Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
File:                     8QMX8k1xpRbXUEO-kPWr4_ocklk.mft (raw, json)
Hash identifier:          fRBe0pw/YdBfJB0oOprK5dQIq6/TMHG0we1LI7VWDbo=
Subject key identifier:   BF:A6:A5:EB:7D:EA:98:77:B8:AD:8E:7A:8E:5C:85:73:A5:0F:3A:88
Authority key identifier: F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59
Certificate issuer:       /CN=f10317f24d71a516d75043be90f5abe3fa1c9259
Certificate serial:       01A0016F7B9D16E8380A7BDEF14D832606EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
Manifest number:          15B4
Signing time:             Fri 14 Aug 2026 18:01:18 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:18 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:18 +0000
Files and hashes:         1: 8QMX8k1xpRbXUEO-kPWr4_ocklk.crl (hash: Fb7IaOAvX/ewd0CmMbo+q5OjKrsHzWuOeo47j9n8PV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:7b:9d:16:e8:38:0a:7b:de:f1:4d:83:26:06:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f10317f24d71a516d75043be90f5abe3fa1c9259
        Validity
            Not Before: Aug 14 18:01:18 2026 GMT
            Not After : Aug 15 18:01:18 2026 GMT
        Subject: CN=bfa6a5eb7dea9877b8ad8e7a8e5c8573a50f3a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:87:18:bc:45:52:60:16:2e:93:3b:9a:f8:39:
                    78:21:b7:6f:bd:d0:6d:20:77:28:b4:c3:a7:88:2b:
                    a5:02:58:e9:65:b3:01:2a:5f:f3:89:ea:a8:7a:e0:
                    7a:c1:4b:87:fa:2f:28:da:1c:31:39:91:c3:a3:05:
                    bd:72:df:d5:93:4f:e0:9b:2d:11:16:56:26:e6:dc:
                    9b:c1:15:7d:a8:57:f3:e5:dd:70:16:3f:c8:6f:6d:
                    f6:fe:c5:1d:1b:88:62:f1:e3:c6:31:f9:ad:e2:0c:
                    49:3d:84:eb:06:77:4b:de:52:ad:c5:0d:f0:25:bc:
                    fb:fb:20:35:6c:51:42:c9:82:6e:6e:41:20:8d:0b:
                    2e:af:95:17:48:1e:cf:da:04:a5:a9:87:d1:32:29:
                    66:e6:7a:d6:ea:f7:53:97:2f:4f:f8:5e:43:b3:65:
                    44:2a:02:f2:2d:47:f9:4b:a1:b5:32:22:14:40:e7:
                    a7:2d:82:7d:47:f0:54:04:c7:37:7e:88:75:0d:30:
                    d7:dc:d2:8b:c6:3f:ae:ae:5b:8d:dc:0e:9a:c2:80:
                    ba:7f:d3:79:60:2e:ca:27:94:f7:f4:64:04:0f:81:
                    9f:94:1a:2f:4c:a1:a5:bc:6e:a8:be:b2:7c:45:e3:
                    ae:37:b8:43:0a:e2:9c:37:1d:d3:f2:82:2a:e8:08:
                    3f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A6:A5:EB:7D:EA:98:77:B8:AD:8E:7A:8E:5C:85:73:A5:0F:3A:88
            X509v3 Authority Key Identifier:
