Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft
File:                     T7murXluvL6SUPqiksQOioWIx50.mft (raw, json)
Hash identifier:          S7aHsQm5rBz+6+XtNWgZi9UzLjbKgcLFE1Ane79u1m0=
Subject key identifier:   DC:CB:A3:97:51:BD:90:91:D1:B7:6A:69:3E:DB:69:57:06:65:C1:D2
Authority key identifier: 4F:B9:AE:AD:79:6E:BC:BE:92:50:FA:A2:92:C4:0E:8A:85:88:C7:9D
Certificate issuer:       /CN=4fb9aead796ebcbe9250faa292c40e8a8588c79d
Certificate serial:       019D3866736BF0907EDB9F789A695FBA2699
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T7murXluvL6SUPqiksQOioWIx50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft
Manifest number:          1373
Signing time:             Sun 29 Mar 2026 07:02:11 +0000
Manifest this update:     Sun 29 Mar 2026 07:02:11 +0000
Manifest next update:     Mon 30 Mar 2026 07:02:11 +0000
Files and hashes:         1: T7murXluvL6SUPqiksQOioWIx50.crl (hash: 4Ox/fC+/qV9b38IA7E9icV2SkKpfI9vg7Zay3kfLdZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T7murXluvL6SUPqiksQOioWIx50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:73:6b:f0:90:7e:db:9f:78:9a:69:5f:ba:26:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb9aead796ebcbe9250faa292c40e8a8588c79d
        Validity
            Not Before: Mar 29 07:02:11 2026 GMT
            Not After : Mar 30 07:02:11 2026 GMT
        Subject: CN=dccba39751bd9091d1b76a693edb69570665c1d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:14:fd:b9:8b:75:89:12:5c:b0:1a:33:b1:9d:
                    a3:a0:f8:78:49:c0:4a:37:9f:f6:5a:94:3b:88:05:
                    23:1d:d8:44:fe:2e:24:d3:99:8d:43:6b:8f:aa:f3:
                    8d:b9:98:87:5b:74:f5:2a:b7:d8:de:68:00:3a:e9:
                    4c:c3:eb:0e:b8:2e:a4:99:8b:57:9a:7c:59:fc:c5:
                    8a:9a:5a:fc:78:0e:3d:c0:b4:29:c4:bc:8b:e3:d3:
                    70:37:6c:2b:c9:aa:c8:9b:ff:24:ab:59:05:f5:9e:
                    22:9e:dd:b9:2f:f8:94:83:e8:39:03:66:65:4a:66:
                    8c:95:6f:a6:9d:d1:5c:89:19:43:32:85:55:dd:a3:
                    e0:df:61:2f:07:db:a9:24:08:39:45:91:a1:da:b0:
                    bb:b0:4f:c6:7b:12:90:cf:b4:65:45:cd:9f:0f:b9:
                    93:1d:3b:7f:cb:d7:6d:f0:c3:fa:2b:03:66:24:f6:
                    63:23:24:51:e9:0c:bb:af:e3:5b:0b:09:85:24:c0:
                    f5:9e:58:e5:99:a7:5f:86:ed:58:37:a6:3d:6e:e5:
                    06:1c:f5:40:16:06:84:8a:9d:9e:9e:8a:f0:44:0d:
                    67:9c:e7:d4:99:bd:d1:3a:a8:f9:12:4b:05:4f:be:
                    30:ad:47:33:ba:5c:02:ea:92:66:f3:8c:68:6c:ee:
                    78:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CB:A3:97:51:BD:90:91:D1:B7:6A:69:3E:DB:69:57:06:65:C1:D2
            X509v3 Authority Key Identifier:
