Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
File:                     1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft (raw, json)
Hash identifier:          d9eG+UxKpoUnkUiUx6FqBESjBMmgFdyAfW0GzIogp1k=
Subject key identifier:   3D:5E:5B:5F:5B:01:5F:79:05:AC:B2:FE:ED:38:A2:F9:99:CA:89:4E
Authority key identifier: D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74
Certificate issuer:       /CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974
Certificate serial:       01A13D13D8F7B76943CFD54E8825D666F1AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
Manifest number:          1AA2
Signing time:             Thu 15 Oct 2026 01:01:13 +0000
Manifest this update:     Thu 15 Oct 2026 01:01:13 +0000
Manifest next update:     Fri 16 Oct 2026 01:01:13 +0000
Files and hashes:         1: 1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl (hash: aIBvQClkRCpR8v1hpQ8jCRVO9ePuZpDAVxcSa6ClMtM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:13:d8:f7:b7:69:43:cf:d5:4e:88:25:d6:66:f1:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974
        Validity
            Not Before: Oct 15 01:01:13 2026 GMT
            Not After : Oct 16 01:01:13 2026 GMT
        Subject: CN=3d5e5b5f5b015f7905acb2feed38a2f999ca894e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d4:ef:bd:76:64:e2:60:20:28:fa:9f:63:57:
                    52:4c:3d:04:84:07:c2:89:8e:93:d3:a4:fe:fc:62:
                    39:5b:0d:64:45:0c:9d:6e:ca:d8:01:73:3a:38:c2:
                    d2:e0:e8:20:01:fc:36:82:72:bf:a9:92:4f:e7:e0:
                    07:8e:c4:a5:0e:c9:51:e1:9f:64:de:f9:32:c8:17:
                    41:b8:a3:41:41:d3:ca:31:1d:27:14:a8:e2:01:fe:
                    79:dc:c9:48:aa:c1:97:23:dd:0c:6f:df:5e:53:ca:
                    c7:ab:c3:82:23:ad:9f:94:b7:4f:cf:98:ab:a8:dc:
                    a0:0d:ef:3e:aa:0c:04:bf:5b:2f:b6:ef:2c:41:c2:
                    ea:4e:a1:67:b6:01:a6:d6:df:84:58:6f:5b:f0:5a:
                    55:aa:ce:c0:c7:13:ad:b5:d5:ce:88:1d:94:33:0e:
                    b2:b9:d8:74:d0:54:53:4f:db:8f:4c:32:55:6e:c2:
                    5f:b4:55:eb:85:4b:e3:29:ff:15:c5:2c:b0:c1:a4:
                    20:b4:34:b0:4e:01:74:52:f4:a2:c7:f4:a8:84:3d:
                    1d:10:46:e9:2f:f8:b9:d9:71:8e:5c:88:80:ae:6c:
                    7e:ca:b1:c0:da:57:09:5f:ea:be:d7:1f:90:34:14:
                    b7:be:f1:00:ff:a6:d9:8a:cb:c1:f9:2a:40:2b:da:
                    f6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5E:5B:5F:5B:01:5F:79:05:AC:B2:FE:ED:38:A2:F9:99:CA:89:4E
            X509v3 Authority Key Identifier:
                keyid:D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:32:7e:dd:20:61:67:2c:b8:bb:85:ca:47:3a:4e:7d:69:8f:
         26:c4:b7:45:d8:30:62:a1:04:61:49:f7:0b:d2:04:23:69:a8:
         f1:fd:5f:5e:6a:be:3d:50:92:5d:91:24:4c:b9:1a:75:55:9d:
         59:2c:4b:a5:bd:c3:98:8d:fe:ab:69:8d:2b:e3:39:d0:d3:a8:
         39:69:c0:27:1c:e9:d6:8d:f4:94:74:61:0a:92:63:a5:37:04:
         fc:be:1a:76:53:dc:37:a1:63:dd:f2:d7:02:cf:27:5f:e8:98:
         ae:8b:0e:c4:d4:82:cb:b8:4c:a9:be:7c:28:0b:e0:39:51:6e:
         a4:35:f1:7a:ce:48:67:a9:14:6d:ef:d3:27:41:3f:9b:27:83:
         f2:44:fe:64:13:b3:7a:d7:ce:13:50:e2:2d:7a:e4:33:3a:2e:
         96:74:06:71:68:7c:ef:92:fb:9e:af:80:d6:9a:20:8f:31:e3:
         0b:3d:f7:8f:8b:cf:bb:08:28:ce:f9:61:d7:ee:c3:86:67:0a:
         fa:5a:39:58:00:41:9e:a0:5d:43:28:96:29:8a:ba:c7:96:90:
         68:58:67:2b:5e:15:3f:95:25:e1:29:f7:85:3b:bb:6d:f8:6b:
         fb:d1:67:70:f0:8b:e6:12:cb:dc:75:e0:d5:3c:c6:1f:cb:89:
         3c:1e:27:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9E9j3t2lDz9VOiCXWZvGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmZlMmMwY2ZkNzY5MTA0NGVlMzc4NDVjZmNmNTRlMWE4
NDk5NzQwHhcNMjYxMDE1MDEwMTEzWhcNMjYxMDE2MDEwMTEzWjAzMTEwLwYDVQQD
EygzZDVlNWI1ZjViMDE1Zjc5MDVhY2IyZmVlZDM4YTJmOTk5Y2E4OTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9TvvXZk4mAgKPqfY1dSTD0EhAfC
iY6T06T+/GI5Ww1kRQydbsrYAXM6OMLS4OggAfw2gnK/qZJP5+AHjsSlDslR4Z9k
3vkyyBdBuKNBQdPKMR0nFKjiAf553MlIqsGXI90Mb99eU8rHq8OCI62flLdPz5ir
qNygDe8+qgwEv1svtu8sQcLqTqFntgGm1t+EWG9b8FpVqs7AxxOttdXOiB2UMw6y
udh00FRTT9uPTDJVbsJftFXrhUvjKf8VxSywwaQgtDSwTgF0UvSix/SohD0dEEbp
L/i52XGOXIiArmx+yrHA2lcJX+q+1x+QNBS3vvEA/6bZisvB+SpAK9r2IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1eW19bAV95Bayy/u04ovmZyolOMB8GA1UdIwQY
MBaAFNVv4sDP12kQRO43hFz89U4ahJl0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdfaXdNX1hhUkJFN2plRVhQejFUaHFFbVhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wMzExMzgtODZlMS00MTgyLWE3YTYt
MDEwN2VjMzNlNWI3LzEvMVdfaXdNX1hhUkJFN2plRVhQejFUaHFFbVhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8wMzExMzgtODZlMS00MTgyLWE3YTYtMDEwN2VjMzNlNWI3
LzEvMVdfaXdNX1hhUkJFN2plRVhQejFUaHFFbVhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApTJ+3SBh
Zyy4u4XKRzpOfWmPJsS3RdgwYqEEYUn3C9IEI2mo8f1fXmq+PVCSXZEkTLkadVWd
WSxLpb3DmI3+q2mNK+M50NOoOWnAJxzp1o30lHRhCpJjpTcE/L4adlPcN6Fj3fLX
As8nX+iYrosOxNSCy7hMqb58KAvgOVFupDXxes5IZ6kUbe/TJ0E/myeD8kT+ZBOz
etfOE1DiLXrkMzoulnQGcWh875L7nq+A1pogjzHjCz33j4vPuwgozvlh1+7DhmcK
+lo5WABBnqBdQyiWKYq6x5aQaFhnK14VP5Ul4Sn3hTu7bfhr+9FncPCL5hLL3HXg
1TzGH8uJPB4nVA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:35:10 2026 by rpki-client