Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft
File:                     dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft (raw, json)
Hash identifier:          51PPt7Msbu2he6dQqkVKZ944MQkFOaaiyzvJICU9D/s=
Subject key identifier:   46:B2:75:18:FD:98:AC:BE:24:96:73:4C:82:A6:1C:51:AB:28:56:5C
Authority key identifier: 76:96:23:B8:B3:7F:C8:C5:74:5D:57:5C:09:EF:C4:CE:A8:B6:DA:09
Certificate issuer:       /CN=769623b8b37fc8c5745d575c09efc4cea8b6da09
Certificate serial:       019D386646B11A434F45C7B29D0345F7C28F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dpYjuLN_yMV0XVdcCe_Ezqi22gk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft
Manifest number:          0FC6
Signing time:             Sun 29 Mar 2026 07:01:59 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:59 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:59 +0000
Files and hashes:         1: dpYjuLN_yMV0XVdcCe_Ezqi22gk.crl (hash: r1l/oo1v8j3mll71PMsWImYSzSYRN4196Bl1e/TJumo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dpYjuLN_yMV0XVdcCe_Ezqi22gk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:46:b1:1a:43:4f:45:c7:b2:9d:03:45:f7:c2:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=769623b8b37fc8c5745d575c09efc4cea8b6da09
        Validity
            Not Before: Mar 29 07:01:59 2026 GMT
            Not After : Mar 30 07:01:59 2026 GMT
        Subject: CN=46b27518fd98acbe2496734c82a61c51ab28565c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cd:5f:dd:4e:86:3b:ab:db:a8:e8:da:be:06:
                    f0:48:6e:14:ad:e5:73:7b:18:3e:61:e4:55:f9:f4:
                    35:39:4c:4d:d1:09:2d:0a:16:db:9c:a8:b0:61:76:
                    f6:9c:ad:18:c5:91:d4:2b:43:e4:cf:23:77:c8:5f:
                    da:28:c9:05:d3:8c:b6:95:a6:d7:76:6e:55:28:06:
                    c0:7a:fa:d7:5e:a5:8c:19:38:30:53:68:f0:57:cb:
                    0f:53:7c:50:cd:e8:af:89:98:40:2d:6d:e7:d2:eb:
                    6e:be:8c:41:58:de:b6:fe:9a:7c:fe:3c:92:22:f6:
                    25:b8:b5:92:06:88:12:7e:92:c9:e3:fa:ac:3b:72:
                    52:af:9b:10:d5:87:41:d8:fc:f1:77:fd:fb:0f:d6:
                    d3:cc:6e:5d:26:ac:af:4a:77:9d:1d:f5:c6:35:4a:
                    df:e4:dd:8d:5f:c0:83:50:63:6b:4e:ef:da:4a:e4:
                    9c:4c:f4:3c:04:eb:bc:ad:70:e9:54:2e:04:9e:42:
                    17:23:6c:3c:df:de:cc:a8:cb:6c:c1:6a:ae:a8:18:
                    22:cc:b2:2f:c4:cf:68:a8:e8:bf:f9:02:e2:92:e1:
                    56:dc:1f:8d:ea:fe:7a:38:2b:7a:25:ce:8d:0f:ce:
                    a0:9c:44:fa:49:91:87:44:1a:41:ca:8c:d1:8b:c3:
                    15:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B2:75:18:FD:98:AC:BE:24:96:73:4C:82:A6:1C:51:AB:28:56:5C
            X509v3 Authority Key Identifier:
