Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft
File:                     Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft (raw, json)
Hash identifier:          ElQ2WszP6ntE2UkrGKjFMycTOcikS+2oj/nS+7b86Xk=
Subject key identifier:   75:79:AD:09:ED:C2:3E:87:F9:AC:63:B4:E7:8D:F4:C9:13:6D:48:73
Authority key identifier: 12:29:FE:67:7F:47:DF:0F:D7:CC:34:95:F1:72:D9:3B:3C:BA:0E:00
Certificate issuer:       /CN=1229fe677f47df0fd7cc3495f172d93b3cba0e00
Certificate serial:       019D2AE156501EBEABDB149F909430C2B3EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ein-Z39H3w_XzDSV8XLZOzy6DgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft
Manifest number:          10F0
Signing time:             Thu 26 Mar 2026 16:01:43 +0000
Manifest this update:     Thu 26 Mar 2026 16:01:43 +0000
Manifest next update:     Fri 27 Mar 2026 16:01:43 +0000
Files and hashes:         1: Ein-Z39H3w_XzDSV8XLZOzy6DgA.crl (hash: isv0bRMoTax0u30rcA55YQlpUwg73agavrgmGnS/0oA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ein-Z39H3w_XzDSV8XLZOzy6DgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:e1:56:50:1e:be:ab:db:14:9f:90:94:30:c2:b3:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1229fe677f47df0fd7cc3495f172d93b3cba0e00
        Validity
            Not Before: Mar 26 16:01:43 2026 GMT
            Not After : Mar 27 16:01:43 2026 GMT
        Subject: CN=7579ad09edc23e87f9ac63b4e78df4c9136d4873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ec:e6:33:57:c8:4c:bf:36:17:cd:1d:d1:17:
                    83:99:e1:1b:11:54:8a:05:3e:28:f5:b6:b3:3a:67:
                    24:25:bf:75:e7:ed:f6:87:33:42:49:b1:e2:73:5f:
                    39:e8:df:f2:7c:aa:d1:a3:fa:ef:d2:11:71:64:7b:
                    83:13:01:a1:57:69:16:58:41:84:37:e0:e5:d7:0e:
                    6f:0d:70:9c:44:b1:ab:b0:3e:a9:fb:09:56:b6:fc:
                    cb:81:15:32:14:a0:c1:e5:5f:9c:9b:da:40:22:39:
                    b2:46:e2:fc:2d:42:24:46:2b:c8:a9:42:9e:9a:e0:
                    e3:77:dc:e1:b7:07:e3:63:04:13:f7:09:3d:6d:3b:
                    e7:ca:7c:64:4e:26:7c:37:a5:0f:6e:4e:0e:32:0a:
                    5a:a3:57:42:ad:66:39:a2:23:a5:92:6a:82:59:d4:
                    99:0f:6f:5c:cf:cf:92:42:8b:e0:aa:e6:c2:0d:bc:
                    bc:76:bb:09:f9:93:ea:64:bd:79:3f:ad:60:14:fd:
                    0b:be:07:d4:81:fa:f4:0c:38:b8:e7:fa:4a:63:83:
                    19:4e:cc:32:93:57:c2:c4:48:8e:bd:88:c3:3c:78:
                    33:8a:f4:bc:78:92:ae:b0:0a:b6:8f:8d:d8:09:b9:
                    06:d5:79:40:60:53:c9:ba:1e:3f:7c:86:c0:fe:05:
                    e4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:79:AD:09:ED:C2:3E:87:F9:AC:63:B4:E7:8D:F4:C9:13:6D:48:73
            X509v3 Authority Key Identifier:
