Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/0mwoC8_Lzi5kvL7cv86-VhvqCc4.mft
File:                     0mwoC8_Lzi5kvL7cv86-VhvqCc4.mft (raw, json)
Hash identifier:          3IUIbfGQtTKmq5mrY11tiS485vXygQMpQTpRsTQfzZ8=
Subject key identifier:   7D:FF:E7:A0:BB:C9:DD:A2:B0:E1:F7:09:CD:C3:82:2F:D1:47:7F:19
Authority key identifier: D2:6C:28:0B:CF:CB:CE:2E:64:BC:BE:DC:BF:CE:BE:56:1B:EA:09:CE
Certificate issuer:       /CN=d26c280bcfcbce2e64bcbedcbfcebe561bea09ce
Certificate serial:       01A04017997396F4CACB07A744812108B9C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mwoC8_Lzi5kvL7cv86-VhvqCc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/0mwoC8_Lzi5kvL7cv86-VhvqCc4.mft
Manifest number:          9A
Signing time:             Wed 26 Aug 2026 22:01:23 +0000
Manifest this update:     Wed 26 Aug 2026 22:01:23 +0000
Manifest next update:     Thu 27 Aug 2026 22:01:23 +0000
Files and hashes:         1: 0mwoC8_Lzi5kvL7cv86-VhvqCc4.crl (hash: GTuiGWPsb8qqO0xaqMInjqQO3TXK1jCQT4VD8UFU+a4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/0mwoC8_Lzi5kvL7cv86-VhvqCc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/0mwoC8_Lzi5kvL7cv86-VhvqCc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mwoC8_Lzi5kvL7cv86-VhvqCc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:17:99:73:96:f4:ca:cb:07:a7:44:81:21:08:b9:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d26c280bcfcbce2e64bcbedcbfcebe561bea09ce
        Validity
            Not Before: Aug 26 22:01:23 2026 GMT
            Not After : Aug 27 22:01:23 2026 GMT
        Subject: CN=7dffe7a0bbc9dda2b0e1f709cdc3822fd1477f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e1:1e:de:56:27:b2:8d:d8:2a:56:14:32:e1:
                    8a:dc:99:94:6c:d2:41:74:1b:a9:67:a4:40:df:6a:
                    09:dd:06:ae:ec:7e:25:aa:40:4b:3d:a9:c4:e0:a3:
                    7a:8c:7e:f4:3d:80:6b:61:70:94:ff:48:1c:bb:dc:
                    34:7c:92:c9:5f:c0:50:f2:1f:d7:2c:5c:64:60:cf:
                    41:10:a0:81:36:2e:9a:f0:41:e4:5d:98:3c:ef:82:
                    a7:17:e4:2a:de:01:ce:e1:0e:91:2f:68:ad:7a:91:
                    5c:ca:d7:9c:81:bd:c8:5a:65:f0:ab:3f:b0:83:71:
                    67:a0:1a:22:25:af:11:41:ce:71:d4:94:af:89:6d:
                    33:08:0b:df:43:2a:f1:07:6b:51:04:80:2c:bd:26:
                    01:bf:49:ca:b8:5f:f0:41:19:6f:82:55:03:8f:51:
                    30:29:38:07:e2:8b:80:bd:2a:ab:b8:d1:d5:37:8d:
                    83:2f:42:d6:d0:69:4f:6f:3a:9a:b7:76:13:fe:d1:
                    8c:e9:80:47:e9:6b:0d:93:ef:53:80:73:fc:08:e8:
                    41:db:e7:48:6b:c1:1f:23:8f:1f:a2:e9:f1:7c:46:
                    a7:52:08:f4:98:21:43:8a:0b:44:b0:4c:57:03:c8:
                    f2:ff:85:15:48:0b:48:88:2d:e5:01:35:fa:45:fe:
                    f6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FF:E7:A0:BB:C9:DD:A2:B0:E1:F7:09:CD:C3:82:2F:D1:47:7F:19
            X509v3 Authority Key Identifier:
                keyid:D2:6C:28:0B:CF:CB:CE:2E:64:BC:BE:DC:BF:CE:BE:56:1B:EA:09:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mwoC8_Lzi5kvL7cv86-VhvqCc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/0mwoC8_Lzi5kvL7cv86-VhvqCc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/0mwoC8_Lzi5kvL7cv86-VhvqCc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:21:b6:30:64:24:68:04:c5:74:4f:0d:64:82:e7:19:05:75:
         f6:a4:bf:2e:2a:5f:c0:43:4b:8f:a8:43:86:f7:84:51:81:ec:
         c5:92:c6:5d:b6:ea:9f:77:7b:1d:d0:34:04:84:ad:4e:50:f3:
         ce:ef:78:af:9f:dc:1a:0d:2d:fd:e7:6d:e4:d4:ad:35:3d:b3:
         18:37:dc:68:6a:47:1e:a7:c2:8d:57:03:0f:c7:5f:76:15:64:
         59:0a:6b:e4:78:9f:06:20:92:48:74:a2:e2:46:7c:de:6a:8f:
         47:7f:19:95:e8:74:f5:bb:74:3e:b8:3a:d1:1e:20:53:21:d3:
         a5:e9:a8:d6:24:d6:f5:f9:15:c2:66:28:f3:dc:54:b4:36:d2:
         45:27:b1:b4:77:5c:09:73:77:a6:af:52:00:bd:3d:73:a7:33:
         a9:77:68:81:21:c4:0e:91:83:d3:e0:e4:e6:9e:41:3b:3c:6d:
         44:7e:eb:f3:2e:c3:65:86:1e:a1:8d:64:44:f5:d0:40:ee:6d:
         72:27:8c:d1:4a:ca:bd:2f:7b:95:99:42:09:9d:af:22:a3:aa:
         c2:5c:7c:d9:b2:c8:94:03:ba:02:6c:cd:12:60:93:79:d6:3e:
         bb:3b:63:14:c9:41:54:d8:b0:12:97:53:4f:13:ba:73:a3:2e:
         6f:80:7e:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBAF5lzlvTKywenRIEhCLnJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNmMyODBiY2ZjYmNlMmU2NGJjYmVkY2JmY2ViZTU2MWJl
YTA5Y2UwHhcNMjYwODI2MjIwMTIzWhcNMjYwODI3MjIwMTIzWjAzMTEwLwYDVQQD
Eyg3ZGZmZTdhMGJiYzlkZGEyYjBlMWY3MDljZGMzODIyZmQxNDc3ZjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuEe3lYnso3YKlYUMuGK3JmUbNJB
dBupZ6RA32oJ3Qau7H4lqkBLPanE4KN6jH70PYBrYXCU/0gcu9w0fJLJX8BQ8h/X
LFxkYM9BEKCBNi6a8EHkXZg874KnF+Qq3gHO4Q6RL2itepFcytecgb3IWmXwqz+w
g3FnoBoiJa8RQc5x1JSviW0zCAvfQyrxB2tRBIAsvSYBv0nKuF/wQRlvglUDj1Ew
KTgH4ouAvSqruNHVN42DL0LW0GlPbzqat3YT/tGM6YBH6WsNk+9TgHP8COhB2+dI
a8EfI48founxfEanUgj0mCFDigtEsExXA8jy/4UVSAtIiC3lATX6Rf72qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3/56C7yd2isOH3Cc3Dgi/RR38ZMB8GA1UdIwQY
MBaAFNJsKAvPy84uZLy+3L/OvlYb6gnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG13b0M4X0x6aTVrdkw3Y3Y4Ni1WaHZxQ2M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8zZWRiOGMtMTg1MC00ODhmLWFmZGYt
NWMyYWJlNTM5NGU2LzEvMG13b0M4X0x6aTVrdkw3Y3Y4Ni1WaHZxQ2M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8zZWRiOGMtMTg1MC00ODhmLWFmZGYtNWMyYWJlNTM5NGU2
LzEvMG13b0M4X0x6aTVrdkw3Y3Y4Ni1WaHZxQ2M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECG2MGQk
aATFdE8NZILnGQV19qS/LipfwENLj6hDhveEUYHsxZLGXbbqn3d7HdA0BIStTlDz
zu94r5/cGg0t/edt5NStNT2zGDfcaGpHHqfCjVcDD8dfdhVkWQpr5HifBiCSSHSi
4kZ83mqPR38Zleh09bt0Prg60R4gUyHTpemo1iTW9fkVwmYo89xUtDbSRSextHdc
CXN3pq9SAL09c6czqXdogSHEDpGD0+Dk5p5BOzxtRH7r8y7DZYYeoY1kRPXQQO5t
cieM0UrKvS97lZlCCZ2vIqOqwlx82bLIlAO6AmzNEmCTedY+uztjFMlBVNiwEpdT
TxO6c6Mub4B+0w==
-----END CERTIFICATE-----
Generated at Thu Aug 27 07:05:55 2026 by rpki-client