Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
File:                     E2elkhpPFIx4qmwh-E8s_I2I6ck.mft (raw, json)
Hash identifier:          BVHiQOeizQTg88wJe+feJbXEsbuPwtfLY9IQ/t7A0rA=
Subject key identifier:   26:2D:91:2F:C3:D8:09:C6:B4:CA:BB:BB:1A:99:79:9C:77:71:97:8E
Authority key identifier: 13:67:A5:92:1A:4F:14:8C:78:AA:6C:21:F8:4F:2C:FC:8D:88:E9:C9
Certificate issuer:       /CN=1367a5921a4f148c78aa6c21f84f2cfc8d88e9c9
Certificate serial:       01A001DD7F8F0A5DE51A8F8DAFADE803CE6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
Manifest number:          19FE
Signing time:             Fri 14 Aug 2026 20:01:28 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:28 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:28 +0000
Files and hashes:         1: E2elkhpPFIx4qmwh-E8s_I2I6ck.crl (hash: rX3uwJVQeHDZLOtihaqrwzQFOZgQsFrGNx0qmnjEVWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:7f:8f:0a:5d:e5:1a:8f:8d:af:ad:e8:03:ce:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1367a5921a4f148c78aa6c21f84f2cfc8d88e9c9
        Validity
            Not Before: Aug 14 20:01:28 2026 GMT
            Not After : Aug 15 20:01:28 2026 GMT
        Subject: CN=262d912fc3d809c6b4cabbbb1a99799c7771978e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:28:b0:1d:c9:3c:dc:6a:19:48:d3:49:1c:97:
                    7a:fa:95:66:9e:82:16:2a:56:ab:e5:20:e2:a4:63:
                    6f:53:97:20:60:7e:b2:98:f0:cf:c1:4e:5d:c5:b5:
                    8f:26:29:50:a6:5c:3c:3c:89:4a:a9:59:01:ea:85:
                    f5:78:3e:4b:92:d3:a9:13:fd:3b:b6:2a:e2:af:03:
                    65:92:3d:fb:6d:aa:5c:d1:2d:af:94:29:2e:ba:66:
                    fa:8e:de:08:45:9f:4e:75:0f:ae:82:e0:c5:2d:13:
                    69:d9:2a:97:0a:d9:d2:13:f5:7a:1f:ef:bc:4b:37:
                    a4:06:b7:30:42:fb:61:0c:09:c4:8f:f7:4e:ae:63:
                    dc:1c:06:03:2f:d2:92:34:6e:43:bf:24:f1:51:ac:
                    2b:75:ce:bd:72:b0:c3:a1:a0:07:f2:a3:1d:eb:e9:
                    83:79:5c:af:9b:92:8a:09:75:2d:0c:62:64:a4:55:
                    8a:5f:37:46:df:45:68:62:a8:90:14:3c:71:5d:9e:
                    a5:07:a1:49:4c:8e:d0:7b:2e:b0:6d:8f:30:b0:18:
                    f3:33:d8:20:a5:f2:22:9f:59:98:20:11:9e:b9:dc:
                    eb:10:1f:1d:a5:a4:ce:fe:e3:8d:be:c5:a7:3a:0e:
                    ac:69:5c:e9:7f:5c:ed:5e:2a:02:76:96:09:3e:33:
                    55:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2D:91:2F:C3:D8:09:C6:B4:CA:BB:BB:1A:99:79:9C:77:71:97:8E
            X509v3 Authority Key Identifier:
