Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
File:                     drtZ2KtKtSd87uX_CYIIQzBiex8.mft (raw, json)
Hash identifier:          7YnQrrYrRBWH61zjz3qCwH3p3d+T248P/lcGoNRi2ls=
Subject key identifier:   7D:56:7A:53:D8:83:20:98:00:8A:9A:D5:A0:20:1A:BB:72:2A:CB:EB
Authority key identifier: 76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F
Certificate issuer:       /CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
Certificate serial:       019D394087B80C0B9758D9C7388DC3FE6B29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
Manifest number:          0344
Signing time:             Sun 29 Mar 2026 11:00:23 +0000
Manifest this update:     Sun 29 Mar 2026 11:00:23 +0000
Manifest next update:     Mon 30 Mar 2026 11:00:23 +0000
Files and hashes:         1: drtZ2KtKtSd87uX_CYIIQzBiex8.crl (hash: sfoqlwuRE3T68XITbUZ1G29N+jrauAmYQf9zSV0q4c0=)
                          2: lYVVRT8ck9hIF_wE0rPLM9h8sl4.roa (hash: nOQ76WC5KxHith3R9t77yLyg4sKQCt1T2XSdiC50P2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:40:87:b8:0c:0b:97:58:d9:c7:38:8d:c3:fe:6b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
        Validity
            Not Before: Mar 29 11:00:23 2026 GMT
            Not After : Mar 30 11:00:23 2026 GMT
        Subject: CN=7d567a53d8832098008a9ad5a0201abb722acbeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6e:fa:fc:38:3c:88:1d:45:b3:8a:35:c8:c2:
                    16:0f:00:c1:bd:f6:3b:dd:36:77:d4:c8:f4:e1:28:
                    29:a5:9c:e1:1b:32:e5:de:55:c3:5f:aa:b2:0d:ed:
                    f8:fa:fb:99:cb:59:af:df:4b:6d:9a:75:2f:c3:73:
                    26:7a:c3:0f:e3:97:68:59:28:0e:7d:2a:0a:bf:23:
                    12:5b:1c:20:d5:ab:9c:8d:f3:1c:5a:83:bc:26:ff:
                    6f:9d:f6:26:c5:f6:c0:ac:ea:26:b6:ee:e3:06:55:
                    d6:6f:9b:c7:43:ad:82:04:ba:02:2b:5a:ae:f2:63:
                    40:db:27:4f:99:c5:c7:03:9b:4b:a4:51:52:88:85:
                    74:23:73:c6:d0:11:31:21:4a:39:42:94:dd:2d:20:
                    5a:2a:e2:be:d1:07:39:29:37:ec:6f:2d:69:e1:89:
                    c0:94:dd:6b:c7:2f:52:50:ea:a3:43:b1:3d:77:6b:
                    85:ec:8c:96:7e:bb:61:6b:e9:b7:32:63:34:aa:6d:
                    41:df:f9:a5:8f:a1:14:76:ba:45:b6:fb:54:20:10:
                    67:a1:3a:1e:06:be:f4:5b:63:3e:0d:6d:07:49:ca:
                    40:08:a4:b3:29:a7:a1:75:46:5f:1a:03:2d:47:97:
                    44:f6:4e:07:5f:70:b6:13:33:23:df:33:42:6a:f5:
                    8c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:56:7A:53:D8:83:20:98:00:8A:9A:D5:A0:20:1A:BB:72:2A:CB:EB
            X509v3 Authority Key Identifier:
                keyid:76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:34:3d:3d:8b:85:7a:34:05:33:00:e1:22:3c:45:a9:ba:89:
         bb:1e:c6:ad:23:03:87:81:85:ea:d6:53:58:5a:9a:9f:5d:ad:
         a8:e9:90:dd:4b:6b:29:3b:5e:f7:60:27:1f:06:d2:2d:b8:5c:
         11:44:08:0b:8c:4a:04:e7:a9:c1:fe:41:35:84:59:23:7e:33:
         64:f7:00:bf:ce:51:95:29:f7:c7:33:e5:d2:dc:20:67:5a:9c:
         37:42:f0:75:54:cf:f6:ae:b0:7b:56:25:18:43:36:18:98:33:
         f9:df:a7:72:9a:20:93:51:ba:22:7a:8d:d3:55:75:21:81:81:
         42:9b:70:f1:93:13:88:d6:bc:a0:87:10:4b:da:6f:a8:d4:09:
         90:c5:98:43:2a:2e:87:7d:b0:e6:eb:46:f4:fc:60:3e:0c:b2:
         da:2c:0e:23:19:02:32:ab:e9:70:b6:03:e2:8c:92:4c:3f:6f:
         20:61:a7:ce:79:07:4b:17:84:26:af:13:f1:73:4f:5d:a7:dc:
         c3:dc:22:df:5a:80:32:9b:38:02:b6:33:08:64:6d:c7:7a:e4:
         98:dc:44:01:bf:bd:ac:b3:9f:b0:c6:c4:c5:2a:a6:c1:0f:f4:
         2c:6f:8d:b0:44:f0:30:61:f4:12:27:3c:89:d7:74:f8:38:4c:
         49:d5:8b:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QIe4DAuXWNnHOI3D/mspMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YmI1OWQ4YWI0YWI1Mjc3Y2VlZTVmZjA5ODIwODQzMzA2
MjdiMWYwHhcNMjYwMzI5MTEwMDIzWhcNMjYwMzMwMTEwMDIzWjAzMTEwLwYDVQQD
Eyg3ZDU2N2E1M2Q4ODMyMDk4MDA4YTlhZDVhMDIwMWFiYjcyMmFjYmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG76/Dg8iB1Fs4o1yMIWDwDBvfY7
3TZ31Mj04SgppZzhGzLl3lXDX6qyDe34+vuZy1mv30ttmnUvw3MmesMP45doWSgO
fSoKvyMSWxwg1aucjfMcWoO8Jv9vnfYmxfbArOomtu7jBlXWb5vHQ62CBLoCK1qu
8mNA2ydPmcXHA5tLpFFSiIV0I3PG0BExIUo5QpTdLSBaKuK+0Qc5KTfsby1p4YnA
lN1rxy9SUOqjQ7E9d2uF7IyWfrtha+m3MmM0qm1B3/mlj6EUdrpFtvtUIBBnoToe
Br70W2M+DW0HScpACKSzKaehdUZfGgMtR5dE9k4HX3C2EzMj3zNCavWMqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1WelPYgyCYAIqa1aAgGrtyKsvrMB8GA1UdIwQY
MBaAFHa7WdirSrUnfO7l/wmCCEMwYnsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHJ0WjJLdEt0U2Q4N3VYX0NZSUlRekJpZXg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS84MmQ2NWUtZTBkOS00ZmNkLWIzYWUt
NGQzYTVjMDQyZTYxLzEvZHJ0WjJLdEt0U2Q4N3VYX0NZSUlRekJpZXg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS84MmQ2NWUtZTBkOS00ZmNkLWIzYWUtNGQzYTVjMDQyZTYx
LzEvZHJ0WjJLdEt0U2Q4N3VYX0NZSUlRekJpZXg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTQ9PYuF
ejQFMwDhIjxFqbqJux7GrSMDh4GF6tZTWFqan12tqOmQ3UtrKTte92AnHwbSLbhc
EUQIC4xKBOepwf5BNYRZI34zZPcAv85RlSn3xzPl0twgZ1qcN0LwdVTP9q6we1Yl
GEM2GJgz+d+ncpogk1G6InqN01V1IYGBQptw8ZMTiNa8oIcQS9pvqNQJkMWYQyou
h32w5utG9PxgPgyy2iwOIxkCMqvpcLYD4oySTD9vIGGnznkHSxeEJq8T8XNPXafc
w9wi31qAMps4ArYzCGRtx3rkmNxEAb+9rLOfsMbExSqmwQ/0LG+NsETwMGH0Eic8
idd0+DhMSdWLaQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:05 2026 by rpki-client