Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
File:                     97LAktArE86qejP_BXqECmjXFSE.mft (raw, json)
Hash identifier:          RVS/9EF4Iol6u0sBNbADo4pzunDu4k40M8ZcDHPyFog=
Subject key identifier:   EB:27:9A:F4:2B:E5:37:4D:8F:9B:CA:49:72:05:95:63:51:11:28:EC
Authority key identifier: F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21
Certificate issuer:       /CN=f7b2c092d02b13ceaa7a33ff057a840a68d71521
Certificate serial:       01A0CBC7B0C01F2194B7C23A9B5DCFBB720E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
Manifest number:          148A
Signing time:             Wed 23 Sep 2026 01:00:56 +0000
Manifest this update:     Wed 23 Sep 2026 01:00:56 +0000
Manifest next update:     Thu 24 Sep 2026 01:00:56 +0000
Files and hashes:         1: 97LAktArE86qejP_BXqECmjXFSE.crl (hash: MP1ODazgqRcRt2wYY8Ch4X/+QKLkunOebe2XB10kESk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:c7:b0:c0:1f:21:94:b7:c2:3a:9b:5d:cf:bb:72:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b2c092d02b13ceaa7a33ff057a840a68d71521
        Validity
            Not Before: Sep 23 01:00:56 2026 GMT
            Not After : Sep 24 01:00:56 2026 GMT
        Subject: CN=eb279af42be5374d8f9bca4972059563511128ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ae:9f:96:0e:e7:ce:de:2c:11:15:cd:c9:56:
                    09:04:95:93:e1:11:e0:db:00:b6:3e:c2:20:a1:30:
                    91:7b:9b:71:32:bd:82:75:d2:12:be:22:ae:eb:fe:
                    e1:46:f6:36:82:16:e0:52:36:d8:dc:d8:7c:07:22:
                    57:26:45:43:1c:0c:15:c7:55:4b:e5:c0:b6:d3:bd:
                    b7:1d:d5:8a:00:85:a9:2a:d3:c0:bb:65:08:db:85:
                    c8:e8:36:11:3a:7a:85:d2:35:df:95:c5:32:65:61:
                    93:b0:94:5e:5e:90:2b:5d:84:0d:79:43:64:9b:ee:
                    89:bb:25:14:06:54:9c:2a:8d:c7:c8:b0:20:75:7f:
                    97:ac:a7:fe:35:59:5a:55:50:80:bc:59:b2:05:44:
                    d8:08:16:e7:dc:b4:09:27:b5:3d:b2:c4:64:1e:a7:
                    e7:b6:d2:2b:79:0a:2c:50:ca:1b:42:69:4f:fc:64:
                    85:b6:2a:7c:8e:db:c4:25:d8:65:ba:36:c9:85:ce:
                    32:e7:f5:6b:26:5f:71:57:3a:19:6b:e9:06:66:07:
                    ce:24:03:18:49:2a:5b:a7:94:01:ec:af:3c:b3:d0:
                    97:68:23:6f:da:3d:59:76:2c:4e:7d:90:fc:20:67:
                    1b:68:77:82:77:a3:b9:ad:28:ab:72:dc:d8:13:18:
                    f7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:27:9A:F4:2B:E5:37:4D:8F:9B:CA:49:72:05:95:63:51:11:28:EC
            X509v3 Authority Key Identifier:
