Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/CPCf8LL3NzvX_tqXk6WURX1Remk.mft
File:                     CPCf8LL3NzvX_tqXk6WURX1Remk.mft (raw, json)
Hash identifier:          qMJSGlhL8lSQ3mQhiApy+/6Jcb9B/mObiN+EDL1e8T0=
Subject key identifier:   3E:E4:54:D5:AE:80:97:8D:F6:F8:8D:92:77:D1:9D:A1:54:62:CF:D2
Authority key identifier: 08:F0:9F:F0:B2:F7:37:3B:D7:FE:DA:97:93:A5:94:45:7D:51:7A:69
Certificate issuer:       /CN=08f09ff0b2f7373bd7feda9793a594457d517a69
Certificate serial:       019F90916A36FFD89F69FCCFBE886AB7FEA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPCf8LL3NzvX_tqXk6WURX1Remk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/CPCf8LL3NzvX_tqXk6WURX1Remk.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 20:01:16 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:16 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:16 +0000
Files and hashes:         1: CPCf8LL3NzvX_tqXk6WURX1Remk.crl (hash: 13buRD0iUEHQYs2lvYxss1hEOvIH8NG6EAkiy7+5hws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/CPCf8LL3NzvX_tqXk6WURX1Remk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/CPCf8LL3NzvX_tqXk6WURX1Remk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CPCf8LL3NzvX_tqXk6WURX1Remk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:6a:36:ff:d8:9f:69:fc:cf:be:88:6a:b7:fe:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08f09ff0b2f7373bd7feda9793a594457d517a69
        Validity
            Not Before: Jul 23 20:01:16 2026 GMT
            Not After : Jul 24 20:01:16 2026 GMT
        Subject: CN=3ee454d5ae80978df6f88d9277d19da15462cfd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:50:6b:54:be:26:66:8f:6d:02:84:c4:8c:09:
                    ba:3c:8f:e8:8d:7f:18:52:bf:20:40:0a:37:87:d1:
                    a1:a0:51:d5:6e:70:ec:b4:dd:ff:2c:a1:bd:5f:31:
                    4c:e4:2e:ab:df:bf:2b:68:4a:6e:a7:64:ac:62:bb:
                    95:70:b9:a1:51:d8:3b:eb:e5:dd:a2:dd:a7:f6:5e:
                    20:9c:6f:be:3c:39:b5:95:cc:78:85:5d:b9:0e:69:
                    df:49:5e:54:7d:0f:32:28:a0:e9:f4:8b:35:3a:4b:
                    f0:48:dd:bc:a9:11:87:36:c9:f4:55:91:40:16:42:
                    ed:0c:cd:33:33:a8:97:42:bb:ab:8c:de:8a:e9:28:
                    ce:a9:02:4c:85:13:f9:fe:a3:31:31:d0:d5:8d:e2:
                    42:5f:05:7d:e2:a1:3a:d8:0b:6e:91:0a:0c:ae:f3:
                    82:78:bb:55:de:8d:f0:b6:e8:2a:8f:da:28:7c:6b:
                    b7:cf:d2:a2:e4:cc:a7:99:9e:02:d2:03:85:f0:be:
                    7c:49:17:f3:ec:b2:48:a4:ac:d1:4b:b8:c7:c5:28:
                    f0:50:45:ce:17:aa:1b:db:4b:13:c0:af:0d:76:89:
                    27:47:7e:a0:4d:5f:89:2f:48:99:5b:68:37:91:fa:
                    f4:87:bf:f0:4d:f4:59:b3:c8:c6:a6:3c:0e:49:0e:
                    67:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E4:54:D5:AE:80:97:8D:F6:F8:8D:92:77:D1:9D:A1:54:62:CF:D2
            X509v3 Authority Key Identifier:
