Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
File:                     fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft (raw, json)
Hash identifier:          PRoNxj08wv8FdItW/7W1LTKX19hXvAGdHA+N9ZMPUms=
Subject key identifier:   54:88:C4:E4:70:25:7F:95:41:02:1C:54:E6:72:5D:5C:ED:14:44:F6
Authority key identifier: 7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4
Certificate issuer:       /CN=7f0757c331981e042b7471373527d0f64a1356b4
Certificate serial:       01A08C0D2F5D910AA636FEEFE925C920DCEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
Manifest number:          15EB
Signing time:             Thu 10 Sep 2026 16:01:09 +0000
Manifest this update:     Thu 10 Sep 2026 16:01:09 +0000
Manifest next update:     Fri 11 Sep 2026 16:01:09 +0000
Files and hashes:         1: fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl (hash: koZ4BigkI2TJ+ze+4ldKfpMwA0EURfliUp/LHUHsIjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:0d:2f:5d:91:0a:a6:36:fe:ef:e9:25:c9:20:dc:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f0757c331981e042b7471373527d0f64a1356b4
        Validity
            Not Before: Sep 10 16:01:09 2026 GMT
            Not After : Sep 11 16:01:09 2026 GMT
        Subject: CN=5488c4e470257f9541021c54e6725d5ced1444f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e6:13:68:b1:ed:ee:d5:93:ea:19:cb:f1:a3:
                    86:f9:36:31:89:2f:b3:ad:4f:ce:cd:46:49:83:93:
                    c6:0e:a6:5e:ea:2e:63:f6:aa:b1:45:51:6a:14:21:
                    c9:37:7c:05:9c:a7:70:b8:ea:f3:db:43:61:f2:ce:
                    ed:19:fa:f3:74:06:4d:7e:3b:50:51:fc:03:7c:5a:
                    22:06:e4:f4:b6:9b:ae:9d:5c:c0:6d:1a:0c:ab:ae:
                    46:3f:a9:44:80:aa:f2:62:4f:55:b5:11:21:38:3e:
                    7a:1f:33:bc:64:68:ac:ef:f9:b1:b0:42:d8:46:3f:
                    30:95:09:af:0d:c6:0e:63:70:32:d1:85:62:7a:7b:
                    f4:fd:f1:d1:dd:31:a7:80:19:ac:a8:bb:b8:d0:7e:
                    7d:34:e2:a7:15:7b:8a:9b:e5:85:79:b8:f5:90:c9:
                    7c:93:a1:4b:38:49:6e:ac:2c:08:01:61:e2:10:97:
                    6b:18:42:f8:e7:da:e2:e5:55:e3:df:30:4b:3a:43:
                    27:e1:d8:de:d2:28:98:1f:6f:c6:f8:ad:ff:4b:47:
                    ec:b7:10:05:38:0d:e2:2c:dd:47:44:60:a6:93:ee:
                    d7:fa:90:f4:2a:f8:a4:18:ed:ce:fc:ee:d3:15:4e:
                    b7:c7:d3:51:8a:17:a6:b4:80:f7:80:30:87:31:c3:
                    8c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:88:C4:E4:70:25:7F:95:41:02:1C:54:E6:72:5D:5C:ED:14:44:F6
            X509v3 Authority Key Identifier:
                keyid:7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:f5:a0:9c:dd:0b:90:7a:8a:da:dc:75:19:6f:b7:67:f6:41:
         4a:9f:84:2d:66:36:7e:f3:0c:f3:a7:7f:07:55:27:a2:15:88:
         f3:3e:aa:2e:20:92:ea:68:f5:cf:7e:b6:8e:9b:cb:8d:7e:19:
         40:c7:37:54:6d:5c:16:c5:b9:2c:8e:7a:eb:17:96:fc:f0:c4:
         6a:cc:f0:f0:2e:b9:9a:4f:c8:ad:61:76:62:6c:a8:62:74:90:
         c5:b6:95:cc:5a:19:0a:64:bf:9c:6d:98:aa:ff:a6:7e:ff:cc:
         60:55:14:3a:bf:72:e9:c3:b5:9a:6e:83:ab:ae:aa:02:63:67:
         d2:fd:d0:da:5b:a2:29:1b:42:f8:cc:b5:1f:f9:7b:69:63:d6:
         1c:00:70:d6:a5:80:a7:85:f0:72:68:8b:f5:af:0c:7b:45:39:
         b1:ca:f3:7d:68:76:00:22:4e:0a:7c:c8:77:22:57:b4:b0:f5:
         db:cf:71:78:63:69:d7:42:1d:51:7d:16:8e:9e:94:47:97:9a:
         ca:26:22:19:bb:18:28:b7:5c:77:8e:aa:6d:d0:dd:cf:b3:e7:
         18:78:3d:b0:82:82:20:0c:65:29:37:fc:59:07:3b:3d:eb:67:
         9f:b7:56:52:8f:ba:3d:00:f6:e0:34:1e:17:d2:3a:ae:6c:79:
         10:4e:47:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMDS9dkQqmNv7v6SXJINzrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMDc1N2MzMzE5ODFlMDQyYjc0NzEzNzM1MjdkMGY2NGEx
MzU2YjQwHhcNMjYwOTEwMTYwMTA5WhcNMjYwOTExMTYwMTA5WjAzMTEwLwYDVQQD
Eyg1NDg4YzRlNDcwMjU3Zjk1NDEwMjFjNTRlNjcyNWQ1Y2VkMTQ0NGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uYTaLHt7tWT6hnL8aOG+TYxiS+z
rU/OzUZJg5PGDqZe6i5j9qqxRVFqFCHJN3wFnKdwuOrz20Nh8s7tGfrzdAZNfjtQ
UfwDfFoiBuT0tpuunVzAbRoMq65GP6lEgKryYk9VtREhOD56HzO8ZGis7/mxsELY
Rj8wlQmvDcYOY3Ay0YVienv0/fHR3TGngBmsqLu40H59NOKnFXuKm+WFebj1kMl8
k6FLOElurCwIAWHiEJdrGEL459ri5VXj3zBLOkMn4dje0iiYH2/G+K3/S0fstxAF
OA3iLN1HRGCmk+7X+pD0KvikGO3O/O7TFU63x9NRihemtID3gDCHMcOM+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSIxORwJX+VQQIcVOZyXVztFET2MB8GA1UdIwQY
MBaAFH8HV8MxmB4EK3RxNzUn0PZKE1a0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZndkWHd6R1lIZ1FyZEhFM05TZlE5a29UVnJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80Zjk2ZjktNTY5Zi00MzNjLWI5YTgt
NmEyNjEyZDQwZjUwLzEvZndkWHd6R1lIZ1FyZEhFM05TZlE5a29UVnJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC80Zjk2ZjktNTY5Zi00MzNjLWI5YTgtNmEyNjEyZDQwZjUw
LzEvZndkWHd6R1lIZ1FyZEhFM05TZlE5a29UVnJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/WgnN0L
kHqK2tx1GW+3Z/ZBSp+ELWY2fvMM86d/B1UnohWI8z6qLiCS6mj1z362jpvLjX4Z
QMc3VG1cFsW5LI566xeW/PDEaszw8C65mk/IrWF2YmyoYnSQxbaVzFoZCmS/nG2Y
qv+mfv/MYFUUOr9y6cO1mm6Dq66qAmNn0v3Q2luiKRtC+My1H/l7aWPWHABw1qWA
p4XwcmiL9a8Me0U5scrzfWh2ACJOCnzIdyJXtLD1289xeGNp10IdUX0Wjp6UR5ea
yiYiGbsYKLdcd46qbdDdz7PnGHg9sIKCIAxlKTf8WQc7Petnn7dWUo+6PQD24DQe
F9I6rmx5EE5HlQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:57:16 2026 by rpki-client