Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
File:                     DR7vsZI4vpruN5lb700q_Ref8sw.mft (raw, json)
Hash identifier:          kda7urF+f9tzSAPsAOgQmRjG/8mqb+OVxMionCb3WF4=
Subject key identifier:   62:2E:24:6F:F2:FF:69:52:84:C5:4F:B4:FA:8F:48:EF:82:31:78:57
Authority key identifier: 0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC
Certificate issuer:       /CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
Certificate serial:       019CAB6B7689C429241CADD54A12C821F3AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
Manifest number:          0EEA
Signing time:             Sun 01 Mar 2026 22:01:12 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:12 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:12 +0000
Files and hashes:         1: DR7vsZI4vpruN5lb700q_Ref8sw.crl (hash: zkA0RXzbCs5xwDjKPdPijhK1s6jkM3V6gk0Cr9P32Cg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:76:89:c4:29:24:1c:ad:d5:4a:12:c8:21:f3:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
        Validity
            Not Before: Mar  1 22:01:12 2026 GMT
            Not After : Mar  2 22:01:12 2026 GMT
        Subject: CN=622e246ff2ff695284c54fb4fa8f48ef82317857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7c:b7:4d:d4:04:ef:4f:b7:18:1e:60:58:db:
                    7d:89:c0:84:7f:46:ab:70:2e:5f:d2:91:d8:e8:ea:
                    11:f0:1f:1f:66:50:30:56:1c:29:94:e7:dc:81:14:
                    61:db:b8:a9:44:1c:c3:fa:2d:b2:02:8d:69:25:94:
                    03:e6:ec:c6:b0:3c:15:2f:20:e4:59:6d:5d:34:eb:
                    ed:a1:f2:fa:4b:0e:e2:eb:ab:66:f7:10:ad:11:e4:
                    76:b2:c0:1f:2a:80:6b:98:de:d2:2c:e3:98:ad:4e:
                    1a:19:df:e1:ea:f4:84:47:a8:47:1a:3b:3b:c5:bd:
                    93:fd:2a:2b:28:87:49:b9:b5:be:8c:ce:7e:f0:a2:
                    b8:d0:59:33:f8:7f:da:80:9d:e8:ec:09:fe:92:88:
                    29:d0:0b:ad:db:d6:0c:fe:d0:66:b6:da:7a:79:1d:
                    07:3d:fa:2a:a4:a5:f7:a5:88:3d:4a:52:76:83:26:
                    75:71:09:82:c2:61:08:fa:df:db:26:9c:5e:35:cb:
                    f6:18:1a:6c:9b:7b:6f:d4:d6:cc:79:fe:eb:60:2a:
                    14:f1:35:4f:95:1d:3d:a7:c0:1d:9d:97:e2:25:d8:
                    ec:24:ca:2e:22:5e:69:dd:89:ab:66:7e:1d:2d:80:
                    4b:06:bd:7c:66:f2:82:35:74:88:37:77:a0:61:39:
                    bb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2E:24:6F:F2:FF:69:52:84:C5:4F:B4:FA:8F:48:EF:82:31:78:57
            X509v3 Authority Key Identifier:
