Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
File:                     96wXOfUp2vTMczgkibgFl-ugf0E.mft (raw, json)
Hash identifier:          6f0tJcVgqC8xce6b6o9IddpR8BqPMxhJTMHlsPplcSs=
Subject key identifier:   C1:A7:E4:7F:4D:81:AB:BD:C3:9B:17:0B:0B:89:10:A7:B0:62:D5:FF
Authority key identifier: F7:AC:17:39:F5:29:DA:F4:CC:73:38:24:89:B8:05:97:EB:A0:7F:41
Certificate issuer:       /CN=f7ac1739f529daf4cc73382489b80597eba07f41
Certificate serial:       019E303BEDEAA0788653DB0C9C36494BB123
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
Manifest number:          0B48
Signing time:             Sat 16 May 2026 10:01:34 +0000
Manifest this update:     Sat 16 May 2026 10:01:34 +0000
Manifest next update:     Sun 17 May 2026 10:01:34 +0000
Files and hashes:         1: 96wXOfUp2vTMczgkibgFl-ugf0E.crl (hash: dBoEq87fVTre6j7cmXo51fbWgeOHmEAMKVGIwnDIK24=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:ed:ea:a0:78:86:53:db:0c:9c:36:49:4b:b1:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7ac1739f529daf4cc73382489b80597eba07f41
        Validity
            Not Before: May 16 10:01:34 2026 GMT
            Not After : May 17 10:01:34 2026 GMT
        Subject: CN=c1a7e47f4d81abbdc39b170b0b8910a7b062d5ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:35:63:cd:58:a6:22:32:4d:db:49:a6:08:92:
                    26:cb:ac:8a:f8:2a:4e:4d:ff:6a:96:1f:eb:28:c7:
                    02:8c:a9:08:d8:1c:0a:18:7f:e2:c5:fe:98:2c:ed:
                    1c:2c:1b:d2:f1:10:79:44:d8:3d:44:74:44:fe:54:
                    3d:97:b9:8f:b4:c9:ad:26:0c:bb:62:54:10:7e:ac:
                    ba:ce:4f:48:ae:31:24:4c:5c:41:1f:a7:3f:4b:9a:
                    f0:6d:bf:29:29:72:80:d2:62:88:7a:9a:62:a8:67:
                    38:26:83:27:c6:38:2e:cb:2b:e1:67:17:05:65:a9:
                    51:0a:a4:3a:e8:61:eb:ae:4e:3c:37:35:5b:7b:14:
                    d7:9e:0b:ce:69:71:61:de:05:75:93:ea:c9:07:a3:
                    c7:76:59:be:53:87:f8:cb:5c:1e:8b:bc:40:58:3d:
                    e0:80:96:90:5b:6a:15:5e:ba:2d:9b:f3:49:5a:78:
                    e0:56:aa:16:74:2c:52:ab:97:cd:6a:80:db:a6:c2:
                    e2:a3:b9:fc:e2:f8:c2:1f:dc:e9:39:27:39:4c:12:
                    25:6a:8c:58:f7:b8:73:08:95:73:83:a6:17:a1:63:
                    7c:e4:6e:3d:a5:65:bb:1e:02:01:8b:2c:b1:8f:27:
                    7b:52:32:31:de:3e:ad:92:7a:c7:3e:17:4e:16:43:
                    43:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A7:E4:7F:4D:81:AB:BD:C3:9B:17:0B:0B:89:10:A7:B0:62:D5:FF
            X509v3 Authority Key Identifier:
                keyid:F7:AC:17:39:F5:29:DA:F4:CC:73:38:24:89:B8:05:97:EB:A0:7F:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:5b:72:41:06:32:36:0e:26:74:a4:6f:19:d7:cd:17:07:84:
         b7:db:59:c4:ad:cb:fe:69:85:c4:3b:94:ac:08:ac:3b:58:aa:
         01:14:d5:40:75:b7:00:ad:a5:27:98:0c:9a:eb:aa:76:65:ac:
         a3:8d:fd:90:3d:78:d5:5b:a4:20:34:97:b8:c1:67:4e:57:99:
         6d:46:a9:59:4f:74:06:8e:2c:c5:41:13:35:93:93:18:34:a4:
         f1:3c:9e:33:f7:54:d8:f6:19:90:43:a4:8e:aa:13:54:ed:76:
         3f:34:f7:89:43:66:bf:fa:a2:73:ff:82:d8:06:f1:78:20:84:
         f2:e7:de:d0:b8:0b:8d:4b:39:da:c0:dc:33:db:a8:16:d3:de:
         2e:18:d8:ed:6d:b3:94:fc:fc:c4:90:d9:2f:cb:92:f0:4c:f9:
         90:20:b7:0b:00:c0:28:2c:6c:10:1a:0d:d2:4a:80:1c:7d:d1:
         c6:47:cc:c4:b3:a3:75:30:96:03:96:a0:e9:24:6e:98:96:2f:
         09:60:8b:91:22:53:24:4f:24:75:c6:6f:1e:d9:62:00:9c:8e:
         51:7a:52:54:98:be:29:da:d0:25:16:4e:ce:cd:bb:38:2a:45:
         c1:fe:ce:b0:79:67:ab:e9:08:d7:e0:2b:57:5d:87:16:28:1a:
         ca:fa:38:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wO+3qoHiGU9sMnDZJS7EjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YWMxNzM5ZjUyOWRhZjRjYzczMzgyNDg5YjgwNTk3ZWJh
MDdmNDEwHhcNMjYwNTE2MTAwMTM0WhcNMjYwNTE3MTAwMTM0WjAzMTEwLwYDVQQD
EyhjMWE3ZTQ3ZjRkODFhYmJkYzM5YjE3MGIwYjg5MTBhN2IwNjJkNWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjVjzVimIjJN20mmCJImy6yK+CpO
Tf9qlh/rKMcCjKkI2BwKGH/ixf6YLO0cLBvS8RB5RNg9RHRE/lQ9l7mPtMmtJgy7
YlQQfqy6zk9IrjEkTFxBH6c/S5rwbb8pKXKA0mKIeppiqGc4JoMnxjguyyvhZxcF
ZalRCqQ66GHrrk48NzVbexTXngvOaXFh3gV1k+rJB6PHdlm+U4f4y1wei7xAWD3g
gJaQW2oVXrotm/NJWnjgVqoWdCxSq5fNaoDbpsLio7n84vjCH9zpOSc5TBIlaoxY
97hzCJVzg6YXoWN85G49pWW7HgIBiyyxjyd7UjIx3j6tknrHPhdOFkNDgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGn5H9Ngau9w5sXCwuJEKewYtX/MB8GA1UdIwQY
MBaAFPesFzn1Kdr0zHM4JIm4BZfroH9BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTZ3WE9mVXAydlRNY3pna2liZ0ZsLXVnZjBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8xMjNiMjUtZmVlNC00OTBiLWJlMDAt
MGI4YTc5MmMxYjlkLzEvOTZ3WE9mVXAydlRNY3pna2liZ0ZsLXVnZjBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8xMjNiMjUtZmVlNC00OTBiLWJlMDAtMGI4YTc5MmMxYjlk
LzEvOTZ3WE9mVXAydlRNY3pna2liZ0ZsLXVnZjBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtFtyQQYy
Ng4mdKRvGdfNFweEt9tZxK3L/mmFxDuUrAisO1iqARTVQHW3AK2lJ5gMmuuqdmWs
o439kD141VukIDSXuMFnTleZbUapWU90Bo4sxUETNZOTGDSk8TyeM/dU2PYZkEOk
jqoTVO12PzT3iUNmv/qic/+C2AbxeCCE8ufe0LgLjUs52sDcM9uoFtPeLhjY7W2z
lPz8xJDZL8uS8Ez5kCC3CwDAKCxsEBoN0kqAHH3RxkfMxLOjdTCWA5ag6SRumJYv
CWCLkSJTJE8kdcZvHtliAJyOUXpSVJi+KdrQJRZOzs27OCpFwf7OsHlnq+kI1+Ar
V12HFigayvo4Lw==
-----END CERTIFICATE-----
Generated at Sat May 16 17:56:22 2026 by rpki-client