Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a58d51-d930-4cf9-9715-ba9bbd543fc3/1/ViwPOFI5pRyUGL8ZU_DOqWyuWDg.mft
File:                     ViwPOFI5pRyUGL8ZU_DOqWyuWDg.mft (raw, json)
Hash identifier:          Jr3IZxcU9DjvJQIvTQXj5hOOO7yedSF2ftiAwedqfgY=
Subject key identifier:   5C:22:8C:E6:B0:68:68:2F:7F:C3:60:1B:CD:D2:27:88:CF:B0:77:79
Authority key identifier: 56:2C:0F:38:52:39:A5:1C:94:18:BF:19:53:F0:CE:A9:6C:AE:58:38
Certificate issuer:       /CN=562c0f385239a51c9418bf1953f0cea96cae5838
Certificate serial:       019D33085CAEED2815F7B8BDEE46F0858914
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ViwPOFI5pRyUGL8ZU_DOqWyuWDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/a58d51-d930-4cf9-9715-ba9bbd543fc3/1/ViwPOFI5pRyUGL8ZU_DOqWyuWDg.mft
Manifest number:          4E
Signing time:             Sat 28 Mar 2026 06:01:19 +0000
Manifest this update:     Sat 28 Mar 2026 06:01:19 +0000
Manifest next update:     Sun 29 Mar 2026 06:01:19 +0000
Files and hashes:         1: ViwPOFI5pRyUGL8ZU_DOqWyuWDg.crl (hash: 8tTgBlmw3ZCc+D6RZbODEo7fgm8NikE4mSEgUkCD8g4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/a58d51-d930-4cf9-9715-ba9bbd543fc3/1/ViwPOFI5pRyUGL8ZU_DOqWyuWDg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/a58d51-d930-4cf9-9715-ba9bbd543fc3/1/ViwPOFI5pRyUGL8ZU_DOqWyuWDg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ViwPOFI5pRyUGL8ZU_DOqWyuWDg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:08:5c:ae:ed:28:15:f7:b8:bd:ee:46:f0:85:89:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=562c0f385239a51c9418bf1953f0cea96cae5838
        Validity
            Not Before: Mar 28 06:01:19 2026 GMT
            Not After : Mar 29 06:01:19 2026 GMT
        Subject: CN=5c228ce6b068682f7fc3601bcdd22788cfb07779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:69:8c:ae:64:a5:53:f8:c8:34:8b:a4:02:82:
                    73:95:cc:7b:45:b5:8a:e1:dc:dd:c3:49:51:74:2c:
                    41:e9:12:81:68:9f:01:e1:99:49:4f:bb:1c:24:24:
                    03:a3:d2:02:65:fd:f0:6b:c0:d1:6d:99:27:79:af:
                    5a:1f:cc:7e:42:a0:bf:8f:53:0b:71:62:ad:55:9d:
                    94:8b:1c:70:59:d3:de:93:ee:11:cc:85:6e:96:4e:
                    1b:5f:80:e0:9e:35:51:8f:dd:d7:78:8a:d3:83:28:
                    70:e0:ef:e4:6e:00:17:5e:9c:49:d6:59:ab:9a:3b:
                    76:f0:b2:1c:c6:e6:80:52:19:f4:f1:24:f0:0f:4a:
                    de:ea:d9:ad:d4:59:24:a9:5e:33:c0:5a:8c:87:d0:
                    d0:d2:aa:27:bd:62:fd:61:15:5b:a3:78:3a:88:39:
                    30:a7:db:a3:0b:ff:ba:07:32:f3:62:cd:f5:ff:88:
                    b1:7a:2f:4e:b0:63:c3:14:6b:ec:a4:f7:5c:a8:de:
                    61:63:dd:dd:80:22:5d:24:37:15:c1:c4:de:24:0b:
                    02:3d:fb:7a:94:a8:e0:f6:83:e7:34:72:90:41:20:
                    1b:0f:ba:8b:17:70:68:3a:d7:45:1f:4f:52:4b:b5:
                    27:75:b8:98:ac:86:ea:af:7a:e2:8e:a5:fb:8e:7e:
                    98:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:22:8C:E6:B0:68:68:2F:7F:C3:60:1B:CD:D2:27:88:CF:B0:77:79
