Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
File:                     ur8nIaXXgzW3uX22OuxDXJyji8c.mft (raw, json)
Hash identifier:          EnCZqPrflwnHd/E35pjMDOiX29udE0Xhlx05PbvyCpg=
Subject key identifier:   48:4D:09:2B:A7:C2:65:F7:5D:C2:EC:63:B3:45:C2:7F:55:87:74:8A
Authority key identifier: BA:BF:27:21:A5:D7:83:35:B7:B9:7D:B6:3A:EC:43:5C:9C:A3:8B:C7
Certificate issuer:       /CN=babf2721a5d78335b7b97db63aec435c9ca38bc7
Certificate serial:       019D28F2DDDF6DCB79F193090A0149A19E92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
Manifest number:          0A81
Signing time:             Thu 26 Mar 2026 07:01:38 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:38 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:38 +0000
Files and hashes:         1: ur8nIaXXgzW3uX22OuxDXJyji8c.crl (hash: yYxXiwhbNonQ/PznWz9xI+hBuXJ2zuksfUbOU4qF8ns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:dd:df:6d:cb:79:f1:93:09:0a:01:49:a1:9e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=babf2721a5d78335b7b97db63aec435c9ca38bc7
        Validity
            Not Before: Mar 26 07:01:38 2026 GMT
            Not After : Mar 27 07:01:38 2026 GMT
        Subject: CN=484d092ba7c265f75dc2ec63b345c27f5587748a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5c:8f:5b:4c:9a:29:da:dd:58:63:7b:a4:cb:
                    6c:ab:f9:a0:04:50:cb:d1:91:a9:67:91:e1:dd:86:
                    58:70:63:6e:29:56:b2:6d:9c:ce:16:5f:34:ef:5d:
                    d2:ed:8b:54:ea:6b:da:bb:6b:8b:40:d9:10:ce:98:
                    6a:15:0f:3a:b0:d4:97:68:e5:c1:1e:bc:75:19:fc:
                    af:48:02:25:97:d7:0e:71:a2:d4:6b:51:f9:55:b4:
                    8e:4c:8a:5f:99:29:39:e3:33:41:18:06:7a:62:f7:
                    de:98:6f:4d:09:37:a3:51:7f:6d:9d:a2:0c:1f:17:
                    ec:49:f8:39:4a:73:85:1b:a0:86:2e:7b:d0:a4:a3:
                    6e:bd:ae:c5:74:de:bd:4a:52:6b:d1:fa:bc:c8:bd:
                    13:96:ce:d1:e7:96:dc:c1:e2:ec:b9:74:31:e3:5d:
                    04:c7:46:1c:d8:72:1b:e2:c2:4b:ad:bd:00:69:74:
                    c2:05:ee:cf:fc:3f:19:60:61:4c:d4:49:66:96:40:
                    3e:d9:88:2d:73:19:f8:b7:fd:f7:a0:2e:33:df:10:
                    4d:52:b8:27:59:e9:f6:2c:8c:cf:ff:69:9b:52:65:
                    2d:32:1c:a2:ec:bc:80:3f:51:69:52:92:3f:79:fd:
                    6c:82:a7:0b:25:4a:cd:94:0b:63:5c:82:3c:ca:33:
                    93:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4D:09:2B:A7:C2:65:F7:5D:C2:EC:63:B3:45:C2:7F:55:87:74:8A
            X509v3 Authority Key Identifier:
                keyid:BA:BF:27:21:A5:D7:83:35:B7:B9:7D:B6:3A:EC:43:5C:9C:A3:8B:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:2e:19:b7:c7:bf:e0:6d:ad:04:95:35:b8:0f:87:19:68:3e:
         96:f8:d2:64:f0:3a:03:93:11:d4:ec:5f:f4:74:d6:11:e9:d3:
         c7:de:2e:8f:77:47:3e:cb:d2:a1:bc:02:25:b1:5d:33:cd:f6:
         27:e6:4b:fd:d3:19:57:3e:19:de:a2:91:50:fe:37:35:a2:65:
         4c:59:81:e6:02:47:76:7d:8f:d0:53:e6:4c:87:8e:da:a0:4a:
         cb:21:b7:f8:d8:b5:33:2a:75:a8:1c:19:7a:60:93:99:4f:03:
         a9:47:39:f5:38:00:9b:fc:f4:b1:7e:d4:c6:ba:a5:4a:05:6d:
         04:ce:93:f1:b3:df:c3:50:9c:1e:66:40:64:f8:00:35:98:6f:
         bc:ad:69:ea:18:73:76:84:c1:50:72:3e:a4:e6:0e:46:ec:f9:
         e4:3e:30:ed:78:5c:7d:73:e8:66:ec:b3:ec:c4:5a:2e:ae:5d:
         7d:23:bb:89:98:85:2d:31:1a:e1:7a:ba:ac:dd:6e:1c:98:d6:
         9a:7c:14:bf:cc:f8:57:75:f9:89:a8:61:ac:82:ba:65:77:75:
         b6:f8:7e:2a:7d:0b:53:a5:a4:46:60:ba:0e:70:e6:89:7d:22:
         ec:ea:11:2f:fe:8c:18:eb:99:44:a9:59:56:77:31:8a:f2:60:
         6e:d7:37:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8t3fbct58ZMJCgFJoZ6SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYmYyNzIxYTVkNzgzMzViN2I5N2RiNjNhZWM0MzVjOWNh
MzhiYzcwHhcNMjYwMzI2MDcwMTM4WhcNMjYwMzI3MDcwMTM4WjAzMTEwLwYDVQQD
Eyg0ODRkMDkyYmE3YzI2NWY3NWRjMmVjNjNiMzQ1YzI3ZjU1ODc3NDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylyPW0yaKdrdWGN7pMtsq/mgBFDL
0ZGpZ5Hh3YZYcGNuKVaybZzOFl80713S7YtU6mvau2uLQNkQzphqFQ86sNSXaOXB
Hrx1GfyvSAIll9cOcaLUa1H5VbSOTIpfmSk54zNBGAZ6YvfemG9NCTejUX9tnaIM
HxfsSfg5SnOFG6CGLnvQpKNuva7FdN69SlJr0fq8yL0Tls7R55bcweLsuXQx410E
x0Yc2HIb4sJLrb0AaXTCBe7P/D8ZYGFM1ElmlkA+2Ygtcxn4t/33oC4z3xBNUrgn
Wen2LIzP/2mbUmUtMhyi7LyAP1FpUpI/ef1sgqcLJUrNlAtjXII8yjOT+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhNCSunwmX3XcLsY7NFwn9Vh3SKMB8GA1UdIwQY
MBaAFLq/JyGl14M1t7l9tjrsQ1yco4vHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXI4bklhWFhnelczdVgyMk91eERYSnlqaThjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9jZmQ3YTMtNDYyNC00MGJlLWJiMjMt
ZDdiZmYxMTlmZDVkLzEvdXI4bklhWFhnelczdVgyMk91eERYSnlqaThjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9jZmQ3YTMtNDYyNC00MGJlLWJiMjMtZDdiZmYxMTlmZDVk
LzEvdXI4bklhWFhnelczdVgyMk91eERYSnlqaThjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQy4Zt8e/
4G2tBJU1uA+HGWg+lvjSZPA6A5MR1Oxf9HTWEenTx94uj3dHPsvSobwCJbFdM832
J+ZL/dMZVz4Z3qKRUP43NaJlTFmB5gJHdn2P0FPmTIeO2qBKyyG3+Ni1Myp1qBwZ
emCTmU8DqUc59TgAm/z0sX7UxrqlSgVtBM6T8bPfw1CcHmZAZPgANZhvvK1p6hhz
doTBUHI+pOYORuz55D4w7XhcfXPoZuyz7MRaLq5dfSO7iZiFLTEa4Xq6rN1uHJjW
mnwUv8z4V3X5iahhrIK6ZXd1tvh+Kn0LU6WkRmC6DnDmiX0i7OoRL/6MGOuZRKlZ
VncxivJgbtc35Q==
-----END CERTIFICATE-----