Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.mft
File:                     3APMhzX27sAjqfI6BLLpDVOpIVI.mft (raw, json)
Hash identifier:          pdL5F/ejOv4fe1yzj+P5dbBT3CBIT66gwfKFBpUCjIg=
Subject key identifier:   75:08:95:BE:A8:8A:52:CE:A4:77:D5:AF:59:74:4A:1D:BD:89:A7:FD
Authority key identifier: DC:03:CC:87:35:F6:EE:C0:23:A9:F2:3A:04:B2:E9:0D:53:A9:21:52
Certificate issuer:       /CN=dc03cc8735f6eec023a9f23a04b2e90d53a92152
Certificate serial:       01A00101E13BADDFEDE6652DA70F00A52702
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3APMhzX27sAjqfI6BLLpDVOpIVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.mft
Manifest number:          0A91
Signing time:             Fri 14 Aug 2026 16:01:35 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:35 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:35 +0000
Files and hashes:         1: 3APMhzX27sAjqfI6BLLpDVOpIVI.crl (hash: IyaILHv5BldEyJ7Cl7ywJGZ/p0e2hnUz3NpMgP1/7Mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3APMhzX27sAjqfI6BLLpDVOpIVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:e1:3b:ad:df:ed:e6:65:2d:a7:0f:00:a5:27:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc03cc8735f6eec023a9f23a04b2e90d53a92152
        Validity
            Not Before: Aug 14 16:01:35 2026 GMT
            Not After : Aug 15 16:01:35 2026 GMT
        Subject: CN=750895bea88a52cea477d5af59744a1dbd89a7fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1c:6f:6b:67:1b:f1:1b:ad:6a:23:61:60:6b:
                    aa:22:70:7f:e8:e7:b7:21:0e:24:21:0e:bc:53:f1:
                    53:59:58:e0:aa:a8:3f:3c:62:d6:89:41:9d:ba:95:
                    97:8c:fc:0c:dd:10:3c:59:c3:da:a8:7f:31:e0:4f:
                    43:26:95:9a:01:46:1b:8a:2a:1a:6c:74:d1:0c:1d:
                    6e:66:1e:46:24:d2:f3:88:1d:2c:b3:12:d3:b7:e6:
                    75:55:b0:86:18:4b:10:02:d1:7a:fd:aa:0f:00:99:
                    34:90:30:cb:e3:67:24:2b:28:39:95:5e:1f:88:6c:
                    8b:ec:22:3b:91:31:ca:a7:41:d2:c7:50:20:dd:c0:
                    31:c8:de:8c:53:aa:f2:6b:c5:ca:2d:80:43:17:ce:
                    39:72:10:36:45:44:ed:6a:09:00:11:20:3b:c0:c4:
                    86:fb:b4:07:e5:8e:da:67:b7:ea:95:d3:58:2c:70:
                    d2:54:66:b0:fe:8f:fc:7e:ba:bd:e8:bf:18:db:c8:
                    75:39:4d:0b:40:b7:8d:a5:8e:af:d6:33:12:c6:31:
                    4a:74:3b:9a:8c:b1:0d:72:9a:58:be:8e:01:46:1c:
                    3c:b5:65:35:08:b8:ea:a0:4c:4e:10:ee:13:82:52:
                    bf:a7:7b:1a:31:7d:db:de:65:8c:fa:6f:13:af:30:
                    c7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:08:95:BE:A8:8A:52:CE:A4:77:D5:AF:59:74:4A:1D:BD:89:A7:FD
            X509v3 Authority Key Identifier:
