Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
File:                     RxG7s-u50tFww3xioQzNwikVVEs.mft (raw, json)
Hash identifier:          W+c20eKqYl1A7Q2GBPyfWNtOJOTgaKM1+nx4SwG8Z74=
Subject key identifier:   49:1E:0A:EE:38:B7:70:69:11:E0:50:1C:F9:71:DE:E4:AA:0A:30:D2
Authority key identifier: 47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B
Certificate issuer:       /CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b
Certificate serial:       019D27DFE8F8C78FE8F2E28C08DC42DF665F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
Manifest number:          096B
Signing time:             Thu 26 Mar 2026 02:01:18 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:18 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:18 +0000
Files and hashes:         1: RxG7s-u50tFww3xioQzNwikVVEs.crl (hash: Bw9Qvqtf6lEWXRk4vcm5CEaxvnK5lqO6x7yK7qixyXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:e8:f8:c7:8f:e8:f2:e2:8c:08:dc:42:df:66:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b
        Validity
            Not Before: Mar 26 02:01:18 2026 GMT
            Not After : Mar 27 02:01:18 2026 GMT
        Subject: CN=491e0aee38b7706911e0501cf971dee4aa0a30d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:61:bd:ad:95:fa:05:09:cc:a6:5a:65:45:9a:
                    55:90:82:bc:ad:2e:38:0a:82:ee:94:bf:ce:d4:08:
                    fc:0e:62:38:11:d0:94:11:d0:26:b6:bd:6c:4b:72:
                    7c:8c:e6:85:97:f6:4f:92:31:f2:8d:31:1b:91:14:
                    50:19:73:ec:63:55:0d:73:42:01:f2:f9:f1:27:38:
                    6b:aa:05:8a:85:38:18:ac:a1:3c:75:e0:45:04:01:
                    13:c7:2c:2b:c8:87:80:91:c4:f8:c8:a9:98:54:21:
                    f7:46:02:0c:fa:91:d1:4b:69:61:93:ec:e0:1d:44:
                    2e:8d:63:86:74:93:3a:d9:96:b5:0a:1a:3c:d8:0f:
                    ef:8f:46:20:9e:e7:90:e5:64:37:21:56:e4:86:f8:
                    70:ab:61:94:85:47:f7:8e:00:04:ce:6f:6e:18:ea:
                    35:c7:38:d7:36:ba:ba:bc:c4:0f:ce:ba:bf:e3:e0:
                    65:6c:23:28:16:59:6d:5d:98:9b:de:39:75:71:67:
                    98:01:a4:d3:01:31:59:4b:bb:6d:b0:f3:af:a0:58:
                    ed:0f:5a:74:28:f4:29:70:e4:f5:6d:20:bd:5a:c7:
                    22:11:1e:0a:7d:81:4b:f4:a1:c4:6d:15:30:22:90:
                    b6:00:99:de:f8:e3:60:28:bd:2b:e6:8d:7c:f9:42:
                    70:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:1E:0A:EE:38:B7:70:69:11:E0:50:1C:F9:71:DE:E4:AA:0A:30:D2
            X509v3 Authority Key Identifier:
