Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
File:                     eP0LaXd70F3N_JiULu3vuwaBKC8.mft (raw, json)
Hash identifier:          Hp2Q0zmGTpi1B4L6MKbgX62fUkxYKImpqwbpR878j+0=
Subject key identifier:   56:D0:CF:08:50:57:94:75:E9:76:F3:CC:58:A8:40:59:FC:93:13:58
Authority key identifier: 78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F
Certificate issuer:       /CN=78fd0b69777bd05dcdfc98942eedefbb0681282f
Certificate serial:       019D39AE61740C07EC31D258201697D4F54A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
Manifest number:          101D
Signing time:             Sun 29 Mar 2026 13:00:22 +0000
Manifest this update:     Sun 29 Mar 2026 13:00:22 +0000
Manifest next update:     Mon 30 Mar 2026 13:00:22 +0000
Files and hashes:         1: eP0LaXd70F3N_JiULu3vuwaBKC8.crl (hash: 14WnSIzyveyAeTkTt3DW3wdHcrsvNBO7H1cKDvyVx0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:ae:61:74:0c:07:ec:31:d2:58:20:16:97:d4:f5:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78fd0b69777bd05dcdfc98942eedefbb0681282f
        Validity
            Not Before: Mar 29 13:00:22 2026 GMT
            Not After : Mar 30 13:00:22 2026 GMT
        Subject: CN=56d0cf0850579475e976f3cc58a84059fc931358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:83:98:e5:35:a5:be:2a:8a:d4:f4:5a:3f:43:
                    60:21:7a:10:ff:9e:6f:39:06:da:32:bf:f0:12:31:
                    4f:28:80:98:0b:11:99:48:25:8b:2a:33:35:95:5a:
                    a4:49:da:10:89:fb:df:1f:77:41:d2:06:54:8c:73:
                    02:77:f5:ad:93:98:c1:23:05:d3:08:06:2d:1c:8d:
                    65:93:5c:57:0b:3a:96:90:b1:c1:01:34:d4:fe:ac:
                    54:9a:2f:8c:b9:2e:b7:3a:fd:75:ed:3c:bb:ab:75:
                    6d:52:ad:44:b3:80:40:f0:71:b4:8b:41:19:cd:be:
                    2a:87:89:3a:ad:07:9a:ab:36:55:dc:6a:ba:5f:0c:
                    d0:07:08:bd:2a:df:4e:01:2e:e6:a6:34:87:10:62:
                    24:bd:90:5d:7c:6d:32:87:0c:ff:a9:15:48:07:ff:
                    b4:3f:94:86:6d:03:47:c5:49:c9:7d:55:9a:b0:c9:
                    aa:09:af:06:db:e5:b5:26:e1:86:49:a7:1c:54:39:
                    d7:47:09:02:72:28:79:58:35:f8:f7:aa:db:b7:8c:
                    86:45:00:9f:8a:e7:1f:a8:70:74:c2:a5:89:1d:52:
                    90:8a:7d:b6:c9:aa:95:1d:8a:db:3d:50:9e:93:3f:
                    7f:4c:88:20:28:1e:d5:50:35:b4:d1:bb:4b:b2:cc:
                    b2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D0:CF:08:50:57:94:75:E9:76:F3:CC:58:A8:40:59:FC:93:13:58
            X509v3 Authority Key Identifier:
