Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
File:                     1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft (raw, json)
Hash identifier:          D0n/qU7dtw/WngRWS5YYhwjjO8GGf+k29MLyDlyCG+k=
Subject key identifier:   75:5D:72:66:38:5E:10:DC:93:98:71:44:C8:0B:C8:34:7E:B0:74:FD
Authority key identifier: D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8
Certificate issuer:       /CN=d469867d1d693e79a6a5ee9014e413f039eb50d8
Certificate serial:       01A0005C541A42B8BE17F12471BE15EFF93F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
Manifest number:          1430
Signing time:             Fri 14 Aug 2026 13:00:45 +0000
Manifest this update:     Fri 14 Aug 2026 13:00:45 +0000
Manifest next update:     Sat 15 Aug 2026 13:00:45 +0000
Files and hashes:         1: 1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl (hash: Uf72OpprNUjsfIE00tOq0I34UjU8lP36QegaD8GqUoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:54:1a:42:b8:be:17:f1:24:71:be:15:ef:f9:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d469867d1d693e79a6a5ee9014e413f039eb50d8
        Validity
            Not Before: Aug 14 13:00:45 2026 GMT
            Not After : Aug 15 13:00:45 2026 GMT
        Subject: CN=755d7266385e10dc93987144c80bc8347eb074fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:15:84:7a:52:44:a6:de:23:b9:93:ea:cd:b1:
                    30:81:d9:07:d0:6e:31:cf:f7:0b:22:2b:9b:9d:4a:
                    78:87:e0:f3:20:42:af:e8:c5:44:ce:32:7c:99:b4:
                    64:c2:97:65:22:8d:7c:86:9e:85:7c:73:70:63:21:
                    dc:e5:4c:44:7c:74:e5:b3:33:c2:ae:5b:e1:0b:1d:
                    85:23:e3:b7:54:ee:c4:69:59:fb:3f:ed:b3:b8:61:
                    8d:e0:04:7e:2b:c3:05:61:c8:1c:f7:48:d0:a9:07:
                    c0:b9:dd:0c:5a:cf:36:08:e9:43:0b:23:c8:27:ff:
                    0a:c4:3c:61:0a:11:c5:68:2b:61:d2:0f:15:91:b2:
                    81:60:16:10:57:e2:66:cd:49:a5:d2:15:9b:d8:9a:
                    29:37:dc:c2:0a:bc:25:b0:81:de:96:80:9e:8e:e8:
                    43:96:30:9b:ae:2e:de:cc:6b:4f:34:85:62:f8:6d:
                    64:51:35:b1:18:5e:2f:98:a7:47:34:c5:c0:39:61:
                    b1:18:2b:db:12:fb:78:6a:fd:95:ac:d5:1f:cd:fe:
                    97:9a:b0:4d:e3:74:77:f4:90:97:b4:98:a5:47:83:
                    3b:84:e2:d7:df:82:ef:d2:37:31:a9:06:3a:51:3a:
                    4c:21:66:91:c7:ce:1c:71:d4:6d:bb:bf:28:7b:6c:
                    09:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5D:72:66:38:5E:10:DC:93:98:71:44:C8:0B:C8:34:7E:B0:74:FD
            X509v3 Authority Key Identifier:
