Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
File:                     557xnCc97e0ZzvazaDmzzrAe3v0.mft (raw, json)
Hash identifier:          AfdnfXUM3xyYgHioo5tDVsIdXEQVnJa73fjb6+HdNyw=
Subject key identifier:   30:BF:A8:29:C1:B9:DC:AC:D1:F8:AA:4C:4C:CB:DE:DE:CC:F9:1A:C8
Authority key identifier: E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
Certificate issuer:       /CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Certificate serial:       019D2771BB15152988CDA7CE940E3598751E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
Manifest number:          0D58
Signing time:             Thu 26 Mar 2026 00:00:57 +0000
Manifest this update:     Thu 26 Mar 2026 00:00:57 +0000
Manifest next update:     Fri 27 Mar 2026 00:00:57 +0000
Files and hashes:         1: 557xnCc97e0ZzvazaDmzzrAe3v0.crl (hash: wyA2jCXG0/JB7oG9DqaCgkD6662jlYCOXmrsLzMdPSQ=)
                          2: 9SyzUnhmTlTJs5-Xn7cO2eyXMsA.roa (hash: 2gNqd/WCXuzG4uv+GgfK3/vw/CmTadqijVQ5eKcLJXU=)
                          3: nSQSUiEOU-zHAWMn8ZKwogzTrM8.roa (hash: AC48o16lY1gJTiGIXk1jqfPVhEWM02EA+wJRG7sg7HY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:bb:15:15:29:88:cd:a7:ce:94:0e:35:98:75:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e79ef19c273deded19cef6b36839b3ceb01edefd
        Validity
            Not Before: Mar 26 00:00:57 2026 GMT
            Not After : Mar 27 00:00:57 2026 GMT
        Subject: CN=30bfa829c1b9dcacd1f8aa4c4ccbdedeccf91ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e6:8f:df:92:f7:fe:b5:f8:12:ad:da:d4:6d:
                    84:8f:35:89:bd:85:38:5a:88:4b:85:6b:c5:5b:47:
                    b4:5c:d5:bd:23:3d:47:aa:10:ef:60:b1:d2:8e:d9:
                    f0:ee:2d:eb:e4:43:6e:71:fd:f0:2c:5d:61:c4:64:
                    01:4c:91:f2:8f:b2:69:69:8f:2b:63:84:68:26:98:
                    1d:66:4c:2d:50:81:88:9f:8e:2b:88:07:c6:10:36:
                    a4:03:99:8c:ae:91:cd:df:ea:62:e3:9f:01:5d:aa:
                    f5:ec:1f:af:91:d4:c2:13:ed:b9:e6:d1:3e:d8:c8:
                    ea:4c:c5:46:83:b7:2b:bb:fe:58:18:10:2d:43:5f:
                    04:29:a1:ab:a7:ea:19:c1:f1:03:d7:32:a6:32:fb:
                    39:3c:e6:6b:c1:2c:a3:f0:3b:b6:24:82:c4:1e:d2:
                    8d:47:2f:b5:51:48:c8:7e:57:7d:80:e4:77:41:2d:
                    5a:cf:93:46:2c:1b:0b:73:24:36:da:f2:68:3a:88:
                    c1:65:40:8e:58:29:54:12:1d:5f:0c:9f:64:53:34:
                    03:d6:b1:8c:da:a7:84:25:0c:42:47:8c:2a:b5:a4:
                    46:78:c5:a2:41:b3:76:e8:0d:60:b2:ab:3d:58:fb:
                    aa:57:2b:f5:0b:fe:a2:a7:ea:f6:fb:72:e6:fc:a8:
                    07:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:BF:A8:29:C1:B9:DC:AC:D1:F8:AA:4C:4C:CB:DE:DE:CC:F9:1A:C8
