Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
File:                     0o9VSu1_jnFG6ctj9eMaXbHhupM.mft (raw, json)
Hash identifier:          01c+VB9lv4K+D2D0qcy4y/Nvi+A0W65WONvpWt5iiOo=
Subject key identifier:   51:F2:2D:D0:34:14:4F:3D:0A:5F:B8:9D:E5:AD:BB:0B:AD:01:57:CB
Authority key identifier: D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
Certificate issuer:       /CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Certificate serial:       019F91A40FB1394ACAF48481D1B83BC474C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
Manifest number:          19C0
Signing time:             Fri 24 Jul 2026 01:01:15 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:15 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:15 +0000
Files and hashes:         1: 0o9VSu1_jnFG6ctj9eMaXbHhupM.crl (hash: n69OAcA3rUPiSGs3Nzi2qycJWgANb+3ENhfaeI6jAOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a4:0f:b1:39:4a:ca:f4:84:81:d1:b8:3b:c4:74:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
        Validity
            Not Before: Jul 24 01:01:15 2026 GMT
            Not After : Jul 25 01:01:15 2026 GMT
        Subject: CN=51f22dd034144f3d0a5fb89de5adbb0bad0157cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:05:34:fa:73:2a:ac:2a:41:8c:69:6b:ae:90:
                    05:70:f7:c9:5e:c3:3e:16:ff:40:8c:7d:9a:45:c9:
                    b7:28:42:cd:5c:28:56:b9:e8:3b:4c:97:b2:fd:e3:
                    0d:9e:09:3f:c0:ca:75:c8:79:6c:7c:80:3b:88:f0:
                    5b:1f:19:34:2e:56:c3:a3:29:39:bc:8e:61:d3:d5:
                    45:63:a2:7f:ea:4d:05:5f:ae:09:36:9b:09:4e:7b:
                    67:ee:28:b7:ee:c5:4c:9c:88:1c:93:f5:36:b4:44:
                    a9:72:81:f1:11:c1:89:1e:90:1f:3d:a0:f7:81:38:
                    7a:52:5a:ae:52:c6:61:39:e1:df:3d:a2:6b:e3:83:
                    2a:c2:ef:24:7c:1f:a4:4f:c0:5d:1f:1e:ee:f4:74:
                    3c:4c:25:aa:e1:fa:df:72:7c:3f:b0:0f:a5:0a:43:
                    3a:84:db:71:09:8a:f9:91:98:fc:8c:46:a5:ae:87:
                    32:af:a3:75:09:b7:02:a6:87:bf:a6:ea:13:51:bb:
                    26:88:28:a9:d8:ea:78:6c:ce:e9:d9:6e:0a:25:3c:
                    5f:b1:24:c4:d5:bd:af:2b:0b:b3:9f:27:77:0b:8e:
                    05:d9:ff:0c:9b:a5:f3:36:69:12:73:f9:8b:0a:c0:
                    1e:a8:88:a7:df:8d:c2:29:d6:c0:30:02:c3:09:df:
                    e1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F2:2D:D0:34:14:4F:3D:0A:5F:B8:9D:E5:AD:BB:0B:AD:01:57:CB
            X509v3 Authority Key Identifier:
