Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
File:                     1uDRyowZYcCxEoqlW4V5axIECpU.mft (raw, json)
Hash identifier:          owC0K4fCUH5E9/6DVn1hCExBunPDpbOBCwdHANhLUUM=
Subject key identifier:   AA:0F:DC:D4:69:63:31:06:56:6C:04:63:B0:5C:D4:2F:1F:D1:96:CF
Authority key identifier: D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95
Certificate issuer:       /CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
Certificate serial:       01A0CF6D249570FA8C84833127952B1AB68D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
Manifest number:          0F76
Signing time:             Wed 23 Sep 2026 18:00:31 +0000
Manifest this update:     Wed 23 Sep 2026 18:00:31 +0000
Manifest next update:     Thu 24 Sep 2026 18:00:31 +0000
Files and hashes:         1: 1uDRyowZYcCxEoqlW4V5axIECpU.crl (hash: /1vZyb1sdcZAxrsWz+OpsUrYPZywML0wCCz2PsKVmqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:6d:24:95:70:fa:8c:84:83:31:27:95:2b:1a:b6:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
        Validity
            Not Before: Sep 23 18:00:31 2026 GMT
            Not After : Sep 24 18:00:31 2026 GMT
        Subject: CN=aa0fdcd469633106566c0463b05cd42f1fd196cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a5:2b:9e:d5:71:b8:b3:56:32:32:db:ef:1c:
                    5e:2a:e8:31:ff:d8:2a:33:e7:b9:a6:e7:e1:e9:2d:
                    9e:84:c8:04:49:c9:a1:c1:bc:ea:ca:f5:2b:93:f6:
                    4a:35:c0:a1:39:d5:18:12:5c:92:da:0d:36:fc:59:
                    d9:95:ae:b7:83:86:2f:f5:95:11:17:da:40:a5:f3:
                    7e:fd:f7:54:3c:44:30:5b:cd:ec:f6:ec:e8:31:a6:
                    68:c6:cf:b6:ac:77:fe:e9:5a:d2:3d:08:e7:66:92:
                    09:34:94:36:33:50:cf:1c:82:28:a1:cc:b3:8a:af:
                    20:eb:34:66:e5:c6:c5:64:95:56:6c:74:23:95:13:
                    e7:ff:ae:e7:32:39:c7:d9:67:dd:85:9e:26:ed:a2:
                    3d:e7:76:b6:be:0e:e7:a7:98:ad:61:24:8c:2b:c5:
                    bc:08:02:5f:8c:b9:ac:79:1e:77:07:73:6e:76:47:
                    16:56:85:38:6e:ed:72:b7:69:28:b3:e9:f8:09:ba:
                    1a:47:87:13:3a:fa:e4:53:77:cb:88:34:44:5e:62:
                    7c:43:e7:85:ce:39:8f:04:06:b6:2d:23:6d:ee:2e:
                    f5:45:be:cd:8c:5c:e4:e8:3b:c3:f0:b3:e7:26:9b:
                    48:0c:61:ae:5c:b2:e4:64:75:5b:68:05:9c:44:81:
                    a1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0F:DC:D4:69:63:31:06:56:6C:04:63:B0:5C:D4:2F:1F:D1:96:CF
            X509v3 Authority Key Identifier:
                keyid:D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c3:43:8d:e3:d8:7e:83:ca:54:29:52:a8:06:ea:1d:c0:6c:
         15:85:b7:da:b3:5a:e4:d8:04:26:2b:f5:ff:25:d7:60:94:55:
         e4:ed:37:78:ec:22:f3:1d:d1:9c:ae:d9:3e:73:ad:2e:b5:db:
         73:9d:5b:77:d6:dc:db:13:54:92:74:be:73:b2:81:37:54:5e:
         ab:f4:b3:ff:71:00:2d:65:e2:b3:c7:7d:53:a8:c5:1c:bd:23:
         ee:24:5e:58:05:5c:c6:fc:f7:dd:d6:cd:73:51:b3:53:f6:06:
         b0:51:df:95:38:9b:d9:49:0b:d0:f3:5c:94:13:e1:4f:8a:96:
         8d:3a:ab:25:cd:99:f2:ed:01:7c:d4:fd:f9:43:21:49:02:61:
         a1:33:db:0d:5c:93:8d:50:e7:06:b4:b4:c5:5e:e6:65:b5:f1:
         49:95:42:90:13:68:fd:7d:5c:2c:bb:a5:37:b0:02:a7:c5:be:
         36:3a:73:b2:ae:cd:72:52:51:8a:97:62:e4:13:4c:41:16:7f:
         77:ec:07:19:bf:0a:7e:1c:48:19:66:56:d4:2d:7e:21:9b:d2:
         e3:7b:e4:7a:eb:75:89:f8:ad:12:7a:cc:45:dd:77:ef:66:7b:
         80:2c:9a:eb:55:d7:91:59:25:d5:ee:6e:ef:0d:d9:82:5d:e9:
         85:f8:b4:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPbSSVcPqMhIMxJ5UrGraNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZTBkMWNhOGMxOTYxYzBiMTEyOGFhNTViODU3OTZiMTIw
NDBhOTUwHhcNMjYwOTIzMTgwMDMxWhcNMjYwOTI0MTgwMDMxWjAzMTEwLwYDVQQD
EyhhYTBmZGNkNDY5NjMzMTA2NTY2YzA0NjNiMDVjZDQyZjFmZDE5NmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqUrntVxuLNWMjLb7xxeKugx/9gq
M+e5pufh6S2ehMgEScmhwbzqyvUrk/ZKNcChOdUYElyS2g02/FnZla63g4Yv9ZUR
F9pApfN+/fdUPEQwW83s9uzoMaZoxs+2rHf+6VrSPQjnZpIJNJQ2M1DPHIIoocyz
iq8g6zRm5cbFZJVWbHQjlRPn/67nMjnH2WfdhZ4m7aI953a2vg7np5itYSSMK8W8
CAJfjLmseR53B3NudkcWVoU4bu1yt2kos+n4CboaR4cTOvrkU3fLiDREXmJ8Q+eF
zjmPBAa2LSNt7i71Rb7NjFzk6DvD8LPnJptIDGGuXLLkZHVbaAWcRIGhGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKoP3NRpYzEGVmwEY7Bc1C8f0ZbPMB8GA1UdIwQY
MBaAFNbg0cqMGWHAsRKKpVuFeWsSBAqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXVEUnlvd1pZY0N4RW9xbFc0VjVheElFQ3BVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mZGUyNmItZTJhZi00Y2VmLThkYzkt
NDdjZDQ2NDE5MmU3LzEvMXVEUnlvd1pZY0N4RW9xbFc0VjVheElFQ3BVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mZGUyNmItZTJhZi00Y2VmLThkYzktNDdjZDQ2NDE5MmU3
LzEvMXVEUnlvd1pZY0N4RW9xbFc0VjVheElFQ3BVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfcNDjePY
foPKVClSqAbqHcBsFYW32rNa5NgEJiv1/yXXYJRV5O03eOwi8x3RnK7ZPnOtLrXb
c51bd9bc2xNUknS+c7KBN1Req/Sz/3EALWXis8d9U6jFHL0j7iReWAVcxvz33dbN
c1GzU/YGsFHflTib2UkL0PNclBPhT4qWjTqrJc2Z8u0BfNT9+UMhSQJhoTPbDVyT
jVDnBrS0xV7mZbXxSZVCkBNo/X1cLLulN7ACp8W+Njpzsq7NclJRipdi5BNMQRZ/
d+wHGb8KfhxIGWZW1C1+IZvS43vkeut1ifitEnrMRd1372Z7gCya61XXkVkl1e5u
7w3Zgl3phfi02w==
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:11:06 2026 by rpki-client