                keyid:4F:B9:AE:AD:79:6E:BC:BE:92:50:FA:A2:92:C4:0E:8A:85:88:C7:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7murXluvL6SUPqiksQOioWIx50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:40:30:12:23:91:47:03:8f:6c:c1:d1:fc:60:5a:2e:5b:20:
         ee:9b:20:48:7e:7b:56:f2:07:f7:03:4c:15:29:aa:07:63:cd:
         32:07:0f:b4:a4:4f:d1:92:e9:f1:9f:50:e2:d5:8b:e4:b9:36:
         5a:f5:86:e2:b6:98:48:2b:b1:de:4c:33:5e:72:94:a2:a5:26:
         e1:19:c0:e0:5f:8f:e8:8f:81:97:e0:e8:f7:66:f5:47:b5:c0:
         4f:15:fb:cf:be:a8:69:3f:0a:1e:00:3d:95:c9:b3:4e:4e:84:
         74:74:11:33:50:af:09:de:bf:43:dc:44:12:7c:bd:0d:4e:d2:
         d3:89:66:2a:92:74:53:1d:e6:e0:19:52:0a:68:1e:14:4f:f0:
         ff:38:ad:15:81:c8:52:bc:46:90:82:ec:ee:34:d5:82:45:70:
         63:ff:8e:fc:c8:68:bb:c0:13:73:75:f1:60:2d:ca:0e:d8:38:
         6e:c4:7f:70:04:f5:0b:b6:a7:20:ef:5d:83:b5:76:bd:64:8a:
         6e:4d:02:3f:a1:cd:c9:fe:b0:32:ca:25:8a:a9:67:dd:6a:3e:
         03:0a:e4:3b:b5:7b:52:99:95:c3:e9:3d:13:21:50:7a:f1:59:
         84:b9:88:bf:44:10:90:49:30:a4:ad:68:39:84:80:9e:e9:21:
         5e:a6:29:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZnNr8JB+2594mmlfuiaZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYjlhZWFkNzk2ZWJjYmU5MjUwZmFhMjkyYzQwZThhODU4
OGM3OWQwHhcNMjYwMzI5MDcwMjExWhcNMjYwMzMwMDcwMjExWjAzMTEwLwYDVQQD
EyhkY2NiYTM5NzUxYmQ5MDkxZDFiNzZhNjkzZWRiNjk1NzA2NjVjMWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxT9uYt1iRJcsBozsZ2joPh4ScBK
N5/2WpQ7iAUjHdhE/i4k05mNQ2uPqvONuZiHW3T1KrfY3mgAOulMw+sOuC6kmYtX
mnxZ/MWKmlr8eA49wLQpxLyL49NwN2wryarIm/8kq1kF9Z4int25L/iUg+g5A2Zl
SmaMlW+mndFciRlDMoVV3aPg32EvB9upJAg5RZGh2rC7sE/GexKQz7RlRc2fD7mT
HTt/y9dt8MP6KwNmJPZjIyRR6Qy7r+NbCwmFJMD1nljlmadfhu1YN6Y9buUGHPVA
FgaEip2enorwRA1nnOfUmb3ROqj5EksFT74wrUczulwC6pJm84xobO54qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzLo5dRvZCR0bdqaT7baVcGZcHSMB8GA1UdIwQY
MBaAFE+5rq15bry+klD6opLEDoqFiMedMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDdtdXJYbHV2TDZTVVBxaWtzUU9pb1dJeDUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xMWYwMDQtNDQxZi00NzBkLTg5Mjct
NzZhOTEwOWE2MmU3LzEvVDdtdXJYbHV2TDZTVVBxaWtzUU9pb1dJeDUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8xMWYwMDQtNDQxZi00NzBkLTg5MjctNzZhOTEwOWE2MmU3
LzEvVDdtdXJYbHV2TDZTVVBxaWtzUU9pb1dJeDUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0AwEiOR
RwOPbMHR/GBaLlsg7psgSH57VvIH9wNMFSmqB2PNMgcPtKRP0ZLp8Z9Q4tWL5Lk2
WvWG4raYSCux3kwzXnKUoqUm4RnA4F+P6I+Bl+Do92b1R7XATxX7z76oaT8KHgA9
lcmzTk6EdHQRM1CvCd6/Q9xEEny9DU7S04lmKpJ0Ux3m4BlSCmgeFE/w/zitFYHI
UrxGkILs7jTVgkVwY/+O/Mhou8ATc3XxYC3KDtg4bsR/cAT1C7anIO9dg7V2vWSK
bk0CP6HNyf6wMsoliqln3Wo+AwrkO7V7UpmVw+k9EyFQevFZhLmIv0QQkEkwpK1o
OYSAnukhXqYpaA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:16 2026 by rpki-client