                keyid:D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:5d:f6:76:26:a5:5e:a9:8c:65:52:60:f0:b1:df:a1:9f:38:
         cb:3d:c4:15:af:a8:a0:cf:cd:b1:45:8e:34:cc:2f:97:0b:77:
         ac:bc:9a:8a:25:b0:6a:f2:2c:2e:1e:61:37:da:5d:e3:2d:5b:
         cb:c9:eb:19:36:51:02:5c:c0:66:23:2a:85:48:6e:4e:7c:b6:
         a3:d6:7d:50:b9:ad:2a:ec:1f:0b:d2:46:d3:df:02:eb:20:7b:
         9b:4f:05:4a:0c:93:64:2e:4e:b2:fc:15:85:c0:72:b1:b7:cc:
         e2:6a:22:8d:75:6f:4c:e6:5b:ee:06:c7:c0:6d:20:fd:3a:1e:
         ee:9f:c0:a1:47:8a:73:56:92:77:26:d9:58:ae:1f:63:56:b6:
         07:25:cc:89:b2:23:50:a7:5f:6c:33:c6:7c:e8:17:e9:d5:69:
         7c:20:45:a5:4a:0d:23:60:84:1f:f7:a8:dd:2d:8b:03:dd:11:
         12:d1:55:92:b9:95:78:84:e0:e1:c3:68:e1:1b:ea:6c:e2:6a:
         fe:aa:50:70:58:6b:27:88:2f:cf:6a:01:bc:4a:d2:be:49:60:
         9c:88:d4:43:11:d3:7a:60:7b:5e:70:15:36:40:61:e6:b0:1d:
         0e:fc:8e:46:44:44:4d:be:45:86:c2:0f:49:8e:4d:05:52:b9:
         56:15:57:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RpA+xOUrK9ISB0bg7xHTGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyOGY1NTRhZWQ3ZjhlNzE0NmU5Y2I2M2Y1ZTMxYTVkYjFl
MWJhOTMwHhcNMjYwNzI0MDEwMTE1WhcNMjYwNzI1MDEwMTE1WjAzMTEwLwYDVQQD
Eyg1MWYyMmRkMDM0MTQ0ZjNkMGE1ZmI4OWRlNWFkYmIwYmFkMDE1N2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAU0+nMqrCpBjGlrrpAFcPfJXsM+
Fv9AjH2aRcm3KELNXChWueg7TJey/eMNngk/wMp1yHlsfIA7iPBbHxk0LlbDoyk5
vI5h09VFY6J/6k0FX64JNpsJTntn7ii37sVMnIgck/U2tESpcoHxEcGJHpAfPaD3
gTh6UlquUsZhOeHfPaJr44Mqwu8kfB+kT8BdHx7u9HQ8TCWq4frfcnw/sA+lCkM6
hNtxCYr5kZj8jEalrocyr6N1CbcCpoe/puoTUbsmiCip2Op4bM7p2W4KJTxfsSTE
1b2vKwuznyd3C44F2f8Mm6XzNmkSc/mLCsAeqIin343CKdbAMALDCd/hmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHyLdA0FE89Cl+4neWtuwutAVfLMB8GA1UdIwQY
MBaAFNKPVUrtf45xRunLY/XjGl2x4bqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG85VlN1MV9qbkZHNmN0ajllTWFYYkhodXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZjZiNGYtNzU5MC00ZDA1LTg1M2Mt
MTA2ZWQxNTkwMTI5LzEvMG85VlN1MV9qbkZHNmN0ajllTWFYYkhodXBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8zZjZiNGYtNzU5MC00ZDA1LTg1M2MtMTA2ZWQxNTkwMTI5
LzEvMG85VlN1MV9qbkZHNmN0ajllTWFYYkhodXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg132dial
XqmMZVJg8LHfoZ84yz3EFa+ooM/NsUWONMwvlwt3rLyaiiWwavIsLh5hN9pd4y1b
y8nrGTZRAlzAZiMqhUhuTny2o9Z9ULmtKuwfC9JG098C6yB7m08FSgyTZC5OsvwV
hcBysbfM4moijXVvTOZb7gbHwG0g/Toe7p/AoUeKc1aSdybZWK4fY1a2ByXMibIj
UKdfbDPGfOgX6dVpfCBFpUoNI2CEH/eo3S2LA90REtFVkrmVeITg4cNo4RvqbOJq
/qpQcFhrJ4gvz2oBvErSvklgnIjUQxHTemB7XnAVNkBh5rAdDvyORkRETb5FhsIP
SY5NBVK5VhVXBw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:23:25 2026 by rpki-client