Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
File:                     V0zsR2DtovCf62939yFCvmmbuMM.mft (raw, json)
Hash identifier:          oE1u7Q4P3kt1nRSId/rmtjadfP+6bV24WfWnzeLXUME=
Subject key identifier:   E5:8E:20:FE:CE:5A:46:B3:BA:63:1C:3E:5C:67:F5:EB:A8:38:E1:E2
Authority key identifier: 57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3
Certificate issuer:       /CN=574cec4760eda2f09feb6f77f72142be699bb8c3
Certificate serial:       019D25F1498DB8A1E6004A5F36C4ED3A74BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
Manifest number:          130F
Signing time:             Wed 25 Mar 2026 17:01:03 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:03 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:03 +0000
Files and hashes:         1: V0zsR2DtovCf62939yFCvmmbuMM.crl (hash: mwzjpyzHCcomoykvNs518d1Sp5P24L+4T3pxXXMmEHQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 17:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:49:8d:b8:a1:e6:00:4a:5f:36:c4:ed:3a:74:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574cec4760eda2f09feb6f77f72142be699bb8c3
        Validity
            Not Before: Mar 25 17:01:03 2026 GMT
            Not After : Mar 26 17:01:03 2026 GMT
        Subject: CN=e58e20fece5a46b3ba631c3e5c67f5eba838e1e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b5:4e:5a:2e:fa:6f:16:b7:97:85:d8:c8:17:
                    6e:fe:6c:64:ca:9d:38:0b:dd:a5:96:e4:33:47:a1:
                    67:b3:f1:e6:f4:7c:2c:0f:44:bf:8b:0f:c0:e1:0f:
                    4e:2f:e5:6f:e8:33:46:45:69:10:93:63:fc:f3:28:
                    61:8c:f3:37:d4:fe:6e:c4:49:b0:6d:b7:b3:5a:9f:
                    2e:61:82:e0:7e:7f:f7:88:dc:5f:80:11:5c:c4:c7:
                    d2:8c:a8:5d:f3:2f:29:47:09:bd:9a:5c:eb:0b:2f:
                    58:94:20:1a:11:9b:80:a5:e8:a9:a0:4c:69:9b:cd:
                    d2:22:4e:93:cc:85:7b:d0:a8:38:31:f0:79:e9:cd:
                    03:73:23:ed:16:2b:28:7b:bb:bd:02:8d:ac:94:15:
                    0e:3c:15:b9:73:db:cc:f2:79:38:49:47:14:2a:66:
                    03:8f:8c:32:8a:73:32:d8:6c:f5:0c:b9:ad:13:bd:
                    33:08:04:45:48:2f:66:3f:45:05:1b:91:d5:45:a9:
                    b4:b4:51:6a:6e:e4:7b:0d:ba:7a:1c:97:31:07:ed:
                    2c:3b:04:0c:37:05:9f:dd:7a:4b:5e:2b:a5:20:85:
                    fe:4d:80:66:dc:8a:c4:0d:61:35:23:54:84:72:90:
                    4a:48:34:a4:1a:f8:70:d6:c3:ef:59:dd:84:d5:ae:
                    80:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8E:20:FE:CE:5A:46:B3:BA:63:1C:3E:5C:67:F5:EB:A8:38:E1:E2
            X509v3 Authority Key Identifier:
