Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
File:                     cROEjAz5BGjQfWmfcUx_10ihMmk.mft (raw, json)
Hash identifier:          4oyZJubLhCm8Y6dp7ClmEYuQRzkD8kHL1pl6Iqe1pxw=
Subject key identifier:   1F:43:26:3B:95:39:A2:7D:6B:53:B0:00:E9:06:5B:1B:B0:4A:4F:B2
Authority key identifier: 71:13:84:8C:0C:F9:04:68:D0:7D:69:9F:71:4C:7F:D7:48:A1:32:69
Certificate issuer:       /CN=7113848c0cf90468d07d699f714c7fd748a13269
Certificate serial:       019FF67E0D8A38A7EAB155683DE0228CEC5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
Manifest number:          016B
Signing time:             Wed 12 Aug 2026 15:01:23 +0000
Manifest this update:     Wed 12 Aug 2026 15:01:23 +0000
Manifest next update:     Thu 13 Aug 2026 15:01:23 +0000
Files and hashes:         1: cROEjAz5BGjQfWmfcUx_10ihMmk.crl (hash: +91bijfB30lNvM8XIlmJS8rCyPb0Yaa19IT+v0d48o8=)
                          2: qgrQCVmykbnCGorMw6L6atIBXLU.asa (hash: sVztU1M0ntIZPQm7GwsbhsMw71eOwZCVyvZFdEoj2zw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 15:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f6:7e:0d:8a:38:a7:ea:b1:55:68:3d:e0:22:8c:ec:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7113848c0cf90468d07d699f714c7fd748a13269
        Validity
            Not Before: Aug 12 15:01:23 2026 GMT
            Not After : Aug 13 15:01:23 2026 GMT
        Subject: CN=1f43263b9539a27d6b53b000e9065b1bb04a4fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:12:e1:88:c2:b7:7e:b4:75:2c:32:10:13:23:
                    35:30:22:e3:da:af:48:b1:b2:03:a3:06:66:01:44:
                    d1:f4:24:8d:46:2e:73:0c:c6:2b:83:6d:2a:62:06:
                    c1:0e:ac:04:d8:c5:42:f9:8a:53:59:b9:8f:4c:c5:
                    df:05:ff:94:ab:9b:7f:8e:e9:64:af:b1:57:d7:84:
                    24:b4:d9:50:2d:b9:09:a1:68:81:59:fe:bf:45:5a:
                    10:05:49:53:d2:2a:61:49:2c:3b:8a:d2:b2:de:cd:
                    d8:18:37:56:72:82:91:f8:90:ee:79:5a:cd:0c:93:
                    96:53:aa:54:67:7b:1b:2a:78:99:52:d8:2d:89:72:
                    f4:14:22:e3:fb:75:bb:9d:a5:ed:32:74:5d:00:48:
                    79:80:7f:9a:44:1a:24:25:da:0e:19:5c:df:37:8b:
                    61:ff:c9:28:0b:e8:5d:31:7b:a7:e2:e9:0d:98:cc:
                    0f:95:88:11:d6:fc:ff:b1:f0:76:6c:98:b3:0a:58:
                    f3:96:7c:06:2c:ae:bb:7b:ed:48:36:bd:13:c8:a7:
                    b5:b0:b0:53:a3:f4:f7:f2:cc:b0:20:7e:4b:4d:00:
                    96:37:bb:f0:b9:ce:fe:6d:cc:9d:27:79:73:98:41:
                    d6:6b:b2:17:9b:f8:f4:c3:e9:8f:2e:c8:66:3f:ff:
                    02:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:43:26:3B:95:39:A2:7D:6B:53:B0:00:E9:06:5B:1B:B0:4A:4F:B2
            X509v3 Authority Key Identifier:
