Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
File:                     RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft (raw, json)
Hash identifier:          3RlTkEfk2s233Pwh2wgwf/lTe5bKMpMTbNSg/ewMY9Y=
Subject key identifier:   E4:8B:83:14:F8:C8:E8:4F:A4:A0:8D:13:4D:C4:CC:01:46:1D:47:5F
Authority key identifier: 45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA
Certificate issuer:       /CN=45d58323e7d4f91c37297cd1926566033b3f8aba
Certificate serial:       019CE7B720F42789BB6220C72C11561681EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
Manifest number:          0754
Signing time:             Fri 13 Mar 2026 15:01:04 +0000
Manifest this update:     Fri 13 Mar 2026 15:01:04 +0000
Manifest next update:     Sat 14 Mar 2026 15:01:04 +0000
Files and hashes:         1: RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl (hash: wz0etW0GtptWvuOTtjv2hYpoz2Xz/pjPhh3ZDbBuLQk=)
                          2: lJ9R5Dh_kyvQTqID5Ptu3Jzlprg.roa (hash: GdaCvKcF3hhpCqRpHUMph71fNwvXQ4kAIUixuBm8+iU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e7:b7:20:f4:27:89:bb:62:20:c7:2c:11:56:16:81:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d58323e7d4f91c37297cd1926566033b3f8aba
        Validity
            Not Before: Mar 13 15:01:04 2026 GMT
            Not After : Mar 14 15:01:04 2026 GMT
        Subject: CN=e48b8314f8c8e84fa4a08d134dc4cc01461d475f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:90:90:f7:ec:a4:10:26:5a:32:be:97:1a:19:
                    e5:c1:52:92:ea:c1:32:c9:f9:b7:6a:7a:f8:88:53:
                    94:5d:66:20:4e:a1:7b:70:4d:9e:ab:f4:20:fd:63:
                    81:bb:ba:0e:96:84:3c:4e:65:23:af:66:71:a0:aa:
                    6a:ae:e1:68:a3:4c:73:7f:01:54:51:1f:cf:d5:0f:
                    28:9f:2c:12:54:d8:23:f2:3a:7c:07:60:58:87:76:
                    8b:93:4e:d7:f9:06:ce:c6:fc:96:2c:27:28:d9:fc:
                    84:d4:d9:d6:3e:39:43:5a:8c:7d:42:39:0b:a1:70:
                    54:d1:c7:02:bd:3a:a8:3b:ee:28:5f:cc:ee:8d:a7:
                    56:67:df:22:9f:5b:9f:82:26:f9:43:be:dc:f3:c4:
                    2d:53:f9:a1:45:81:0c:f1:a2:99:27:6f:c8:7b:04:
                    91:e4:59:7d:1a:19:e5:b0:8d:7a:61:92:a2:e7:b6:
                    9f:65:c4:48:c3:1e:c9:1f:22:69:a4:a1:bd:eb:ab:
                    6b:aa:77:14:d4:58:51:44:46:88:22:29:5b:f5:7c:
                    03:3f:4d:05:f3:b4:f9:19:53:ad:78:87:35:56:31:
                    3a:9c:12:13:6c:1f:ef:c7:2f:12:15:d1:fe:4d:b4:
                    21:95:76:b3:ec:8a:59:ca:c0:07:3e:fc:08:54:4d:
                    d1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8B:83:14:F8:C8:E8:4F:A4:A0:8D:13:4D:C4:CC:01:46:1D:47:5F