                keyid:47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:da:45:fd:e4:cc:55:13:58:56:63:30:04:69:b7:c1:06:fc:
         e9:c8:15:4c:be:98:cf:95:a9:c9:4c:8d:c6:92:64:e7:5a:33:
         23:fc:72:cf:c7:48:2d:c5:64:75:84:4d:73:d9:4d:2b:99:10:
         c8:07:a5:cb:c0:5f:34:6b:c0:6e:f9:04:2e:4b:9b:20:a7:42:
         12:dd:42:fa:aa:5a:5a:cb:0c:83:67:b2:17:94:e5:d4:f1:7d:
         7b:ac:7d:4e:e5:08:27:f5:22:6c:5c:0e:36:3f:4c:24:b9:40:
         4a:6c:64:1b:7b:5f:d2:58:1d:6b:5d:93:a0:4f:ec:9e:32:2e:
         2e:39:7d:35:ef:6b:76:f2:13:da:2c:2c:d2:d8:c6:e5:dd:78:
         b7:57:1d:88:0a:2d:93:cf:39:a8:30:d9:4b:f7:48:c4:b3:8c:
         d3:e6:b5:9f:b9:b2:16:be:19:d7:cc:01:b3:bd:72:a0:24:61:
         be:dd:fc:b5:48:f5:79:f5:c6:e4:08:3b:4c:a2:b5:1d:e5:09:
         d0:b3:2e:00:36:90:b3:15:44:80:2f:69:ac:25:f4:2c:46:1d:
         18:ad:9c:3b:4c:53:b0:cc:19:b7:97:b5:5f:ba:e7:9a:b8:7a:
         ad:94:2c:80:8b:7c:c9:e7:77:40:14:03:0a:a8:de:1d:a4:3b:
         b2:0a:38:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n3+j4x4/o8uKMCNxC32ZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MTFiYmIzZWJiOWQyZDE3MGMzN2M2MmExMGNjZGMyMjkx
NTU0NGIwHhcNMjYwMzI2MDIwMTE4WhcNMjYwMzI3MDIwMTE4WjAzMTEwLwYDVQQD
Eyg0OTFlMGFlZTM4Yjc3MDY5MTFlMDUwMWNmOTcxZGVlNGFhMGEzMGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GG9rZX6BQnMplplRZpVkIK8rS44
CoLulL/O1Aj8DmI4EdCUEdAmtr1sS3J8jOaFl/ZPkjHyjTEbkRRQGXPsY1UNc0IB
8vnxJzhrqgWKhTgYrKE8deBFBAETxywryIeAkcT4yKmYVCH3RgIM+pHRS2lhk+zg
HUQujWOGdJM62Za1Cho82A/vj0YgnueQ5WQ3IVbkhvhwq2GUhUf3jgAEzm9uGOo1
xzjXNrq6vMQPzrq/4+BlbCMoFlltXZib3jl1cWeYAaTTATFZS7ttsPOvoFjtD1p0
KPQpcOT1bSC9WsciER4KfYFL9KHEbRUwIpC2AJne+ONgKL0r5o18+UJw3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkeCu44t3BpEeBQHPlx3uSqCjDSMB8GA1UdIwQY
MBaAFEcRu7PrudLRcMN8YqEMzcIpFVRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnhHN3MtdTUwdEZ3dzN4aW9Rek53aWtWVkVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS80OGViNTctOWZkNC00NTg2LWJmZTkt
ZGExZTNjYjJkZWZhLzEvUnhHN3MtdTUwdEZ3dzN4aW9Rek53aWtWVkVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS80OGViNTctOWZkNC00NTg2LWJmZTktZGExZTNjYjJkZWZh
LzEvUnhHN3MtdTUwdEZ3dzN4aW9Rek53aWtWVkVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQtpF/eTM
VRNYVmMwBGm3wQb86cgVTL6Yz5WpyUyNxpJk51ozI/xyz8dILcVkdYRNc9lNK5kQ
yAely8BfNGvAbvkELkubIKdCEt1C+qpaWssMg2eyF5Tl1PF9e6x9TuUIJ/UibFwO
Nj9MJLlASmxkG3tf0lgda12ToE/snjIuLjl9Ne9rdvIT2iws0tjG5d14t1cdiAot
k885qDDZS/dIxLOM0+a1n7myFr4Z18wBs71yoCRhvt38tUj1efXG5Ag7TKK1HeUJ
0LMuADaQsxVEgC9prCX0LEYdGK2cO0xTsMwZt5e1X7rnmrh6rZQsgIt8yed3QBQD
CqjeHaQ7sgo4IQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:08 2026 by rpki-client