Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
File:                     DvgMyei0RaB_7srAr8WeQtxxAmM.mft (raw, json)
Hash identifier:          +4phesznutrfq8ZEMlZQ8IVsQm53V2iNQDHtOKG7thM=
Subject key identifier:   A9:99:7D:D3:F3:84:42:5C:E1:CA:51:A5:56:51:98:E6:18:F5:CF:6C
Authority key identifier: 0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63
Certificate issuer:       /CN=0ef80cc9e8b445a07feecac0afc59e42dc710263
Certificate serial:       019D27DFA546A59A8BA9F5AF6B3C27F63108
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
Manifest number:          05D7
Signing time:             Thu 26 Mar 2026 02:01:01 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:01 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:01 +0000
Files and hashes:         1: DvgMyei0RaB_7srAr8WeQtxxAmM.crl (hash: Z/pxWZKK0unAdRBpcVNdlR/eezV4ELG7sXI6g1wgPcU=)
                          2: Xm1NyxAzrsVfmOit8GLDJIUr3T4.roa (hash: FBeGZgtFYVn2jU+qekRgjUacFdjECcP1nPbLiXskECw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 02:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:a5:46:a5:9a:8b:a9:f5:af:6b:3c:27:f6:31:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef80cc9e8b445a07feecac0afc59e42dc710263
        Validity
            Not Before: Mar 26 02:01:01 2026 GMT
            Not After : Mar 27 02:01:01 2026 GMT
        Subject: CN=a9997dd3f384425ce1ca51a5565198e618f5cf6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:46:b7:a0:de:0f:51:b1:c0:43:4e:55:fe:
                    0b:3d:1b:ec:df:95:7c:d5:71:88:6e:70:a0:6d:5a:
                    fc:b2:48:7d:ab:79:0b:20:8d:78:9a:d8:d4:4c:1d:
                    dc:85:86:d8:ec:b8:bd:83:ef:6d:e9:8c:fa:6b:5f:
                    0a:6d:fb:f1:3c:29:1a:6b:2c:ce:cc:f2:d9:e7:22:
                    fa:44:78:03:05:d9:b9:2a:f9:1b:2c:3c:17:ae:15:
                    8b:4a:c0:d4:1d:56:a8:36:df:74:14:0e:fa:06:98:
                    72:87:10:77:4c:10:74:4c:4c:3d:61:a8:f2:8b:1a:
                    35:cf:47:2a:de:fe:bc:de:b7:29:fe:17:f5:80:41:
                    d4:64:a2:80:4e:58:31:92:72:90:83:e8:2b:ff:c6:
                    24:ab:c4:b3:89:73:37:36:8a:7e:ae:30:21:39:c4:
                    47:92:4d:82:7e:b2:68:6d:97:71:f4:14:6e:ef:4c:
                    ea:2d:b5:00:61:29:d9:51:72:bc:99:b6:85:5d:03:
                    dc:78:87:92:16:75:39:d0:ae:a2:6f:93:fa:bf:ec:
                    6c:29:cd:92:dc:cd:ea:75:4c:e3:23:c3:bb:20:85:
                    01:d3:ab:74:3a:7e:6c:f8:77:44:e2:0c:53:b3:55:
                    77:67:9e:3f:e5:54:3c:d9:0a:52:f8:bf:d5:51:7e:
                    39:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:99:7D:D3:F3:84:42:5C:E1:CA:51:A5:56:51:98:E6:18:F5:CF:6C