                keyid:F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:57:d0:f0:b2:bd:1b:62:e7:87:8c:02:93:54:44:fb:c8:fb:
         dc:82:1c:5f:07:e1:69:2a:7c:b6:4d:eb:90:2b:6f:d7:2c:00:
         c7:56:a8:99:fa:e5:1b:44:9f:95:08:47:be:98:f0:d5:67:f5:
         af:1f:1c:4f:f6:3b:3c:2b:fe:72:ee:e8:6d:c4:a6:00:ee:82:
         a5:c6:73:2c:21:63:7e:7d:d2:83:fe:79:e7:67:4b:ee:d8:db:
         50:c8:f5:57:4a:24:cc:25:4a:1c:4c:cb:a9:55:c1:86:dc:e2:
         ed:fa:96:d1:5e:d5:d7:2e:53:74:53:aa:b0:0d:91:11:15:91:
         d4:5f:9f:f3:88:ee:be:ae:5d:0b:88:e3:ba:ef:8f:fe:9a:30:
         13:2f:6c:8a:8f:24:24:3d:53:5a:84:c4:7e:1b:9a:b7:c1:22:
         13:70:f0:a6:e1:68:9d:54:43:f9:f3:1d:61:3b:e2:c0:30:2e:
         38:13:f7:1a:d3:94:2b:d1:b9:e1:65:58:8c:bf:12:ec:a0:5d:
         bc:0e:3f:ed:cb:4c:a1:14:9d:a3:e3:70:15:c6:46:b5:f6:2c:
         03:19:d7:ea:5e:5f:ed:bd:b7:32:64:60:dc:a7:92:c2:8a:86:
         29:84:cb:16:e5:61:10:c8:2a:35:40:6a:5f:96:aa:a0:8f:b9:
         ea:1d:80:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb3udFug4Cnve8U2DJgbvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMDMxN2YyNGQ3MWE1MTZkNzUwNDNiZTkwZjVhYmUzZmEx
YzkyNTkwHhcNMjYwODE0MTgwMTE4WhcNMjYwODE1MTgwMTE4WjAzMTEwLwYDVQQD
EyhiZmE2YTVlYjdkZWE5ODc3YjhhZDhlN2E4ZTVjODU3M2E1MGYzYTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYcYvEVSYBYukzua+Dl4IbdvvdBt
IHcotMOniCulAljpZbMBKl/zieqoeuB6wUuH+i8o2hwxOZHDowW9ct/Vk0/gmy0R
FlYm5tybwRV9qFfz5d1wFj/Ib232/sUdG4hi8ePGMfmt4gxJPYTrBndL3lKtxQ3w
Jbz7+yA1bFFCyYJubkEgjQsur5UXSB7P2gSlqYfRMilm5nrW6vdTly9P+F5Ds2VE
KgLyLUf5S6G1MiIUQOenLYJ9R/BUBMc3foh1DTDX3NKLxj+urluN3A6awoC6f9N5
YC7KJ5T39GQED4GflBovTKGlvG6ovrJ8ReOuN7hDCuKcNx3T8oIq6Ag/AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+mpet96ph3uK2Oeo5chXOlDzqIMB8GA1UdIwQY
MBaAFPEDF/JNcaUW11BDvpD1q+P6HJJZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFFNWDhrMXhwUmJYVUVPLWtQV3I0X29ja2xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xMzVhMDMtZTExYS00NzBhLTg0NmMt
NjZkNDlkZjUzZWYxLzEvOFFNWDhrMXhwUmJYVUVPLWtQV3I0X29ja2xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8xMzVhMDMtZTExYS00NzBhLTg0NmMtNjZkNDlkZjUzZWYx
LzEvOFFNWDhrMXhwUmJYVUVPLWtQV3I0X29ja2xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilfQ8LK9
G2Lnh4wCk1RE+8j73IIcXwfhaSp8tk3rkCtv1ywAx1aomfrlG0SflQhHvpjw1Wf1
rx8cT/Y7PCv+cu7obcSmAO6CpcZzLCFjfn3Sg/5552dL7tjbUMj1V0okzCVKHEzL
qVXBhtzi7fqW0V7V1y5TdFOqsA2RERWR1F+f84juvq5dC4jjuu+P/powEy9sio8k
JD1TWoTEfhuat8EiE3DwpuFonVRD+fMdYTviwDAuOBP3GtOUK9G54WVYjL8S7KBd
vA4/7ctMoRSdo+NwFcZGtfYsAxnX6l5f7b23MmRg3KeSwoqGKYTLFuVhEMgqNUBq
X5aqoI+56h2Ajg==
-----END CERTIFICATE-----