Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
File:                     0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft (raw, json)
Hash identifier:          O7AiaUtjxHD+FIy6Jci41l69731HBTyK7Vvanmno/CM=
Subject key identifier:   FD:99:33:06:7F:47:D9:6A:99:D3:48:0D:67:67:FB:40:3A:78:6F:16
Authority key identifier: D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06
Certificate issuer:       /CN=d2b57f59782f941b5d2eb3d4286d5911b179e006
Certificate serial:       019D99D05C015BC9C16113F32DDDCD1596FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
Manifest number:          18BF
Signing time:             Fri 17 Apr 2026 05:01:01 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:01 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:01 +0000
Files and hashes:         1: 0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl (hash: 1COdVzPb1vEIlN/I8IVkJ8ADtDexPut6plCxhdThPz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:5c:01:5b:c9:c1:61:13:f3:2d:dd:cd:15:96:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2b57f59782f941b5d2eb3d4286d5911b179e006
        Validity
            Not Before: Apr 17 05:01:01 2026 GMT
            Not After : Apr 18 05:01:01 2026 GMT
        Subject: CN=fd9933067f47d96a99d3480d6767fb403a786f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1c:a7:1a:11:c6:62:26:01:80:1f:6a:f8:fa:
                    f8:66:79:9f:21:88:a7:1d:00:b8:7a:9a:e6:6f:11:
                    40:a5:32:23:e3:98:9b:30:9e:6f:a4:31:36:45:84:
                    7f:0e:9f:da:14:fa:37:67:33:8c:91:25:c9:31:d9:
                    ca:55:ed:1e:a9:83:3b:fc:11:32:d1:fa:f7:04:fd:
                    63:d2:94:4c:6a:d1:b9:55:d7:33:c9:04:3f:79:ac:
                    10:bf:a7:06:28:d2:57:5b:b8:f6:92:a7:ae:0a:76:
                    3d:94:c6:4e:2e:26:5e:44:03:22:ea:f7:9b:16:35:
                    76:e0:38:48:41:4e:47:ea:42:c6:9f:7b:11:5b:89:
                    a4:ba:a7:be:e8:17:06:80:04:b3:7c:61:a7:0d:22:
                    72:b4:65:40:65:85:d5:31:84:86:a4:fc:cb:fb:b7:
                    7c:18:eb:2e:19:99:4f:0b:c7:30:55:6b:7d:01:88:
                    f8:6f:5e:68:88:43:e4:dc:18:3d:ca:2c:36:16:f6:
                    ca:cd:f4:87:6e:75:e4:39:eb:7f:30:da:35:a7:06:
                    0e:05:d5:12:dd:84:cc:fe:38:c7:db:91:e5:f9:f5:
                    06:b7:6b:69:21:26:8b:e1:58:b4:45:a0:6c:78:2b:
                    45:3c:3d:de:3a:38:ce:c0:8f:25:9d:7e:2c:6d:b6:
                    62:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:99:33:06:7F:47:D9:6A:99:D3:48:0D:67:67:FB:40:3A:78:6F:16
            X509v3 Authority Key Identifier:
