Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
File:                     x7996xihKSBrrXc8-CId5UTj_YE.mft (raw, json)
Hash identifier:          PEZerUBUDz7bDm/0dr7vBUdPtSm7XGkCCdusaWNLZPA=
Subject key identifier:   43:30:27:B9:65:B8:38:2D:5F:A3:AA:43:5E:B2:5A:E3:6E:9D:4F:BB
Authority key identifier: C7:BF:7D:EB:18:A1:29:20:6B:AD:77:3C:F8:22:1D:E5:44:E3:FD:81
Certificate issuer:       /CN=c7bf7deb18a129206bad773cf8221de544e3fd81
Certificate serial:       019D2772BA425608CA591E1DD03DBAFC3D4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
Manifest number:          0B54
Signing time:             Thu 26 Mar 2026 00:02:03 +0000
Manifest this update:     Thu 26 Mar 2026 00:02:03 +0000
Manifest next update:     Fri 27 Mar 2026 00:02:03 +0000
Files and hashes:         1: x7996xihKSBrrXc8-CId5UTj_YE.crl (hash: UfieQjVlKmPCgcSvBt455Vae0L5YXYSVsOmz0L5MXFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:ba:42:56:08:ca:59:1e:1d:d0:3d:ba:fc:3d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7bf7deb18a129206bad773cf8221de544e3fd81
        Validity
            Not Before: Mar 26 00:02:03 2026 GMT
            Not After : Mar 27 00:02:03 2026 GMT
        Subject: CN=433027b965b8382d5fa3aa435eb25ae36e9d4fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6d:d7:5e:f2:2c:1e:6e:4a:11:ee:8b:77:8e:
                    5f:24:be:f6:0f:1a:74:db:09:3b:0f:9d:50:06:ea:
                    f0:b2:78:9f:b1:eb:05:e4:06:5b:be:c7:c1:39:93:
                    ff:13:3c:d4:2f:67:e9:63:df:96:55:1c:b9:52:b9:
                    76:d5:fb:0a:09:6f:ca:10:a8:45:f0:23:7c:9c:48:
                    25:a5:39:8f:02:ed:30:96:38:4b:1a:85:42:5c:2c:
                    01:ff:9b:3c:b9:04:d1:a6:59:94:54:6f:8f:db:18:
                    92:75:54:3e:03:76:79:07:90:c1:c7:bb:f8:ec:ac:
                    9d:cf:ff:59:5f:eb:e8:d6:1f:48:99:a9:a3:24:6c:
                    f1:e8:70:78:e8:8c:71:68:1c:a6:c6:ba:e6:6f:58:
                    ed:e3:e4:9a:8b:36:e7:18:1d:11:a5:9e:75:06:4c:
                    5d:a3:ba:77:fd:34:21:23:95:56:ce:0f:1b:72:6d:
                    20:5f:13:ed:95:33:22:e4:bd:83:50:0f:bd:a4:14:
                    40:c5:1e:9b:d4:8c:be:df:5e:50:56:ad:34:ae:dd:
                    89:4f:fd:4c:e4:8e:88:95:d7:fa:85:dd:8f:4a:4b:
                    eb:77:28:18:e0:8f:f3:ed:e8:ce:df:0f:a9:7a:79:
                    41:12:53:7b:35:e2:7e:ea:29:95:2d:be:51:78:d6:
                    c7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:30:27:B9:65:B8:38:2D:5F:A3:AA:43:5E:B2:5A:E3:6E:9D:4F:BB
            X509v3 Authority Key Identifier:
                keyid:C7:BF:7D:EB:18:A1:29:20:6B:AD:77:3C:F8:22:1D:E5:44:E3:FD:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:28:17:0d:5f:9f:64:b2:51:79:af:e8:7f:ea:0a:13:c6:46:
         ed:81:f1:11:9d:a5:a7:1a:5b:79:bc:8f:55:46:9a:9b:a5:f7:
         04:f1:be:9a:d7:14:a5:c3:a3:4b:b4:74:0d:30:84:fa:42:b9:
         d6:5a:54:16:94:6a:0a:ed:50:33:28:83:72:7f:0b:a3:0c:39:
         aa:f2:2b:21:6f:6f:71:39:96:b0:21:18:9b:00:c5:45:43:79:
         28:04:bf:ca:94:8b:2f:b1:80:3c:26:43:f3:63:8f:25:21:26:
         21:e7:a6:c7:05:e1:28:a8:29:2a:00:b5:8e:1f:4f:f5:e8:bb:
         77:d5:0a:51:de:8a:95:8f:4e:50:e2:65:ac:ed:f8:d3:e4:45:
         75:7a:20:ba:23:60:f4:12:f5:6f:8e:6c:aa:2d:79:92:8a:1a:
         d3:1a:9b:ff:eb:43:f8:0c:79:2a:4b:69:a7:19:f2:30:60:21:
         9f:98:be:94:ad:60:5f:4f:28:91:95:0a:ab:a9:4b:a7:3f:ec:
         df:78:a8:2f:71:8a:18:a7:63:bf:9d:6c:49:80:86:fe:96:11:
         c8:a6:46:0f:54:a6:bb:c0:6d:16:79:79:51:1b:d8:3c:36:dd:
         24:0f:e7:0d:ae:7e:cc:d7:93:94:0a:66:ee:21:bf:05:0e:1a:
         1f:12:f1:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncrpCVgjKWR4d0D26/D1OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YmY3ZGViMThhMTI5MjA2YmFkNzczY2Y4MjIxZGU1NDRl
M2ZkODEwHhcNMjYwMzI2MDAwMjAzWhcNMjYwMzI3MDAwMjAzWjAzMTEwLwYDVQQD
Eyg0MzMwMjdiOTY1YjgzODJkNWZhM2FhNDM1ZWIyNWFlMzZlOWQ0ZmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA123XXvIsHm5KEe6Ld45fJL72Dxp0
2wk7D51QBurwsnifsesF5AZbvsfBOZP/EzzUL2fpY9+WVRy5Url21fsKCW/KEKhF
8CN8nEglpTmPAu0wljhLGoVCXCwB/5s8uQTRplmUVG+P2xiSdVQ+A3Z5B5DBx7v4
7Kydz/9ZX+vo1h9ImamjJGzx6HB46IxxaBymxrrmb1jt4+SaizbnGB0RpZ51Bkxd
o7p3/TQhI5VWzg8bcm0gXxPtlTMi5L2DUA+9pBRAxR6b1Iy+315QVq00rt2JT/1M
5I6Ildf6hd2PSkvrdygY4I/z7ejO3w+penlBElN7NeJ+6imVLb5ReNbHKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMwJ7lluDgtX6OqQ16yWuNunU+7MB8GA1UdIwQY
MBaAFMe/fesYoSkga613PPgiHeVE4/2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDc5OTZ4aWhLU0JyclhjOC1DSWQ1VVRqX1lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83NTBlYWYtYjAzYy00NmQyLWJmYzYt
MDE4ZmM5YzAyOGIwLzEveDc5OTZ4aWhLU0JyclhjOC1DSWQ1VVRqX1lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83NTBlYWYtYjAzYy00NmQyLWJmYzYtMDE4ZmM5YzAyOGIw
LzEveDc5OTZ4aWhLU0JyclhjOC1DSWQ1VVRqX1lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCgXDV+f
ZLJRea/of+oKE8ZG7YHxEZ2lpxpbebyPVUaam6X3BPG+mtcUpcOjS7R0DTCE+kK5
1lpUFpRqCu1QMyiDcn8Loww5qvIrIW9vcTmWsCEYmwDFRUN5KAS/ypSLL7GAPCZD
82OPJSEmIeemxwXhKKgpKgC1jh9P9ei7d9UKUd6KlY9OUOJlrO340+RFdXoguiNg
9BL1b45sqi15kooa0xqb/+tD+Ax5KktppxnyMGAhn5i+lK1gX08okZUKq6lLpz/s
33ioL3GKGKdjv51sSYCG/pYRyKZGD1Smu8BtFnl5URvYPDbdJA/nDa5+zNeTlApm
7iG/BQ4aHxLxxg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:08 2026 by rpki-client