Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/911bc0-080c-440c-b163-0a04f3c976e6/1/793RSeyjCv887XUwdqStWiweZFE.mft
File:                     793RSeyjCv887XUwdqStWiweZFE.mft (raw, json)
Hash identifier:          TeWtTxEPbkQorBE/mb+WpPLGo+NPSqEKOZcdLaKou8A=
Subject key identifier:   CC:68:60:B6:F3:C8:9D:43:C7:45:CA:75:97:C3:6F:65:A9:4C:FA:25
Authority key identifier: EF:DD:D1:49:EC:A3:0A:FF:3C:ED:75:30:76:A4:AD:5A:2C:1E:64:51
Certificate issuer:       /CN=efddd149eca30aff3ced753076a4ad5a2c1e6451
Certificate serial:       01A0404E3A2F38CAE623DE6C2E73BACCB17E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/793RSeyjCv887XUwdqStWiweZFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/911bc0-080c-440c-b163-0a04f3c976e6/1/793RSeyjCv887XUwdqStWiweZFE.mft
Manifest number:          9A
Signing time:             Wed 26 Aug 2026 23:01:03 +0000
Manifest this update:     Wed 26 Aug 2026 23:01:03 +0000
Manifest next update:     Thu 27 Aug 2026 23:01:03 +0000
Files and hashes:         1: 793RSeyjCv887XUwdqStWiweZFE.crl (hash: DuGbXfiS0OfYjhbGop4O5Ccdsj8R0NhOeFOpN9Vuosc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/911bc0-080c-440c-b163-0a04f3c976e6/1/793RSeyjCv887XUwdqStWiweZFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/911bc0-080c-440c-b163-0a04f3c976e6/1/793RSeyjCv887XUwdqStWiweZFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/793RSeyjCv887XUwdqStWiweZFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:4e:3a:2f:38:ca:e6:23:de:6c:2e:73:ba:cc:b1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efddd149eca30aff3ced753076a4ad5a2c1e6451
        Validity
            Not Before: Aug 26 23:01:03 2026 GMT
            Not After : Aug 27 23:01:03 2026 GMT
        Subject: CN=cc6860b6f3c89d43c745ca7597c36f65a94cfa25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:60:05:51:43:83:fa:5d:68:0d:19:51:78:54:
                    f6:86:6e:94:23:d3:52:a7:e1:4e:d6:a8:71:ff:86:
                    50:cd:ea:85:fd:84:a8:d6:bb:ab:9e:65:83:db:e4:
                    7e:24:7a:33:75:38:ab:19:7b:c0:c3:ed:1f:7f:87:
                    d4:90:f3:3d:61:12:92:75:b1:59:98:e0:07:2d:9b:
                    09:77:69:4c:8b:59:a4:4d:f8:fc:e1:e3:3e:d0:80:
                    39:15:13:06:9b:cf:2a:a6:9d:1f:7d:32:d5:f6:70:
                    c3:3c:f3:df:e7:bd:dc:98:2b:be:e0:81:3f:f5:6b:
                    d3:94:c3:d9:9c:db:fe:0a:80:88:a5:2b:b7:b9:01:
                    c8:36:63:34:ea:66:eb:89:b9:9b:53:1d:49:a0:11:
                    a9:bf:c0:f3:d3:1f:50:ea:8b:42:64:10:71:3a:66:
                    b5:aa:92:c6:93:83:d5:b3:ae:25:94:9b:0a:b7:3c:
                    5c:13:f4:12:6b:0a:84:39:53:d0:92:7d:40:67:6b:
                    ab:ea:5a:b2:3e:9f:5d:eb:3a:48:08:ba:ef:63:ff:
                    78:73:06:db:6c:88:54:88:ee:7a:e5:69:42:1e:d0:
                    13:14:f3:80:d8:d0:ac:f6:8d:a7:97:d2:51:7f:a5:
                    89:0c:58:8a:d9:dc:80:ef:e1:c4:2a:41:eb:19:b5:
                    7e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:68:60:B6:F3:C8:9D:43:C7:45:CA:75:97:C3:6F:65:A9:4C:FA:25