                keyid:12:29:FE:67:7F:47:DF:0F:D7:CC:34:95:F1:72:D9:3B:3C:BA:0E:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ein-Z39H3w_XzDSV8XLZOzy6DgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:94:b5:21:ec:b9:e5:b4:52:ea:59:6c:a7:ea:12:cb:aa:e8:
         c8:56:fe:79:87:83:a8:f5:e8:0d:8d:10:8a:01:c8:3f:08:a2:
         ce:e1:57:3c:26:76:d2:3d:88:e5:b0:21:f5:db:78:26:1b:55:
         87:e2:33:6d:7f:09:e5:33:02:2c:a0:6a:0b:46:e3:cb:25:fc:
         6b:3b:36:f5:5b:e0:bf:3f:51:30:20:a1:bb:f2:34:34:bd:d9:
         54:26:84:22:b9:93:ef:27:d4:ce:ae:9e:18:7c:cf:1d:fe:3f:
         5e:87:19:f8:38:3e:68:12:34:9e:6d:70:37:a9:ce:a5:d9:9c:
         f9:0e:31:5c:66:b2:b1:ca:72:27:75:a1:e5:2b:d3:47:de:8b:
         d6:47:a7:94:49:06:ce:1a:7b:e6:99:4a:de:4a:9c:c9:73:d6:
         ee:ad:06:dc:a7:11:a6:0a:5e:cd:67:98:f1:6d:13:1f:39:1b:
         2d:d1:c7:47:02:39:79:5c:6a:28:0b:2a:30:b2:45:40:33:d0:
         df:2b:81:72:ae:40:15:22:c0:78:ce:33:7c:49:3d:88:c1:6b:
         bc:08:e8:c3:af:92:b6:2a:54:55:34:19:37:84:97:ef:f2:48:
         9c:aa:18:0c:69:64:fd:58:7c:28:ea:d0:c3:fa:c0:7b:8e:04:
         58:1f:22:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4VZQHr6r2xSfkJQwwrPrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMjlmZTY3N2Y0N2RmMGZkN2NjMzQ5NWYxNzJkOTNiM2Ni
YTBlMDAwHhcNMjYwMzI2MTYwMTQzWhcNMjYwMzI3MTYwMTQzWjAzMTEwLwYDVQQD
Eyg3NTc5YWQwOWVkYzIzZTg3ZjlhYzYzYjRlNzhkZjRjOTEzNmQ0ODczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+zmM1fITL82F80d0ReDmeEbEVSK
BT4o9bazOmckJb915+32hzNCSbHic1856N/yfKrRo/rv0hFxZHuDEwGhV2kWWEGE
N+Dl1w5vDXCcRLGrsD6p+wlWtvzLgRUyFKDB5V+cm9pAIjmyRuL8LUIkRivIqUKe
muDjd9zhtwfjYwQT9wk9bTvnynxkTiZ8N6UPbk4OMgpao1dCrWY5oiOlkmqCWdSZ
D29cz8+SQovgqubCDby8drsJ+ZPqZL15P61gFP0LvgfUgfr0DDi45/pKY4MZTswy
k1fCxEiOvYjDPHgzivS8eJKusAq2j43YCbkG1XlAYFPJuh4/fIbA/gXk2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHV5rQntwj6H+axjtOeN9MkTbUhzMB8GA1UdIwQY
MBaAFBIp/md/R98P18w0lfFy2Ts8ug4AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWluLVozOUgzd19YekRTVjhYTFpPenk2RGdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kYzhlMDctOThiNS00M2VmLWEyNDIt
M2FiNjZiZjQ3YmQzLzEvRWluLVozOUgzd19YekRTVjhYTFpPenk2RGdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9kYzhlMDctOThiNS00M2VmLWEyNDItM2FiNjZiZjQ3YmQz
LzEvRWluLVozOUgzd19YekRTVjhYTFpPenk2RGdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJS1Iey5
5bRS6llsp+oSy6royFb+eYeDqPXoDY0QigHIPwiizuFXPCZ20j2I5bAh9dt4JhtV
h+IzbX8J5TMCLKBqC0bjyyX8azs29Vvgvz9RMCChu/I0NL3ZVCaEIrmT7yfUzq6e
GHzPHf4/XocZ+Dg+aBI0nm1wN6nOpdmc+Q4xXGayscpyJ3Wh5SvTR96L1kenlEkG
zhp75plK3kqcyXPW7q0G3KcRpgpezWeY8W0THzkbLdHHRwI5eVxqKAsqMLJFQDPQ
3yuBcq5AFSLAeM4zfEk9iMFrvAjow6+StipUVTQZN4SX7/JInKoYDGlk/Vh8KOrQ
w/rAe44EWB8irw==
-----END CERTIFICATE-----