                keyid:F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:64:26:c5:d2:ca:63:d7:79:b0:fb:76:b2:e5:5d:42:61:c2:
         1a:52:2b:28:5a:8a:bb:ed:c5:57:88:8c:62:7b:d9:3c:b3:32:
         39:8d:0c:4b:87:d9:f7:ac:b8:2a:38:a6:d7:0d:de:e5:e8:2f:
         33:93:c9:c7:15:24:c3:11:dc:b9:d9:54:b5:60:0e:2f:7d:54:
         8b:1e:50:3d:9b:1b:14:65:c3:f4:ea:d8:b1:41:8c:72:69:82:
         2d:9f:9b:70:ab:cc:b2:b0:23:9a:79:28:01:3d:7a:b8:cf:6d:
         8b:b9:82:20:0b:86:52:75:48:0f:36:70:18:d9:c7:f2:16:69:
         ef:38:08:f0:bc:6f:c4:09:9d:88:d9:e3:94:70:e9:17:fa:aa:
         f9:69:b8:1c:b1:5a:c5:b4:6f:80:81:a6:d7:18:65:c4:55:31:
         c0:29:0b:60:85:7a:93:ef:c1:76:8d:88:55:80:61:2e:6b:2d:
         bb:6c:7d:68:09:4a:f4:80:cb:53:0d:e1:ed:5a:b5:4c:49:ec:
         10:fc:ec:8d:85:90:9d:d6:9b:eb:b8:5f:b6:e9:d2:f2:be:ec:
         f2:2a:b8:5a:62:39:82:3a:92:10:c2:02:e2:02:45:3c:93:0b:
         6f:35:ff:1c:10:e6:3d:d8:c3:8f:77:63:8d:8b:33:35:b6:84:
         bf:73:e8:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLx7DAHyGUt8I6m13Pu3IOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YjJjMDkyZDAyYjEzY2VhYTdhMzNmZjA1N2E4NDBhNjhk
NzE1MjEwHhcNMjYwOTIzMDEwMDU2WhcNMjYwOTI0MDEwMDU2WjAzMTEwLwYDVQQD
EyhlYjI3OWFmNDJiZTUzNzRkOGY5YmNhNDk3MjA1OTU2MzUxMTEyOGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK6flg7nzt4sERXNyVYJBJWT4RHg
2wC2PsIgoTCRe5txMr2CddISviKu6/7hRvY2ghbgUjbY3Nh8ByJXJkVDHAwVx1VL
5cC20723HdWKAIWpKtPAu2UI24XI6DYROnqF0jXflcUyZWGTsJReXpArXYQNeUNk
m+6JuyUUBlScKo3HyLAgdX+XrKf+NVlaVVCAvFmyBUTYCBbn3LQJJ7U9ssRkHqfn
ttIreQosUMobQmlP/GSFtip8jtvEJdhlujbJhc4y5/VrJl9xVzoZa+kGZgfOJAMY
SSpbp5QB7K88s9CXaCNv2j1ZdixOfZD8IGcbaHeCd6O5rSirctzYExj3rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsnmvQr5TdNj5vKSXIFlWNRESjsMB8GA1UdIwQY
MBaAFPeywJLQKxPOqnoz/wV6hApo1xUhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTdMQWt0QXJFODZxZWpQX0JYcUVDbWpYRlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9jYmI2N2YtYmI3My00YjZhLWIxZGQt
M2YwNTI1NzE5Yzk0LzEvOTdMQWt0QXJFODZxZWpQX0JYcUVDbWpYRlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9jYmI2N2YtYmI3My00YjZhLWIxZGQtM2YwNTI1NzE5Yzk0
LzEvOTdMQWt0QXJFODZxZWpQX0JYcUVDbWpYRlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2QmxdLK
Y9d5sPt2suVdQmHCGlIrKFqKu+3FV4iMYnvZPLMyOY0MS4fZ96y4Kjim1w3e5egv
M5PJxxUkwxHcudlUtWAOL31Uix5QPZsbFGXD9OrYsUGMcmmCLZ+bcKvMsrAjmnko
AT16uM9ti7mCIAuGUnVIDzZwGNnH8hZp7zgI8LxvxAmdiNnjlHDpF/qq+Wm4HLFa
xbRvgIGm1xhlxFUxwCkLYIV6k+/Bdo2IVYBhLmstu2x9aAlK9IDLUw3h7Vq1TEns
EPzsjYWQndab67hftunS8r7s8iq4WmI5gjqSEMIC4gJFPJMLbzX/HBDmPdjDj3dj
jYszNbaEv3Pong==
-----END CERTIFICATE-----
Generated at Wed Sep 23 05:44:32 2026 by rpki-client