            X509v3 Authority Key Identifier:
                keyid:EF:DD:D1:49:EC:A3:0A:FF:3C:ED:75:30:76:A4:AD:5A:2C:1E:64:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/793RSeyjCv887XUwdqStWiweZFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/911bc0-080c-440c-b163-0a04f3c976e6/1/793RSeyjCv887XUwdqStWiweZFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/911bc0-080c-440c-b163-0a04f3c976e6/1/793RSeyjCv887XUwdqStWiweZFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:63:ca:0c:84:b7:80:58:c0:ee:6a:5a:fa:b2:dd:74:73:69:
         94:22:44:cd:35:dd:54:4a:75:dc:bc:af:e7:25:64:be:dd:3b:
         2d:be:10:a2:f2:4a:23:d1:af:91:85:ac:1c:74:bb:7a:8b:9e:
         9a:68:5e:1f:89:67:1d:b3:e0:f8:fe:38:2a:96:7e:5e:16:dd:
         15:c3:27:7f:e0:bc:63:aa:72:6d:f5:41:88:38:c9:71:e9:b2:
         d4:c0:ee:e1:29:98:3d:72:a3:a8:5d:5c:d9:9b:be:ca:40:e3:
         54:48:7d:fd:b9:25:50:ab:42:c0:60:d3:74:2d:50:36:0b:9a:
         6e:19:a3:b4:a6:b6:13:66:15:0b:92:32:ca:e4:10:b7:c0:d4:
         67:37:3a:4c:f6:58:b3:58:9d:d1:c9:6d:2b:f6:9a:d7:63:66:
         ae:30:5d:e4:49:27:f9:3f:48:94:82:77:fd:c5:66:f0:ab:a7:
         f9:2f:f8:bb:5f:ce:41:74:ff:d4:5a:2d:1a:e0:81:06:96:98:
         a1:49:3c:23:ad:30:3f:1c:45:2c:52:54:92:6f:d6:17:4a:e1:
         22:57:ff:04:6a:d3:31:fb:90:79:af:51:39:ba:5c:1d:10:84:
         48:14:5b:a5:d5:a4:bd:c9:c8:25:0b:f2:43:bb:69:2c:6d:77:
         76:8f:09:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBATjovOMrmI95sLnO6zLF+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZGRkMTQ5ZWNhMzBhZmYzY2VkNzUzMDc2YTRhZDVhMmMx
ZTY0NTEwHhcNMjYwODI2MjMwMTAzWhcNMjYwODI3MjMwMTAzWjAzMTEwLwYDVQQD
EyhjYzY4NjBiNmYzYzg5ZDQzYzc0NWNhNzU5N2MzNmY2NWE5NGNmYTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGAFUUOD+l1oDRlReFT2hm6UI9NS
p+FO1qhx/4ZQzeqF/YSo1rurnmWD2+R+JHozdTirGXvAw+0ff4fUkPM9YRKSdbFZ
mOAHLZsJd2lMi1mkTfj84eM+0IA5FRMGm88qpp0ffTLV9nDDPPPf573cmCu+4IE/
9WvTlMPZnNv+CoCIpSu3uQHINmM06mbribmbUx1JoBGpv8Dz0x9Q6otCZBBxOma1
qpLGk4PVs64llJsKtzxcE/QSawqEOVPQkn1AZ2ur6lqyPp9d6zpICLrvY/94cwbb
bIhUiO565WlCHtATFPOA2NCs9o2nl9JRf6WJDFiK2dyA7+HEKkHrGbV+QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxoYLbzyJ1Dx0XKdZfDb2WpTPolMB8GA1UdIwQY
MBaAFO/d0Unsowr/PO11MHakrVosHmRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzkzUlNleWpDdjg4N1hVd2RxU3RXaXdlWkZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC85MTFiYzAtMDgwYy00NDBjLWIxNjMt
MGEwNGYzYzk3NmU2LzEvNzkzUlNleWpDdjg4N1hVd2RxU3RXaXdlWkZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC85MTFiYzAtMDgwYy00NDBjLWIxNjMtMGEwNGYzYzk3NmU2
LzEvNzkzUlNleWpDdjg4N1hVd2RxU3RXaXdlWkZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWPKDIS3
gFjA7mpa+rLddHNplCJEzTXdVEp13Lyv5yVkvt07Lb4QovJKI9GvkYWsHHS7eoue
mmheH4lnHbPg+P44KpZ+XhbdFcMnf+C8Y6pybfVBiDjJcemy1MDu4SmYPXKjqF1c
2Zu+ykDjVEh9/bklUKtCwGDTdC1QNguabhmjtKa2E2YVC5IyyuQQt8DUZzc6TPZY
s1id0cltK/aa12NmrjBd5Ekn+T9IlIJ3/cVm8Kun+S/4u1/OQXT/1FotGuCBBpaY
oUk8I60wPxxFLFJUkm/WF0rhIlf/BGrTMfuQea9RObpcHRCESBRbpdWkvcnIJQvy
Q7tpLG13do8JoA==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:47:37 2026 by rpki-client