Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/d86d91-4d73-4bfc-b4a0-7372f43b8bce/1/cfBL3mjM4_Tb0MUVIhC_0mcUS4A.mft
File:                     cfBL3mjM4_Tb0MUVIhC_0mcUS4A.mft (raw, json)
Hash identifier:          0CspfFW3EDdTmBm/V7+UN7LkCcUr9w64nG3q2UDE9HY=
Subject key identifier:   AA:A5:86:98:73:82:8A:74:F1:C8:F8:34:C4:A2:AB:C2:0F:31:C8:98
Authority key identifier: 71:F0:4B:DE:68:CC:E3:F4:DB:D0:C5:15:22:10:BF:D2:67:14:4B:80
Certificate issuer:       /CN=71f04bde68cce3f4dbd0c5152210bfd267144b80
Certificate serial:       01A0CD48536CA0A770B5B2093568A7918329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cfBL3mjM4_Tb0MUVIhC_0mcUS4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/d86d91-4d73-4bfc-b4a0-7372f43b8bce/1/cfBL3mjM4_Tb0MUVIhC_0mcUS4A.mft
Manifest number:          19
Signing time:             Wed 23 Sep 2026 08:01:04 +0000
Manifest this update:     Wed 23 Sep 2026 08:01:04 +0000
Manifest next update:     Thu 24 Sep 2026 08:01:04 +0000
Files and hashes:         1: cfBL3mjM4_Tb0MUVIhC_0mcUS4A.crl (hash: 41pcjsLE0gl+kCDzoc/PzGIa4yLdkSj9H5lv1PVEbdc=)
                          2: fKaOh0e_pQMFIsO2Z-ZpxIe-y6k.asa (hash: 6ZvLF8JMyFGPxV6WqHVJqvsqLoVxgvy7UAegaXFGe0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/d86d91-4d73-4bfc-b4a0-7372f43b8bce/1/cfBL3mjM4_Tb0MUVIhC_0mcUS4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/d86d91-4d73-4bfc-b4a0-7372f43b8bce/1/cfBL3mjM4_Tb0MUVIhC_0mcUS4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cfBL3mjM4_Tb0MUVIhC_0mcUS4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:48:53:6c:a0:a7:70:b5:b2:09:35:68:a7:91:83:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71f04bde68cce3f4dbd0c5152210bfd267144b80
        Validity
            Not Before: Sep 23 08:01:04 2026 GMT
            Not After : Sep 24 08:01:04 2026 GMT
        Subject: CN=aaa5869873828a74f1c8f834c4a2abc20f31c898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e5:fc:32:88:19:0e:8b:b4:3c:8d:e8:9b:78:
                    3c:a7:8e:d6:68:55:0a:ac:45:3e:08:3a:5a:cc:8d:
                    e4:fc:b0:a3:86:6f:07:eb:65:92:51:1e:a0:d4:ca:
                    2d:ad:8c:07:d2:a6:38:0a:0d:99:bb:ea:c9:ed:f6:
                    5d:60:74:ca:dc:b8:0f:6c:b3:e0:81:61:77:a5:b5:
                    2b:98:e3:ac:35:47:86:98:a7:f8:a7:55:cb:06:f5:
                    bf:ae:d5:50:4a:de:96:d7:00:c0:c6:81:92:ea:2d:
                    ec:0f:dd:5f:44:e1:1e:d1:d7:c8:04:d4:c4:50:65:
                    47:8c:89:f7:07:7e:52:97:2f:fb:ec:36:08:ca:54:
                    4a:b1:67:f5:bf:20:7c:e1:5c:d2:7f:22:84:e0:4b:
                    3b:6b:b1:73:4b:5c:f5:c4:e1:68:21:c4:b6:76:44:
                    90:4e:ba:41:c9:da:63:fe:4c:63:2d:d0:45:f7:4a:
                    cd:d4:e0:76:8e:00:82:45:4d:8f:3b:c1:2f:3c:dd:
                    f3:b3:73:b4:62:c1:98:7b:6c:f5:ec:6c:74:19:f0:
                    95:60:bf:e1:50:72:7e:92:f8:ca:35:0c:22:29:ab:
                    65:25:df:e5:97:e2:83:b2:d8:0a:0e:fb:cf:49:2b:
                    94:c6:bf:f1:48:b7:d1:c2:92:8a:dc:2f:d9:fb:79:
                    f2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A5:86:98:73:82:8A:74:F1:C8:F8:34:C4:A2:AB:C2:0F:31:C8:98
