Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft
File:                     jPJ69YYwRc-otYseJ3aSueHTje0.mft (raw, json)
Hash identifier:          IOWbmr4kf4LZtdzCbAQpc4BZw/UpW7LjucvyErrYjn0=
Subject key identifier:   AB:62:73:C4:08:89:01:E1:B8:7D:24:C3:D7:8E:EE:43:99:F2:D5:4F
Authority key identifier: 8C:F2:7A:F5:86:30:45:CF:A8:B5:8B:1E:27:76:92:B9:E1:D3:8D:ED
Certificate issuer:       /CN=8cf27af5863045cfa8b58b1e277692b9e1d38ded
Certificate serial:       019D2703BA12BFF463EC19741B705AFD44D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jPJ69YYwRc-otYseJ3aSueHTje0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft
Manifest number:          1885
Signing time:             Wed 25 Mar 2026 22:00:48 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:48 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:48 +0000
Files and hashes:         1: jPJ69YYwRc-otYseJ3aSueHTje0.crl (hash: HBr+IW5e9CTx4ypr+HLd+i/eU7AB3VbUymKUUSQFp+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jPJ69YYwRc-otYseJ3aSueHTje0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:ba:12:bf:f4:63:ec:19:74:1b:70:5a:fd:44:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cf27af5863045cfa8b58b1e277692b9e1d38ded
        Validity
            Not Before: Mar 25 22:00:48 2026 GMT
            Not After : Mar 26 22:00:48 2026 GMT
        Subject: CN=ab6273c4088901e1b87d24c3d78eee4399f2d54f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:ce:83:11:25:3f:94:fa:63:99:5c:6d:3b:
                    33:ec:d1:a2:f8:bb:f1:d2:e1:b9:fd:3a:a1:e2:ba:
                    36:07:ea:75:22:be:49:8e:ee:50:16:b5:ba:b3:bb:
                    8d:c4:e6:e8:c5:e2:d5:0a:6a:42:db:7b:26:c7:ff:
                    6d:51:e5:85:88:1a:ca:0e:95:31:c1:d8:ad:0c:3c:
                    06:11:8c:61:80:9e:16:0d:a4:8b:07:f5:dd:e3:5f:
                    ce:ec:d4:78:73:f9:e7:d3:be:6b:f4:4b:9c:31:46:
                    14:57:c0:6b:53:8c:f1:fd:3e:bd:a0:70:d6:0a:cc:
                    3e:7e:fd:36:c9:f2:da:ed:83:db:cd:3e:ab:9c:ff:
                    b2:9d:0a:3b:ab:d5:aa:8c:fe:3a:4e:f8:e5:7c:f7:
                    27:1d:7d:e5:61:b8:b8:9f:c4:f7:dd:f0:b3:22:aa:
                    27:f1:c1:2f:43:81:f0:6e:d9:29:af:43:3e:66:44:
                    7b:45:6c:94:11:cc:22:f8:0a:9b:d3:df:86:7a:bc:
                    92:85:d9:c5:dd:a4:7a:d3:b7:34:35:81:d4:ca:d9:
                    19:ce:3e:2f:54:21:83:2e:69:17:c6:00:06:c6:cf:
                    cc:db:7d:a7:a4:98:ce:7f:0d:96:fe:f0:1a:6d:a0:
                    80:52:ca:85:02:55:05:45:dc:47:e7:70:3f:47:cb:
                    33:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:62:73:C4:08:89:01:E1:B8:7D:24:C3:D7:8E:EE:43:99:F2:D5:4F
            X509v3 Authority Key Identifier:
                keyid:8C:F2:7A:F5:86:30:45:CF:A8:B5:8B:1E:27:76:92:B9:E1:D3:8D:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jPJ69YYwRc-otYseJ3aSueHTje0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:3a:57:a0:6a:f5:36:47:5c:08:a9:54:c6:f7:03:a9:0c:5d:
         82:3f:4b:2a:5f:34:f3:df:68:c5:4c:2e:0d:d8:f5:a1:47:f0:
         cd:ff:5e:79:70:b0:77:27:55:2f:17:70:5c:70:97:94:21:54:
         7e:85:b8:bd:ae:e9:1d:af:4e:44:13:fd:83:25:8e:f9:0a:f3:
         f5:90:5f:94:e7:3a:1a:71:69:a4:39:c1:f7:0e:ff:5b:71:f4:
         a3:b9:e9:fe:03:8a:c6:01:42:55:eb:cf:17:25:22:ca:aa:ec:
         df:18:c1:82:40:52:1b:e7:36:a8:ca:18:47:a5:84:8c:5f:01:
         01:a5:81:bb:9d:f2:89:db:79:39:e4:ad:af:30:7c:44:f7:a4:
         b0:7e:d4:99:72:36:b0:ad:ad:0e:fc:b7:39:75:75:9d:b0:66:
         98:8c:cf:1e:e6:e1:02:06:00:b7:bb:f2:23:9f:61:ff:90:20:
         f9:e7:57:03:7f:e2:bd:fe:99:51:e5:09:89:71:8c:15:33:6a:
         ef:e6:27:93:18:75:e8:2d:2d:cd:b7:7b:e0:74:37:ee:61:ad:
         0b:25:e4:59:3e:5e:b4:93:b8:1e:59:b0:a9:b4:71:a5:40:3f:
         87:59:4e:67:81:fe:c6:08:89:8a:b4:c9:e2:94:44:f8:f6:ea:
         28:ac:5f:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA7oSv/Rj7Bl0G3Ba/UTYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZjI3YWY1ODYzMDQ1Y2ZhOGI1OGIxZTI3NzY5MmI5ZTFk
MzhkZWQwHhcNMjYwMzI1MjIwMDQ4WhcNMjYwMzI2MjIwMDQ4WjAzMTEwLwYDVQQD
EyhhYjYyNzNjNDA4ODkwMWUxYjg3ZDI0YzNkNzhlZWU0Mzk5ZjJkNTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+zOgxElP5T6Y5lcbTsz7NGi+Lvx
0uG5/Tqh4ro2B+p1Ir5Jju5QFrW6s7uNxOboxeLVCmpC23smx/9tUeWFiBrKDpUx
wditDDwGEYxhgJ4WDaSLB/Xd41/O7NR4c/nn075r9EucMUYUV8BrU4zx/T69oHDW
Csw+fv02yfLa7YPbzT6rnP+ynQo7q9WqjP46TvjlfPcnHX3lYbi4n8T33fCzIqon
8cEvQ4Hwbtkpr0M+ZkR7RWyUEcwi+Aqb09+GeryShdnF3aR607c0NYHUytkZzj4v
VCGDLmkXxgAGxs/M232npJjOfw2W/vAabaCAUsqFAlUFRdxH53A/R8szfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtic8QIiQHhuH0kw9eO7kOZ8tVPMB8GA1UdIwQY
MBaAFIzyevWGMEXPqLWLHid2krnh043tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalBKNjlZWXdSYy1vdFlzZUozYVN1ZUhUamUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hYjdlZmItMmQ2MC00ZTY5LTllMDYt
MDFjOTk2ZTBiN2U3LzEvalBKNjlZWXdSYy1vdFlzZUozYVN1ZUhUamUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9hYjdlZmItMmQ2MC00ZTY5LTllMDYtMDFjOTk2ZTBiN2U3
LzEvalBKNjlZWXdSYy1vdFlzZUozYVN1ZUhUamUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjpXoGr1
NkdcCKlUxvcDqQxdgj9LKl80899oxUwuDdj1oUfwzf9eeXCwdydVLxdwXHCXlCFU
foW4va7pHa9ORBP9gyWO+Qrz9ZBflOc6GnFppDnB9w7/W3H0o7np/gOKxgFCVevP
FyUiyqrs3xjBgkBSG+c2qMoYR6WEjF8BAaWBu53yidt5OeStrzB8RPeksH7UmXI2
sK2tDvy3OXV1nbBmmIzPHubhAgYAt7vyI59h/5Ag+edXA3/ivf6ZUeUJiXGMFTNq
7+Ynkxh16C0tzbd74HQ37mGtCyXkWT5etJO4HlmwqbRxpUA/h1lOZ4H+xgiJirTJ
4pRE+PbqKKxfMg==
-----END CERTIFICATE-----