Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
File:                     1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft (raw, json)
Hash identifier:          B8zK9/Su0QefXSfld0St9SwuNiaRXa0S6OwFYkcIjDE=
Subject key identifier:   03:9C:C7:57:B9:F3:E9:08:EA:E1:A1:64:B5:64:DE:1C:89:AF:79:2C
Authority key identifier: F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C
Certificate issuer:       /CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c
Certificate serial:       019F8F7F4452702F92F74D80157D0654A303
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
Manifest number:          0A97
Signing time:             Thu 23 Jul 2026 15:01:50 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:50 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:50 +0000
Files and hashes:         1: 1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl (hash: 90mJzcf+4NFfUMuzE2UXHafLWGNK96gK5K7RM4H/pBo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:44:52:70:2f:92:f7:4d:80:15:7d:06:54:a3:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c
        Validity
            Not Before: Jul 23 15:01:50 2026 GMT
            Not After : Jul 24 15:01:50 2026 GMT
        Subject: CN=039cc757b9f3e908eae1a164b564de1c89af792c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:79:74:7d:9f:49:c6:76:44:42:45:db:ae:8a:
                    9d:1d:e6:6d:bf:1a:18:25:e5:98:95:2e:9f:ab:0f:
                    53:51:2b:59:73:7d:71:f1:c8:3a:56:e3:08:24:f0:
                    df:c9:fd:ae:fd:33:7a:81:ec:c9:e4:e0:bb:03:11:
                    8b:67:90:65:15:9c:d5:e7:93:45:f5:66:b6:c0:0e:
                    71:c8:c2:0d:e5:61:7b:4b:41:8f:c1:73:dd:aa:85:
                    b6:fd:22:3b:55:85:be:5a:c1:dc:dc:c9:29:c8:5b:
                    f7:ea:6d:d4:e8:2d:87:1e:6f:91:4a:00:dd:a4:60:
                    3a:e1:37:ae:9e:b6:f4:bb:85:ae:15:d6:a4:56:d9:
                    9f:b9:5c:d9:64:8b:69:ce:0a:58:c3:cc:cb:1e:4f:
                    d8:b9:77:21:59:28:cf:52:d3:f5:ec:8a:95:1c:35:
                    a9:36:b0:22:1c:25:48:8c:14:09:85:78:f4:b5:7a:
                    d2:55:d5:8f:fc:b2:f2:ee:f8:1a:24:ef:8f:00:5d:
                    11:db:e3:ab:9f:27:c6:1d:8a:a8:bc:0d:9e:a7:12:
                    8d:eb:12:8c:8a:4b:12:22:1c:88:96:b8:00:3b:92:
                    2d:59:56:60:f9:da:f6:5d:b3:2c:c0:5f:f6:44:be:
                    4d:86:7e:c7:2d:a8:8a:60:64:e5:5a:6e:4e:de:0a:
                    d3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9C:C7:57:B9:F3:E9:08:EA:E1:A1:64:B5:64:DE:1C:89:AF:79:2C
            X509v3 Authority Key Identifier:
                keyid:F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:fc:de:d3:8e:fc:b4:4c:a4:22:7b:fe:8c:18:3c:21:bf:ae:
         85:7d:99:4a:48:ca:ce:95:6b:b5:90:3e:e5:fb:0f:4c:16:87:
         7b:43:f3:b2:a5:cf:c9:20:66:ba:a5:c6:30:a6:65:4c:ad:98:
         38:c7:3f:5a:86:97:6f:0a:89:3b:12:8c:2c:7a:57:08:03:f0:
         26:5a:20:11:0a:63:96:5f:02:30:94:18:a3:4f:f3:30:59:8b:
         80:10:0d:0f:df:4d:f3:91:97:eb:21:c5:86:66:38:cd:71:cb:
         e1:54:4e:75:96:a6:74:a2:03:b4:25:78:e5:3e:31:55:4a:b3:
         b4:28:a6:c7:ef:75:3d:6e:b6:ef:7c:72:72:d6:72:1d:97:0a:
         ac:7c:45:70:ab:75:db:75:a3:25:3a:a9:2e:e2:83:03:08:e7:
         85:60:4d:76:5a:31:59:ea:e7:f8:d1:13:ca:e6:63:c7:b5:24:
         73:c2:74:56:02:09:f3:f4:02:f1:6f:94:b2:a0:74:41:70:72:
         a2:58:f6:42:cd:66:cc:d1:7c:6b:1e:17:b1:8b:6b:f9:82:e2:
         aa:47:6c:55:a0:95:c2:bf:fb:ff:17:32:1e:30:41:26:64:68:
         dd:e4:9b:39:21:2e:9f:74:97:37:70:75:72:77:af:16:07:64:
         a8:03:a2:40
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+Pf0RScC+S902AFX0GVKMDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NWNkZDUyY2M5ZmEwOGFjYjJhOWExNjY5YTEzNjFkNWE4
MWM0M2MwHhcNMjYwNzIzMTUwMTUwWhcNMjYwNzI0MTUwMTUwWjAzMTEwLwYDVQQD
EygwMzljYzc1N2I5ZjNlOTA4ZWFlMWExNjRiNTY0ZGUxYzg5YWY3OTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Xl0fZ9JxnZEQkXbroqdHeZtvxoY
JeWYlS6fqw9TUStZc31x8cg6VuMIJPDfyf2u/TN6gezJ5OC7AxGLZ5BlFZzV55NF
9Wa2wA5xyMIN5WF7S0GPwXPdqoW2/SI7VYW+WsHc3MkpyFv36m3U6C2HHm+RSgDd
pGA64Teunrb0u4WuFdakVtmfuVzZZItpzgpYw8zLHk/YuXchWSjPUtP17IqVHDWp
NrAiHCVIjBQJhXj0tXrSVdWP/LLy7vgaJO+PAF0R2+OrnyfGHYqovA2epxKN6xKM
iksSIhyIlrgAO5ItWVZg+dr2XbMswF/2RL5Nhn7HLaiKYGTlWm5O3grTqwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAOcx1e58+kI6uGhZLVk3hyJr3ksMB8GA1UdIwQY
MBaAFPhc3VLMn6CKyyqaFmmhNh1agcQ8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1GemRVc3lmb0lyTEtwb1dhYUUySFZxQnhEdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvZWI4ODcwLTQ3OWYtNGU2MS05MGVh
LWM1MmFiYzIxYTBhYi8xLzEtRnpkVXN5Zm9JckxLcG9XYWFFMkhWcUJ4RHcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzlhL2ViODg3MC00NzlmLTRlNjEtOTBlYS1jNTJhYmMyMWEw
YWIvMS8xLUZ6ZFVzeWZvSXJMS3BvV2FhRTJIVnFCeER3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/ze
0478tEykInv+jBg8Ib+uhX2ZSkjKzpVrtZA+5fsPTBaHe0PzsqXPySBmuqXGMKZl
TK2YOMc/WoaXbwqJOxKMLHpXCAPwJlogEQpjll8CMJQYo0/zMFmLgBAND99N85GX
6yHFhmY4zXHL4VROdZamdKIDtCV45T4xVUqztCimx+91PW6273xyctZyHZcKrHxF
cKt123WjJTqpLuKDAwjnhWBNdloxWern+NETyuZjx7Ukc8J0VgIJ8/QC8W+UsqB0
QXByolj2Qs1mzNF8ax4XsYtr+YLiqkdsVaCVwr/7/xcyHjBBJmRo3eSbOSEun3SX
N3B1cnevFgdkqAOiQA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:54 2026 by rpki-client