                keyid:71:13:84:8C:0C:F9:04:68:D0:7D:69:9F:71:4C:7F:D7:48:A1:32:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:29:c0:91:f1:2b:1a:b4:8e:16:b5:6a:d1:f3:19:f3:6b:ed:
         80:64:b3:34:cc:11:4b:43:90:f2:6a:45:e4:81:4d:7c:88:a3:
         71:e5:e9:37:16:4a:6d:e0:a1:71:af:79:92:49:b1:f1:d9:df:
         2b:1c:ad:2b:2c:96:0c:e9:4d:5b:1d:73:75:4d:0d:d9:13:5d:
         4c:f5:b2:07:e2:a7:93:35:c6:1f:9a:98:25:6c:37:35:32:1f:
         0d:ca:3d:24:d7:02:05:b6:ab:e9:37:f5:1a:69:c0:29:c3:12:
         ff:e2:d3:f5:11:f6:d3:c9:39:2b:f8:fe:f3:24:85:37:e8:f8:
         6e:f5:42:6d:34:8e:72:b0:f6:c0:ca:fd:45:4a:7d:69:96:4d:
         66:4f:db:d0:d8:29:76:8e:86:16:d6:0c:ee:9f:32:6b:06:6b:
         71:2d:69:30:ed:34:0c:d3:a0:03:8f:59:91:39:33:28:4b:a5:
         7a:2f:07:56:f0:be:29:92:0e:1c:e7:60:ed:d6:58:0d:75:f8:
         66:5e:b2:75:29:2f:be:a6:8d:2a:77:07:f4:a7:72:d8:ed:bc:
         2c:07:a2:5f:01:99:d9:dc:c3:51:e0:77:ec:a6:62:24:12:35:
         2e:e9:a1:d3:b7:64:b8:be:a5:a7:77:8d:80:3e:5b:4f:1a:b4:
         46:b9:d8:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/2fg2KOKfqsVVoPeAijOxaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTM4NDhjMGNmOTA0NjhkMDdkNjk5ZjcxNGM3ZmQ3NDhh
MTMyNjkwHhcNMjYwODEyMTUwMTIzWhcNMjYwODEzMTUwMTIzWjAzMTEwLwYDVQQD
EygxZjQzMjYzYjk1MzlhMjdkNmI1M2IwMDBlOTA2NWIxYmIwNGE0ZmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBLhiMK3frR1LDIQEyM1MCLj2q9I
sbIDowZmAUTR9CSNRi5zDMYrg20qYgbBDqwE2MVC+YpTWbmPTMXfBf+Uq5t/julk
r7FX14QktNlQLbkJoWiBWf6/RVoQBUlT0iphSSw7itKy3s3YGDdWcoKR+JDueVrN
DJOWU6pUZ3sbKniZUtgtiXL0FCLj+3W7naXtMnRdAEh5gH+aRBokJdoOGVzfN4th
/8koC+hdMXun4ukNmMwPlYgR1vz/sfB2bJizCljzlnwGLK67e+1INr0TyKe1sLBT
o/T38sywIH5LTQCWN7vwuc7+bcydJ3lzmEHWa7IXm/j0w+mPLshmP/8CWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9DJjuVOaJ9a1OwAOkGWxuwSk+yMB8GA1UdIwQY
MBaAFHEThIwM+QRo0H1pn3FMf9dIoTJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JPRWpBejVCR2pRZldtZmNVeF8xMGloTW1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wYWIxZDUtMWI4NC00NGYzLTg3ZGQt
MjZhY2NiN2VmZDdmLzEvY1JPRWpBejVCR2pRZldtZmNVeF8xMGloTW1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8wYWIxZDUtMWI4NC00NGYzLTg3ZGQtMjZhY2NiN2VmZDdm
LzEvY1JPRWpBejVCR2pRZldtZmNVeF8xMGloTW1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCnAkfEr
GrSOFrVq0fMZ82vtgGSzNMwRS0OQ8mpF5IFNfIijceXpNxZKbeChca95kkmx8dnf
KxytKyyWDOlNWx1zdU0N2RNdTPWyB+KnkzXGH5qYJWw3NTIfDco9JNcCBbar6Tf1
GmnAKcMS/+LT9RH208k5K/j+8ySFN+j4bvVCbTSOcrD2wMr9RUp9aZZNZk/b0Ngp
do6GFtYM7p8yawZrcS1pMO00DNOgA49ZkTkzKEulei8HVvC+KZIOHOdg7dZYDXX4
Zl6ydSkvvqaNKncH9Kdy2O28LAeiXwGZ2dzDUeB37KZiJBI1Lumh07dkuL6lp3eN
gD5bTxq0RrnYrA==
-----END CERTIFICATE-----
Generated at Wed Aug 12 20:40:26 2026 by rpki-client