Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
File:                     2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft (raw, json)
Hash identifier:          2KBCSk0QsFVvKSYMto4verRLLc5gVO63S+JNzLrerRQ=
Subject key identifier:   3E:9C:C2:97:6A:9B:03:A0:D1:76:31:E5:6F:B3:8B:F8:F5:9C:1A:20
Authority key identifier: D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F
Certificate issuer:       /CN=d9ad6f484530e57cc60e3a865a695948476c413f
Certificate serial:       01A13E2661C0C8DF0F5891D5F2B02AB01EEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
Manifest number:          1A34
Signing time:             Thu 15 Oct 2026 06:01:04 +0000
Manifest this update:     Thu 15 Oct 2026 06:01:04 +0000
Manifest next update:     Fri 16 Oct 2026 06:01:04 +0000
Files and hashes:         1: 2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl (hash: iRE7erCuUxTH0hK1xMX1mX61jN+TVijnBKTeo7S0bXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:61:c0:c8:df:0f:58:91:d5:f2:b0:2a:b0:1e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ad6f484530e57cc60e3a865a695948476c413f
        Validity
            Not Before: Oct 15 06:01:04 2026 GMT
            Not After : Oct 16 06:01:04 2026 GMT
        Subject: CN=3e9cc2976a9b03a0d17631e56fb38bf8f59c1a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:30:68:42:d0:8f:58:98:01:74:f2:5c:db:21:
                    be:46:17:c5:62:b9:9d:e8:e1:9e:47:73:8f:e1:e2:
                    9a:00:78:19:a2:8b:b7:e3:65:21:64:7b:3f:cd:99:
                    4a:b6:9f:38:5c:e9:14:39:b4:4b:d6:b4:10:13:22:
                    b0:64:5c:39:b0:04:8a:0c:d2:d5:ec:35:c6:a9:10:
                    3a:de:ba:53:7c:1d:32:20:48:ac:27:84:32:97:9a:
                    d3:44:14:97:6e:33:84:eb:03:9d:46:ae:44:65:c9:
                    96:0d:9e:2f:0b:e2:d0:d7:e7:23:83:a4:98:7b:cb:
                    08:5a:69:0a:ef:a6:a5:f6:de:7e:ba:2d:2b:8f:d6:
                    87:bf:3f:2a:07:89:ea:f1:b6:f1:5a:87:95:64:e6:
                    a8:0e:70:8a:2f:aa:8a:7e:dc:fb:76:8b:d3:a9:6a:
                    fe:c1:fb:df:a9:a4:b9:9a:ea:3a:a2:d3:c4:0d:53:
                    af:2e:b1:d1:45:6b:c0:70:0a:09:49:37:c1:96:1f:
                    12:19:96:19:30:ea:12:86:b0:cb:e0:3c:f2:e3:6a:
                    cb:25:a2:1a:99:90:1b:35:28:b1:ed:5a:ab:1f:4f:
                    64:f6:18:e7:c8:52:84:f4:02:fb:5e:7d:9f:fa:e7:
                    b1:d6:ce:05:cd:a5:9e:a1:bd:07:39:30:2d:3a:d7:
                    59:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9C:C2:97:6A:9B:03:A0:D1:76:31:E5:6F:B3:8B:F8:F5:9C:1A:20
            X509v3 Authority Key Identifier:
