Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/ffa187-19ae-4573-abdd-ea74fc747974/1/0GlUz1FOymLFVom9iTCykiF6nnw.mft
File:                     0GlUz1FOymLFVom9iTCykiF6nnw.mft (raw, json)
Hash identifier:          YRgxnR2X9h0LCtCRab8bNojbFhBN9T2Zy+ca9OWCG/0=
Subject key identifier:   68:93:F1:CB:BD:D4:80:F9:9A:FD:56:7A:E4:EF:DC:1B:2C:3E:F7:5E
Authority key identifier: D0:69:54:CF:51:4E:CA:62:C5:56:89:BD:89:30:B2:92:21:7A:9E:7C
Certificate issuer:       /CN=d06954cf514eca62c55689bd8930b292217a9e7c
Certificate serial:       01A0D6153DDB83BBB26A28C878FCF27BDD92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0GlUz1FOymLFVom9iTCykiF6nnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/ffa187-19ae-4573-abdd-ea74fc747974/1/0GlUz1FOymLFVom9iTCykiF6nnw.mft
Manifest number:          0235
Signing time:             Fri 25 Sep 2026 01:01:51 +0000
Manifest this update:     Fri 25 Sep 2026 01:01:51 +0000
Manifest next update:     Sat 26 Sep 2026 01:01:51 +0000
Files and hashes:         1: 0GlUz1FOymLFVom9iTCykiF6nnw.crl (hash: u5WyC38g01FT5UepMgJbW9lgfK3ixBdPBqjaBX3MpsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/ffa187-19ae-4573-abdd-ea74fc747974/1/0GlUz1FOymLFVom9iTCykiF6nnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/ffa187-19ae-4573-abdd-ea74fc747974/1/0GlUz1FOymLFVom9iTCykiF6nnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0GlUz1FOymLFVom9iTCykiF6nnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:15:3d:db:83:bb:b2:6a:28:c8:78:fc:f2:7b:dd:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d06954cf514eca62c55689bd8930b292217a9e7c
        Validity
            Not Before: Sep 25 01:01:51 2026 GMT
            Not After : Sep 26 01:01:51 2026 GMT
        Subject: CN=6893f1cbbdd480f99afd567ae4efdc1b2c3ef75e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c5:ab:d4:70:b9:ee:b5:ed:10:3c:f6:12:3f:
                    01:4f:ca:11:36:7f:24:32:ff:02:2c:01:1a:58:ed:
                    36:80:fb:b2:a2:de:76:f1:13:8d:43:05:8a:e3:15:
                    2f:6d:8e:54:25:89:06:31:05:77:f8:7c:0a:60:0d:
                    f9:c5:52:76:4a:8b:84:b7:85:7e:75:d0:78:03:91:
                    40:02:de:c9:2e:6f:c8:3a:86:63:65:1b:24:6c:3d:
                    97:99:af:f8:55:4d:38:ff:43:fe:d4:07:0b:5a:cf:
                    df:11:2f:82:4b:64:e1:f2:12:7f:ab:e7:c2:8e:5c:
                    6a:2b:4d:6f:84:ad:93:6d:e7:87:28:ba:8e:27:08:
                    18:ba:dc:88:b8:44:37:3e:12:f9:d9:06:b5:c6:c6:
                    da:53:f7:97:49:f1:58:cf:6e:83:74:55:8a:88:1f:
                    61:8f:d3:30:ad:ff:a8:d7:7a:61:08:8c:1e:1e:a8:
                    b7:ca:36:73:56:7d:58:87:ed:61:e9:3c:17:8b:55:
                    7a:05:40:64:14:f8:6c:5c:cb:44:84:23:0a:c6:65:
                    99:a1:20:d9:b4:b6:b9:fa:c8:66:6e:bd:7d:6a:9b:
                    75:6e:2a:11:d5:e1:20:e7:0c:f8:4b:9e:03:bf:9e:
                    5d:17:b8:54:08:8d:a6:01:48:f4:0a:b7:be:9a:ba:
                    1d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:93:F1:CB:BD:D4:80:F9:9A:FD:56:7A:E4:EF:DC:1B:2C:3E:F7:5E
