Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
File:                     CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft (raw, json)
Hash identifier:          q2swl/JDy16em0P/HsE38ZRLoPIlwhnGSSKowLQiXdw=
Subject key identifier:   3A:CD:EB:D4:1D:61:D6:B1:4B:EB:2A:3E:0D:5A:A7:6C:A1:9B:D7:B1
Authority key identifier: 08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC
Certificate issuer:       /CN=08861fe41547d8bfc5573ff5277ca00e473bafec
Certificate serial:       019FF8DA776D0B37B4B417507A78BED8147A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
Manifest number:          027E
Signing time:             Thu 13 Aug 2026 02:01:34 +0000
Manifest this update:     Thu 13 Aug 2026 02:01:34 +0000
Manifest next update:     Fri 14 Aug 2026 02:01:34 +0000
Files and hashes:         1: CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl (hash: sdPf8GJG3PdxL0eYNXUOJ77rN5JuHIw1B2L1FN4q5/I=)
                          2: tSbeP8_EOpw6AyTRFTldETaK43c.asa (hash: KkwAUTFGmRy2KHov09dra/yeLQjnFb3V1jTSgAJ3az4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:da:77:6d:0b:37:b4:b4:17:50:7a:78:be:d8:14:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08861fe41547d8bfc5573ff5277ca00e473bafec
        Validity
            Not Before: Aug 13 02:01:34 2026 GMT
            Not After : Aug 14 02:01:34 2026 GMT
        Subject: CN=3acdebd41d61d6b14beb2a3e0d5aa76ca19bd7b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:13:c6:23:33:b9:d5:5f:a4:87:67:fe:bd:8b:
                    23:da:ed:3a:3d:ab:99:20:a9:1f:dc:7d:df:c6:e7:
                    df:84:a2:3a:93:7d:d1:e7:77:34:b9:f5:96:21:b3:
                    68:0b:3e:e9:e1:5b:82:ba:51:5a:a4:19:d9:19:20:
                    60:22:8c:04:3d:fa:e0:53:34:32:e1:52:c1:fe:c7:
                    b6:c8:0d:e6:1d:e1:76:e1:55:a2:c2:e9:bb:17:72:
                    d2:98:b7:86:92:37:bb:62:b0:28:66:94:61:51:1e:
                    0b:51:e7:98:63:20:46:fd:f7:c0:38:97:af:1e:59:
                    1b:f3:ab:5b:f9:0b:0a:97:8b:9f:06:79:4f:26:c3:
                    7b:31:da:c8:32:8e:ea:08:ac:cf:b0:c6:99:18:58:
                    73:e7:54:f2:df:8d:cd:4a:ab:b2:e8:f0:74:3c:c1:
                    f0:82:74:e6:72:f1:b5:93:ee:0f:fc:78:c9:a1:a3:
                    b7:12:37:d9:f1:fa:68:ae:99:c5:fb:d9:57:61:dc:
                    b1:e4:d9:be:59:8d:18:09:0c:38:3b:a2:ab:6b:1f:
                    c9:04:15:b3:3e:ac:ac:89:95:34:ae:93:0c:75:63:
                    a8:39:63:3b:1f:6c:b6:32:71:97:bf:f4:eb:9a:0d:
                    37:f6:a7:29:67:c1:eb:5c:eb:b8:a0:9c:f8:52:e5:
                    eb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CD:EB:D4:1D:61:D6:B1:4B:EB:2A:3E:0D:5A:A7:6C:A1:9B:D7:B1