                keyid:08:F0:9F:F0:B2:F7:37:3B:D7:FE:DA:97:93:A5:94:45:7D:51:7A:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPCf8LL3NzvX_tqXk6WURX1Remk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/CPCf8LL3NzvX_tqXk6WURX1Remk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/CPCf8LL3NzvX_tqXk6WURX1Remk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:7e:af:7e:47:c0:a6:f6:f6:de:4f:65:61:4a:79:8f:8b:bc:
         5a:58:eb:21:a5:a2:bf:af:7f:a7:7d:ce:da:05:b8:dc:e4:99:
         bd:17:25:60:4c:7d:38:a7:f5:de:d9:ee:71:e0:f8:f1:d3:ea:
         ea:12:bd:fe:b6:06:54:88:48:87:5c:6c:d6:0c:a0:b6:4a:25:
         f4:58:3c:f1:45:cb:cd:94:df:ca:12:2d:3c:54:24:95:79:a9:
         8f:f9:b3:7e:32:e5:c7:4c:08:92:96:f9:5a:b1:46:21:76:6f:
         70:62:ff:f9:a9:81:9b:ab:7a:bf:2f:20:90:66:8d:b8:f6:e8:
         a7:2c:88:ac:90:d9:d2:ef:fe:93:52:21:55:99:68:23:67:fc:
         a4:01:4f:81:11:e3:4b:9b:d4:4a:50:5f:ea:56:11:24:27:29:
         75:d8:ed:23:d8:63:51:f5:53:27:6c:a8:23:75:bd:cf:3b:36:
         e7:7c:ef:e3:a3:0b:11:76:5d:b8:8d:ac:2f:5f:90:83:e9:a6:
         de:70:18:30:cc:c1:a0:d2:f2:41:34:17:2a:9f:7c:bb:e3:d6:
         28:66:8b:5d:c5:7c:01:15:40:f7:fc:a1:6c:41:f3:97:e1:2c:
         25:7e:9e:b9:ac:cb:47:13:17:4f:57:d5:29:7e:59:2d:a0:7d:
         9e:c6:7d:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkWo2/9ifafzPvohqt/6jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZjA5ZmYwYjJmNzM3M2JkN2ZlZGE5NzkzYTU5NDQ1N2Q1
MTdhNjkwHhcNMjYwNzIzMjAwMTE2WhcNMjYwNzI0MjAwMTE2WjAzMTEwLwYDVQQD
EygzZWU0NTRkNWFlODA5NzhkZjZmODhkOTI3N2QxOWRhMTU0NjJjZmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFBrVL4mZo9tAoTEjAm6PI/ojX8Y
Ur8gQAo3h9GhoFHVbnDstN3/LKG9XzFM5C6r378raEpup2SsYruVcLmhUdg76+Xd
ot2n9l4gnG++PDm1lcx4hV25DmnfSV5UfQ8yKKDp9Is1OkvwSN28qRGHNsn0VZFA
FkLtDM0zM6iXQrurjN6K6SjOqQJMhRP5/qMxMdDVjeJCXwV94qE62AtukQoMrvOC
eLtV3o3wtugqj9oofGu3z9Ki5MynmZ4C0gOF8L58SRfz7LJIpKzRS7jHxSjwUEXO
F6ob20sTwK8NdoknR36gTV+JL0iZW2g3kfr0h7/wTfRZs8jGpjwOSQ5n1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7kVNWugJeN9viNknfRnaFUYs/SMB8GA1UdIwQY
MBaAFAjwn/Cy9zc71/7al5OllEV9UXppMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1BDZjhMTDNOenZYX3RxWGs2V1VSWDFSZW1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MmQ3YTgtOWUwYi00ZWQ1LWI1OTkt
NzY0M2Y0YmRkYjNmLzEvQ1BDZjhMTDNOenZYX3RxWGs2V1VSWDFSZW1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82MmQ3YTgtOWUwYi00ZWQ1LWI1OTktNzY0M2Y0YmRkYjNm
LzEvQ1BDZjhMTDNOenZYX3RxWGs2V1VSWDFSZW1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoH6vfkfA
pvb23k9lYUp5j4u8WljrIaWiv69/p33O2gW43OSZvRclYEx9OKf13tnuceD48dPq
6hK9/rYGVIhIh1xs1gygtkol9Fg88UXLzZTfyhItPFQklXmpj/mzfjLlx0wIkpb5
WrFGIXZvcGL/+amBm6t6vy8gkGaNuPbopyyIrJDZ0u/+k1IhVZloI2f8pAFPgRHj
S5vUSlBf6lYRJCcpddjtI9hjUfVTJ2yoI3W9zzs253zv46MLEXZduI2sL1+Qg+mm
3nAYMMzBoNLyQTQXKp98u+PWKGaLXcV8ARVA9/yhbEHzl+EsJX6euazLRxMXT1fV
KX5ZLaB9nsZ9Yg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:44 2026 by rpki-client