Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
File:                     VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft (raw, json)
Hash identifier:          aYOoPhpbl49+sNT+l7ve7b7/mSc6xXh92KPb5Ya7LKw=
Subject key identifier:   67:53:F7:76:83:E3:D1:C7:05:7B:2F:89:61:48:2B:AE:77:31:DB:8A
Authority key identifier: 54:16:78:C3:7A:1F:93:34:31:4F:EE:A5:83:25:EA:79:40:AF:0F:5D
Certificate issuer:       /CN=541678c37a1f9334314feea58325ea7940af0f5d
Certificate serial:       019CE5C8F092AD53B40D31B1D9B18712E54A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
Manifest number:          14DF
Signing time:             Fri 13 Mar 2026 06:01:17 +0000
Manifest this update:     Fri 13 Mar 2026 06:01:17 +0000
Manifest next update:     Sat 14 Mar 2026 06:01:17 +0000
Files and hashes:         1: VBZ4w3ofkzQxT-6lgyXqeUCvD10.crl (hash: 797VHC0k2a7vcPKGS1a1Scuf8EXIZNbTkSd17ssmn8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:c8:f0:92:ad:53:b4:0d:31:b1:d9:b1:87:12:e5:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=541678c37a1f9334314feea58325ea7940af0f5d
        Validity
            Not Before: Mar 13 06:01:17 2026 GMT
            Not After : Mar 14 06:01:17 2026 GMT
        Subject: CN=6753f77683e3d1c7057b2f8961482bae7731db8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:bf:e4:2f:bc:f3:4e:53:9a:ca:16:6e:31:33:
                    a2:1f:8a:56:9d:dc:1b:de:1e:7b:e9:f5:e6:36:f3:
                    7f:8d:69:b6:5e:27:06:42:8c:74:4f:aa:d4:63:67:
                    35:78:f1:7a:3d:11:0f:4a:35:69:8c:e2:c4:68:6f:
                    06:94:3f:3b:ae:02:4e:b0:62:7b:cd:2b:e2:ea:3b:
                    97:7f:53:f8:aa:12:dc:e4:9f:64:6d:71:f3:ab:37:
                    77:c1:d5:0c:95:76:83:49:ab:a6:be:79:2b:b2:91:
                    7e:9c:50:fe:f1:fa:c0:95:a8:c6:9c:ae:e3:09:de:
                    f4:d6:6c:bf:a0:cb:99:ee:6e:6e:c3:49:8b:48:bf:
                    5b:e9:bb:c8:13:98:2f:a3:be:2e:f3:e9:f4:a1:ee:
                    b5:a9:9c:a7:05:6e:53:fb:c6:01:6c:ba:bb:dc:60:
                    19:83:98:8a:49:07:d3:77:c6:e1:18:1e:49:14:51:
                    c6:15:64:48:6a:a3:18:87:3b:ec:71:84:dc:f7:ea:
                    e2:82:7b:de:a2:bc:c8:7b:b2:7e:54:86:d1:6f:04:
                    91:08:7a:2d:78:7b:0e:54:02:47:eb:82:81:66:4a:
                    6b:93:fb:7e:33:39:9d:80:10:08:d4:6b:34:cc:8f:
                    33:a6:05:50:b5:c8:41:c4:34:94:bf:65:e5:73:be:
                    13:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:53:F7:76:83:E3:D1:C7:05:7B:2F:89:61:48:2B:AE:77:31:DB:8A
            X509v3 Authority Key Identifier:
