Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
File:                     6Md5F2XIhNCFX-0_-MPycJmpoBo.mft (raw, json)
Hash identifier:          ItofR09uXC+u4ySgqDmI8MSj0XcVb/Tfgs2tN9coi4M=
Subject key identifier:   A6:64:DE:76:64:B6:91:30:E4:4E:02:86:F8:40:CA:F0:26:37:28:12
Authority key identifier: E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A
Certificate issuer:       /CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a
Certificate serial:       01A1DA938D9E989184C3FB692157E65460B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
Manifest number:          1AF2
Signing time:             Sat 14 Nov 2026 15:01:05 +0000
Manifest this update:     Sat 14 Nov 2026 15:01:05 +0000
Manifest next update:     Sun 15 Nov 2026 15:01:05 +0000
Files and hashes:         1: 6Md5F2XIhNCFX-0_-MPycJmpoBo.crl (hash: UE71o51JYWAFocpfQN8Lq2Z/JC3UjNQm1RF1zSNmhlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 10:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:93:8d:9e:98:91:84:c3:fb:69:21:57:e6:54:60:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a
        Validity
            Not Before: Nov 14 15:01:05 2026 GMT
            Not After : Nov 15 15:01:05 2026 GMT
        Subject: CN=a664de7664b69130e44e0286f840caf026372812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0c:20:9e:f8:2b:2c:db:ec:53:f7:d4:8c:68:
                    f3:ab:10:6d:85:ef:80:4c:72:ed:1e:29:73:50:c8:
                    9f:39:07:86:37:90:d6:a3:c2:dc:b4:e5:48:b4:ac:
                    15:ec:3e:00:15:58:4a:db:1e:f7:ff:71:be:4f:f3:
                    2e:ef:cb:49:60:2b:b1:77:3e:d5:f3:b4:99:ae:50:
                    3e:91:cf:53:3c:38:37:8a:21:27:ac:23:e1:71:7d:
                    cf:69:f0:a2:ff:fe:1c:2c:29:41:9b:3f:14:27:24:
                    5d:cf:50:0e:ac:59:19:4d:c4:9e:1d:cd:5e:73:7b:
                    08:0b:a6:a6:9d:14:2c:22:6e:3c:82:cc:4a:e4:d3:
                    19:ed:63:15:f3:12:99:4a:cb:06:2e:5d:71:41:ee:
                    af:aa:c0:7b:0c:90:a5:02:08:83:2b:e6:fb:4a:05:
                    91:01:c4:f8:61:c9:f9:32:72:7d:39:a6:97:93:51:
                    76:3d:2c:8c:8d:a2:7f:06:65:05:0d:09:d1:77:3c:
                    79:81:ff:fa:d8:f3:cf:8e:01:d3:5c:6c:b2:d0:91:
                    63:e8:58:ec:12:d3:a0:7a:43:f4:0b:3a:03:22:cf:
                    ad:02:c2:3c:82:69:a5:10:e4:9b:54:58:df:05:61:
                    46:04:4b:80:ae:44:aa:ea:8e:c5:ae:d0:d6:97:01:
                    67:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:64:DE:76:64:B6:91:30:E4:4E:02:86:F8:40:CA:F0:26:37:28:12
            X509v3 Authority Key Identifier:
                keyid:E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:2a:bf:bf:92:0f:84:5e:3f:c4:c0:f1:a2:15:a1:59:9b:4b:
         3f:f6:3f:6c:0e:9d:da:28:90:f8:c6:7b:d8:1c:87:43:bf:50:
         b7:0b:ca:b0:9a:3b:f4:f9:fe:a6:82:0f:4e:6c:d1:a7:c9:5b:
         2b:23:cf:af:52:09:0b:85:1e:33:63:bd:f5:93:d8:7b:0b:0c:
         1e:13:96:10:a1:d4:ab:b0:50:28:5b:48:6a:98:ba:0f:ce:9c:
         84:e6:41:04:0a:fb:52:e9:be:94:54:81:a9:75:3a:17:82:af:
         b6:79:06:c7:79:f2:79:21:91:25:f2:f7:c3:6e:9d:5a:a5:df:
         bf:a8:12:ec:2e:a3:4d:e7:3a:f8:22:25:97:2b:1d:32:0c:7b:
         7c:59:a4:f7:05:34:04:43:99:3c:f2:15:fd:cd:7e:11:a5:f0:
         43:a3:e7:41:f6:7a:94:c0:d0:86:ac:c5:e6:6d:5a:04:2a:39:
         4e:af:77:e3:0f:79:f2:37:af:8f:08:66:61:39:2e:0c:e7:26:
         19:36:91:9d:75:26:92:da:b2:59:df:32:6d:4c:d4:67:60:db:
         1a:95:ae:29:ec:c4:c8:50:26:36:d1:02:8a:f7:19:f3:5a:c9:
         27:55:76:e2:0e:a9:cb:59:16:98:91:1a:08:6c:b6:19:2b:85:
         40:a7:94:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHak42emJGEw/tpIVfmVGC4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4Yzc3OTE3NjVjODg0ZDA4NTVmZWQzZmY4YzNmMjcwOTlh
OWEwMWEwHhcNMjYxMTE0MTUwMTA1WhcNMjYxMTE1MTUwMTA1WjAzMTEwLwYDVQQD
EyhhNjY0ZGU3NjY0YjY5MTMwZTQ0ZTAyODZmODQwY2FmMDI2MzcyODEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AwgnvgrLNvsU/fUjGjzqxBthe+A
THLtHilzUMifOQeGN5DWo8LctOVItKwV7D4AFVhK2x73/3G+T/Mu78tJYCuxdz7V
87SZrlA+kc9TPDg3iiEnrCPhcX3PafCi//4cLClBmz8UJyRdz1AOrFkZTcSeHc1e
c3sIC6amnRQsIm48gsxK5NMZ7WMV8xKZSssGLl1xQe6vqsB7DJClAgiDK+b7SgWR
AcT4Ycn5MnJ9OaaXk1F2PSyMjaJ/BmUFDQnRdzx5gf/62PPPjgHTXGyy0JFj6Fjs
EtOgekP0CzoDIs+tAsI8gmmlEOSbVFjfBWFGBEuArkSq6o7FrtDWlwFngwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZk3nZktpEw5E4ChvhAyvAmNygSMB8GA1UdIwQY
MBaAFOjHeRdlyITQhV/tP/jD8nCZqaAaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk1kNUYyWEloTkNGWC0wXy1NUHljSm1wb0JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80YmRmY2ItNDM4NS00N2NjLWIwODEt
OTViMWQ3MWJjYzg5LzEvNk1kNUYyWEloTkNGWC0wXy1NUHljSm1wb0JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi80YmRmY2ItNDM4NS00N2NjLWIwODEtOTViMWQ3MWJjYzg5
LzEvNk1kNUYyWEloTkNGWC0wXy1NUHljSm1wb0JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEiq/v5IP
hF4/xMDxohWhWZtLP/Y/bA6d2iiQ+MZ72ByHQ79QtwvKsJo79Pn+poIPTmzRp8lb
KyPPr1IJC4UeM2O99ZPYewsMHhOWEKHUq7BQKFtIapi6D86chOZBBAr7Uum+lFSB
qXU6F4KvtnkGx3nyeSGRJfL3w26dWqXfv6gS7C6jTec6+CIllysdMgx7fFmk9wU0
BEOZPPIV/c1+EaXwQ6PnQfZ6lMDQhqzF5m1aBCo5Tq934w958jevjwhmYTkuDOcm
GTaRnXUmktqyWd8ybUzUZ2DbGpWuKezEyFAmNtECivcZ81rJJ1V24g6py1kWmJEa
CGy2GSuFQKeU8A==
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:47:51 2026 by rpki-client