Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/207216-1213-4824-8a97-640b6bb979b1/1/CUvO1ntmV262mwYxmFRQE9YSvp8.mft
File:                     CUvO1ntmV262mwYxmFRQE9YSvp8.mft (raw, json)
Hash identifier:          C6s8HbkVlZPSDVEdOy/FZYAlVqR2w3wpK+XFEdfOojc=
Subject key identifier:   13:5E:52:CD:E2:33:18:14:87:EE:F4:6E:E3:88:6C:FC:F4:52:C6:7C
Authority key identifier: 09:4B:CE:D6:7B:66:57:6E:B6:9B:06:31:98:54:50:13:D6:12:BE:9F
Certificate issuer:       /CN=094bced67b66576eb69b063198545013d612be9f
Certificate serial:       01A17739BAD212BFC317CB09B672C8E201A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CUvO1ntmV262mwYxmFRQE9YSvp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/207216-1213-4824-8a97-640b6bb979b1/1/CUvO1ntmV262mwYxmFRQE9YSvp8.mft
Manifest number:          015F
Signing time:             Mon 26 Oct 2026 08:00:34 +0000
Manifest this update:     Mon 26 Oct 2026 08:00:34 +0000
Manifest next update:     Tue 27 Oct 2026 08:00:34 +0000
Files and hashes:         1: CUvO1ntmV262mwYxmFRQE9YSvp8.crl (hash: aNPT73uZBlk9ybGd72wRqzFWjn+o2ntW7yGOIpa/Tx4=)
                          2: ganKDfLJdP7vPbYxHCXqjVQXEN4.roa (hash: ABkWl8T8DuxKNXgQueib6qSpuf6zbYF/8XCKQm4RzlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/207216-1213-4824-8a97-640b6bb979b1/1/CUvO1ntmV262mwYxmFRQE9YSvp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/207216-1213-4824-8a97-640b6bb979b1/1/CUvO1ntmV262mwYxmFRQE9YSvp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CUvO1ntmV262mwYxmFRQE9YSvp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:77:39:ba:d2:12:bf:c3:17:cb:09:b6:72:c8:e2:01:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094bced67b66576eb69b063198545013d612be9f
        Validity
            Not Before: Oct 26 08:00:34 2026 GMT
            Not After : Oct 27 08:00:34 2026 GMT
        Subject: CN=135e52cde233181487eef46ee3886cfcf452c67c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a1:32:50:85:b7:cf:4d:05:ec:b5:f3:f1:d6:
                    19:27:0c:c9:91:c1:92:d2:8f:b1:c9:b6:32:46:1a:
                    7c:11:40:11:75:15:5d:20:1b:55:31:c3:6b:bd:32:
                    56:ea:ad:f6:af:3a:86:bc:ac:2f:6c:26:3d:39:89:
                    be:b8:cf:3b:d2:46:0b:e6:c3:6e:e1:5f:74:f4:73:
                    d1:95:bf:05:a0:b1:dd:a9:32:d1:35:9e:30:eb:c1:
                    e9:4e:ad:6b:d7:d8:bc:0a:5b:a1:0e:fc:3f:dc:60:
                    1c:ff:64:33:ca:fe:62:9e:18:0d:f3:f3:1c:81:20:
                    c3:e2:7b:f8:18:6a:5c:b3:ce:dc:14:64:f6:1f:a3:
                    6d:89:be:88:d1:3b:35:82:db:d0:0b:1e:81:de:ed:
                    70:09:22:2e:07:5f:5b:01:50:a5:b6:99:93:80:c7:
                    43:95:82:cb:02:2f:51:a4:02:52:e7:f7:05:80:e6:
                    16:25:df:fb:e0:2c:8f:bb:4a:ea:85:44:48:52:ed:
                    d4:78:35:31:1f:38:4f:9b:4e:ec:43:d6:5f:d5:6c:
                    39:96:4f:49:a7:db:e7:91:3a:77:45:05:6b:4e:6b:
                    c5:05:1b:40:e2:69:3a:17:ec:81:b2:60:15:5b:a8:
                    d0:2f:db:96:a7:55:02:fd:ef:63:0c:d1:1e:c2:be:
                    07:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5E:52:CD:E2:33:18:14:87:EE:F4:6E:E3:88:6C:FC:F4:52:C6:7C