            X509v3 Authority Key Identifier:
                keyid:56:2C:0F:38:52:39:A5:1C:94:18:BF:19:53:F0:CE:A9:6C:AE:58:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ViwPOFI5pRyUGL8ZU_DOqWyuWDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a58d51-d930-4cf9-9715-ba9bbd543fc3/1/ViwPOFI5pRyUGL8ZU_DOqWyuWDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a58d51-d930-4cf9-9715-ba9bbd543fc3/1/ViwPOFI5pRyUGL8ZU_DOqWyuWDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:53:ce:73:44:5c:5b:98:3f:47:cf:fc:53:4a:33:26:a7:d8:
         a7:4c:6d:4f:78:85:b2:87:45:08:0b:9d:7d:c3:61:b6:03:41:
         b7:22:29:bc:26:ac:89:64:5e:22:20:f4:d9:96:ed:68:81:24:
         19:bb:1f:e9:58:bf:f7:43:bf:56:ac:cf:de:5c:c4:56:af:c8:
         2e:e0:33:c7:9f:12:3a:67:6b:6b:6c:25:0f:24:57:29:0e:eb:
         ac:d2:bd:10:ff:90:5c:6d:7c:d8:60:f6:4b:32:cd:2b:73:0f:
         7d:25:25:17:7b:d4:9c:f1:77:22:e4:30:73:6d:9f:9e:9f:a5:
         35:bb:8e:08:89:67:57:7a:0f:fa:23:de:8f:1d:4b:43:ec:47:
         7d:66:1b:db:c2:77:36:12:56:d0:ee:2b:6c:18:95:a0:0c:61:
         7f:ca:5a:e1:f8:e1:2b:b1:ce:c8:67:4e:04:6d:3c:c1:fe:da:
         d1:9e:61:8b:2d:5c:a1:c4:53:b5:ee:b9:27:84:3a:53:3d:2b:
         f5:49:44:fe:3f:98:b3:c9:60:f2:2e:43:23:2c:be:ea:60:c2:
         12:93:ad:50:ac:34:12:53:90:67:f7:87:8a:36:6f:77:5e:21:
         d9:41:30:63:0e:3b:c2:56:52:5a:bf:6e:3c:7a:06:15:f7:7d:
         ee:db:24:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zCFyu7SgV97i97kbwhYkUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2MmMwZjM4NTIzOWE1MWM5NDE4YmYxOTUzZjBjZWE5NmNh
ZTU4MzgwHhcNMjYwMzI4MDYwMTE5WhcNMjYwMzI5MDYwMTE5WjAzMTEwLwYDVQQD
Eyg1YzIyOGNlNmIwNjg2ODJmN2ZjMzYwMWJjZGQyMjc4OGNmYjA3Nzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGmMrmSlU/jINIukAoJzlcx7RbWK
4dzdw0lRdCxB6RKBaJ8B4ZlJT7scJCQDo9ICZf3wa8DRbZknea9aH8x+QqC/j1ML
cWKtVZ2UixxwWdPek+4RzIVulk4bX4DgnjVRj93XeIrTgyhw4O/kbgAXXpxJ1lmr
mjt28LIcxuaAUhn08STwD0re6tmt1FkkqV4zwFqMh9DQ0qonvWL9YRVbo3g6iDkw
p9ujC/+6BzLzYs31/4ixei9OsGPDFGvspPdcqN5hY93dgCJdJDcVwcTeJAsCPft6
lKjg9oPnNHKQQSAbD7qLF3BoOtdFH09SS7UndbiYrIbqr3rijqX7jn6YcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwijOawaGgvf8NgG83SJ4jPsHd5MB8GA1UdIwQY
MBaAFFYsDzhSOaUclBi/GVPwzqlsrlg4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVml3UE9GSTVwUnlVR0w4WlVfRE9xV3l1V0RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hNThkNTEtZDkzMC00Y2Y5LTk3MTUt
YmE5YmJkNTQzZmMzLzEvVml3UE9GSTVwUnlVR0w4WlVfRE9xV3l1V0RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9hNThkNTEtZDkzMC00Y2Y5LTk3MTUtYmE5YmJkNTQzZmMz
LzEvVml3UE9GSTVwUnlVR0w4WlVfRE9xV3l1V0RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1POc0Rc
W5g/R8/8U0ozJqfYp0xtT3iFsodFCAudfcNhtgNBtyIpvCasiWReIiD02ZbtaIEk
Gbsf6Vi/90O/VqzP3lzEVq/ILuAzx58SOmdra2wlDyRXKQ7rrNK9EP+QXG182GD2
SzLNK3MPfSUlF3vUnPF3IuQwc22fnp+lNbuOCIlnV3oP+iPejx1LQ+xHfWYb28J3
NhJW0O4rbBiVoAxhf8pa4fjhK7HOyGdOBG08wf7a0Z5hiy1cocRTte65J4Q6Uz0r
9UlE/j+Ys8lg8i5DIyy+6mDCEpOtUKw0ElOQZ/eHijZvd14h2UEwYw47wlZSWr9u
PHoGFfd97tskcA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:45 2026 by rpki-client