                keyid:76:96:23:B8:B3:7F:C8:C5:74:5D:57:5C:09:EF:C4:CE:A8:B6:DA:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpYjuLN_yMV0XVdcCe_Ezqi22gk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:7c:0d:35:1f:d6:70:d5:56:2b:f0:3e:31:95:1a:fa:ae:d1:
         3a:a8:ed:0e:18:40:ee:9c:00:d5:a0:74:88:bd:60:10:65:96:
         21:2f:59:c9:bc:e6:20:35:d5:5a:f3:d3:77:bf:d9:f2:e8:f5:
         6a:18:af:59:bb:75:02:22:e8:92:d0:40:a6:2d:f0:c6:a9:9e:
         ef:b9:fa:9b:8a:f1:ee:77:3d:30:86:d2:5c:07:71:2a:a8:b6:
         74:d0:e1:a7:73:b5:5d:cf:5b:06:d8:26:60:40:4c:a8:fa:34:
         5b:b4:92:45:4e:05:ef:c9:95:66:5d:be:27:f2:ba:48:5d:71:
         c3:4f:db:6c:73:45:02:74:68:7b:01:b4:bc:49:42:49:fc:1a:
         3d:00:96:2c:a9:0e:b1:84:f1:3f:92:87:b0:4f:5e:91:e4:b0:
         9d:25:9d:53:cd:49:ea:cc:a7:0f:7d:7c:b1:df:c0:b0:4a:3e:
         0a:0d:22:e0:e0:f1:65:bd:c6:78:f7:a8:b4:f9:27:c6:8a:5a:
         d9:cd:73:fb:fb:34:ba:14:9f:9c:ef:b6:d0:f8:01:de:55:51:
         fd:3e:c0:3f:4a:c2:52:3a:78:ff:d1:ac:6b:65:09:5e:7e:d3:
         0f:bb:46:18:5d:d6:32:56:86:13:4c:6f:fa:5c:a6:27:27:95:
         71:32:19:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZkaxGkNPRceynQNF98KPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2OTYyM2I4YjM3ZmM4YzU3NDVkNTc1YzA5ZWZjNGNlYThi
NmRhMDkwHhcNMjYwMzI5MDcwMTU5WhcNMjYwMzMwMDcwMTU5WjAzMTEwLwYDVQQD
Eyg0NmIyNzUxOGZkOThhY2JlMjQ5NjczNGM4MmE2MWM1MWFiMjg1NjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA381f3U6GO6vbqOjavgbwSG4UreVz
exg+YeRV+fQ1OUxN0QktChbbnKiwYXb2nK0YxZHUK0PkzyN3yF/aKMkF04y2labX
dm5VKAbAevrXXqWMGTgwU2jwV8sPU3xQzeiviZhALW3n0utuvoxBWN62/pp8/jyS
IvYluLWSBogSfpLJ4/qsO3JSr5sQ1YdB2Pzxd/37D9bTzG5dJqyvSnedHfXGNUrf
5N2NX8CDUGNrTu/aSuScTPQ8BOu8rXDpVC4EnkIXI2w8397MqMtswWquqBgizLIv
xM9oqOi/+QLikuFW3B+N6v56OCt6Jc6ND86gnET6SZGHRBpByozRi8MVkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEaydRj9mKy+JJZzTIKmHFGrKFZcMB8GA1UdIwQY
MBaAFHaWI7izf8jFdF1XXAnvxM6ottoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHBZanVMTl95TVYwWFZkY0NlX0V6cWkyMmdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kZGZmNTMtZDZhYS00OTU2LWJhNjAt
YjQzNjY1ZTVkYWQ2LzEvZHBZanVMTl95TVYwWFZkY0NlX0V6cWkyMmdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kZGZmNTMtZDZhYS00OTU2LWJhNjAtYjQzNjY1ZTVkYWQ2
LzEvZHBZanVMTl95TVYwWFZkY0NlX0V6cWkyMmdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnwNNR/W
cNVWK/A+MZUa+q7ROqjtDhhA7pwA1aB0iL1gEGWWIS9ZybzmIDXVWvPTd7/Z8uj1
ahivWbt1AiLoktBApi3wxqme77n6m4rx7nc9MIbSXAdxKqi2dNDhp3O1Xc9bBtgm
YEBMqPo0W7SSRU4F78mVZl2+J/K6SF1xw0/bbHNFAnRoewG0vElCSfwaPQCWLKkO
sYTxP5KHsE9ekeSwnSWdU81J6synD318sd/AsEo+Cg0i4ODxZb3GePeotPknxopa
2c1z+/s0uhSfnO+20PgB3lVR/T7AP0rCUjp4/9Gsa2UJXn7TD7tGGF3WMlaGE0xv
+lymJyeVcTIZwg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:43 2026 by rpki-client