Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
File:                     UEReUkREIxk_SV-8xFd05Mjke9s.mft (raw, json)
Hash identifier:          EWDc/F2ity7Kb/+CK4fHDkXrkxZf/g4wR1LH4PkXwG0=
Subject key identifier:   4D:64:CF:DC:6F:3B:73:E3:AB:BE:8F:48:B5:24:4D:2A:8B:08:33:B3
Authority key identifier: 50:44:5E:52:44:44:23:19:3F:49:5F:BC:C4:57:74:E4:C8:E4:7B:DB
Certificate issuer:       /CN=50445e52444423193f495fbcc45774e4c8e47bdb
Certificate serial:       019D38D3B92822074C9519CF22264B4E7AC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
Manifest number:          1020
Signing time:             Sun 29 Mar 2026 09:01:32 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:32 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:32 +0000
Files and hashes:         1: UEReUkREIxk_SV-8xFd05Mjke9s.crl (hash: btS1nPeHyxGvNHg8Axf2UNkHwm/dkcz0cLS1sXVQJVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:b9:28:22:07:4c:95:19:cf:22:26:4b:4e:7a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50445e52444423193f495fbcc45774e4c8e47bdb
        Validity
            Not Before: Mar 29 09:01:32 2026 GMT
            Not After : Mar 30 09:01:32 2026 GMT
        Subject: CN=4d64cfdc6f3b73e3abbe8f48b5244d2a8b0833b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:08:9c:e4:ba:9b:c6:14:88:17:56:38:64:79:
                    b4:13:2d:2b:4a:c3:f7:2c:a7:15:09:03:7b:a3:a3:
                    cf:19:29:63:42:44:f2:52:ae:ea:86:09:85:0d:f3:
                    8d:b6:62:6c:16:3a:c2:40:55:08:ef:53:22:a3:4b:
                    57:63:28:7d:20:68:06:fc:1a:b5:f7:a1:59:86:ac:
                    3d:2b:6d:89:ae:56:f5:d5:37:60:0c:0b:23:2d:9a:
                    86:5e:02:8c:33:20:1d:47:a5:bf:cd:e7:8e:ab:1e:
                    d7:21:69:67:e2:72:2b:22:98:0c:47:6b:2b:1a:d6:
                    21:31:aa:9d:40:5f:ac:87:5c:40:4e:14:d3:15:7c:
                    1d:e8:f9:e0:1b:6e:91:79:59:87:1c:05:87:37:8c:
                    2c:54:53:b0:80:dc:b0:cd:58:ef:dc:7b:d1:10:97:
                    cf:16:36:4f:8b:8f:76:89:de:15:2b:bf:ef:ef:98:
                    a5:ee:c3:7a:c3:cc:7e:35:0d:1d:54:d9:15:3f:49:
                    45:0b:e0:f1:a2:32:32:76:32:6c:fa:57:ce:28:66:
                    ca:33:2a:74:ac:e6:1a:1c:31:59:83:32:68:96:25:
                    20:9d:f6:64:76:4c:93:64:19:18:78:49:aa:16:09:
                    54:b8:31:1a:bd:66:d7:10:e0:ab:96:d9:98:e4:2a:
                    32:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:64:CF:DC:6F:3B:73:E3:AB:BE:8F:48:B5:24:4D:2A:8B:08:33:B3
            X509v3 Authority Key Identifier:
                keyid:50:44:5E:52:44:44:23:19:3F:49:5F:BC:C4:57:74:E4:C8:E4:7B:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:02:90:90:f9:8c:c6:67:ae:7d:8e:fa:e1:53:58:b0:39:63:
         22:8d:c5:98:f7:de:c6:24:95:d1:6f:5b:e6:26:b1:93:49:5c:
         d1:87:b0:41:ad:5d:16:5d:b4:f0:37:3c:4e:c4:09:c4:b0:2d:
         f7:45:67:b9:fe:37:b1:ed:47:ba:ee:e9:50:a8:01:10:8e:20:
         79:3c:79:1f:8b:75:b8:49:0e:a7:f3:96:cf:7a:90:44:0c:97:
         48:51:7d:42:f7:d7:a2:cc:ff:31:73:7f:f4:64:d6:b3:35:df:
         9a:39:95:27:8b:1a:a1:37:54:7e:a8:9b:91:07:8b:91:f0:0d:
         f2:d3:0a:4b:f7:d7:92:de:4d:4c:eb:94:f2:22:f4:84:0c:b3:
         7e:58:0d:b2:c3:29:fa:22:e6:4f:2c:de:ad:7e:45:71:57:e3:
         9b:de:27:a0:d0:6d:fa:06:19:3d:ce:0b:06:48:ff:f9:44:d9:
         b2:0a:6f:cc:22:99:94:d3:5b:83:15:28:fe:5e:7a:f4:19:c0:
         51:e7:10:d3:e6:a4:4a:8a:5e:ac:bc:2a:51:d1:69:f3:fb:dc:
         f0:ec:da:e8:f7:8f:22:9c:4d:6b:61:6e:cb:55:a5:b9:8c:90:
         db:e3:10:78:50:7b:ac:28:11:3d:06:bb:36:60:60:2c:51:8a:
         b4:c3:03:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0407koIgdMlRnPIiZLTnrJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNDQ1ZTUyNDQ0NDIzMTkzZjQ5NWZiY2M0NTc3NGU0Yzhl
NDdiZGIwHhcNMjYwMzI5MDkwMTMyWhcNMjYwMzMwMDkwMTMyWjAzMTEwLwYDVQQD
Eyg0ZDY0Y2ZkYzZmM2I3M2UzYWJiZThmNDhiNTI0NGQyYThiMDgzM2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngic5LqbxhSIF1Y4ZHm0Ey0rSsP3
LKcVCQN7o6PPGSljQkTyUq7qhgmFDfONtmJsFjrCQFUI71Mio0tXYyh9IGgG/Bq1
96FZhqw9K22Jrlb11TdgDAsjLZqGXgKMMyAdR6W/zeeOqx7XIWln4nIrIpgMR2sr
GtYhMaqdQF+sh1xAThTTFXwd6PngG26ReVmHHAWHN4wsVFOwgNywzVjv3HvREJfP
FjZPi492id4VK7/v75il7sN6w8x+NQ0dVNkVP0lFC+DxojIydjJs+lfOKGbKMyp0
rOYaHDFZgzJoliUgnfZkdkyTZBkYeEmqFglUuDEavWbXEOCrltmY5Coy1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1kz9xvO3Pjq76PSLUkTSqLCDOzMB8GA1UdIwQY
MBaAFFBEXlJERCMZP0lfvMRXdOTI5HvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUVSZVVrUkVJeGtfU1YtOHhGZDA1TWprZTlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83ZDAzMDQtNWY0OS00YTQxLWI4ZjEt
ZjgzOTljMDhlMzliLzEvVUVSZVVrUkVJeGtfU1YtOHhGZDA1TWprZTlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS83ZDAzMDQtNWY0OS00YTQxLWI4ZjEtZjgzOTljMDhlMzli
LzEvVUVSZVVrUkVJeGtfU1YtOHhGZDA1TWprZTlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhAKQkPmM
xmeufY764VNYsDljIo3FmPfexiSV0W9b5iaxk0lc0YewQa1dFl208Dc8TsQJxLAt
90Vnuf43se1Huu7pUKgBEI4geTx5H4t1uEkOp/OWz3qQRAyXSFF9QvfXosz/MXN/
9GTWszXfmjmVJ4saoTdUfqibkQeLkfAN8tMKS/fXkt5NTOuU8iL0hAyzflgNssMp
+iLmTyzerX5FcVfjm94noNBt+gYZPc4LBkj/+UTZsgpvzCKZlNNbgxUo/l569BnA
UecQ0+akSoperLwqUdFp8/vc8Oza6PePIpxNa2Fuy1WluYyQ2+MQeFB7rCgRPQa7
NmBgLFGKtMMDJw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:15:19 2026 by rpki-client