Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
File:                     0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft (raw, json)
Hash identifier:          NMj2BPjvlOk/agq3SuE6MzLASxpcp+pWBUug7iGwz7s=
Subject key identifier:   72:FB:62:46:25:CF:76:EE:15:6B:6D:10:81:A8:09:60:A3:8F:A2:75
Authority key identifier: D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06
Certificate issuer:       /CN=d2b57f59782f941b5d2eb3d4286d5911b179e006
Certificate serial:       019EBF5A2A9B9AB04422E395814EC530B711
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
Manifest number:          1957
Signing time:             Sat 13 Jun 2026 05:00:17 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:17 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:17 +0000
Files and hashes:         1: 0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl (hash: v+C+J/VTr4gNVyDoUcRKZSH43yIoyIDsh82xTu1XiBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:2a:9b:9a:b0:44:22:e3:95:81:4e:c5:30:b7:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2b57f59782f941b5d2eb3d4286d5911b179e006
        Validity
            Not Before: Jun 13 05:00:17 2026 GMT
            Not After : Jun 14 05:00:17 2026 GMT
        Subject: CN=72fb624625cf76ee156b6d1081a80960a38fa275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7b:58:52:82:4a:b7:ce:2e:be:12:ad:fb:29:
                    da:c3:4a:4d:80:3d:63:90:90:bf:1a:a3:85:16:9a:
                    fa:98:63:0d:46:2d:b3:37:87:62:a2:85:92:32:87:
                    f3:f4:1d:21:e3:fe:d7:4a:65:02:42:17:fc:bd:1f:
                    29:e8:3b:ff:a2:8d:ce:ba:30:cf:5f:22:47:92:66:
                    46:90:b6:f1:7d:c1:4c:0f:4c:19:5b:3d:8a:ac:53:
                    d9:77:e2:39:53:2c:8d:9d:a3:f4:27:c4:63:3a:4c:
                    e2:a5:5f:81:d9:55:5b:fd:7c:8b:ef:52:f5:e8:7a:
                    2d:d4:c1:f9:81:46:2a:b3:be:e4:7d:53:07:eb:50:
                    4a:2f:5b:52:5d:8f:e8:3e:a5:e2:b6:c3:d4:7d:8d:
                    74:d3:43:dc:af:33:41:3b:ce:70:05:61:1e:4e:51:
                    06:f0:2e:62:95:26:8a:44:f9:85:08:d1:b7:ed:c7:
                    63:dc:d6:60:54:ad:9d:40:73:ae:34:e1:25:7d:a5:
                    8c:41:4b:a6:08:46:fb:6b:3f:f9:ba:3e:17:4a:89:
                    02:7a:76:64:35:b0:1c:c6:3f:0b:7b:ca:74:a6:55:
                    5b:0b:fb:7e:a7:6b:fb:da:67:ce:5f:8d:a1:b8:86:
                    01:a3:63:0f:5a:bd:e7:9a:36:be:1c:85:28:d8:59:
                    3d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FB:62:46:25:CF:76:EE:15:6B:6D:10:81:A8:09:60:A3:8F:A2:75
            X509v3 Authority Key Identifier:
                keyid:D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f6:90:e8:20:99:57:3f:0a:5e:8c:bb:fb:f3:8a:b1:df:1f:
         32:ee:eb:81:10:b0:34:a4:7a:91:13:ed:9a:6c:54:01:e9:3f:
         90:d4:d3:2a:72:37:a8:c7:62:39:f2:dc:02:eb:27:76:06:20:
         3a:84:39:d6:33:84:d1:44:3f:7f:f9:5a:f3:10:44:fd:90:a7:
         fb:15:68:7b:1a:aa:2b:a7:d6:20:f6:a4:7d:f2:b4:08:56:b9:
         4c:20:6b:17:6b:df:64:a3:74:f1:65:e8:e9:68:70:53:95:18:
         26:93:0a:0f:58:c6:4b:61:d4:25:3d:f2:ff:26:1e:7a:82:6d:
         6b:ac:0d:5c:38:9f:9c:cf:d1:b5:66:86:08:0d:05:b9:e9:28:
         61:1b:3f:a3:af:1e:59:ae:6a:71:17:31:ab:54:ab:5a:79:b6:
         da:9c:46:81:29:fa:66:fc:ee:13:57:56:ab:39:37:b5:2c:e6:
         df:96:09:5c:18:db:52:f5:e8:8c:3d:22:43:59:70:d0:5d:54:
         ac:59:7f:7c:25:db:bd:f9:2a:7b:39:85:ab:b4:fe:5c:fe:0f:
         48:01:2f:78:3c:e9:bc:6f:bf:cf:de:71:b2:1e:4f:cf:29:3f:
         b7:7f:65:e3:05:98:24:de:21:86:9a:f0:60:f2:20:67:ba:57:
         c9:73:aa:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WiqbmrBEIuOVgU7FMLcRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYjU3ZjU5NzgyZjk0MWI1ZDJlYjNkNDI4NmQ1OTExYjE3
OWUwMDYwHhcNMjYwNjEzMDUwMDE3WhcNMjYwNjE0MDUwMDE3WjAzMTEwLwYDVQQD
Eyg3MmZiNjI0NjI1Y2Y3NmVlMTU2YjZkMTA4MWE4MDk2MGEzOGZhMjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3tYUoJKt84uvhKt+ynaw0pNgD1j
kJC/GqOFFpr6mGMNRi2zN4diooWSMofz9B0h4/7XSmUCQhf8vR8p6Dv/oo3OujDP
XyJHkmZGkLbxfcFMD0wZWz2KrFPZd+I5UyyNnaP0J8RjOkzipV+B2VVb/XyL71L1
6Hot1MH5gUYqs77kfVMH61BKL1tSXY/oPqXitsPUfY1000PcrzNBO85wBWEeTlEG
8C5ilSaKRPmFCNG37cdj3NZgVK2dQHOuNOElfaWMQUumCEb7az/5uj4XSokCenZk
NbAcxj8Le8p0plVbC/t+p2v72mfOX42huIYBo2MPWr3nmja+HIUo2Fk9qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHL7YkYlz3buFWttEIGoCWCjj6J1MB8GA1UdIwQY
MBaAFNK1f1l4L5QbXS6z1ChtWRGxeeAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHJWX1dYZ3ZsQnRkTHJQVUtHMVpFYkY1NEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NTVlMzUtODdjYy00NDhlLWI3Yjct
MDdjYjIyYmY0MjRkLzEvMHJWX1dYZ3ZsQnRkTHJQVUtHMVpFYkY1NEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84NTVlMzUtODdjYy00NDhlLWI3YjctMDdjYjIyYmY0MjRk
LzEvMHJWX1dYZ3ZsQnRkTHJQVUtHMVpFYkY1NEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPaQ6CCZ
Vz8KXoy7+/OKsd8fMu7rgRCwNKR6kRPtmmxUAek/kNTTKnI3qMdiOfLcAusndgYg
OoQ51jOE0UQ/f/la8xBE/ZCn+xVoexqqK6fWIPakffK0CFa5TCBrF2vfZKN08WXo
6WhwU5UYJpMKD1jGS2HUJT3y/yYeeoJta6wNXDifnM/RtWaGCA0FuekoYRs/o68e
Wa5qcRcxq1SrWnm22pxGgSn6ZvzuE1dWqzk3tSzm35YJXBjbUvXojD0iQ1lw0F1U
rFl/fCXbvfkqezmFq7T+XP4PSAEveDzpvG+/z95xsh5Pzyk/t39l4wWYJN4hhprw
YPIgZ7pXyXOqGA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:25:47 2026 by rpki-client