                keyid:13:67:A5:92:1A:4F:14:8C:78:AA:6C:21:F8:4F:2C:FC:8D:88:E9:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:74:56:b9:22:07:57:6c:ee:26:c0:33:1c:17:e1:3d:72:a1:
         fb:e4:3d:a8:5f:1a:2b:c0:6e:a2:68:30:fc:dd:28:9a:d2:9c:
         5d:64:21:e8:df:88:3b:bc:83:30:be:ff:eb:1d:0f:0b:24:1d:
         59:27:0c:55:0e:27:3f:ba:bc:b6:9f:a5:d9:d9:33:ce:7e:79:
         71:6b:2c:d7:bb:1b:e8:9e:3b:32:3b:ae:85:19:ce:2a:53:2c:
         a3:64:3c:58:6b:0c:f6:73:2a:5d:30:25:b2:4b:7d:60:8f:21:
         f3:ae:25:7b:08:18:50:f0:db:7c:17:43:ae:84:b1:4d:95:40:
         22:09:a7:8a:67:f7:96:eb:ea:39:cc:ce:97:2d:45:51:8d:ac:
         4e:b4:00:2c:21:28:5d:4e:b9:01:e0:83:cf:bb:c5:0b:73:91:
         fc:6d:f4:fd:e4:16:c5:49:d8:25:ef:75:15:94:2a:fe:9f:6d:
         7f:44:af:40:64:28:7b:b8:87:6c:fa:61:5d:a3:91:f5:97:72:
         06:ed:74:6d:22:63:41:2d:8f:3f:71:27:e8:61:b0:f0:d8:82:
         ec:be:94:96:9b:17:c0:dd:92:a8:5b:38:f3:27:57:f5:a5:ad:
         7f:55:b9:e3:40:96:6a:9c:17:12:46:67:19:f9:46:67:82:4e:
         38:33:03:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3X+PCl3lGo+Nr63oA85tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNjdhNTkyMWE0ZjE0OGM3OGFhNmMyMWY4NGYyY2ZjOGQ4
OGU5YzkwHhcNMjYwODE0MjAwMTI4WhcNMjYwODE1MjAwMTI4WjAzMTEwLwYDVQQD
EygyNjJkOTEyZmMzZDgwOWM2YjRjYWJiYmIxYTk5Nzk5Yzc3NzE5NzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSiwHck83GoZSNNJHJd6+pVmnoIW
Klar5SDipGNvU5cgYH6ymPDPwU5dxbWPJilQplw8PIlKqVkB6oX1eD5LktOpE/07
tirirwNlkj37bapc0S2vlCkuumb6jt4IRZ9OdQ+uguDFLRNp2SqXCtnSE/V6H++8
SzekBrcwQvthDAnEj/dOrmPcHAYDL9KSNG5DvyTxUawrdc69crDDoaAH8qMd6+mD
eVyvm5KKCXUtDGJkpFWKXzdG30VoYqiQFDxxXZ6lB6FJTI7Qey6wbY8wsBjzM9gg
pfIin1mYIBGeudzrEB8dpaTO/uONvsWnOg6saVzpf1ztXioCdpYJPjNV3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYtkS/D2AnGtMq7uxqZeZx3cZeOMB8GA1UdIwQY
MBaAFBNnpZIaTxSMeKpsIfhPLPyNiOnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTJlbGtocFBGSXg0cW13aC1FOHNfSTJJNmNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9kYjc1NWEtMWRiOS00YTY5LWE5YmQt
NGY1ZWIyYzg4YzI4LzEvRTJlbGtocFBGSXg0cW13aC1FOHNfSTJJNmNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9kYjc1NWEtMWRiOS00YTY5LWE5YmQtNGY1ZWIyYzg4YzI4
LzEvRTJlbGtocFBGSXg0cW13aC1FOHNfSTJJNmNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHRWuSIH
V2zuJsAzHBfhPXKh++Q9qF8aK8Buomgw/N0omtKcXWQh6N+IO7yDML7/6x0PCyQd
WScMVQ4nP7q8tp+l2dkzzn55cWss17sb6J47MjuuhRnOKlMso2Q8WGsM9nMqXTAl
skt9YI8h864lewgYUPDbfBdDroSxTZVAIgmnimf3luvqOczOly1FUY2sTrQALCEo
XU65AeCDz7vFC3OR/G30/eQWxUnYJe91FZQq/p9tf0SvQGQoe7iHbPphXaOR9Zdy
Bu10bSJjQS2PP3En6GGw8NiC7L6UlpsXwN2SqFs48ydX9aWtf1W540CWapwXEkZn
GflGZ4JOODMDKA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:51 2026 by rpki-client