Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
File:                     9lO0wxURtUguuEJaORN51D_W1FU.mft (raw, json)
Hash identifier:          k7cWrFTrla2965FtIq7umn9+h5YX6UVQp594BcG0yIU=
Subject key identifier:   E3:E1:EB:B2:E9:55:EB:67:CD:05:FD:DC:BD:7A:1B:87:41:78:38:8A
Authority key identifier: F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
Certificate issuer:       /CN=f653b4c31511b5482eb8425a391379d43fd6d455
Certificate serial:       01A0016F0FF9CB04E55F0BC91685AF170C7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
Manifest number:          19FD
Signing time:             Fri 14 Aug 2026 18:00:50 +0000
Manifest this update:     Fri 14 Aug 2026 18:00:50 +0000
Manifest next update:     Sat 15 Aug 2026 18:00:50 +0000
Files and hashes:         1: 9lO0wxURtUguuEJaORN51D_W1FU.crl (hash: P6d57jJmGmlPTGNJ/JRFvKAye2qd42oOXeKy1ZN274w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:0f:f9:cb:04:e5:5f:0b:c9:16:85:af:17:0c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f653b4c31511b5482eb8425a391379d43fd6d455
        Validity
            Not Before: Aug 14 18:00:50 2026 GMT
            Not After : Aug 15 18:00:50 2026 GMT
        Subject: CN=e3e1ebb2e955eb67cd05fddcbd7a1b874178388a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:90:5c:c7:a4:11:df:37:b3:30:80:db:56:67:
                    9e:5c:f3:ad:b3:48:4b:23:54:fe:f5:00:52:3b:3c:
                    e8:49:a7:b1:4f:71:4b:d5:2a:36:e7:29:0a:72:c5:
                    5b:ea:ab:fb:55:64:27:2e:1c:d7:33:87:9b:9f:f8:
                    c8:65:0f:b4:ed:a3:ab:74:e3:92:9d:53:b5:42:98:
                    9e:8e:fe:56:4b:2f:67:f0:11:dc:6a:a4:b7:e0:f9:
                    4c:d6:09:96:34:61:ef:e0:a6:3c:23:1a:96:43:a8:
                    c9:07:da:59:ed:77:fa:72:5d:7a:77:87:b1:f1:66:
                    fc:30:bf:b1:6e:86:56:4d:97:8a:9f:31:73:17:0e:
                    80:41:e9:0a:92:6e:31:0d:09:e5:cc:d2:a3:f1:cb:
                    34:94:34:34:5f:c1:fa:3d:21:f4:38:d1:9b:07:92:
                    aa:a4:e2:5c:49:89:65:e8:11:0b:8a:bf:b1:d1:91:
                    c8:93:0a:80:19:dc:c3:42:99:da:e8:f4:6a:81:b7:
                    17:ea:c8:25:0d:79:03:40:99:0c:aa:e2:a8:59:cf:
                    ac:31:32:11:13:4c:13:5d:ea:04:22:9e:5f:79:1a:
                    6b:50:19:21:ee:0c:6e:4c:8f:50:3e:3a:b8:f4:9c:
                    f5:6f:9c:41:da:a0:d0:c2:8a:a9:b6:77:23:1e:6e:
                    2a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E1:EB:B2:E9:55:EB:67:CD:05:FD:DC:BD:7A:1B:87:41:78:38:8A
            X509v3 Authority Key Identifier:
                keyid:F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:4c:77:b6:8e:cb:bc:a9:8b:79:09:de:b2:7c:96:89:cb:61:
         8e:b3:8e:49:6b:20:ee:bf:30:1a:6e:50:f6:02:51:8c:ab:99:
         97:c7:a8:35:c8:b3:1b:ce:21:b5:97:ea:05:43:10:49:08:80:
         a4:c6:6b:e1:6f:93:31:79:8f:f3:2b:9c:a4:c2:b1:3b:35:84:
         16:dc:3d:a1:4b:b8:e2:1e:67:9c:c3:66:81:56:02:65:8b:26:
         b8:8a:08:c9:2c:1d:e4:f1:19:cc:88:9d:a4:45:1a:1f:24:bc:
         7a:df:79:83:34:bb:01:44:ee:f4:5a:01:05:05:c2:aa:7c:7d:
         a9:8f:4c:5c:61:98:fc:23:c6:3e:fd:c5:3c:1b:99:02:40:dd:
         b1:e0:db:0a:54:f9:d7:3d:7e:0d:36:84:8d:04:b5:43:57:73:
         6e:3a:06:08:5b:10:68:51:57:6b:e7:b2:b7:75:cb:72:1a:53:
         8e:9e:00:10:ae:c1:12:0f:f0:84:07:b3:8d:39:55:b9:7a:5f:
         89:55:2a:7b:9c:5d:26:36:9a:33:98:6b:b0:16:6d:65:99:f2:
         3d:f2:49:c8:e2:e0:ec:30:6f:74:4a:92:89:3c:53:16:de:f7:
         58:77:ee:37:a5:fd:49:20:9d:4c:56:0c:da:46:12:d7:54:24:
         43:90:c0:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABbw/5ywTlXwvJFoWvFwx9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTNiNGMzMTUxMWI1NDgyZWI4NDI1YTM5MTM3OWQ0M2Zk
NmQ0NTUwHhcNMjYwODE0MTgwMDUwWhcNMjYwODE1MTgwMDUwWjAzMTEwLwYDVQQD
EyhlM2UxZWJiMmU5NTVlYjY3Y2QwNWZkZGNiZDdhMWI4NzQxNzgzODhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypBcx6QR3zezMIDbVmeeXPOts0hL
I1T+9QBSOzzoSaexT3FL1So25ykKcsVb6qv7VWQnLhzXM4ebn/jIZQ+07aOrdOOS
nVO1Qpiejv5WSy9n8BHcaqS34PlM1gmWNGHv4KY8IxqWQ6jJB9pZ7Xf6cl16d4ex
8Wb8ML+xboZWTZeKnzFzFw6AQekKkm4xDQnlzNKj8cs0lDQ0X8H6PSH0ONGbB5Kq
pOJcSYll6BELir+x0ZHIkwqAGdzDQpna6PRqgbcX6sglDXkDQJkMquKoWc+sMTIR
E0wTXeoEIp5feRprUBkh7gxuTI9QPjq49Jz1b5xB2qDQwoqptncjHm4qBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPh67LpVetnzQX93L16G4dBeDiKMB8GA1UdIwQY
MBaAFPZTtMMVEbVILrhCWjkTedQ/1tRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxPMHd4VVJ0VWd1dUVKYU9STjUxRF9XMUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82ZjYyODUtMTI5ZC00MWY2LWI4MzAt
MzE5MzY4ZDkxZmMzLzEvOWxPMHd4VVJ0VWd1dUVKYU9STjUxRF9XMUZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82ZjYyODUtMTI5ZC00MWY2LWI4MzAtMzE5MzY4ZDkxZmMz
LzEvOWxPMHd4VVJ0VWd1dUVKYU9STjUxRF9XMUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN0x3to7L
vKmLeQnesnyWicthjrOOSWsg7r8wGm5Q9gJRjKuZl8eoNcizG84htZfqBUMQSQiA
pMZr4W+TMXmP8yucpMKxOzWEFtw9oUu44h5nnMNmgVYCZYsmuIoIySwd5PEZzIid
pEUaHyS8et95gzS7AUTu9FoBBQXCqnx9qY9MXGGY/CPGPv3FPBuZAkDdseDbClT5
1z1+DTaEjQS1Q1dzbjoGCFsQaFFXa+eyt3XLchpTjp4AEK7BEg/whAezjTlVuXpf
iVUqe5xdJjaaM5hrsBZtZZnyPfJJyOLg7DBvdEqSiTxTFt73WHfuN6X9SSCdTFYM
2kYS11QkQ5DALw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:03 2026 by rpki-client