                keyid:D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:40:23:4b:6c:6d:91:14:42:ab:9e:32:19:48:4f:88:6a:44:
         00:c5:d5:9d:29:2d:5d:2e:fe:c5:e2:7b:25:49:b7:dc:52:45:
         2c:b7:16:fb:27:13:c6:82:6a:89:53:38:d6:f3:a2:52:f5:69:
         49:1b:3c:3e:b0:ab:56:f2:dc:23:b6:eb:50:cb:87:87:db:14:
         09:77:fb:ba:c2:69:f8:f2:d8:62:9e:ff:c6:93:9f:c6:aa:62:
         6d:2e:e6:9d:1b:f8:f4:e9:78:4a:4c:95:3c:fe:05:cf:bc:2d:
         6e:e3:f7:ee:e5:bf:bb:0e:52:1b:1d:63:a4:b0:83:38:97:44:
         cd:95:b1:83:e8:8d:31:43:80:21:21:88:99:3a:dd:e4:de:5e:
         af:6d:44:bb:38:e5:51:ac:65:b2:96:43:a1:26:38:bd:2d:36:
         41:e3:82:44:78:3d:f6:4e:34:d2:7a:62:86:4f:31:51:45:aa:
         0f:21:16:a6:5a:b9:59:84:c7:b6:ae:e8:24:d7:6c:37:d6:4e:
         79:f4:20:d9:d8:58:b0:f6:8f:42:a8:6e:41:62:d5:42:c4:99:
         43:0a:79:3d:09:8c:9a:c9:63:97:51:56:f3:ab:95:3a:c9:a4:
         6c:7d:27:44:12:f4:d7:4e:04:a0:d8:51:84:aa:f9:59:60:f6:
         05:b1:37:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+JmHAyN8PWJHV8rAqsB7sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YWQ2ZjQ4NDUzMGU1N2NjNjBlM2E4NjVhNjk1OTQ4NDc2
YzQxM2YwHhcNMjYxMDE1MDYwMTA0WhcNMjYxMDE2MDYwMTA0WjAzMTEwLwYDVQQD
EygzZTljYzI5NzZhOWIwM2EwZDE3NjMxZTU2ZmIzOGJmOGY1OWMxYTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzBoQtCPWJgBdPJc2yG+RhfFYrmd
6OGeR3OP4eKaAHgZoou342UhZHs/zZlKtp84XOkUObRL1rQQEyKwZFw5sASKDNLV
7DXGqRA63rpTfB0yIEisJ4Qyl5rTRBSXbjOE6wOdRq5EZcmWDZ4vC+LQ1+cjg6SY
e8sIWmkK76al9t5+ui0rj9aHvz8qB4nq8bbxWoeVZOaoDnCKL6qKftz7dovTqWr+
wfvfqaS5muo6otPEDVOvLrHRRWvAcAoJSTfBlh8SGZYZMOoShrDL4Dzy42rLJaIa
mZAbNSix7VqrH09k9hjnyFKE9AL7Xn2f+uex1s4FzaWeob0HOTAtOtdZOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6cwpdqmwOg0XYx5W+zi/j1nBogMB8GA1UdIwQY
MBaAFNmtb0hFMOV8xg46hlppWUhHbEE/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmExdlNFVXc1WHpHRGpxR1dtbFpTRWRzUVQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jNTE1YmItN2U1Mi00NDc1LWFlMjUt
ZDE4MWQxZjc2MTI4LzEvMmExdlNFVXc1WHpHRGpxR1dtbFpTRWRzUVQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9jNTE1YmItN2U1Mi00NDc1LWFlMjUtZDE4MWQxZjc2MTI4
LzEvMmExdlNFVXc1WHpHRGpxR1dtbFpTRWRzUVQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPEAjS2xt
kRRCq54yGUhPiGpEAMXVnSktXS7+xeJ7JUm33FJFLLcW+ycTxoJqiVM41vOiUvVp
SRs8PrCrVvLcI7brUMuHh9sUCXf7usJp+PLYYp7/xpOfxqpibS7mnRv49Ol4SkyV
PP4Fz7wtbuP37uW/uw5SGx1jpLCDOJdEzZWxg+iNMUOAISGImTrd5N5er21Euzjl
UaxlspZDoSY4vS02QeOCRHg99k400npihk8xUUWqDyEWplq5WYTHtq7oJNdsN9ZO
efQg2dhYsPaPQqhuQWLVQsSZQwp5PQmMmsljl1FW86uVOsmkbH0nRBL0104EoNhR
hKr5WWD2BbE3xQ==
-----END CERTIFICATE-----