            X509v3 Authority Key Identifier:
                keyid:08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:30:c8:86:ea:f0:eb:96:2e:7c:9b:68:a1:5e:dd:45:d0:42:
         25:f9:55:29:d6:dd:0f:f3:eb:3e:4a:2b:f8:8c:4a:5e:5b:71:
         4c:db:d4:82:da:b4:67:a7:24:64:65:00:30:bc:6a:4f:3a:5d:
         08:b8:d7:a1:41:3c:fc:06:75:4f:9a:64:3a:26:4a:31:5d:94:
         78:ae:38:16:47:de:2b:51:d1:05:88:d5:9c:3b:4a:c5:07:03:
         7d:f4:30:0a:44:72:4d:5b:b1:b4:d7:44:83:20:cd:70:8d:14:
         0b:a7:8b:72:50:01:98:1e:f5:38:93:d0:ea:75:ae:67:3b:63:
         26:81:46:86:38:86:9b:37:21:37:2b:9b:56:65:2d:2d:c2:af:
         46:fd:34:cd:31:97:66:49:fa:8c:95:b7:84:67:ea:2c:32:c1:
         22:94:40:42:10:41:cc:6f:1e:63:5d:ce:59:7f:1d:81:41:bd:
         ae:87:f1:7c:02:76:dc:90:73:9c:16:f9:cc:99:72:7d:8c:a9:
         c5:39:a9:04:c3:ac:2a:52:3e:f0:1a:c7:47:6c:7b:3c:9c:ae:
         44:da:19:1b:42:99:18:78:43:9a:c2:1c:6a:c6:c3:b2:d8:08:
         dd:9a:0d:c7:aa:19:3f:1b:db:86:f6:9b:0e:28:23:33:e2:1f:
         f4:c5:e5:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/42ndtCze0tBdQeni+2BR6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODYxZmU0MTU0N2Q4YmZjNTU3M2ZmNTI3N2NhMDBlNDcz
YmFmZWMwHhcNMjYwODEzMDIwMTM0WhcNMjYwODE0MDIwMTM0WjAzMTEwLwYDVQQD
EygzYWNkZWJkNDFkNjFkNmIxNGJlYjJhM2UwZDVhYTc2Y2ExOWJkN2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBPGIzO51V+kh2f+vYsj2u06PauZ
IKkf3H3fxuffhKI6k33R53c0ufWWIbNoCz7p4VuCulFapBnZGSBgIowEPfrgUzQy
4VLB/se2yA3mHeF24VWiwum7F3LSmLeGkje7YrAoZpRhUR4LUeeYYyBG/ffAOJev
Hlkb86tb+QsKl4ufBnlPJsN7MdrIMo7qCKzPsMaZGFhz51Ty343NSquy6PB0PMHw
gnTmcvG1k+4P/HjJoaO3EjfZ8fporpnF+9lXYdyx5Nm+WY0YCQw4O6Krax/JBBWz
PqysiZU0rpMMdWOoOWM7H2y2MnGXv/Trmg039qcpZ8HrXOu4oJz4UuXrswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrN69QdYdaxS+sqPg1ap2yhm9exMB8GA1UdIwQY
MBaAFAiGH+QVR9i/xVc/9Sd8oA5HO6/sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lZZjVCVkgyTF9GVnpfMUozeWdEa2M3ci13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8zY2ZmY2MtNjRhYy00YmFkLWE1MTgt
NTUwZGFlYjZlNjUxLzEvQ0lZZjVCVkgyTF9GVnpfMUozeWdEa2M3ci13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8zY2ZmY2MtNjRhYy00YmFkLWE1MTgtNTUwZGFlYjZlNjUx
LzEvQ0lZZjVCVkgyTF9GVnpfMUozeWdEa2M3ci13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjDIhurw
65YufJtooV7dRdBCJflVKdbdD/PrPkor+IxKXltxTNvUgtq0Z6ckZGUAMLxqTzpd
CLjXoUE8/AZ1T5pkOiZKMV2UeK44FkfeK1HRBYjVnDtKxQcDffQwCkRyTVuxtNdE
gyDNcI0UC6eLclABmB71OJPQ6nWuZztjJoFGhjiGmzchNyubVmUtLcKvRv00zTGX
Zkn6jJW3hGfqLDLBIpRAQhBBzG8eY13OWX8dgUG9rofxfAJ23JBznBb5zJlyfYyp
xTmpBMOsKlI+8BrHR2x7PJyuRNoZG0KZGHhDmsIcasbDstgI3ZoNx6oZPxvbhvab
DigjM+If9MXl8w==
-----END CERTIFICATE-----
Generated at Thu Aug 13 09:59:41 2026 by rpki-client