Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
File:                     CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft (raw, json)
Hash identifier:          ARoTOjXFx4taUeGEmzBjL9VCyMzLp1RVnEfU8jodg8Y=
Subject key identifier:   C3:09:5D:8F:22:13:08:DC:8F:28:04:5A:D8:DB:0A:EA:28:33:34:1B
Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
Certificate issuer:       /CN=0a35575b9947ace25ce87774c82775f18977fd19
Certificate serial:       01A000CA7AC7F927C594356D3C36FA34E73B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
Manifest number:          178D
Signing time:             Fri 14 Aug 2026 15:01:04 +0000
Manifest this update:     Fri 14 Aug 2026 15:01:04 +0000
Manifest next update:     Sat 15 Aug 2026 15:01:04 +0000
Files and hashes:         1: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl (hash: ZJMTCcLP+klAeKgXhnUiIDM2iGlnbSq1kMOfpf3cENE=)
                          2: Fr5UXfjdMrhEHYQ6Xdia0OdmNWk.roa (hash: 30Ofi4XCsm5vnfPYfxuSwPdN95VWJBJfoWiBcDk1LZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:7a:c7:f9:27:c5:94:35:6d:3c:36:fa:34:e7:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19
        Validity
            Not Before: Aug 14 15:01:04 2026 GMT
            Not After : Aug 15 15:01:04 2026 GMT
        Subject: CN=c3095d8f221308dc8f28045ad8db0aea2833341b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:30:12:e5:d7:7c:c2:10:07:16:24:17:4d:e7:
                    33:82:22:5d:c8:47:05:0b:a9:ed:cd:56:57:ec:6e:
                    79:0f:7f:32:50:fe:5a:e0:86:8e:8d:68:83:0d:15:
                    89:4e:07:e1:2b:3c:3d:5f:34:7c:bb:dd:15:11:61:
                    cc:3e:77:3e:d7:1a:e5:98:92:da:87:d6:9a:ef:38:
                    9a:53:de:44:6c:bd:60:8d:97:b7:0d:ee:14:3f:81:
                    1a:11:e1:ed:27:55:55:2e:cd:42:b0:36:7e:62:a2:
                    72:08:71:33:d2:3c:26:a3:60:16:76:c5:de:c5:6e:
                    09:26:29:de:98:80:e7:13:c9:f4:ad:c4:3f:13:05:
                    e2:0d:0e:31:a0:0c:c4:ac:e0:28:ed:7c:e5:6e:41:
                    ce:2e:b0:7e:d2:08:4f:bd:2f:ce:bf:6c:6a:f0:f2:
                    95:c0:aa:51:51:af:2e:52:e0:33:bd:ec:95:88:a9:
                    5e:ec:84:14:98:8d:65:52:1e:7a:17:4f:6b:36:25:
                    3c:91:3d:87:ab:89:1c:05:04:fc:05:b8:c9:3c:1b:
                    e6:29:08:d5:c5:30:42:6a:93:68:67:6e:e0:a1:dd:
                    6f:12:e1:44:bf:ac:f3:52:54:75:78:d7:b7:da:a8:
                    a1:76:0e:55:b8:8d:a6:68:64:74:0c:32:ce:42:46:
                    9f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:09:5D:8F:22:13:08:DC:8F:28:04:5A:D8:DB:0A:EA:28:33:34:1B
            X509v3 Authority Key Identifier:
                keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:83:2f:50:5a:21:f0:a0:66:a7:1e:42:17:72:60:77:4e:cb:
         a1:d1:a1:54:a2:17:5f:8c:da:76:46:f3:2e:63:05:a4:72:25:
         6a:9e:d2:fc:68:9f:b2:95:d7:f6:37:6d:44:15:04:d3:65:b5:
         bc:0e:47:d2:79:39:b4:b1:54:07:87:99:dd:75:67:6e:60:8d:
         eb:a4:8f:ed:69:e4:26:36:ea:c7:3e:66:89:6a:d3:73:40:e0:
         c4:20:59:9e:0b:f9:e2:2a:55:b3:ae:97:40:f0:a3:bd:cc:f5:
         96:f0:bc:af:7e:4b:d6:3c:1d:63:1f:98:4d:da:b4:68:c6:e9:
         28:02:c2:af:bf:ae:05:b9:30:69:e3:93:03:8e:f5:c8:3d:a9:
         1e:62:5c:4a:dc:67:60:e7:b3:8a:01:04:8b:6c:de:5e:44:45:
         4e:63:5b:d5:b7:9f:ea:21:db:13:32:4e:73:67:50:aa:d5:5e:
         e7:0a:13:1d:83:92:da:ab:a0:a6:77:ac:bb:33:79:22:fd:63:
         22:b1:f9:55:27:0b:ef:b5:91:86:da:b1:28:98:f2:8e:4b:8d:
         f4:8e:1b:05:b7:77:30:40:77:bb:aa:a0:87:33:bb:3c:f5:63:
         f6:38:dd:9a:2c:7a:7a:2e:db:9e:01:4d:60:ee:30:50:e2:f9:
         75:98:ac:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAynrH+SfFlDVtPDb6NOc7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMzU1NzViOTk0N2FjZTI1Y2U4Nzc3NGM4Mjc3NWYxODk3
N2ZkMTkwHhcNMjYwODE0MTUwMTA0WhcNMjYwODE1MTUwMTA0WjAzMTEwLwYDVQQD
EyhjMzA5NWQ4ZjIyMTMwOGRjOGYyODA0NWFkOGRiMGFlYTI4MzMzNDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDAS5dd8whAHFiQXTeczgiJdyEcF
C6ntzVZX7G55D38yUP5a4IaOjWiDDRWJTgfhKzw9XzR8u90VEWHMPnc+1xrlmJLa
h9aa7ziaU95EbL1gjZe3De4UP4EaEeHtJ1VVLs1CsDZ+YqJyCHEz0jwmo2AWdsXe
xW4JJinemIDnE8n0rcQ/EwXiDQ4xoAzErOAo7XzlbkHOLrB+0ghPvS/Ov2xq8PKV
wKpRUa8uUuAzveyViKle7IQUmI1lUh56F09rNiU8kT2Hq4kcBQT8BbjJPBvmKQjV
xTBCapNoZ27god1vEuFEv6zzUlR1eNe32qihdg5VuI2maGR0DDLOQkafnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMJXY8iEwjcjygEWtjbCuooMzQbMB8GA1UdIwQY
MBaAFAo1V1uZR6ziXOh3dMgndfGJd/0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wZjJkYTktZjNkNS00YWI0LWJhYmUt
NzlkOTFlZjgyN2NlLzEvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wZjJkYTktZjNkNS00YWI0LWJhYmUtNzlkOTFlZjgyN2Nl
LzEvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIMvUFoh
8KBmpx5CF3Jgd07LodGhVKIXX4zadkbzLmMFpHIlap7S/GifspXX9jdtRBUE02W1
vA5H0nk5tLFUB4eZ3XVnbmCN66SP7WnkJjbqxz5miWrTc0DgxCBZngv54ipVs66X
QPCjvcz1lvC8r35L1jwdYx+YTdq0aMbpKALCr7+uBbkwaeOTA471yD2pHmJcStxn
YOezigEEi2zeXkRFTmNb1bef6iHbEzJOc2dQqtVe5woTHYOS2qugpnesuzN5Iv1j
IrH5VScL77WRhtqxKJjyjkuN9I4bBbd3MEB3u6qghzO7PPVj9jjdmix6ei7bngFN
YO4wUOL5dZisTQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:47 2026 by rpki-client