Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
File:                     rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft (raw, json)
Hash identifier:          g3wKTN/w/fxS7btMhexvdpxhM+e1E0MuTtK4tFXFyrg=
Subject key identifier:   E7:9B:F4:A5:51:08:4E:46:A6:BE:78:AA:51:B8:DE:1B:49:A6:0D:0C
Authority key identifier: AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70
Certificate issuer:       /CN=ac7862c299d6088718760a96168272fccbfda970
Certificate serial:       019D37F6EDBE20D664034A50E6ECB5523EC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
Manifest number:          06D0
Signing time:             Sun 29 Mar 2026 05:00:22 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:22 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:22 +0000
Files and hashes:         1: rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl (hash: 2L8Q/YvB/+OntsGGcMLZxdo04i/zLyQH1jBXTDbcAOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f6:ed:be:20:d6:64:03:4a:50:e6:ec:b5:52:3e:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac7862c299d6088718760a96168272fccbfda970
        Validity
            Not Before: Mar 29 05:00:22 2026 GMT
            Not After : Mar 30 05:00:22 2026 GMT
        Subject: CN=e79bf4a551084e46a6be78aa51b8de1b49a60d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a7:28:0b:74:70:89:73:08:5a:50:05:2f:27:
                    86:56:95:fa:fa:fc:da:0d:eb:47:f5:e7:44:23:7e:
                    f7:40:6d:fe:69:9b:94:3a:7a:a8:d2:a4:6c:a6:a6:
                    bd:cd:5d:c5:09:73:21:db:f3:1d:28:48:f1:1f:c4:
                    21:64:6d:a2:ba:d0:70:ef:8c:2a:ae:4e:48:75:2b:
                    9b:bc:b6:6c:37:7f:2e:64:86:fd:5b:c0:7c:1a:8c:
                    88:b2:38:c8:5e:2b:3b:b8:4f:90:24:43:f5:ab:5a:
                    4d:b2:01:19:e9:30:3a:48:e9:3a:3c:7b:f5:0b:c4:
                    40:e7:4a:62:e9:49:7c:fb:e9:7e:ee:05:e1:73:5e:
                    cf:59:83:df:1d:28:fa:0d:cc:f5:96:de:ac:20:a5:
                    f4:10:fb:09:e1:63:de:25:6e:cd:99:ee:90:e8:c5:
                    67:8d:f7:f3:2b:d4:c6:a1:6c:e3:67:91:31:2d:a6:
                    31:86:2b:74:73:d9:1c:9e:d1:e3:ab:25:94:1e:ef:
                    d8:e1:fe:de:50:45:e0:3b:15:07:9c:e8:c5:e4:49:
                    3f:db:d4:fc:7b:c6:7e:a4:02:11:3f:f7:a5:6b:e5:
                    c8:c9:c6:30:0d:b2:53:52:1c:f3:44:f0:d6:5c:cd:
                    ca:9d:ca:f4:f3:1b:9f:c7:f4:b4:65:52:09:57:b2:
                    3b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9B:F4:A5:51:08:4E:46:A6:BE:78:AA:51:B8:DE:1B:49:A6:0D:0C
            X509v3 Authority Key Identifier:
                keyid:AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a9:af:d2:e6:f2:e4:09:42:bf:5d:cb:ff:49:93:c5:a6:70:
         cc:4e:4d:24:41:53:00:91:ca:60:68:72:c6:db:59:84:e0:c8:
         3c:31:b6:0e:bc:b5:c3:08:69:f3:94:4d:54:db:a9:56:16:97:
         ae:d7:09:72:22:32:51:c3:0d:73:ce:bc:ab:08:67:72:e1:ad:
         fc:eb:e2:c4:ea:e5:7c:fc:fb:c2:e8:16:45:99:e4:b7:cf:e0:
         1c:a5:56:82:b7:a4:2b:53:1d:99:65:dd:5f:fb:8a:f6:b9:6d:
         7c:85:b8:7c:09:a1:4d:45:34:e2:9b:31:7e:19:38:89:b0:aa:
         1b:68:95:ab:5d:79:21:18:b9:20:95:fc:e3:9f:1a:be:c5:ab:
         f1:32:91:b4:f2:d8:ae:a0:14:a5:c0:61:d6:75:00:34:73:7a:
         0b:ab:d5:bb:65:ac:92:4e:20:ff:de:4a:f2:70:97:b8:42:7a:
         c1:3b:bb:b7:b3:41:d7:a5:54:f1:b2:c8:f3:8b:05:a8:f9:2b:
         65:b9:ce:7b:88:65:3b:ff:ed:4d:b4:76:ff:73:e0:cc:f7:60:
         e0:ef:98:19:8f:1b:42:b2:03:88:b9:a2:35:f7:77:ba:64:9b:
         c6:88:29:0e:f5:d9:76:c4:4f:32:fc:de:88:04:17:bc:b9:bb:
         64:06:65:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039u2+INZkA0pQ5uy1Uj7CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNzg2MmMyOTlkNjA4ODcxODc2MGE5NjE2ODI3MmZjY2Jm
ZGE5NzAwHhcNMjYwMzI5MDUwMDIyWhcNMjYwMzMwMDUwMDIyWjAzMTEwLwYDVQQD
EyhlNzliZjRhNTUxMDg0ZTQ2YTZiZTc4YWE1MWI4ZGUxYjQ5YTYwZDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqacoC3RwiXMIWlAFLyeGVpX6+vza
DetH9edEI373QG3+aZuUOnqo0qRspqa9zV3FCXMh2/MdKEjxH8QhZG2iutBw74wq
rk5IdSubvLZsN38uZIb9W8B8GoyIsjjIXis7uE+QJEP1q1pNsgEZ6TA6SOk6PHv1
C8RA50pi6Ul8++l+7gXhc17PWYPfHSj6Dcz1lt6sIKX0EPsJ4WPeJW7Nme6Q6MVn
jffzK9TGoWzjZ5ExLaYxhit0c9kcntHjqyWUHu/Y4f7eUEXgOxUHnOjF5Ek/29T8
e8Z+pAIRP/ela+XIycYwDbJTUhzzRPDWXM3Kncr08xufx/S0ZVIJV7I7YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOeb9KVRCE5Gpr54qlG43htJpg0MMB8GA1UdIwQY
MBaAFKx4YsKZ1giHGHYKlhaCcvzL/alwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckhoaXdwbldDSWNZZGdxV0ZvSnlfTXY5cVhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lOTRmYmYtNzc0OC00MTgzLTg0ZDAt
ZmEyZmFkZWIwMjgxLzEvckhoaXdwbldDSWNZZGdxV0ZvSnlfTXY5cVhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lOTRmYmYtNzc0OC00MTgzLTg0ZDAtZmEyZmFkZWIwMjgx
LzEvckhoaXdwbldDSWNZZGdxV0ZvSnlfTXY5cVhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqmv0uby
5AlCv13L/0mTxaZwzE5NJEFTAJHKYGhyxttZhODIPDG2Dry1wwhp85RNVNupVhaX
rtcJciIyUcMNc868qwhncuGt/OvixOrlfPz7wugWRZnkt8/gHKVWgrekK1MdmWXd
X/uK9rltfIW4fAmhTUU04psxfhk4ibCqG2iVq115IRi5IJX8458avsWr8TKRtPLY
rqAUpcBh1nUANHN6C6vVu2Wskk4g/95K8nCXuEJ6wTu7t7NB16VU8bLI84sFqPkr
ZbnOe4hlO//tTbR2/3PgzPdg4O+YGY8bQrIDiLmiNfd3umSbxogpDvXZdsRPMvze
iAQXvLm7ZAZlqg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:27 2026 by rpki-client