                keyid:78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:22:9b:c7:2d:5c:45:ee:8a:cb:34:1c:22:2c:62:c7:fd:ca:
         07:e5:98:8a:ff:ff:ba:fd:af:11:2c:76:d9:13:35:6e:a9:d1:
         97:5d:36:a1:a3:72:5d:90:72:0e:f3:e1:85:82:77:38:ab:3e:
         bf:9c:0f:49:c9:af:c9:75:6a:4e:1d:30:24:23:ed:3a:3f:9e:
         fe:a2:28:14:f0:1b:51:16:c5:9d:02:25:22:73:66:7e:32:78:
         d7:66:fd:8d:0b:8d:e5:d0:8e:56:57:6d:35:35:65:6d:7b:b7:
         f3:27:1a:76:ee:e5:9e:7d:83:06:89:76:a3:bb:cd:b8:04:ba:
         43:05:bd:63:29:f5:75:dd:37:9a:e7:8d:f6:a5:5b:f5:6b:55:
         b1:9b:f4:4a:fc:e4:4c:40:36:e6:0d:2a:1c:11:36:bc:56:4c:
         71:90:01:42:71:ff:aa:c5:ca:1b:58:6d:fd:c6:40:ac:00:70:
         80:97:dd:fb:20:cd:d2:5b:79:be:bc:b1:4d:06:13:2e:46:b8:
         28:09:92:14:10:3e:80:f3:bb:62:95:81:73:fd:f1:90:85:5b:
         c9:ac:cc:fe:8b:fc:5c:77:5b:b7:d1:41:f5:0f:0a:15:42:8d:
         ad:52:af:23:c5:33:d8:20:d7:ce:04:9e:82:9e:fb:d4:ec:08:
         b4:f6:d1:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rmF0DAfsMdJYIBaX1PVKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZmQwYjY5Nzc3YmQwNWRjZGZjOTg5NDJlZWRlZmJiMDY4
MTI4MmYwHhcNMjYwMzI5MTMwMDIyWhcNMjYwMzMwMTMwMDIyWjAzMTEwLwYDVQQD
Eyg1NmQwY2YwODUwNTc5NDc1ZTk3NmYzY2M1OGE4NDA1OWZjOTMxMzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4OY5TWlviqK1PRaP0NgIXoQ/55v
OQbaMr/wEjFPKICYCxGZSCWLKjM1lVqkSdoQifvfH3dB0gZUjHMCd/Wtk5jBIwXT
CAYtHI1lk1xXCzqWkLHBATTU/qxUmi+MuS63Ov117Ty7q3VtUq1Es4BA8HG0i0EZ
zb4qh4k6rQeaqzZV3Gq6XwzQBwi9Kt9OAS7mpjSHEGIkvZBdfG0yhwz/qRVIB/+0
P5SGbQNHxUnJfVWasMmqCa8G2+W1JuGGSaccVDnXRwkCcih5WDX496rbt4yGRQCf
iucfqHB0wqWJHVKQin22yaqVHYrbPVCekz9/TIggKB7VUDW00btLssyypwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbQzwhQV5R16XbzzFioQFn8kxNYMB8GA1UdIwQY
MBaAFHj9C2l3e9BdzfyYlC7t77sGgSgvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVAwTGFYZDcwRjNOX0ppVUx1M3Z1d2FCS0M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zZDNlNzAtM2Y4OC00Njk4LWJhNDEt
OTVlODcyOGEyNTc3LzEvZVAwTGFYZDcwRjNOX0ppVUx1M3Z1d2FCS0M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zZDNlNzAtM2Y4OC00Njk4LWJhNDEtOTVlODcyOGEyNTc3
LzEvZVAwTGFYZDcwRjNOX0ppVUx1M3Z1d2FCS0M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlCKbxy1c
Re6KyzQcIixix/3KB+WYiv//uv2vESx22RM1bqnRl102oaNyXZByDvPhhYJ3OKs+
v5wPScmvyXVqTh0wJCPtOj+e/qIoFPAbURbFnQIlInNmfjJ412b9jQuN5dCOVldt
NTVlbXu38ycadu7lnn2DBol2o7vNuAS6QwW9Yyn1dd03mueN9qVb9WtVsZv0Svzk
TEA25g0qHBE2vFZMcZABQnH/qsXKG1ht/cZArABwgJfd+yDN0lt5vryxTQYTLka4
KAmSFBA+gPO7YpWBc/3xkIVbyazM/ov8XHdbt9FB9Q8KFUKNrVKvI8Uz2CDXzgSe
gp771OwItPbR8A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:19 2026 by rpki-client