                keyid:57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b2:3c:85:4d:e2:6b:49:af:38:4b:d9:a1:35:be:f7:05:3f:
         39:c8:9a:d0:c8:78:40:0a:50:d4:e8:15:ab:e5:53:4f:f6:67:
         67:73:19:8f:8b:59:17:9b:73:0d:12:c5:73:1e:47:54:5a:1e:
         74:5f:09:c7:7f:fd:b9:87:6a:91:e9:26:31:89:f0:3e:87:17:
         de:cd:46:89:bf:8d:c4:18:7f:7c:e9:e4:56:42:42:64:54:26:
         47:7f:62:1d:99:91:00:a4:2b:d0:a6:6c:0c:b2:54:a3:f7:7c:
         63:a5:21:94:33:a0:13:f9:3a:47:60:88:cf:0d:e8:b9:a8:f1:
         f5:cf:5e:29:74:12:2e:f9:73:05:6f:59:c4:19:b7:e7:7d:56:
         f8:08:82:3b:77:45:7f:fd:b6:81:e9:d1:bd:a7:d8:e0:c0:0e:
         62:1f:ed:bf:26:3c:eb:1b:98:14:12:88:5a:99:66:37:f0:cf:
         d2:6c:24:83:ff:97:e1:d9:5f:e7:3c:09:78:95:78:c5:cd:60:
         72:b9:08:bd:db:03:88:0f:8d:b4:a8:3e:70:8b:88:f1:03:3a:
         a6:08:a2:f0:86:33:81:26:2a:7f:50:6a:3b:39:66:89:96:c8:
         4b:70:f2:92:26:14:42:1d:97:11:84:b7:f2:a1:3a:18:52:b6:
         14:52:a4:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8UmNuKHmAEpfNsTtOnS8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NGNlYzQ3NjBlZGEyZjA5ZmViNmY3N2Y3MjE0MmJlNjk5
YmI4YzMwHhcNMjYwMzI1MTcwMTAzWhcNMjYwMzI2MTcwMTAzWjAzMTEwLwYDVQQD
EyhlNThlMjBmZWNlNWE0NmIzYmE2MzFjM2U1YzY3ZjVlYmE4MzhlMWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbVOWi76bxa3l4XYyBdu/mxkyp04
C92lluQzR6Fns/Hm9HwsD0S/iw/A4Q9OL+Vv6DNGRWkQk2P88yhhjPM31P5uxEmw
bbezWp8uYYLgfn/3iNxfgBFcxMfSjKhd8y8pRwm9mlzrCy9YlCAaEZuApeipoExp
m83SIk6TzIV70Kg4MfB56c0DcyPtFisoe7u9Ao2slBUOPBW5c9vM8nk4SUcUKmYD
j4wyinMy2Gz1DLmtE70zCARFSC9mP0UFG5HVRam0tFFqbuR7Dbp6HJcxB+0sOwQM
NwWf3XpLXiulIIX+TYBm3IrEDWE1I1SEcpBKSDSkGvhw1sPvWd2E1a6A5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWOIP7OWkazumMcPlxn9euoOOHiMB8GA1UdIwQY
MBaAFFdM7Edg7aLwn+tvd/chQr5pm7jDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjB6c1IyRHRvdkNmNjI5Mzl5RkN2bW1idU1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC85NTcxZGEtZWZjYS00MWQ2LTg1ZjMt
ZDZhOTk5MzRjNDkzLzEvVjB6c1IyRHRvdkNmNjI5Mzl5RkN2bW1idU1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC85NTcxZGEtZWZjYS00MWQ2LTg1ZjMtZDZhOTk5MzRjNDkz
LzEvVjB6c1IyRHRvdkNmNjI5Mzl5RkN2bW1idU1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhLI8hU3i
a0mvOEvZoTW+9wU/Ocia0Mh4QApQ1OgVq+VTT/ZnZ3MZj4tZF5tzDRLFcx5HVFoe
dF8Jx3/9uYdqkekmMYnwPocX3s1Gib+NxBh/fOnkVkJCZFQmR39iHZmRAKQr0KZs
DLJUo/d8Y6UhlDOgE/k6R2CIzw3ouajx9c9eKXQSLvlzBW9ZxBm3531W+AiCO3dF
f/22genRvafY4MAOYh/tvyY86xuYFBKIWplmN/DP0mwkg/+X4dlf5zwJeJV4xc1g
crkIvdsDiA+NtKg+cIuI8QM6pgii8IYzgSYqf1BqOzlmiZbIS3DykiYUQh2XEYS3
8qE6GFK2FFKkkw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:25 2026 by rpki-client