Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.mft
File:                     DvD-irs27bvvRGptVK24YsSrO6E.mft (raw, json)
Hash identifier:          NmFkLt8BruygZqnRHq1R4esLmfMQPkE5rkJQqI3BDvY=
Subject key identifier:   9E:54:BA:E5:A1:E7:0F:BD:27:58:FB:05:68:66:E9:D2:D1:93:99:D8
Authority key identifier: 0E:F0:FE:8A:BB:36:ED:BB:EF:44:6A:6D:54:AD:B8:62:C4:AB:3B:A1
Certificate issuer:       /CN=0ef0fe8abb36edbbef446a6d54adb862c4ab3ba1
Certificate serial:       019F1944339D7834398096F715F64552BAA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvD-irs27bvvRGptVK24YsSrO6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.mft
Manifest number:          10BD
Signing time:             Tue 30 Jun 2026 16:02:07 +0000
Manifest this update:     Tue 30 Jun 2026 16:02:07 +0000
Manifest next update:     Wed 01 Jul 2026 16:02:07 +0000
Files and hashes:         1: DvD-irs27bvvRGptVK24YsSrO6E.crl (hash: Zh+coIq6pz2BmEPZq2zrVIxpIeeltBVtYw1XXbf6yrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DvD-irs27bvvRGptVK24YsSrO6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:44:33:9d:78:34:39:80:96:f7:15:f6:45:52:ba:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef0fe8abb36edbbef446a6d54adb862c4ab3ba1
        Validity
            Not Before: Jun 30 16:02:07 2026 GMT
            Not After : Jul  1 16:02:07 2026 GMT
        Subject: CN=9e54bae5a1e70fbd2758fb056866e9d2d19399d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:98:19:f7:3f:7e:20:7d:b5:ce:7d:8d:ea:86:
                    a3:d0:9e:55:72:79:47:04:d8:64:17:6a:ce:15:ec:
                    8f:e7:23:6f:ce:b5:9e:92:dc:d1:46:f3:d8:c0:44:
                    f6:9e:ed:51:e1:1f:67:85:ce:dc:5a:13:44:35:19:
                    cc:63:ac:ff:49:22:33:e5:96:57:71:9e:77:79:0e:
                    0b:0b:7d:fd:d8:35:f0:4c:d2:82:44:42:98:f4:28:
                    a6:b0:a0:74:4d:b9:2b:3f:7d:94:e3:77:c9:87:a3:
                    c2:b5:ad:62:21:f3:b2:1d:2f:1d:0f:13:0f:53:6d:
                    5c:7d:dd:ae:93:ec:04:1b:cc:7e:3a:aa:29:7e:9b:
                    7c:58:09:7d:b4:de:cf:e4:47:d0:c8:f4:ad:4b:ec:
                    e5:0f:3e:34:fd:2e:3b:71:3d:fe:11:d9:6f:6c:c3:
                    91:10:3f:4d:17:d6:de:af:17:ee:c7:26:7c:78:c2:
                    a0:23:7a:f0:7b:02:90:e8:f1:0f:d6:00:0a:47:f9:
                    a9:96:ae:72:c9:96:22:b3:9f:0b:44:42:6a:3a:67:
                    4d:20:d5:19:cc:1a:a0:8a:a6:37:35:52:4e:e6:ba:
                    3d:a9:60:c1:a0:db:95:dc:f8:31:d9:fd:3a:cd:fd:
                    aa:83:1a:63:ee:85:b9:92:12:d1:6a:f8:22:d0:de:
                    1b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:54:BA:E5:A1:E7:0F:BD:27:58:FB:05:68:66:E9:D2:D1:93:99:D8
            X509v3 Authority Key Identifier:
                keyid:0E:F0:FE:8A:BB:36:ED:BB:EF:44:6A:6D:54:AD:B8:62:C4:AB:3B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvD-irs27bvvRGptVK24YsSrO6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:22:e2:ff:5f:b1:97:f2:92:33:2b:ba:71:fe:b4:8b:2f:53:
         3f:51:29:94:7d:9d:b9:86:0c:f1:52:0e:ed:da:19:84:8b:6c:
         b0:68:51:2d:c1:3d:be:f9:1e:bb:94:95:35:20:67:f9:7c:bd:
         1b:7e:91:d0:bf:f3:95:da:57:c6:8d:0f:85:5f:91:67:96:0b:
         1c:26:5a:03:67:ca:57:2c:a3:3b:e6:ee:8e:20:0e:c1:8a:98:
         ac:e0:d7:19:18:92:c2:90:56:75:90:5b:95:ed:8a:a8:76:4f:
         e4:bd:ab:03:53:d9:71:d9:5a:05:23:31:9c:04:77:34:7a:3a:
         c1:f1:90:7b:af:17:5b:31:2a:91:62:e3:85:41:4c:5a:81:c5:
         b4:f3:7c:42:ae:f2:20:90:99:45:3c:f5:a2:20:e2:8f:3d:bf:
         e0:a8:b8:5f:18:01:61:f3:b5:05:33:d8:19:0b:3c:ba:c4:2b:
         bc:fa:df:70:f2:60:cc:8f:04:2e:98:7e:9a:b7:ea:5d:49:a4:
         6c:0f:0a:e4:48:61:fa:28:7b:6a:f6:7a:ec:af:83:01:25:67:
         9b:d8:b1:92:8b:c5:02:ab:68:b9:b6:22:95:8f:68:1b:6a:76:
         97:a3:3e:52:71:20:56:a8:ad:df:51:b0:83:c7:3d:cd:9e:48:
         f0:c4:35:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZRDOdeDQ5gJb3FfZFUrqlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZjBmZThhYmIzNmVkYmJlZjQ0NmE2ZDU0YWRiODYyYzRh
YjNiYTEwHhcNMjYwNjMwMTYwMjA3WhcNMjYwNzAxMTYwMjA3WjAzMTEwLwYDVQQD
Eyg5ZTU0YmFlNWExZTcwZmJkMjc1OGZiMDU2ODY2ZTlkMmQxOTM5OWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpgZ9z9+IH21zn2N6oaj0J5VcnlH
BNhkF2rOFeyP5yNvzrWektzRRvPYwET2nu1R4R9nhc7cWhNENRnMY6z/SSIz5ZZX
cZ53eQ4LC3392DXwTNKCREKY9CimsKB0TbkrP32U43fJh6PCta1iIfOyHS8dDxMP
U21cfd2uk+wEG8x+Oqopfpt8WAl9tN7P5EfQyPStS+zlDz40/S47cT3+EdlvbMOR
ED9NF9berxfuxyZ8eMKgI3rwewKQ6PEP1gAKR/mplq5yyZYis58LREJqOmdNINUZ
zBqgiqY3NVJO5ro9qWDBoNuV3Pgx2f06zf2qgxpj7oW5khLRavgi0N4bEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5UuuWh5w+9J1j7BWhm6dLRk5nYMB8GA1UdIwQY
MBaAFA7w/oq7Nu2770RqbVStuGLEqzuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHZELWlyczI3YnZ2UkdwdFZLMjRZc1NyTzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC84MzFlY2ItYWIxZi00NDI3LThkNjAt
Zjc0NjY1MjQ0NGRhLzEvRHZELWlyczI3YnZ2UkdwdFZLMjRZc1NyTzZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC84MzFlY2ItYWIxZi00NDI3LThkNjAtZjc0NjY1MjQ0NGRh
LzEvRHZELWlyczI3YnZ2UkdwdFZLMjRZc1NyTzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCLi/1+x
l/KSMyu6cf60iy9TP1EplH2duYYM8VIO7doZhItssGhRLcE9vvkeu5SVNSBn+Xy9
G36R0L/zldpXxo0PhV+RZ5YLHCZaA2fKVyyjO+bujiAOwYqYrODXGRiSwpBWdZBb
le2KqHZP5L2rA1PZcdlaBSMxnAR3NHo6wfGQe68XWzEqkWLjhUFMWoHFtPN8Qq7y
IJCZRTz1oiDijz2/4Ki4XxgBYfO1BTPYGQs8usQrvPrfcPJgzI8ELph+mrfqXUmk
bA8K5Ehh+ih7avZ67K+DASVnm9ixkovFAqtoubYilY9oG2p2l6M+UnEgVqit31Gw
g8c9zZ5I8MQ1wA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:47 2026 by rpki-client