            X509v3 Authority Key Identifier:
                keyid:09:4B:CE:D6:7B:66:57:6E:B6:9B:06:31:98:54:50:13:D6:12:BE:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUvO1ntmV262mwYxmFRQE9YSvp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/207216-1213-4824-8a97-640b6bb979b1/1/CUvO1ntmV262mwYxmFRQE9YSvp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/207216-1213-4824-8a97-640b6bb979b1/1/CUvO1ntmV262mwYxmFRQE9YSvp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:4a:b1:80:3f:3a:96:8b:2c:80:4b:24:4e:66:4b:80:7e:01:
         68:b6:4a:66:56:80:09:63:3d:4d:43:8e:00:50:53:5e:c6:b2:
         d0:48:ba:92:7c:38:5e:69:dd:ba:57:01:91:7b:6d:49:fd:db:
         f9:33:13:82:73:41:22:7f:69:32:bc:3c:08:a9:41:56:78:22:
         72:78:0a:9a:98:62:72:67:5b:a7:2f:d8:36:9d:c4:b2:50:2d:
         9f:91:d0:0d:33:91:e8:ca:dc:a0:97:ad:0b:24:bd:56:81:4f:
         fb:60:b7:ae:52:4f:eb:07:6a:45:ba:ec:09:1b:eb:34:e1:24:
         41:76:26:ec:74:03:c7:49:a1:c1:f0:5e:d4:02:bc:3d:cb:03:
         14:a3:ee:98:a7:1b:36:e6:31:83:b8:95:ea:82:dc:f0:21:59:
         40:fc:35:5b:c5:b1:5d:d5:bc:a5:7a:89:9a:76:82:8a:6c:d2:
         d0:85:68:7f:83:4a:bf:14:5b:22:8e:6c:9a:5a:8a:c2:1a:8b:
         82:42:0f:29:0e:88:05:ed:f5:9b:0f:c9:65:41:d8:59:5b:67:
         01:f5:a2:d4:b5:95:99:3f:12:60:1b:a3:f4:4c:9d:d3:96:9d:
         eb:4d:97:4e:cd:1f:8b:84:5b:19:f5:cc:f4:86:ec:fe:ea:fb:
         54:b0:36:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF3ObrSEr/DF8sJtnLI4gGkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NGJjZWQ2N2I2NjU3NmViNjliMDYzMTk4NTQ1MDEzZDYx
MmJlOWYwHhcNMjYxMDI2MDgwMDM0WhcNMjYxMDI3MDgwMDM0WjAzMTEwLwYDVQQD
EygxMzVlNTJjZGUyMzMxODE0ODdlZWY0NmVlMzg4NmNmY2Y0NTJjNjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6EyUIW3z00F7LXz8dYZJwzJkcGS
0o+xybYyRhp8EUARdRVdIBtVMcNrvTJW6q32rzqGvKwvbCY9OYm+uM870kYL5sNu
4V909HPRlb8FoLHdqTLRNZ4w68HpTq1r19i8CluhDvw/3GAc/2Qzyv5inhgN8/Mc
gSDD4nv4GGpcs87cFGT2H6Ntib6I0Ts1gtvQCx6B3u1wCSIuB19bAVCltpmTgMdD
lYLLAi9RpAJS5/cFgOYWJd/74CyPu0rqhURIUu3UeDUxHzhPm07sQ9Zf1Ww5lk9J
p9vnkTp3RQVrTmvFBRtA4mk6F+yBsmAVW6jQL9uWp1UC/e9jDNEewr4HLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNeUs3iMxgUh+70buOIbPz0UsZ8MB8GA1UdIwQY
MBaAFAlLztZ7ZldutpsGMZhUUBPWEr6fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1V2TzFudG1WMjYybXdZeG1GUlFFOVlTdnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yMDcyMTYtMTIxMy00ODI0LThhOTct
NjQwYjZiYjk3OWIxLzEvQ1V2TzFudG1WMjYybXdZeG1GUlFFOVlTdnA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8yMDcyMTYtMTIxMy00ODI0LThhOTctNjQwYjZiYjk3OWIx
LzEvQ1V2TzFudG1WMjYybXdZeG1GUlFFOVlTdnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEqxgD86
lossgEskTmZLgH4BaLZKZlaACWM9TUOOAFBTXsay0Ei6knw4XmndulcBkXttSf3b
+TMTgnNBIn9pMrw8CKlBVngicngKmphicmdbpy/YNp3EslAtn5HQDTOR6MrcoJet
CyS9VoFP+2C3rlJP6wdqRbrsCRvrNOEkQXYm7HQDx0mhwfBe1AK8PcsDFKPumKcb
NuYxg7iV6oLc8CFZQPw1W8WxXdW8pXqJmnaCimzS0IVof4NKvxRbIo5smlqKwhqL
gkIPKQ6IBe31mw/JZUHYWVtnAfWi1LWVmT8SYBuj9Eyd05ad602XTs0fi4RbGfXM
9Ibs/ur7VLA22Q==
-----END CERTIFICATE-----
Generated at Mon Oct 26 16:15:04 2026 by rpki-client