            X509v3 Authority Key Identifier:
                keyid:0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:9a:86:83:97:46:76:76:25:31:85:7f:e7:62:0c:35:65:e9:
         e4:31:10:a2:9c:d6:e2:e8:6a:4a:51:27:f3:68:34:d5:42:c6:
         00:f8:62:3c:bb:d4:d3:e1:fc:e5:45:56:f9:87:93:80:73:de:
         fe:29:75:d9:63:71:ce:be:0a:ac:97:23:a1:fa:f2:70:3f:7b:
         66:1b:5e:ee:18:6a:3d:76:e5:fe:cd:b5:f3:a8:60:18:fb:35:
         3e:5f:d1:3c:39:13:57:14:f1:fa:b6:83:2c:27:85:a3:dc:30:
         c8:ae:72:eb:d4:ce:06:4f:68:dd:5b:3b:8c:63:2a:75:3b:cb:
         75:6c:a4:0f:94:c8:62:c3:47:6a:5d:ad:b9:10:0c:fb:ef:16:
         67:55:b3:2d:96:5e:c3:39:db:65:3f:c2:89:08:d2:61:61:b2:
         d1:26:58:59:bd:04:27:1e:88:e5:6a:3f:06:a2:d1:bd:40:34:
         91:1a:95:87:b8:6a:3f:84:0f:7d:cc:45:8c:c6:0f:6f:38:0e:
         36:ad:7a:07:a2:52:14:9e:40:97:68:28:f2:a2:99:ea:3b:fc:
         25:fc:03:e7:bb:21:09:a4:f8:be:a0:42:75:9b:4a:24:ff:a4:
         f9:b0:ff:c1:8f:6a:f5:49:d2:76:80:7e:c3:60:cb:b0:08:f6:
         d3:e5:80:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n36VGpZqLqfWvazwn9jEIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZjgwY2M5ZThiNDQ1YTA3ZmVlY2FjMGFmYzU5ZTQyZGM3
MTAyNjMwHhcNMjYwMzI2MDIwMTAxWhcNMjYwMzI3MDIwMTAxWjAzMTEwLwYDVQQD
EyhhOTk5N2RkM2YzODQ0MjVjZTFjYTUxYTU1NjUxOThlNjE4ZjVjZjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCNGt6DeD1GxwENOVf4LPRvs35V8
1XGIbnCgbVr8skh9q3kLII14mtjUTB3chYbY7Li9g+9t6Yz6a18KbfvxPCkaayzO
zPLZ5yL6RHgDBdm5KvkbLDwXrhWLSsDUHVaoNt90FA76BphyhxB3TBB0TEw9Yajy
ixo1z0cq3v683rcp/hf1gEHUZKKATlgxknKQg+gr/8Ykq8SziXM3Nop+rjAhOcRH
kk2CfrJobZdx9BRu70zqLbUAYSnZUXK8mbaFXQPceIeSFnU50K6ib5P6v+xsKc2S
3M3qdUzjI8O7IIUB06t0On5s+HdE4gxTs1V3Z54/5VQ82QpS+L/VUX45HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmZfdPzhEJc4cpRpVZRmOYY9c9sMB8GA1UdIwQY
MBaAFA74DMnotEWgf+7KwK/FnkLccQJjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHZnTXllaTBSYUJfN3NyQXI4V2VRdHh4QW1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wODZiZGEtYTQ2NC00NGQ4LThkMWIt
ODY2ZTVkNGM2ZWRiLzEvRHZnTXllaTBSYUJfN3NyQXI4V2VRdHh4QW1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8wODZiZGEtYTQ2NC00NGQ4LThkMWItODY2ZTVkNGM2ZWRi
LzEvRHZnTXllaTBSYUJfN3NyQXI4V2VRdHh4QW1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJqGg5dG
dnYlMYV/52IMNWXp5DEQopzW4uhqSlEn82g01ULGAPhiPLvU0+H85UVW+YeTgHPe
/il12WNxzr4KrJcjofrycD97Zhte7hhqPXbl/s2186hgGPs1Pl/RPDkTVxTx+raD
LCeFo9wwyK5y69TOBk9o3Vs7jGMqdTvLdWykD5TIYsNHal2tuRAM++8WZ1WzLZZe
wznbZT/CiQjSYWGy0SZYWb0EJx6I5Wo/BqLRvUA0kRqVh7hqP4QPfcxFjMYPbzgO
Nq16B6JSFJ5Al2go8qKZ6jv8JfwD57shCaT4vqBCdZtKJP+k+bD/wY9q9UnSdoB+
w2DLsAj20+WACg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:57 2026 by rpki-client