                keyid:D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:1f:db:81:cb:88:ef:9f:ee:ab:a6:87:38:17:fd:21:ce:92:
         db:b0:06:d5:a1:1a:35:f2:88:9a:bc:b4:3d:07:8d:01:c4:00:
         2c:e8:e1:53:47:ad:0e:66:0e:57:de:70:48:24:64:19:e4:bb:
         e9:9a:fb:64:ac:ca:58:cb:37:01:4b:9f:b9:90:b5:c6:ec:90:
         a0:7a:32:ea:d9:30:49:bf:77:93:fb:0b:34:22:2e:09:3e:d4:
         32:90:b0:9d:ec:a1:05:32:8f:42:7f:2b:3c:d7:e7:b0:a3:87:
         ff:77:f1:28:12:8c:fa:a1:72:13:26:48:d8:fc:fc:73:31:5f:
         7a:bf:f0:ff:6f:0e:c8:a7:82:35:f3:9e:ee:67:c3:26:04:ce:
         e1:16:97:12:27:89:68:f1:cf:c8:b1:2d:d9:85:18:91:ee:63:
         4c:5e:18:d8:cb:f4:71:31:fa:02:55:57:18:ba:dc:b6:c9:95:
         74:f1:bf:be:c2:55:66:01:ea:60:89:f4:85:bd:f2:0b:96:d5:
         d6:d0:99:dc:20:41:c9:b5:9c:49:34:8d:9f:9b:b4:ab:b3:b0:
         72:79:34:09:06:1f:ba:19:df:cb:0a:26:cb:10:c8:6b:d7:a0:
         73:73:93:de:f5:4a:50:36:3a:96:fd:c7:f2:49:a9:2a:92:10:
         5b:e9:b6:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0FwBW8nBYRPzLd3NFZb+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYjU3ZjU5NzgyZjk0MWI1ZDJlYjNkNDI4NmQ1OTExYjE3
OWUwMDYwHhcNMjYwNDE3MDUwMTAxWhcNMjYwNDE4MDUwMTAxWjAzMTEwLwYDVQQD
EyhmZDk5MzMwNjdmNDdkOTZhOTlkMzQ4MGQ2NzY3ZmI0MDNhNzg2ZjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhynGhHGYiYBgB9q+Pr4ZnmfIYin
HQC4eprmbxFApTIj45ibMJ5vpDE2RYR/Dp/aFPo3ZzOMkSXJMdnKVe0eqYM7/BEy
0fr3BP1j0pRMatG5VdczyQQ/eawQv6cGKNJXW7j2kqeuCnY9lMZOLiZeRAMi6veb
FjV24DhIQU5H6kLGn3sRW4mkuqe+6BcGgASzfGGnDSJytGVAZYXVMYSGpPzL+7d8
GOsuGZlPC8cwVWt9AYj4b15oiEPk3Bg9yiw2FvbKzfSHbnXkOet/MNo1pwYOBdUS
3YTM/jjH25Hl+fUGt2tpISaL4Vi0RaBseCtFPD3eOjjOwI8lnX4sbbZimwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2ZMwZ/R9lqmdNIDWdn+0A6eG8WMB8GA1UdIwQY
MBaAFNK1f1l4L5QbXS6z1ChtWRGxeeAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHJWX1dYZ3ZsQnRkTHJQVUtHMVpFYkY1NEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NTVlMzUtODdjYy00NDhlLWI3Yjct
MDdjYjIyYmY0MjRkLzEvMHJWX1dYZ3ZsQnRkTHJQVUtHMVpFYkY1NEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84NTVlMzUtODdjYy00NDhlLWI3YjctMDdjYjIyYmY0MjRk
LzEvMHJWX1dYZ3ZsQnRkTHJQVUtHMVpFYkY1NEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIB/bgcuI
75/uq6aHOBf9Ic6S27AG1aEaNfKImry0PQeNAcQALOjhU0etDmYOV95wSCRkGeS7
6Zr7ZKzKWMs3AUufuZC1xuyQoHoy6tkwSb93k/sLNCIuCT7UMpCwneyhBTKPQn8r
PNfnsKOH/3fxKBKM+qFyEyZI2Pz8czFfer/w/28OyKeCNfOe7mfDJgTO4RaXEieJ
aPHPyLEt2YUYke5jTF4Y2Mv0cTH6AlVXGLrctsmVdPG/vsJVZgHqYIn0hb3yC5bV
1tCZ3CBBybWcSTSNn5u0q7Owcnk0CQYfuhnfywomyxDIa9egc3OT3vVKUDY6lv3H
8kmpKpIQW+m2Vg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:03 2026 by rpki-client