Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
File:                     WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft (raw, json)
Hash identifier:          8KhWpzdK0IQSWxAN1sbgF6bSdtjLvzPFVHV7TupOylE=
Subject key identifier:   11:95:0F:5B:6F:A7:47:EF:7D:75:B5:81:3F:61:CD:87:F9:FE:93:D4
Authority key identifier: 59:5A:51:F4:5C:0C:B6:37:91:42:0D:09:43:C2:83:51:D1:BB:BD:0A
Certificate issuer:       /CN=595a51f45c0cb63791420d0943c28351d1bbbd0a
Certificate serial:       019FF9ED2A6B43948B09008E8F987D2F2568
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
Manifest number:          0E09
Signing time:             Thu 13 Aug 2026 07:01:37 +0000
Manifest this update:     Thu 13 Aug 2026 07:01:37 +0000
Manifest next update:     Fri 14 Aug 2026 07:01:37 +0000
Files and hashes:         1: WVpR9FwMtjeRQg0JQ8KDUdG7vQo.crl (hash: Yu9CX+GT9Kl/UAetM8OBMqa+vAgBTWRd/ChcCLzov+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:ed:2a:6b:43:94:8b:09:00:8e:8f:98:7d:2f:25:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595a51f45c0cb63791420d0943c28351d1bbbd0a
        Validity
            Not Before: Aug 13 07:01:37 2026 GMT
            Not After : Aug 14 07:01:37 2026 GMT
        Subject: CN=11950f5b6fa747ef7d75b5813f61cd87f9fe93d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:05:68:00:2e:d1:af:9d:7d:6a:f5:f0:ec:72:
                    81:b7:af:3a:d8:51:9a:29:dc:7c:c1:fd:51:0b:3c:
                    28:5a:97:27:f2:1b:8d:da:c9:8e:92:c4:44:c7:f8:
                    63:69:e4:97:3c:78:16:91:68:da:40:66:09:b5:5f:
                    f1:5d:92:a9:75:d0:1c:34:d3:d5:5b:55:96:4e:c4:
                    9c:9f:f9:94:f6:53:d4:95:a6:85:21:67:f8:d4:3e:
                    00:86:6d:d4:6d:88:21:8d:15:bd:d5:62:87:d5:34:
                    94:67:ef:e9:33:4e:89:41:90:67:f5:a0:5d:ea:14:
                    1b:e1:98:55:7b:da:79:4e:d6:10:b7:d5:40:89:4a:
                    ae:c8:32:44:be:44:50:c4:82:9c:96:20:78:68:4e:
                    ac:52:c1:46:c5:24:e3:2c:71:be:36:31:7b:9c:ce:
                    dd:28:72:31:4e:2d:19:bf:56:6d:1d:97:1b:4c:67:
                    0b:70:2d:16:0c:bb:c7:b3:15:ae:ea:94:44:ee:61:
                    8e:84:94:5a:31:fa:2f:7c:07:7e:11:08:7e:d3:d6:
                    43:36:04:be:41:c6:7b:74:c6:50:fd:02:26:41:9a:
                    70:04:f4:05:1d:70:10:fb:1d:dd:a9:16:6f:a7:58:
                    f3:53:98:03:8a:f8:8e:29:0e:ed:ba:5a:6d:ba:24:
                    21:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:95:0F:5B:6F:A7:47:EF:7D:75:B5:81:3F:61:CD:87:F9:FE:93:D4
            X509v3 Authority Key Identifier:
                keyid:59:5A:51:F4:5C:0C:B6:37:91:42:0D:09:43:C2:83:51:D1:BB:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:a0:41:46:6e:88:76:6a:31:4f:ac:1b:05:9c:ea:99:00:50:
         95:4a:20:8a:2f:60:57:19:2b:d9:49:f2:e9:a3:e3:8c:65:37:
         f9:80:ce:8c:62:60:c2:ef:cb:26:ef:d8:db:52:16:b1:31:b9:
         5e:9c:f1:99:02:86:40:f2:3a:a1:7d:a3:18:20:7f:e2:60:9a:
         4b:78:a4:87:d0:a7:81:20:59:4e:31:1a:08:4c:f0:de:97:4f:
         41:ad:3b:a7:28:a5:0c:c9:8a:1c:01:c7:54:b1:40:c5:22:0f:
         c6:75:ff:e4:ef:7c:92:6c:fb:d9:3b:ed:ee:95:ed:67:36:5a:
         2a:da:98:ab:73:e8:e9:f6:e7:ac:b4:bc:f2:a7:5d:e5:a3:90:
         8c:46:6e:8a:21:9c:20:da:36:0e:d6:2e:63:40:8b:ab:24:a3:
         47:ae:23:a4:52:d7:dd:79:48:dd:b9:f5:3f:14:72:df:3c:a3:
         49:3b:8c:de:5c:12:66:2d:a7:1a:bc:5a:37:fd:18:48:c4:d4:
         83:ea:3f:1a:f6:7b:ba:be:ec:a5:c5:20:4e:10:57:88:49:24:
         49:47:83:28:3f:34:c4:71:26:0e:d5:e4:3f:15:ba:c9:2c:f6:
         f4:be:23:89:3b:97:12:1c:ee:a1:66:25:ca:29:aa:2c:c9:3e:
         f8:9e:a1:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/57SprQ5SLCQCOj5h9LyVoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NWE1MWY0NWMwY2I2Mzc5MTQyMGQwOTQzYzI4MzUxZDFi
YmJkMGEwHhcNMjYwODEzMDcwMTM3WhcNMjYwODE0MDcwMTM3WjAzMTEwLwYDVQQD
EygxMTk1MGY1YjZmYTc0N2VmN2Q3NWI1ODEzZjYxY2Q4N2Y5ZmU5M2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9wVoAC7Rr519avXw7HKBt6862FGa
Kdx8wf1RCzwoWpcn8huN2smOksREx/hjaeSXPHgWkWjaQGYJtV/xXZKpddAcNNPV
W1WWTsScn/mU9lPUlaaFIWf41D4Ahm3UbYghjRW91WKH1TSUZ+/pM06JQZBn9aBd
6hQb4ZhVe9p5TtYQt9VAiUquyDJEvkRQxIKcliB4aE6sUsFGxSTjLHG+NjF7nM7d
KHIxTi0Zv1ZtHZcbTGcLcC0WDLvHsxWu6pRE7mGOhJRaMfovfAd+EQh+09ZDNgS+
QcZ7dMZQ/QImQZpwBPQFHXAQ+x3dqRZvp1jzU5gDiviOKQ7tulptuiQhCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGVD1tvp0fvfXW1gT9hzYf5/pPUMB8GA1UdIwQY
MBaAFFlaUfRcDLY3kUINCUPCg1HRu70KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1ZwUjlGd010amVSUWcwSlE4S0RVZEc3dlFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zOTA0YmItMGI2Yy00ZGE1LWE1YWYt
YWFmYWFlYWVkOGJiLzEvV1ZwUjlGd010amVSUWcwSlE4S0RVZEc3dlFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8zOTA0YmItMGI2Yy00ZGE1LWE1YWYtYWFmYWFlYWVkOGJi
LzEvV1ZwUjlGd010amVSUWcwSlE4S0RVZEc3dlFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA06BBRm6I
dmoxT6wbBZzqmQBQlUogii9gVxkr2Uny6aPjjGU3+YDOjGJgwu/LJu/Y21IWsTG5
XpzxmQKGQPI6oX2jGCB/4mCaS3ikh9CngSBZTjEaCEzw3pdPQa07pyilDMmKHAHH
VLFAxSIPxnX/5O98kmz72Tvt7pXtZzZaKtqYq3Po6fbnrLS88qdd5aOQjEZuiiGc
INo2DtYuY0CLqySjR64jpFLX3XlI3bn1PxRy3zyjSTuM3lwSZi2nGrxaN/0YSMTU
g+o/GvZ7ur7spcUgThBXiEkkSUeDKD80xHEmDtXkPxW6ySz29L4jiTuXEhzuoWYl
yimqLMk++J6h5Q==
-----END CERTIFICATE-----
Generated at Thu Aug 13 10:41:41 2026 by rpki-client