            X509v3 Authority Key Identifier:
                keyid:71:F0:4B:DE:68:CC:E3:F4:DB:D0:C5:15:22:10:BF:D2:67:14:4B:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfBL3mjM4_Tb0MUVIhC_0mcUS4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d86d91-4d73-4bfc-b4a0-7372f43b8bce/1/cfBL3mjM4_Tb0MUVIhC_0mcUS4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d86d91-4d73-4bfc-b4a0-7372f43b8bce/1/cfBL3mjM4_Tb0MUVIhC_0mcUS4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:5b:b9:2b:f6:fe:ae:71:7b:4d:0f:68:b7:f4:7e:01:11:44:
         ae:c7:e3:1e:a0:d0:4f:58:0a:63:92:55:2a:06:47:aa:47:67:
         1c:ec:9e:ac:da:34:68:28:c5:9b:76:cb:e8:27:2e:bf:e5:d1:
         5b:ef:32:d0:64:fb:15:fd:b3:4d:11:04:49:df:d4:c1:c8:7d:
         07:11:1b:7d:00:b0:4a:2d:af:f0:72:78:3e:f7:d6:ca:f1:69:
         bb:c6:7f:6b:49:7e:a8:dd:c3:e5:83:bd:44:ff:01:61:5b:7e:
         7e:fa:59:47:22:37:8a:6f:bf:d6:02:30:d8:97:32:33:d5:c4:
         09:28:f4:b1:c3:1d:d0:5e:d7:cb:18:46:70:5e:03:fa:54:1f:
         cf:7e:2f:86:21:33:d8:03:3f:15:c2:e4:21:ff:04:23:9f:ee:
         1a:5f:23:45:cb:64:21:fe:d6:57:c2:9a:42:1a:4e:86:cb:f2:
         fb:9e:c4:11:29:17:a7:c9:a0:ab:ab:cd:fe:61:bb:b3:4a:4e:
         41:08:59:2e:2a:a6:04:4d:fc:65:0a:49:ff:1e:a2:d8:43:3a:
         63:b7:8a:c7:1e:b4:d3:be:a6:02:c9:67:13:2a:2c:17:d3:7e:
         df:fd:cf:e5:fd:e7:bf:9f:56:d4:d0:ee:bb:58:4a:66:ff:bf:
         ff:22:34:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNSFNsoKdwtbIJNWinkYMpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZjA0YmRlNjhjY2UzZjRkYmQwYzUxNTIyMTBiZmQyNjcx
NDRiODAwHhcNMjYwOTIzMDgwMTA0WhcNMjYwOTI0MDgwMTA0WjAzMTEwLwYDVQQD
EyhhYWE1ODY5ODczODI4YTc0ZjFjOGY4MzRjNGEyYWJjMjBmMzFjODk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+X8MogZDou0PI3om3g8p47WaFUK
rEU+CDpazI3k/LCjhm8H62WSUR6g1MotrYwH0qY4Cg2Zu+rJ7fZdYHTK3LgPbLPg
gWF3pbUrmOOsNUeGmKf4p1XLBvW/rtVQSt6W1wDAxoGS6i3sD91fROEe0dfIBNTE
UGVHjIn3B35Sly/77DYIylRKsWf1vyB84VzSfyKE4Es7a7FzS1z1xOFoIcS2dkSQ
TrpBydpj/kxjLdBF90rN1OB2jgCCRU2PO8EvPN3zs3O0YsGYe2z17Gx0GfCVYL/h
UHJ+kvjKNQwiKatlJd/ll+KDstgKDvvPSSuUxr/xSLfRwpKK3C/Z+3nyQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqlhphzgop08cj4NMSiq8IPMciYMB8GA1UdIwQY
MBaAFHHwS95ozOP029DFFSIQv9JnFEuAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2ZCTDNtak00X1RiME1VVkloQ18wbWNVUzRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kODZkOTEtNGQ3My00YmZjLWI0YTAt
NzM3MmY0M2I4YmNlLzEvY2ZCTDNtak00X1RiME1VVkloQ18wbWNVUzRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9kODZkOTEtNGQ3My00YmZjLWI0YTAtNzM3MmY0M2I4YmNl
LzEvY2ZCTDNtak00X1RiME1VVkloQ18wbWNVUzRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1u5K/b+
rnF7TQ9ot/R+ARFErsfjHqDQT1gKY5JVKgZHqkdnHOyerNo0aCjFm3bL6Ccuv+XR
W+8y0GT7Ff2zTREESd/Uwch9BxEbfQCwSi2v8HJ4PvfWyvFpu8Z/a0l+qN3D5YO9
RP8BYVt+fvpZRyI3im+/1gIw2JcyM9XECSj0scMd0F7XyxhGcF4D+lQfz34vhiEz
2AM/FcLkIf8EI5/uGl8jRctkIf7WV8KaQhpOhsvy+57EESkXp8mgq6vN/mG7s0pO
QQhZLiqmBE38ZQpJ/x6i2EM6Y7eKxx60076mAslnEyosF9N+3/3P5f3nv59W1NDu
u1hKZv+//yI0YA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 16:54:37 2026 by rpki-client