            X509v3 Authority Key Identifier:
                keyid:E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ba:14:09:41:fb:e7:14:52:b3:40:c2:49:4b:ed:12:d1:53:
         cf:e1:2c:b3:e1:fe:98:0c:fd:c9:de:45:3f:e5:f8:c5:7f:f1:
         bf:90:09:dd:d2:4f:1c:71:52:b8:65:12:e8:81:09:86:06:ae:
         b9:55:9a:89:79:01:f6:06:48:75:30:eb:2a:a0:30:58:5d:96:
         ef:d3:fc:d2:57:38:51:f3:ac:9a:62:a9:0c:8d:68:2b:56:9e:
         e4:5c:76:22:76:86:53:ce:cd:2f:13:71:36:4d:c8:49:84:74:
         58:18:c6:49:db:37:30:48:81:40:15:cf:89:e9:77:c0:2e:24:
         9e:ac:09:0c:b5:0a:51:27:e6:31:52:a9:bc:77:6a:b9:ed:1e:
         8b:13:68:ed:bb:0d:63:23:72:16:d5:22:ef:d3:21:b4:18:20:
         ff:29:97:65:5e:14:84:95:9e:95:18:d1:57:41:d7:da:a1:45:
         e9:8a:53:7e:f3:28:aa:52:4d:09:48:7f:5f:31:e7:7a:07:da:
         ae:e5:f1:56:73:70:58:93:36:d8:e6:cb:82:50:4d:40:05:53:
         07:a8:9f:da:8e:d9:bc:15:7c:e6:dc:8c:63:6b:34:2b:93:3f:
         07:63:14:f9:cb:f6:1a:0d:c3:00:c6:0e:98:6a:cd:83:d5:a6:
         0a:18:1a:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncbsVFSmIzafOlA41mHUeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OWVmMTljMjczZGVkZWQxOWNlZjZiMzY4MzliM2NlYjAx
ZWRlZmQwHhcNMjYwMzI2MDAwMDU3WhcNMjYwMzI3MDAwMDU3WjAzMTEwLwYDVQQD
EygzMGJmYTgyOWMxYjlkY2FjZDFmOGFhNGM0Y2NiZGVkZWNjZjkxYWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uaP35L3/rX4Eq3a1G2EjzWJvYU4
WohLhWvFW0e0XNW9Iz1HqhDvYLHSjtnw7i3r5ENucf3wLF1hxGQBTJHyj7JpaY8r
Y4RoJpgdZkwtUIGIn44riAfGEDakA5mMrpHN3+pi458BXar17B+vkdTCE+255tE+
2MjqTMVGg7cru/5YGBAtQ18EKaGrp+oZwfED1zKmMvs5POZrwSyj8Du2JILEHtKN
Ry+1UUjIfld9gOR3QS1az5NGLBsLcyQ22vJoOojBZUCOWClUEh1fDJ9kUzQD1rGM
2qeEJQxCR4wqtaRGeMWiQbN26A1gsqs9WPuqVyv1C/6ip+r2+3Lm/KgH0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDC/qCnBudys0fiqTEzL3t7M+RrIMB8GA1UdIwQY
MBaAFOee8ZwnPe3tGc72s2g5s86wHt79MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTU3eG5DYzk3ZTBaenZhemFEbXp6ckFlM3YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zZGRlOGQtYmMwOS00N2ViLThiNWUt
ZDliNzJlZDdjYjRkLzEvNTU3eG5DYzk3ZTBaenZhemFEbXp6ckFlM3YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zZGRlOGQtYmMwOS00N2ViLThiNWUtZDliNzJlZDdjYjRk
LzEvNTU3eG5DYzk3ZTBaenZhemFEbXp6ckFlM3YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmLoUCUH7
5xRSs0DCSUvtEtFTz+Ess+H+mAz9yd5FP+X4xX/xv5AJ3dJPHHFSuGUS6IEJhgau
uVWaiXkB9gZIdTDrKqAwWF2W79P80lc4UfOsmmKpDI1oK1ae5Fx2InaGU87NLxNx
Nk3ISYR0WBjGSds3MEiBQBXPiel3wC4knqwJDLUKUSfmMVKpvHdque0eixNo7bsN
YyNyFtUi79MhtBgg/ymXZV4UhJWelRjRV0HX2qFF6YpTfvMoqlJNCUh/XzHnegfa
ruXxVnNwWJM22ObLglBNQAVTB6if2o7ZvBV85tyMY2s0K5M/B2MU+cv2Gg3DAMYO
mGrNg9WmChgaYw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:50:39 2026 by rpki-client