Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/889894-41cf-48dc-aa06-5ac9e6b07996/1/C96-7pRQTNSkVQkebHwCK21Co98.mft
File:                     C96-7pRQTNSkVQkebHwCK21Co98.mft (raw, json)
Hash identifier:          l+/JaWpfO7fWmnbaCBbuIffdIsxMc00OVLXY3vZqPMU=
Subject key identifier:   26:79:94:41:1F:72:7F:3D:11:F3:26:B4:DD:9C:07:3F:A2:8E:91:3E
Authority key identifier: 0B:DE:BE:EE:94:50:4C:D4:A4:55:09:1E:6C:7C:02:2B:6D:42:A3:DF
Certificate issuer:       /CN=0bdebeee94504cd4a455091e6c7c022b6d42a3df
Certificate serial:       01A03F71FA317059D6819A2BDDC40A3633EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C96-7pRQTNSkVQkebHwCK21Co98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/889894-41cf-48dc-aa06-5ac9e6b07996/1/C96-7pRQTNSkVQkebHwCK21Co98.mft
Manifest number:          020C
Signing time:             Wed 26 Aug 2026 19:00:29 +0000
Manifest this update:     Wed 26 Aug 2026 19:00:29 +0000
Manifest next update:     Thu 27 Aug 2026 19:00:29 +0000
Files and hashes:         1: C96-7pRQTNSkVQkebHwCK21Co98.crl (hash: z4tYuuOVw+h0+PvnjLXNKZqXs8F8/R87E9DkjbJ6wLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/889894-41cf-48dc-aa06-5ac9e6b07996/1/C96-7pRQTNSkVQkebHwCK21Co98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/889894-41cf-48dc-aa06-5ac9e6b07996/1/C96-7pRQTNSkVQkebHwCK21Co98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C96-7pRQTNSkVQkebHwCK21Co98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:71:fa:31:70:59:d6:81:9a:2b:dd:c4:0a:36:33:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bdebeee94504cd4a455091e6c7c022b6d42a3df
        Validity
            Not Before: Aug 26 19:00:29 2026 GMT
            Not After : Aug 27 19:00:29 2026 GMT
        Subject: CN=267994411f727f3d11f326b4dd9c073fa28e913e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:b4:46:96:28:59:c8:f4:93:25:3c:cb:ad:
                    78:23:c6:5a:d6:af:a9:4d:c4:e2:4b:fb:9f:f2:30:
                    ee:11:bf:fd:3a:19:92:c9:c1:dd:ee:b0:ef:68:5b:
                    83:32:f2:f1:4f:58:82:fc:59:5b:d3:9d:d2:8b:dc:
                    8a:e8:28:62:7f:95:9d:f5:01:cc:52:d9:cd:2b:0b:
                    8e:b1:c0:25:68:f9:26:c9:21:1c:c2:72:e2:30:e4:
                    3e:ae:b9:10:0a:66:7b:cb:13:0d:53:7a:d1:3b:6b:
                    14:a7:78:af:1a:de:8e:6b:24:5f:bc:70:2a:73:95:
                    04:6f:cf:0b:ab:26:97:cb:e6:49:2b:bc:e0:26:da:
                    f2:cf:9f:57:11:48:b3:53:2a:d8:0e:a1:97:35:98:
                    b3:ce:55:80:5c:05:ec:39:8e:9e:b2:5a:0c:29:16:
                    cf:2c:73:ec:da:49:f8:4f:7e:a3:33:42:bc:33:1b:
                    4c:fb:84:9e:bc:90:9a:4c:69:47:bb:3a:bc:ea:a8:
                    3c:b3:1c:d7:c3:71:0b:db:37:0a:56:f6:8e:e3:42:
                    a0:19:75:25:c4:99:ed:a6:ed:cb:21:3c:28:4f:4d:
                    72:b0:49:a9:f5:39:d2:1a:73:de:2e:16:fe:ba:9a:
                    66:2e:2c:13:fb:88:3d:77:ba:93:c8:1e:e8:ee:02:
                    57:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:79:94:41:1F:72:7F:3D:11:F3:26:B4:DD:9C:07:3F:A2:8E:91:3E
