Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft
File:                     AIsoBYgFTtjERuJ7ScrEVYip6YA.mft (raw, json)
Hash identifier:          a6tY83oIKjfbuqn9+I7X2kDPzmjJSE048eWXc/oKCjY=
Subject key identifier:   26:E0:7E:FA:2A:25:82:14:20:66:7A:5E:D3:52:C9:52:C7:2C:D9:1B
Authority key identifier: 00:8B:28:05:88:05:4E:D8:C4:46:E2:7B:49:CA:C4:55:88:A9:E9:80
Certificate issuer:       /CN=008b280588054ed8c446e27b49cac45588a9e980
Certificate serial:       01A08C0C9C99DFD095F40FA5DF4FF57D4C28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AIsoBYgFTtjERuJ7ScrEVYip6YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft
Manifest number:          1504
Signing time:             Thu 10 Sep 2026 16:00:31 +0000
Manifest this update:     Thu 10 Sep 2026 16:00:31 +0000
Manifest next update:     Fri 11 Sep 2026 16:00:31 +0000
Files and hashes:         1: AIsoBYgFTtjERuJ7ScrEVYip6YA.crl (hash: ChSJYByKiaxmQfFnMbGSHuaptQ65Pq3Hr1cOdSqgndo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AIsoBYgFTtjERuJ7ScrEVYip6YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:0c:9c:99:df:d0:95:f4:0f:a5:df:4f:f5:7d:4c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=008b280588054ed8c446e27b49cac45588a9e980
        Validity
            Not Before: Sep 10 16:00:31 2026 GMT
            Not After : Sep 11 16:00:31 2026 GMT
        Subject: CN=26e07efa2a25821420667a5ed352c952c72cd91b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:33:65:ab:dc:2b:1a:3d:de:65:cf:c8:58:a8:
                    70:d6:a0:3d:27:6e:d1:54:ed:0d:48:88:2b:08:d4:
                    02:b5:e0:41:c8:2b:04:25:b9:f7:6c:39:19:05:c8:
                    1f:4b:a5:fc:d4:3d:9f:71:75:bc:b6:bf:23:08:45:
                    bd:a1:17:cb:63:8a:42:0d:98:39:67:ab:5a:52:cb:
                    40:9b:a9:55:96:39:6a:a5:fe:43:a3:73:d8:a8:c1:
                    e6:e2:d7:38:26:fa:ed:71:b3:f6:84:54:bf:67:ac:
                    70:c6:0d:f6:db:26:a3:f9:9d:eb:59:79:e9:8b:f1:
                    a9:c5:5a:b0:05:3f:06:d2:e9:03:26:d3:bc:4c:93:
                    25:b9:2b:da:47:fb:e5:f2:00:2b:a5:25:fd:70:f3:
                    f4:52:ed:2f:a6:02:16:62:8b:05:fb:9d:3c:0e:60:
                    47:25:0c:ff:e1:04:ea:9b:0e:b2:54:18:2d:71:7e:
                    f4:77:40:92:9a:65:95:c3:f4:f9:a9:bb:b6:37:12:
                    a6:e6:19:04:1b:4c:c8:fb:81:7b:1d:cd:bf:52:5d:
                    e1:99:b5:2c:98:c6:b7:8d:4f:98:d6:da:fd:dc:2f:
                    73:8f:42:ea:86:17:92:fd:4d:0c:d2:c8:a8:b9:d8:
                    64:2f:9f:ba:cb:d7:f2:37:0d:d3:e9:0c:88:11:db:
                    34:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E0:7E:FA:2A:25:82:14:20:66:7A:5E:D3:52:C9:52:C7:2C:D9:1B
            X509v3 Authority Key Identifier:
                keyid:00:8B:28:05:88:05:4E:D8:C4:46:E2:7B:49:CA:C4:55:88:A9:E9:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIsoBYgFTtjERuJ7ScrEVYip6YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:ff:29:19:5b:93:df:cc:12:b6:aa:26:66:6e:0f:9b:9f:3f:
         5d:d7:bf:61:c8:ed:28:e8:5d:c3:2f:42:f2:1b:00:dd:59:45:
         4f:0a:0a:76:50:87:f6:57:4b:5e:e5:19:0c:29:62:d5:56:bf:
         64:08:33:89:29:36:81:c5:a8:db:c4:42:23:73:8a:8f:18:86:
         04:37:68:cf:eb:3d:9c:3b:ca:6a:91:c4:49:4b:30:90:f5:af:
         ab:6c:f7:95:8b:c4:b5:19:95:be:f5:a6:30:56:22:07:87:07:
         3b:94:12:e1:83:fe:b7:c7:bb:29:09:8f:69:eb:da:53:50:3d:
         6b:00:e0:9d:0a:f1:f0:3e:38:15:8e:0b:62:47:11:01:39:7c:
         dd:3e:0a:b7:ed:b8:67:52:a6:5e:a1:30:ef:c1:b4:f4:31:70:
         ce:33:45:db:e3:00:7b:6a:a9:86:f2:b2:3d:a7:5b:7e:2f:51:
         3d:74:d4:8a:e7:96:23:af:29:86:e8:12:ce:2d:c2:4e:0d:12:
         14:59:0c:51:c9:cd:c9:3c:af:e4:4e:e7:ea:f3:81:05:8a:ba:
         4e:ba:8a:4e:90:dd:4e:00:ea:bc:95:89:79:ed:c2:27:a3:b6:
         b3:57:1f:b9:95:f7:fa:fc:6e:2e:26:1f:7a:3c:54:3d:81:32:
         6b:bc:e2:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMDJyZ39CV9A+l30/1fUwoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwOGIyODA1ODgwNTRlZDhjNDQ2ZTI3YjQ5Y2FjNDU1ODhh
OWU5ODAwHhcNMjYwOTEwMTYwMDMxWhcNMjYwOTExMTYwMDMxWjAzMTEwLwYDVQQD
EygyNmUwN2VmYTJhMjU4MjE0MjA2NjdhNWVkMzUyYzk1MmM3MmNkOTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDNlq9wrGj3eZc/IWKhw1qA9J27R
VO0NSIgrCNQCteBByCsEJbn3bDkZBcgfS6X81D2fcXW8tr8jCEW9oRfLY4pCDZg5
Z6taUstAm6lVljlqpf5Do3PYqMHm4tc4JvrtcbP2hFS/Z6xwxg322yaj+Z3rWXnp
i/GpxVqwBT8G0ukDJtO8TJMluSvaR/vl8gArpSX9cPP0Uu0vpgIWYosF+508DmBH
JQz/4QTqmw6yVBgtcX70d0CSmmWVw/T5qbu2NxKm5hkEG0zI+4F7Hc2/Ul3hmbUs
mMa3jU+Y1tr93C9zj0LqhheS/U0M0sioudhkL5+6y9fyNw3T6QyIEds0GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbgfvoqJYIUIGZ6XtNSyVLHLNkbMB8GA1UdIwQY
MBaAFACLKAWIBU7YxEbie0nKxFWIqemAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUlzb0JZZ0ZUdGpFUnVKN1NjckVWWWlwNllBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9hNzEyZDAtYTNjYy00ZDc0LTk4OTMt
NTYzZDZiZDNmODI3LzEvQUlzb0JZZ0ZUdGpFUnVKN1NjckVWWWlwNllBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9hNzEyZDAtYTNjYy00ZDc0LTk4OTMtNTYzZDZiZDNmODI3
LzEvQUlzb0JZZ0ZUdGpFUnVKN1NjckVWWWlwNllBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx/8pGVuT
38wStqomZm4Pm58/Xde/YcjtKOhdwy9C8hsA3VlFTwoKdlCH9ldLXuUZDCli1Va/
ZAgziSk2gcWo28RCI3OKjxiGBDdoz+s9nDvKapHESUswkPWvq2z3lYvEtRmVvvWm
MFYiB4cHO5QS4YP+t8e7KQmPaevaU1A9awDgnQrx8D44FY4LYkcRATl83T4Kt+24
Z1KmXqEw78G09DFwzjNF2+MAe2qphvKyPadbfi9RPXTUiueWI68phugSzi3CTg0S
FFkMUcnNyTyv5E7n6vOBBYq6TrqKTpDdTgDqvJWJee3CJ6O2s1cfuZX3+vxuLiYf
ejxUPYEya7ziyw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:07:44 2026 by rpki-client