                keyid:D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:50:87:60:c4:7b:2f:7c:50:73:53:05:3b:70:50:54:fa:db:
         ac:73:0b:8c:a6:d8:71:94:d2:cc:e4:a5:59:8c:d8:5e:32:e8:
         26:ee:23:47:38:db:eb:63:8b:c8:14:3d:16:c3:b4:1a:8c:c3:
         fb:fe:59:92:b9:35:f6:6a:70:b3:8d:c3:fb:75:bb:4c:e7:31:
         ef:15:f7:37:fa:71:b1:1d:0d:88:c4:2b:c5:06:a3:23:03:db:
         cb:6f:33:10:25:bb:5e:fc:24:dd:b4:52:15:b2:ef:81:99:13:
         c8:57:3b:ad:41:87:80:df:bc:c9:0b:bf:30:de:d6:30:37:87:
         e4:30:41:16:80:09:3a:d3:bd:9f:2c:37:c6:31:8d:60:55:39:
         f5:97:9a:3f:9a:fe:62:6b:d5:cb:b3:e3:73:c0:9e:d3:2a:8b:
         32:32:88:e7:53:fa:95:15:44:80:42:72:36:be:db:29:77:85:
         25:ea:d2:c9:d7:ee:22:3f:a9:52:55:a3:6a:24:60:ee:91:2e:
         60:73:d5:3f:f9:a3:be:07:af:ae:c2:ce:58:a8:18:4a:41:34:
         f2:26:b2:c4:4f:97:cb:67:e5:d7:15:46:d7:c7:28:c9:89:68:
         cb:19:4e:05:f5:92:74:f9:bc:b9:03:84:be:ac:1c:d8:33:77:
         5c:eb:45:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXFQaQri+F/Ekcb4V7/k/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Njk4NjdkMWQ2OTNlNzlhNmE1ZWU5MDE0ZTQxM2YwMzll
YjUwZDgwHhcNMjYwODE0MTMwMDQ1WhcNMjYwODE1MTMwMDQ1WjAzMTEwLwYDVQQD
Eyg3NTVkNzI2NjM4NWUxMGRjOTM5ODcxNDRjODBiYzgzNDdlYjA3NGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBWEelJEpt4juZPqzbEwgdkH0G4x
z/cLIiubnUp4h+DzIEKv6MVEzjJ8mbRkwpdlIo18hp6FfHNwYyHc5UxEfHTlszPC
rlvhCx2FI+O3VO7EaVn7P+2zuGGN4AR+K8MFYcgc90jQqQfAud0MWs82COlDCyPI
J/8KxDxhChHFaCth0g8VkbKBYBYQV+JmzUml0hWb2JopN9zCCrwlsIHeloCejuhD
ljCbri7ezGtPNIVi+G1kUTWxGF4vmKdHNMXAOWGxGCvbEvt4av2VrNUfzf6XmrBN
43R39JCXtJilR4M7hOLX34Lv0jcxqQY6UTpMIWaRx84ccdRtu78oe2wJhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVdcmY4XhDck5hxRMgLyDR+sHT9MB8GA1UdIwQY
MBaAFNRphn0daT55pqXukBTkE/A561DYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUdtR2ZSMXBQbm1tcGU2UUZPUVQ4RG5yVU5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iNDg1ZDktZWVkYy00NzA2LWE5ZTYt
NDFkZTk3ZGM5YjZjLzEvMUdtR2ZSMXBQbm1tcGU2UUZPUVQ4RG5yVU5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9iNDg1ZDktZWVkYy00NzA2LWE5ZTYtNDFkZTk3ZGM5YjZj
LzEvMUdtR2ZSMXBQbm1tcGU2UUZPUVQ4RG5yVU5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFCHYMR7
L3xQc1MFO3BQVPrbrHMLjKbYcZTSzOSlWYzYXjLoJu4jRzjb62OLyBQ9FsO0GozD
+/5Zkrk19mpws43D+3W7TOcx7xX3N/pxsR0NiMQrxQajIwPby28zECW7Xvwk3bRS
FbLvgZkTyFc7rUGHgN+8yQu/MN7WMDeH5DBBFoAJOtO9nyw3xjGNYFU59ZeaP5r+
YmvVy7Pjc8Ce0yqLMjKI51P6lRVEgEJyNr7bKXeFJerSydfuIj+pUlWjaiRg7pEu
YHPVP/mjvgevrsLOWKgYSkE08iayxE+Xy2fl1xVG18coyYloyxlOBfWSdPm8uQOE
vqwc2DN3XOtFBA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:51 2026 by rpki-client