                keyid:0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:3e:99:23:f0:2c:00:be:5c:bd:94:70:a5:79:7a:ac:42:d7:
         07:54:d1:93:69:f4:3a:22:c2:51:95:34:c7:2a:af:2d:69:a5:
         5f:04:44:47:9e:bb:bf:07:47:0d:cd:3a:f4:26:36:35:c2:9e:
         56:34:81:35:d8:e5:a8:85:7c:14:48:7b:c2:91:3e:3d:1e:40:
         34:9d:3b:94:d5:1f:4b:0d:b8:6e:3f:f4:1d:bf:fb:cc:6e:fc:
         69:ec:1d:48:b1:01:75:81:f2:27:0e:6a:d2:26:28:40:b4:6f:
         34:5e:f0:b1:ab:cd:e0:3d:01:e8:d5:4e:63:02:89:dc:e3:67:
         f5:00:f1:ac:3d:8f:58:33:06:c6:47:d9:53:10:3c:8b:ab:0b:
         04:55:18:ad:41:6f:ed:cd:9d:85:74:78:30:07:99:da:43:17:
         b7:e3:e0:f4:98:0c:54:f0:e2:88:8d:97:28:09:83:c1:b6:f2:
         ce:f1:9a:d5:d0:99:56:01:7b:c2:41:8f:f6:02:ed:ef:3f:c6:
         12:93:09:9c:81:59:41:1c:0b:67:15:2c:4c:cc:82:cd:b4:d3:
         7b:b3:e6:81:22:c5:80:63:0a:c2:0f:bc:f3:b9:7b:47:89:c3:
         88:19:ab:1e:8d:28:80:72:d5:ba:99:7a:ca:02:af:24:60:55:
         89:43:dc:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra3aJxCkkHK3VShLIIfOqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMWVlZmIxOTIzOGJlOWFlZTM3OTk1YmVmNGQyYWZkMTc5
ZmYyY2MwHhcNMjYwMzAxMjIwMTEyWhcNMjYwMzAyMjIwMTEyWjAzMTEwLwYDVQQD
Eyg2MjJlMjQ2ZmYyZmY2OTUyODRjNTRmYjRmYThmNDhlZjgyMzE3ODU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73y3TdQE70+3GB5gWNt9icCEf0ar
cC5f0pHY6OoR8B8fZlAwVhwplOfcgRRh27ipRBzD+i2yAo1pJZQD5uzGsDwVLyDk
WW1dNOvtofL6Sw7i66tm9xCtEeR2ssAfKoBrmN7SLOOYrU4aGd/h6vSER6hHGjs7
xb2T/SorKIdJubW+jM5+8KK40Fkz+H/agJ3o7An+kogp0Aut29YM/tBmttp6eR0H
PfoqpKX3pYg9SlJ2gyZ1cQmCwmEI+t/bJpxeNcv2GBpsm3tv1NbMef7rYCoU8TVP
lR09p8AdnZfiJdjsJMouIl5p3YmrZn4dLYBLBr18ZvKCNXSIN3egYTm7DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIuJG/y/2lShMVPtPqPSO+CMXhXMB8GA1UdIwQY
MBaAFA0e77GSOL6a7jeZW+9NKv0Xn/LMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFI3dnNaSTR2cHJ1TjVsYjcwMHFfUmVmOHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lOTQ0N2EtMWU1Yy00YjFlLTgwNTYt
MzQ0OWYzM2ExODQyLzEvRFI3dnNaSTR2cHJ1TjVsYjcwMHFfUmVmOHN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9lOTQ0N2EtMWU1Yy00YjFlLTgwNTYtMzQ0OWYzM2ExODQy
LzEvRFI3dnNaSTR2cHJ1TjVsYjcwMHFfUmVmOHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfT6ZI/As
AL5cvZRwpXl6rELXB1TRk2n0OiLCUZU0xyqvLWmlXwRER567vwdHDc069CY2NcKe
VjSBNdjlqIV8FEh7wpE+PR5ANJ07lNUfSw24bj/0Hb/7zG78aewdSLEBdYHyJw5q
0iYoQLRvNF7wsavN4D0B6NVOYwKJ3ONn9QDxrD2PWDMGxkfZUxA8i6sLBFUYrUFv
7c2dhXR4MAeZ2kMXt+Pg9JgMVPDiiI2XKAmDwbbyzvGa1dCZVgF7wkGP9gLt7z/G
EpMJnIFZQRwLZxUsTMyCzbTTe7PmgSLFgGMKwg+887l7R4nDiBmrHo0ogHLVupl6
ygKvJGBViUPceQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:44 2026 by rpki-client