoikzFCA4zAxVd60kV0Vx0gN8Xgs
yVL6WXh3FtgbDRPDznPdflmaxmTYm0SOK2rQpbSSms7f6U0YSSBFpbmnkMy4QqjF
Np9tYn/w49kDseZld1KY9BR/yZDZVUBm4TLIBMr+MknUqybdcpRjJRBVyZHexapJ
OrR5Xf7UNiLnnmSofroawCjQHWa95sI8BrWeNpL1H/sqx6ahLcP8FyPaj2CMXHk4
cdBhHZM2s2LS2get9IF7FkuIpIZlX87daefngouG5mzcztAVfbiMWELGEqEgpd6p
3LWhMJ0606uzSQICbEn2M7TlKTTuC4UfcBZz/TxDVZAvb41UkAJsLnZYYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRtrmlJpAb94YR5zBtFXuUahvFHMB8GA1UdIwQY
MBaAFG/3iRMxRQ3IYoOgib2UcOacN+0SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYl9lSkV6RkZEY2hpZzZDSnZaUnc1cHczN1JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MDkyNmUtZjBlNS00M2Q2LThlM2Mt
ZDU3NWI5NjI0ZGU3LzEvYl9lSkV6RkZEY2hpZzZDSnZaUnc1cHczN1JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS81MDkyNmUtZjBlNS00M2Q2LThlM2MtZDU3NWI5NjI0ZGU3
LzEvYl9lSkV6RkZEY2hpZzZDSnZaUnc1cHczN1JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuFjDKg3
DHQx9DQelmRkSjecar52ca/M/H1TncBzL7LDTdPDgYK5DVucgxFiUiknCETM8d97
D8cdAlwQskHimMm1d2c26EasrxRICeKos9NaT3W0VxnhLxZgi72Mj4ZIyArHi2HQ
bD/O0AEiQYW2WgyJh0IjF+cHZthL92BjZxJogOp4vkuIW4gmFEnou6rx4vov5beV
GrfGuyNwQocSbkMXC3Z8bbD1flPdXSYll8Df+nIazInkmOFhSo56LX+i2+lFFvwN
QA2u5jPQXhWvI1WKd2ExyLrycB7jEf0fKZEPpUS0ty7Au5F0lDPUBjAABLTTwov1
rHcfCv8YNV3H7g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:43 2026 by rpki-client