Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
File:                     9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft (raw, json)
Hash identifier:          Gh/MLIQjRWG4Vfq8nWY47zYuuM8tmdyHnahFR5PTGZo=
Subject key identifier:   82:13:2F:17:CC:4F:70:25:F6:76:54:85:12:F2:05:08:DA:9A:96:3A
Authority key identifier: F4:ED:5E:5D:BB:A1:EA:B6:D3:95:8E:59:41:82:9C:9D:A1:B2:C6:7F
Certificate issuer:       /CN=f4ed5e5dbba1eab6d3958e5941829c9da1b2c67f
Certificate serial:       01A0010143A591CD7763968CE28AF6B10454
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
Manifest number:          0E0C
Signing time:             Fri 14 Aug 2026 16:00:55 +0000
Manifest this update:     Fri 14 Aug 2026 16:00:55 +0000
Manifest next update:     Sat 15 Aug 2026 16:00:55 +0000
Files and hashes:         1: 9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl (hash: 8qR31o1L6gN5F2JAwFSP2BoyYwbuH92cabBo4HavJe8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:43:a5:91:cd:77:63:96:8c:e2:8a:f6:b1:04:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4ed5e5dbba1eab6d3958e5941829c9da1b2c67f
        Validity
            Not Before: Aug 14 16:00:55 2026 GMT
            Not After : Aug 15 16:00:55 2026 GMT
        Subject: CN=82132f17cc4f7025f676548512f20508da9a963a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:73:0b:c4:b7:e9:22:34:b2:c0:29:d0:db:a7:
                    c8:af:27:13:ad:22:ed:e3:f9:1d:7e:32:a5:bd:58:
                    3b:82:37:44:0c:f2:de:16:56:ab:75:7f:bb:46:e7:
                    7d:aa:bf:22:81:5c:d0:15:83:a4:15:e5:94:c8:37:
                    df:53:cc:0c:aa:22:6c:b9:29:55:c9:7d:ae:27:bf:
                    a7:9c:ae:00:77:ba:4e:a5:82:98:c3:88:5f:ac:84:
                    b4:85:ee:14:84:03:45:56:8a:8a:c7:94:6b:3d:9a:
                    17:5e:c3:54:5b:df:7e:cc:d3:8b:30:af:b1:45:22:
                    74:dc:54:bb:44:d6:ca:8c:56:b0:ea:db:60:50:f9:
                    6d:bf:5c:22:82:ad:84:e5:05:e9:06:82:a5:11:1c:
                    1d:4a:ef:90:f2:e0:f5:91:63:64:72:55:95:f9:87:
                    92:47:7d:bb:dc:19:4d:44:61:e2:68:84:87:fd:9f:
                    f1:53:3a:a1:8b:ca:85:02:02:61:cf:6b:55:9a:20:
                    05:08:5a:03:ab:11:a7:b3:0f:58:48:83:34:b4:dd:
                    7e:65:5e:21:ab:4a:10:38:b5:ae:db:55:d4:01:4a:
                    81:70:0d:07:08:83:7c:d9:03:e4:68:04:4d:68:74:
                    cb:3c:66:79:ac:42:85:51:68:77:0f:45:b3:23:b8:
                    a4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:13:2F:17:CC:4F:70:25:F6:76:54:85:12:F2:05:08:DA:9A:96:3A
            X509v3 Authority Key Identifier:
                keyid:F4:ED:5E:5D:BB:A1:EA:B6:D3:95:8E:59:41:82:9C:9D:A1:B2:C6:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:cc:2f:51:d8:43:ec:f7:0b:7d:ca:ff:95:2c:eb:d7:2e:de:
         10:26:fb:a6:fb:f2:be:7a:f4:11:df:2c:07:01:c6:35:ba:82:
         bd:c6:df:50:ee:4f:f3:5a:51:6f:30:47:cd:05:2d:35:ae:02:
         1d:77:0a:33:e8:7f:90:4c:35:49:50:b9:0b:a5:b0:13:76:2d:
         83:c2:1b:44:e4:af:ae:f0:a3:2f:02:3e:cc:cc:9e:f2:1f:df:
         b3:d1:c1:a9:e0:62:6d:92:de:c7:f9:73:66:84:42:dd:a3:80:
         de:0c:ee:ac:1f:2d:bb:8f:97:3c:44:c0:5d:f1:0a:8e:82:5f:
         4e:22:ea:35:9b:d0:31:80:2c:0e:44:d3:e9:57:37:72:6a:98:
         86:8f:6f:93:e5:34:a6:d0:dd:b1:40:34:92:cf:0e:1a:10:3d:
         ac:49:52:48:bf:88:c7:20:02:df:b1:00:0c:50:a8:f7:4e:33:
         bc:6b:34:5f:c8:9d:09:5c:18:92:09:8e:9b:e0:77:38:e8:d4:
         03:52:6c:6c:75:84:99:15:4c:58:64:7a:25:32:5e:01:1c:a9:
         9b:52:f7:9c:8e:49:55:ab:69:ad:c2:05:8f:e0:e7:4d:19:68:
         49:6f:81:55:6c:b5:ce:db:9b:bf:88:d6:82:cb:6f:40:83:13:
         15:af:30:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAUOlkc13Y5aM4or2sQRUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZWQ1ZTVkYmJhMWVhYjZkMzk1OGU1OTQxODI5YzlkYTFi
MmM2N2YwHhcNMjYwODE0MTYwMDU1WhcNMjYwODE1MTYwMDU1WjAzMTEwLwYDVQQD
Eyg4MjEzMmYxN2NjNGY3MDI1ZjY3NjU0ODUxMmYyMDUwOGRhOWE5NjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHMLxLfpIjSywCnQ26fIrycTrSLt
4/kdfjKlvVg7gjdEDPLeFlardX+7Rud9qr8igVzQFYOkFeWUyDffU8wMqiJsuSlV
yX2uJ7+nnK4Ad7pOpYKYw4hfrIS0he4UhANFVoqKx5RrPZoXXsNUW99+zNOLMK+x
RSJ03FS7RNbKjFaw6ttgUPltv1wigq2E5QXpBoKlERwdSu+Q8uD1kWNkclWV+YeS
R3273BlNRGHiaISH/Z/xUzqhi8qFAgJhz2tVmiAFCFoDqxGnsw9YSIM0tN1+ZV4h
q0oQOLWu21XUAUqBcA0HCIN82QPkaARNaHTLPGZ5rEKFUWh3D0WzI7ikZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIITLxfMT3Al9nZUhRLyBQjampY6MB8GA1UdIwQY
MBaAFPTtXl27oeq205WOWUGCnJ2hssZ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU8xZVhidWg2cmJUbFk1WlFZS2NuYUd5eG44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hZmM4NmMtMjViMC00NzRjLWE1YzQt
ZGIxYTZiYmNiYjcyLzEvOU8xZVhidWg2cmJUbFk1WlFZS2NuYUd5eG44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9hZmM4NmMtMjViMC00NzRjLWE1YzQtZGIxYTZiYmNiYjcy
LzEvOU8xZVhidWg2cmJUbFk1WlFZS2NuYUd5eG44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcwvUdhD
7PcLfcr/lSzr1y7eECb7pvvyvnr0Ed8sBwHGNbqCvcbfUO5P81pRbzBHzQUtNa4C
HXcKM+h/kEw1SVC5C6WwE3Ytg8IbROSvrvCjLwI+zMye8h/fs9HBqeBibZLex/lz
ZoRC3aOA3gzurB8tu4+XPETAXfEKjoJfTiLqNZvQMYAsDkTT6Vc3cmqYho9vk+U0
ptDdsUA0ks8OGhA9rElSSL+IxyAC37EADFCo904zvGs0X8idCVwYkgmOm+B3OOjU
A1JsbHWEmRVMWGR6JTJeARypm1L3nI5JVatprcIFj+DnTRloSW+BVWy1ztubv4jW
gstvQIMTFa8wjQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:35:34 2026 by rpki-client