            X509v3 Authority Key Identifier:
                keyid:45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:fc:49:27:c7:97:97:bb:49:24:d7:3a:82:5c:26:e5:b7:e2:
         eb:b2:52:61:56:7a:b1:cf:bd:ae:af:98:91:29:a4:51:9f:86:
         6b:1e:42:2f:a1:fc:5a:6c:ca:56:2b:4c:79:11:33:4b:b6:7f:
         0c:93:29:78:dc:f2:a8:0e:73:15:14:3c:3e:fc:b2:aa:ce:c6:
         13:8e:d4:af:31:93:4c:bd:51:04:38:4e:a6:10:5c:90:c1:56:
         02:d1:79:4c:49:d1:06:f1:0d:76:42:5f:0b:08:4e:e2:1b:dc:
         af:02:58:17:4d:7a:3f:83:e3:20:91:78:57:44:18:45:52:40:
         40:54:ef:23:5c:99:19:6b:ce:07:8a:29:ba:14:9e:a6:30:bc:
         94:62:2a:99:ed:0c:50:64:26:f2:a4:23:d4:57:34:ac:6d:1a:
         59:3b:3e:5e:9f:6e:20:37:67:00:57:f4:ba:a8:d2:6e:9e:82:
         e9:56:24:d2:09:d7:9f:ca:16:7e:65:fe:e5:45:d3:29:da:57:
         a1:9a:e8:9f:61:fd:75:ae:4d:09:7b:5b:54:5c:7f:d4:9e:e3:
         c5:ed:72:12:8c:98:29:d8:90:e1:c5:ee:9b:42:ab:1f:18:51:
         56:e7:af:01:77:77:e3:78:0f:92:6d:1c:b7:6f:1f:f0:01:eb:
         1a:55:46:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzntyD0J4m7YiDHLBFWFoHsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZDU4MzIzZTdkNGY5MWMzNzI5N2NkMTkyNjU2NjAzM2Iz
ZjhhYmEwHhcNMjYwMzEzMTUwMTA0WhcNMjYwMzE0MTUwMTA0WjAzMTEwLwYDVQQD
EyhlNDhiODMxNGY4YzhlODRmYTRhMDhkMTM0ZGM0Y2MwMTQ2MWQ0NzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZCQ9+ykECZaMr6XGhnlwVKS6sEy
yfm3anr4iFOUXWYgTqF7cE2eq/Qg/WOBu7oOloQ8TmUjr2ZxoKpqruFoo0xzfwFU
UR/P1Q8onywSVNgj8jp8B2BYh3aLk07X+QbOxvyWLCco2fyE1NnWPjlDWox9QjkL
oXBU0ccCvTqoO+4oX8zujadWZ98in1ufgib5Q77c88QtU/mhRYEM8aKZJ2/IewSR
5Fl9GhnlsI16YZKi57afZcRIwx7JHyJppKG966trqncU1FhRREaIIilb9XwDP00F
87T5GVOteIc1VjE6nBITbB/vxy8SFdH+TbQhlXaz7IpZysAHPvwIVE3R/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSLgxT4yOhPpKCNE03EzAFGHUdfMB8GA1UdIwQY
MBaAFEXVgyPn1PkcNyl80ZJlZgM7P4q6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmRXREktZlUtUnczS1h6UmttVm1BenNfaXJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9lYzI4MzMtYmIwZi00OTI0LTg1MTct
ZjNkZjYxNzdhMmJiLzEvUmRXREktZlUtUnczS1h6UmttVm1BenNfaXJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9lYzI4MzMtYmIwZi00OTI0LTg1MTctZjNkZjYxNzdhMmJi
LzEvUmRXREktZlUtUnczS1h6UmttVm1BenNfaXJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/xJJ8eX
l7tJJNc6glwm5bfi67JSYVZ6sc+9rq+YkSmkUZ+Gax5CL6H8WmzKVitMeREzS7Z/
DJMpeNzyqA5zFRQ8Pvyyqs7GE47UrzGTTL1RBDhOphBckMFWAtF5TEnRBvENdkJf
CwhO4hvcrwJYF016P4PjIJF4V0QYRVJAQFTvI1yZGWvOB4opuhSepjC8lGIqme0M
UGQm8qQj1Fc0rG0aWTs+Xp9uIDdnAFf0uqjSbp6C6VYk0gnXn8oWfmX+5UXTKdpX
oZron2H9da5NCXtbVFx/1J7jxe1yEoyYKdiQ4cXum0KrHxhRVuevAXd343gPkm0c
t28f8AHrGlVGUA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 17:54:50 2026 by rpki-client