            X509v3 Authority Key Identifier:
                keyid:D0:69:54:CF:51:4E:CA:62:C5:56:89:BD:89:30:B2:92:21:7A:9E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GlUz1FOymLFVom9iTCykiF6nnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ffa187-19ae-4573-abdd-ea74fc747974/1/0GlUz1FOymLFVom9iTCykiF6nnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ffa187-19ae-4573-abdd-ea74fc747974/1/0GlUz1FOymLFVom9iTCykiF6nnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:65:c4:00:54:ce:71:a3:50:a9:18:c6:88:2f:0b:e9:54:48:
         c6:92:c9:80:5b:74:a5:12:5f:c2:d2:b9:37:11:6f:06:d6:da:
         a8:b4:93:cf:39:28:70:01:24:3b:a0:22:de:6d:8b:4a:c7:b5:
         0d:a1:71:9c:24:61:df:b5:42:1a:ca:b6:e6:a2:0d:c5:d2:d2:
         0f:2d:80:f4:2d:b1:82:87:ee:50:d9:b5:b6:05:b2:4b:36:e9:
         da:fd:43:61:42:7c:16:63:52:20:9d:69:7b:b4:db:78:3d:0b:
         f0:be:53:d6:a8:20:2d:f8:3b:d2:6a:84:66:d6:f8:91:34:fc:
         c0:45:d7:c3:cf:68:ba:e8:1e:ec:4f:b9:65:f0:7d:8f:3f:dd:
         ea:05:cb:ad:73:1a:7b:b7:fa:ad:40:1b:a4:46:a8:b1:f5:88:
         c0:47:12:d4:a7:d1:25:89:be:91:36:60:f1:1e:09:b2:e7:b7:
         3b:0a:bb:8a:0e:07:f7:09:32:2d:02:05:35:c4:0c:2e:ee:e0:
         e7:3b:d6:fc:21:b7:da:fe:9f:58:0d:5f:46:67:ad:e4:dc:04:
         ac:51:a0:da:46:b1:c9:d3:74:74:a6:d1:b4:1a:7c:59:51:2a:
         89:f9:39:4e:cf:76:c9:03:53:7e:54:00:50:ad:95:fb:26:2a:
         f5:05:e3:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWFT3bg7uyaijIePzye92SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNjk1NGNmNTE0ZWNhNjJjNTU2ODliZDg5MzBiMjkyMjE3
YTllN2MwHhcNMjYwOTI1MDEwMTUxWhcNMjYwOTI2MDEwMTUxWjAzMTEwLwYDVQQD
Eyg2ODkzZjFjYmJkZDQ4MGY5OWFmZDU2N2FlNGVmZGMxYjJjM2VmNzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMWr1HC57rXtEDz2Ej8BT8oRNn8k
Mv8CLAEaWO02gPuyot528RONQwWK4xUvbY5UJYkGMQV3+HwKYA35xVJ2SouEt4V+
ddB4A5FAAt7JLm/IOoZjZRskbD2Xma/4VU04/0P+1AcLWs/fES+CS2Th8hJ/q+fC
jlxqK01vhK2TbeeHKLqOJwgYutyIuEQ3PhL52Qa1xsbaU/eXSfFYz26DdFWKiB9h
j9Mwrf+o13phCIweHqi3yjZzVn1Yh+1h6TwXi1V6BUBkFPhsXMtEhCMKxmWZoSDZ
tLa5+shmbr19apt1bioR1eEg5wz4S54Dv55dF7hUCI2mAUj0Cre+mrodnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGiT8cu91ID5mv1WeuTv3BssPvdeMB8GA1UdIwQY
MBaAFNBpVM9RTspixVaJvYkwspIhep58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEdsVXoxRk95bUxGVm9tOWlUQ3lraUY2bm53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9mZmExODctMTlhZS00NTczLWFiZGQt
ZWE3NGZjNzQ3OTc0LzEvMEdsVXoxRk95bUxGVm9tOWlUQ3lraUY2bm53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9mZmExODctMTlhZS00NTczLWFiZGQtZWE3NGZjNzQ3OTc0
LzEvMEdsVXoxRk95bUxGVm9tOWlUQ3lraUY2bm53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlWXEAFTO
caNQqRjGiC8L6VRIxpLJgFt0pRJfwtK5NxFvBtbaqLSTzzkocAEkO6Ai3m2LSse1
DaFxnCRh37VCGsq25qINxdLSDy2A9C2xgofuUNm1tgWySzbp2v1DYUJ8FmNSIJ1p
e7TbeD0L8L5T1qggLfg70mqEZtb4kTT8wEXXw89ouuge7E+5ZfB9jz/d6gXLrXMa
e7f6rUAbpEaosfWIwEcS1KfRJYm+kTZg8R4Jsue3Owq7ig4H9wkyLQIFNcQMLu7g
5zvW/CG32v6fWA1fRmet5NwErFGg2kaxydN0dKbRtBp8WVEqifk5Ts92yQNTflQA
UK2V+yYq9QXjXg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:12:34 2026 by rpki-client