            X509v3 Authority Key Identifier:
                keyid:0B:DE:BE:EE:94:50:4C:D4:A4:55:09:1E:6C:7C:02:2B:6D:42:A3:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C96-7pRQTNSkVQkebHwCK21Co98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/889894-41cf-48dc-aa06-5ac9e6b07996/1/C96-7pRQTNSkVQkebHwCK21Co98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/889894-41cf-48dc-aa06-5ac9e6b07996/1/C96-7pRQTNSkVQkebHwCK21Co98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:0a:d8:79:2e:9d:15:ce:64:a6:fa:bc:9a:03:8a:44:a2:73:
         63:8c:a3:95:b9:43:a5:6a:76:71:de:65:f4:ee:fc:5b:0b:dc:
         92:38:a4:d3:07:8e:7d:2a:f7:af:80:9b:de:80:26:0f:6a:8d:
         1b:c5:ab:09:92:3d:83:9a:98:16:29:aa:8d:19:a6:e5:87:c9:
         d6:e5:2b:b6:83:30:65:46:47:78:b6:83:8a:49:95:b3:c0:c0:
         3c:5e:ff:87:21:31:5e:8c:c3:dc:a6:d5:36:86:a8:d2:b4:c9:
         8e:09:cd:e1:8f:14:15:1e:44:81:73:8b:e3:10:fc:60:39:24:
         9e:bc:e4:d4:e8:aa:32:c1:2e:01:4b:7a:99:89:25:e3:e1:08:
         ba:2c:82:06:78:0c:4a:a7:47:db:c5:6d:14:83:1f:fa:3f:70:
         0f:f9:79:32:ed:ab:6b:e9:ab:c5:fc:84:af:37:8e:c8:ec:16:
         c9:fe:e9:a2:fc:03:4e:6a:96:2d:6a:19:18:b7:47:1d:21:53:
         26:13:25:83:17:b2:a6:a4:89:fc:bb:d2:87:9e:09:c0:5c:cd:
         ed:c2:91:b9:56:1d:4d:4c:af:bd:8b:9d:6a:f5:e0:0c:84:b2:
         28:5e:81:f7:1c:43:c3:97:2f:65:7a:58:42:d5:8b:5c:99:b2:
         dd:b3:8b:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/cfoxcFnWgZor3cQKNjPrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZGViZWVlOTQ1MDRjZDRhNDU1MDkxZTZjN2MwMjJiNmQ0
MmEzZGYwHhcNMjYwODI2MTkwMDI5WhcNMjYwODI3MTkwMDI5WjAzMTEwLwYDVQQD
EygyNjc5OTQ0MTFmNzI3ZjNkMTFmMzI2YjRkZDljMDczZmEyOGU5MTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdy0RpYoWcj0kyU8y614I8Za1q+p
TcTiS/uf8jDuEb/9OhmSycHd7rDvaFuDMvLxT1iC/Flb053Si9yK6Chif5Wd9QHM
UtnNKwuOscAlaPkmySEcwnLiMOQ+rrkQCmZ7yxMNU3rRO2sUp3ivGt6OayRfvHAq
c5UEb88LqyaXy+ZJK7zgJtryz59XEUizUyrYDqGXNZizzlWAXAXsOY6esloMKRbP
LHPs2kn4T36jM0K8MxtM+4SevJCaTGlHuzq86qg8sxzXw3EL2zcKVvaO40KgGXUl
xJntpu3LITwoT01ysEmp9TnSGnPeLhb+uppmLiwT+4g9d7qTyB7o7gJXZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZ5lEEfcn89EfMmtN2cBz+ijpE+MB8GA1UdIwQY
MBaAFAvevu6UUEzUpFUJHmx8AittQqPfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzk2LTdwUlFUTlNrVlFrZWJId0NLMjFDbzk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni84ODk4OTQtNDFjZi00OGRjLWFhMDYt
NWFjOWU2YjA3OTk2LzEvQzk2LTdwUlFUTlNrVlFrZWJId0NLMjFDbzk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni84ODk4OTQtNDFjZi00OGRjLWFhMDYtNWFjOWU2YjA3OTk2
LzEvQzk2LTdwUlFUTlNrVlFrZWJId0NLMjFDbzk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArQrYeS6d
Fc5kpvq8mgOKRKJzY4yjlblDpWp2cd5l9O78Wwvckjik0weOfSr3r4Cb3oAmD2qN
G8WrCZI9g5qYFimqjRmm5YfJ1uUrtoMwZUZHeLaDikmVs8DAPF7/hyExXozD3KbV
Noao0rTJjgnN4Y8UFR5EgXOL4xD8YDkknrzk1OiqMsEuAUt6mYkl4+EIuiyCBngM
SqdH28VtFIMf+j9wD/l5Mu2ra+mrxfyErzeOyOwWyf7povwDTmqWLWoZGLdHHSFT
JhMlgxeypqSJ/LvSh54JwFzN7cKRuVYdTUyvvYudavXgDISyKF6B9xxDw5cvZXpY
QtWLXJmy3bOLrg==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:55:28 2026 by rpki-client