                keyid:54:16:78:C3:7A:1F:93:34:31:4F:EE:A5:83:25:EA:79:40:AF:0F:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:e2:52:be:62:e6:c6:93:ea:dc:20:21:a9:01:fa:5c:1d:9b:
         a6:6c:fc:0d:14:0d:77:b4:eb:15:67:11:fb:f2:ff:be:28:60:
         eb:10:33:f1:dd:30:a9:67:50:7e:e9:ff:da:a7:9a:a9:34:c6:
         88:16:da:94:ff:a6:da:61:68:8c:68:81:71:70:29:26:ad:60:
         e1:16:a5:6d:ff:83:7a:dc:07:7a:e1:6e:ba:d9:38:00:7b:0f:
         3f:2c:9f:99:3f:5d:b1:ab:3d:5f:e7:ba:91:97:d8:08:be:00:
         dc:3b:8d:99:ee:60:fd:e0:a8:fe:54:12:1e:b1:7a:ad:c1:07:
         1d:33:fd:cb:ed:7f:a8:76:12:a0:40:3e:87:93:74:a1:4e:ff:
         bb:e9:f6:11:c2:8f:2b:3d:7d:aa:e5:1b:ce:54:8a:33:71:75:
         c6:93:70:55:4a:1b:ca:59:92:72:53:92:2c:d5:e8:fb:f5:8a:
         76:19:cf:90:6d:54:cc:ab:1d:9c:f9:f3:bf:6c:44:a3:44:16:
         00:07:df:df:9c:22:c3:62:3c:c3:8c:91:cf:ec:9f:18:63:cb:
         18:66:7c:a4:95:10:e7:3b:9c:4e:77:a4:d6:b6:6d:a7:82:50:
         d9:0f:cf:ff:16:9f:a3:0f:00:56:32:8d:fd:60:c2:a2:23:9a:
         32:15:48:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlyPCSrVO0DTGx2bGHEuVKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MTY3OGMzN2ExZjkzMzQzMTRmZWVhNTgzMjVlYTc5NDBh
ZjBmNWQwHhcNMjYwMzEzMDYwMTE3WhcNMjYwMzE0MDYwMTE3WjAzMTEwLwYDVQQD
Eyg2NzUzZjc3NjgzZTNkMWM3MDU3YjJmODk2MTQ4MmJhZTc3MzFkYjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4r/kL7zzTlOayhZuMTOiH4pWndwb
3h576fXmNvN/jWm2XicGQox0T6rUY2c1ePF6PREPSjVpjOLEaG8GlD87rgJOsGJ7
zSvi6juXf1P4qhLc5J9kbXHzqzd3wdUMlXaDSaumvnkrspF+nFD+8frAlajGnK7j
Cd701my/oMuZ7m5uw0mLSL9b6bvIE5gvo74u8+n0oe61qZynBW5T+8YBbLq73GAZ
g5iKSQfTd8bhGB5JFFHGFWRIaqMYhzvscYTc9+rignveorzIe7J+VIbRbwSRCHot
eHsOVAJH64KBZkprk/t+MzmdgBAI1Gs0zI8zpgVQtchBxDSUv2Xlc74TFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdT93aD49HHBXsviWFIK653MduKMB8GA1UdIwQY
MBaAFFQWeMN6H5M0MU/upYMl6nlArw9dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkJaNHczb2ZrelF4VC02bGd5WHFlVUN2RDEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MTZmMDMtNDI0ZS00OTEwLWFiZTEt
MDM4OGEyNjYxNjBiLzEvVkJaNHczb2ZrelF4VC02bGd5WHFlVUN2RDEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi82MTZmMDMtNDI0ZS00OTEwLWFiZTEtMDM4OGEyNjYxNjBi
LzEvVkJaNHczb2ZrelF4VC02bGd5WHFlVUN2RDEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0+JSvmLm
xpPq3CAhqQH6XB2bpmz8DRQNd7TrFWcR+/L/vihg6xAz8d0wqWdQfun/2qeaqTTG
iBbalP+m2mFojGiBcXApJq1g4Ralbf+DetwHeuFuutk4AHsPPyyfmT9dsas9X+e6
kZfYCL4A3DuNme5g/eCo/lQSHrF6rcEHHTP9y+1/qHYSoEA+h5N0oU7/u+n2EcKP
Kz19quUbzlSKM3F1xpNwVUobylmSclOSLNXo+/WKdhnPkG1UzKsdnPnzv2xEo0QW
AAff35wiw2I8w4yRz+yfGGPLGGZ8pJUQ5zucTnek1rZtp4JQ2Q/P/xafow8AVjKN
/WDCoiOaMhVIjA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 08:40:35 2026 by rpki-client