                keyid:DC:03:CC:87:35:F6:EE:C0:23:A9:F2:3A:04:B2:E9:0D:53:A9:21:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3APMhzX27sAjqfI6BLLpDVOpIVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:3c:45:ef:52:b9:35:76:7a:77:b3:96:de:6c:ee:c5:9e:27:
         2b:fc:df:b6:a7:2c:98:d1:67:6c:45:12:b2:36:0e:e3:d4:73:
         8c:7e:38:ca:7c:ea:26:b6:0b:c4:34:66:ff:a6:23:ae:8c:cd:
         ba:74:71:4d:92:eb:b3:e0:69:22:fb:68:27:b8:da:20:5d:9b:
         bd:d6:d8:08:ab:af:2b:f1:23:e4:12:cb:5d:6a:41:57:ef:84:
         0f:88:97:c6:c7:4b:38:c5:99:d1:44:49:3f:08:fa:26:c0:68:
         5e:f9:46:46:4f:84:07:27:e9:e9:40:24:d5:8b:e5:95:cc:44:
         d3:ba:6d:49:9d:f6:7b:60:1a:0b:a4:62:15:72:3a:8b:2c:3f:
         f2:dc:43:57:d6:96:c3:53:50:b4:57:0f:3b:6d:2b:00:5e:b4:
         bd:29:1f:0c:95:5b:f0:34:3b:70:cf:2b:06:a6:5f:27:b5:f3:
         c2:3a:06:82:b3:43:40:3e:08:9e:a3:e0:5f:90:69:d7:8a:35:
         60:38:5c:17:09:23:ad:55:e3:26:54:45:77:a8:98:32:94:9b:
         a9:e2:9d:a7:91:b5:38:de:1f:68:bb:20:11:4a:5e:44:15:97:
         91:1d:d5:97:44:d9:72:14:7b:f4:e9:dd:53:c2:b5:7b:b7:3d:
         25:ad:03:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAeE7rd/t5mUtpw8ApScCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDNjYzg3MzVmNmVlYzAyM2E5ZjIzYTA0YjJlOTBkNTNh
OTIxNTIwHhcNMjYwODE0MTYwMTM1WhcNMjYwODE1MTYwMTM1WjAzMTEwLwYDVQQD
Eyg3NTA4OTViZWE4OGE1MmNlYTQ3N2Q1YWY1OTc0NGExZGJkODlhN2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBxva2cb8RutaiNhYGuqInB/6Oe3
IQ4kIQ68U/FTWVjgqqg/PGLWiUGdupWXjPwM3RA8WcPaqH8x4E9DJpWaAUYbiioa
bHTRDB1uZh5GJNLziB0ssxLTt+Z1VbCGGEsQAtF6/aoPAJk0kDDL42ckKyg5lV4f
iGyL7CI7kTHKp0HSx1Ag3cAxyN6MU6rya8XKLYBDF845chA2RUTtagkAESA7wMSG
+7QH5Y7aZ7fqldNYLHDSVGaw/o/8frq96L8Y28h1OU0LQLeNpY6v1jMSxjFKdDua
jLENcppYvo4BRhw8tWU1CLjqoExOEO4TglK/p3saMX3b3mWM+m8TrzDHcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUIlb6oilLOpHfVr1l0Sh29iaf9MB8GA1UdIwQY
MBaAFNwDzIc19u7AI6nyOgSy6Q1TqSFSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FQTWh6WDI3c0FqcWZJNkJMTHBEVk9wSVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iNTY2MmEtNjFhNS00OGE5LTg3N2It
YzQ0NTNhZmIyOTMzLzEvM0FQTWh6WDI3c0FqcWZJNkJMTHBEVk9wSVZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iNTY2MmEtNjFhNS00OGE5LTg3N2ItYzQ0NTNhZmIyOTMz
LzEvM0FQTWh6WDI3c0FqcWZJNkJMTHBEVk9wSVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnTxF71K5
NXZ6d7OW3mzuxZ4nK/zftqcsmNFnbEUSsjYO49RzjH44ynzqJrYLxDRm/6YjrozN
unRxTZLrs+BpIvtoJ7jaIF2bvdbYCKuvK/Ej5BLLXWpBV++ED4iXxsdLOMWZ0URJ
Pwj6JsBoXvlGRk+EByfp6UAk1YvllcxE07ptSZ32e2AaC6RiFXI6iyw/8txDV9aW
w1NQtFcPO20rAF60vSkfDJVb8DQ7cM8rBqZfJ7XzwjoGgrNDQD4InqPgX5Bp14o1
YDhcFwkjrVXjJlRFd6iYMpSbqeKdp5G1ON4faLsgEUpeRBWXkR3Vl0TZchR79Ond
U8K1e7c9Ja0DCw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:30 2026 by rpki-client