Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
File:                     MLepUygLb5mPwRxHy-kbgmM2TrA.mft (raw, json)
Hash identifier:          9+W9RE6XEjO1dezpWX2uydgsN61XWK52Fhor0J/JYak=
Subject key identifier:   D3:87:68:FE:6C:71:B6:21:02:89:05:BB:63:D8:9F:60:D8:1F:FC:31
Authority key identifier: 30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0
Certificate issuer:       /CN=30b7a953280b6f998fc11c47cbe91b8263364eb0
Certificate serial:       019D27A94360A46D5010A6FFCCBC883B2A1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
Manifest number:          0763
Signing time:             Thu 26 Mar 2026 01:01:37 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:37 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:37 +0000
Files and hashes:         1: MLepUygLb5mPwRxHy-kbgmM2TrA.crl (hash: n4YSFSV/EaNIELZRFRPMzWySG4CD99xINDXA+uuCCzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a9:43:60:a4:6d:50:10:a6:ff:cc:bc:88:3b:2a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30b7a953280b6f998fc11c47cbe91b8263364eb0
        Validity
            Not Before: Mar 26 01:01:37 2026 GMT
            Not After : Mar 27 01:01:37 2026 GMT
        Subject: CN=d38768fe6c71b621028905bb63d89f60d81ffc31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d5:43:e1:fa:40:4c:26:2d:73:a9:3a:bb:8c:
                    9c:f7:24:76:5d:cc:5d:ec:d6:16:a6:63:19:05:f0:
                    16:f5:e5:1d:91:bd:80:0a:34:7c:a1:1c:fd:67:6f:
                    62:85:56:dc:35:8e:24:cd:32:09:9a:2b:83:f4:03:
                    db:dc:78:a9:59:ee:69:c6:19:16:f5:bb:bf:eb:16:
                    34:75:f7:94:f0:02:b6:c4:e9:af:a8:02:5e:f4:4a:
                    b7:03:be:9b:55:d6:41:1b:da:c6:65:99:c5:c1:b6:
                    e8:2b:99:c9:63:aa:20:aa:8d:69:3c:57:29:4f:65:
                    97:b8:6c:33:f9:40:b1:60:c9:89:f2:82:45:1d:e3:
                    e4:1e:0b:90:d4:10:65:81:1b:0b:62:e7:f4:ca:6c:
                    18:30:0a:2a:d8:e9:f3:07:0a:74:a8:af:43:fc:76:
                    a2:02:96:a7:03:13:58:38:0b:f9:9b:6d:9d:d1:8d:
                    d1:7e:be:2f:88:55:ff:f0:09:63:b4:11:2e:a8:4a:
                    af:bb:4d:b5:2e:4b:3f:21:51:0c:9b:d9:36:1e:0d:
                    49:5a:0a:e6:8f:b8:47:e3:66:73:29:cf:8a:af:cf:
                    d6:8a:d6:07:db:d3:6f:e2:3c:5e:59:ab:e5:98:b6:
                    49:ae:b4:43:84:9e:ec:23:a3:da:83:9e:5b:24:73:
                    72:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:87:68:FE:6C:71:B6:21:02:89:05:BB:63:D8:9F:60:D8:1F:FC:31
            X509v3 Authority Key Identifier:
                keyid:30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:06:e2:89:54:e7:3f:42:23:e3:51:b2:cd:63:f8:cd:e0:ba:
         75:08:e4:0e:68:86:7d:ee:79:f4:01:de:1e:87:40:fd:2a:ac:
         93:3e:b8:d1:13:54:c7:28:8c:6b:a7:0e:75:61:62:59:ac:c9:
         bc:46:d0:46:fa:ae:c1:17:9f:62:30:27:3f:79:4e:46:15:75:
         95:35:c5:38:68:c0:a2:34:89:2a:88:c2:b7:ec:fb:86:30:94:
         37:94:33:c3:50:3f:09:fa:ab:60:cb:3a:39:0d:97:9d:bd:58:
         48:bb:9c:75:da:79:e6:c6:b6:95:73:06:c7:15:c5:4b:0b:3b:
         59:43:a9:9f:39:e6:2c:e7:14:52:a8:1f:af:79:fa:40:8b:35:
         4f:76:20:01:7b:d3:8f:51:7f:41:30:eb:05:aa:aa:e9:90:68:
         ff:05:a2:73:a2:55:ae:68:0a:b0:d0:b8:18:7d:1f:59:b6:61:
         34:48:95:d3:10:d6:08:26:44:76:24:3c:13:f6:bd:04:bc:c9:
         e0:75:7e:3d:20:92:e6:89:06:64:78:6b:ff:1e:5e:a4:d0:b0:
         0e:5f:b3:d5:fb:cb:8f:22:0e:4f:6a:8d:da:bc:3e:3d:08:c5:
         82:44:6e:03:58:3d:1e:5c:bd:fa:fd:d1:04:7e:01:db:48:f3:
         4f:28:6d:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqUNgpG1QEKb/zLyIOyocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYjdhOTUzMjgwYjZmOTk4ZmMxMWM0N2NiZTkxYjgyNjMz
NjRlYjAwHhcNMjYwMzI2MDEwMTM3WhcNMjYwMzI3MDEwMTM3WjAzMTEwLwYDVQQD
EyhkMzg3NjhmZTZjNzFiNjIxMDI4OTA1YmI2M2Q4OWY2MGQ4MWZmYzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudVD4fpATCYtc6k6u4yc9yR2Xcxd
7NYWpmMZBfAW9eUdkb2ACjR8oRz9Z29ihVbcNY4kzTIJmiuD9APb3HipWe5pxhkW
9bu/6xY0dfeU8AK2xOmvqAJe9Eq3A76bVdZBG9rGZZnFwbboK5nJY6ogqo1pPFcp
T2WXuGwz+UCxYMmJ8oJFHePkHguQ1BBlgRsLYuf0ymwYMAoq2OnzBwp0qK9D/Hai
ApanAxNYOAv5m22d0Y3Rfr4viFX/8AljtBEuqEqvu021Lks/IVEMm9k2Hg1JWgrm
j7hH42ZzKc+Kr8/WitYH29Nv4jxeWavlmLZJrrRDhJ7sI6Pag55bJHNy/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOHaP5scbYhAokFu2PYn2DYH/wxMB8GA1UdIwQY
MBaAFDC3qVMoC2+Zj8EcR8vpG4JjNk6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUxlcFV5Z0xiNW1Qd1J4SHkta2JnbU0yVHJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kZmIzZmYtYmUzYy00MTg1LTllMDgt
OWM3MTY5YjdhMmU0LzEvTUxlcFV5Z0xiNW1Qd1J4SHkta2JnbU0yVHJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kZmIzZmYtYmUzYy00MTg1LTllMDgtOWM3MTY5YjdhMmU0
LzEvTUxlcFV5Z0xiNW1Qd1J4SHkta2JnbU0yVHJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwbiiVTn
P0Ij41GyzWP4zeC6dQjkDmiGfe559AHeHodA/Sqskz640RNUxyiMa6cOdWFiWazJ
vEbQRvquwRefYjAnP3lORhV1lTXFOGjAojSJKojCt+z7hjCUN5Qzw1A/CfqrYMs6
OQ2Xnb1YSLucddp55sa2lXMGxxXFSws7WUOpnznmLOcUUqgfr3n6QIs1T3YgAXvT
j1F/QTDrBaqq6ZBo/wWic6JVrmgKsNC4GH0fWbZhNEiV0xDWCCZEdiQ8E/a9BLzJ
4HV+PSCS5okGZHhr/x5epNCwDl+z1fvLjyIOT2qN2rw+PQjFgkRuA1g9Hly9+v3R
BH4B20jzTyhtWQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:41 2026 by rpki-client