Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
File:                     DR7vsZI4vpruN5lb700q_Ref8sw.mft (raw, json)
Hash identifier:          jHG/jiDfhoMVHn30mBWuX6/bjm9OR0En9OXonO+Z9FA=
Subject key identifier:   B5:22:41:91:E6:1C:56:78:6E:D5:CC:E0:40:9D:EE:F1:F5:15:A7:B7
Authority key identifier: 0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC
Certificate issuer:       /CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
Certificate serial:       019FAA1A1DF13AA458B50E3B7AE417DCBDB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
Manifest number:          1077
Signing time:             Tue 28 Jul 2026 19:01:05 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:05 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:05 +0000
Files and hashes:         1: DR7vsZI4vpruN5lb700q_Ref8sw.crl (hash: TH55QXhrY7s3EwhnXXkEX14QDWY9hkD6W/tsKq6dJPY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:1d:f1:3a:a4:58:b5:0e:3b:7a:e4:17:dc:bd:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
        Validity
            Not Before: Jul 28 19:01:05 2026 GMT
            Not After : Jul 29 19:01:05 2026 GMT
        Subject: CN=b5224191e61c56786ed5cce0409deef1f515a7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:79:4c:dc:ac:a0:57:e5:11:6f:6d:e6:47:e4:
                    6c:c1:c7:55:0f:6a:9e:7e:b0:64:85:99:1b:1d:de:
                    16:95:bb:bf:cb:f1:9d:5b:37:2b:c0:e2:b3:68:8e:
                    c3:09:9b:a1:39:23:56:de:60:9a:2a:e0:d6:4c:74:
                    b7:29:94:6c:98:c4:63:38:ee:3f:a1:3a:72:96:28:
                    9b:d2:b6:57:ff:ef:9f:aa:9d:4b:ff:0b:86:fc:0f:
                    47:e2:b9:d0:b6:40:32:90:b8:28:b4:3f:cf:8c:f2:
                    5d:2a:bb:2b:94:b2:c7:44:30:82:17:13:ae:35:7f:
                    c4:87:42:da:aa:6f:fd:c6:05:f7:16:65:b5:30:41:
                    3c:63:59:89:c2:16:7c:d7:8c:0c:81:36:83:ce:1c:
                    53:63:7b:05:61:6b:c3:b4:b1:44:84:5e:54:0f:16:
                    21:61:0e:8b:89:f0:0d:a3:bc:0c:e7:22:18:c3:df:
                    f0:d2:92:88:d2:ac:fc:38:8a:c5:e5:2b:10:c0:3d:
                    55:e3:b6:83:65:26:4c:30:fe:60:15:40:32:13:d0:
                    40:be:3d:7e:44:a7:43:57:a8:47:21:76:ec:c8:d2:
                    18:95:99:f8:71:c4:50:4b:97:36:fe:f5:52:00:5f:
                    e8:65:6c:3e:aa:55:33:33:6c:83:60:45:15:5a:45:
                    b7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:22:41:91:E6:1C:56:78:6E:D5:CC:E0:40:9D:EE:F1:F5:15:A7:B7
            X509v3 Authority Key Identifier:
                keyid:0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:7b:e3:7e:02:54:fb:70:1b:76:a0:10:89:12:43:cd:20:6b:
         84:c0:df:63:bc:43:5f:aa:ad:bd:4d:ab:e5:15:c2:ef:fd:b7:
         3a:a8:f0:77:e6:5c:50:df:03:ee:0b:e2:dd:ae:be:9c:05:d3:
         27:6a:17:71:a9:5a:c0:fd:4f:f7:0a:88:60:de:90:c5:3b:b9:
         15:cc:64:10:4e:94:85:b9:be:fd:42:ca:0b:3d:67:50:8c:32:
         70:f0:28:9e:b2:50:eb:9a:9d:62:55:ea:3d:7b:29:4c:f9:b6:
         53:00:38:1f:cd:86:98:ad:2a:ed:12:0f:8a:3e:4d:95:f4:a1:
         c1:21:77:22:51:54:39:19:89:f1:80:5a:68:ab:9c:a6:7e:1d:
         e8:cf:78:d5:1b:a9:f4:b7:d2:c1:a2:bf:55:37:fc:c2:d7:ba:
         e0:86:92:04:23:d0:e0:52:69:84:15:a3:e0:01:46:cf:28:a0:
         1c:03:16:bb:eb:d1:d3:7f:b5:c6:56:9a:ec:12:f8:b0:a5:6a:
         52:00:57:b3:59:07:31:02:98:2c:62:06:a1:ae:dc:65:0c:56:
         1e:ca:54:2c:31:aa:d9:d3:69:80:6d:8d:92:eb:5e:15:6b:a1:
         07:1d:7d:04:cd:ce:de:71:88:69:07:63:3a:17:f0:e6:8a:79:
         d6:13:24:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGh3xOqRYtQ47euQX3L24MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMWVlZmIxOTIzOGJlOWFlZTM3OTk1YmVmNGQyYWZkMTc5
ZmYyY2MwHhcNMjYwNzI4MTkwMTA1WhcNMjYwNzI5MTkwMTA1WjAzMTEwLwYDVQQD
EyhiNTIyNDE5MWU2MWM1Njc4NmVkNWNjZTA0MDlkZWVmMWY1MTVhN2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHlM3KygV+URb23mR+RswcdVD2qe
frBkhZkbHd4Wlbu/y/GdWzcrwOKzaI7DCZuhOSNW3mCaKuDWTHS3KZRsmMRjOO4/
oTpyliib0rZX/++fqp1L/wuG/A9H4rnQtkAykLgotD/PjPJdKrsrlLLHRDCCFxOu
NX/Eh0Laqm/9xgX3FmW1MEE8Y1mJwhZ814wMgTaDzhxTY3sFYWvDtLFEhF5UDxYh
YQ6LifANo7wM5yIYw9/w0pKI0qz8OIrF5SsQwD1V47aDZSZMMP5gFUAyE9BAvj1+
RKdDV6hHIXbsyNIYlZn4ccRQS5c2/vVSAF/oZWw+qlUzM2yDYEUVWkW37QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUiQZHmHFZ4btXM4ECd7vH1Fae3MB8GA1UdIwQY
MBaAFA0e77GSOL6a7jeZW+9NKv0Xn/LMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFI3dnNaSTR2cHJ1TjVsYjcwMHFfUmVmOHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lOTQ0N2EtMWU1Yy00YjFlLTgwNTYt
MzQ0OWYzM2ExODQyLzEvRFI3dnNaSTR2cHJ1TjVsYjcwMHFfUmVmOHN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9lOTQ0N2EtMWU1Yy00YjFlLTgwNTYtMzQ0OWYzM2ExODQy
LzEvRFI3dnNaSTR2cHJ1TjVsYjcwMHFfUmVmOHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHvjfgJU
+3AbdqAQiRJDzSBrhMDfY7xDX6qtvU2r5RXC7/23Oqjwd+ZcUN8D7gvi3a6+nAXT
J2oXcalawP1P9wqIYN6QxTu5FcxkEE6Uhbm+/ULKCz1nUIwycPAonrJQ65qdYlXq
PXspTPm2UwA4H82GmK0q7RIPij5NlfShwSF3IlFUORmJ8YBaaKucpn4d6M941Rup
9LfSwaK/VTf8wte64IaSBCPQ4FJphBWj4AFGzyigHAMWu+vR03+1xlaa7BL4sKVq
UgBXs1kHMQKYLGIGoa7cZQxWHspULDGq2dNpgG2NkuteFWuhBx19BM3O3nGIaQdj
Ohfw5op51hMkUw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:32:52 2026 by rpki-client