Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
File:                     DA96BN1ySaXRS33gVCpBlzgABsw.mft (raw, json)
Hash identifier:          kvWDfQxKCjzmcuIPcyK03HpOmFrUOAOhhwEeNfRoZ18=
Subject key identifier:   69:13:80:56:36:46:8D:CE:C2:30:46:60:44:44:1F:56:1A:23:94:BC
Authority key identifier: 0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
Certificate issuer:       /CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Certificate serial:       01A1163CAD0C67B3D87E95AB459F55B237DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
Manifest number:          1633
Signing time:             Wed 07 Oct 2026 12:00:37 +0000
Manifest this update:     Wed 07 Oct 2026 12:00:37 +0000
Manifest next update:     Thu 08 Oct 2026 12:00:37 +0000
Files and hashes:         1: DA96BN1ySaXRS33gVCpBlzgABsw.crl (hash: 6s58eorD9VMMGgVXMLnoJKmYG7VlxaJUACZSNcRloCQ=)
                          2: MGxIjp6odA89mKCCoAoK4gOBECQ.roa (hash: WV1c3KgNpfTE3JHTiidL4UKk6xN2JAg5ninbZPlQg+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 12:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:16:3c:ad:0c:67:b3:d8:7e:95:ab:45:9f:55:b2:37:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
        Validity
            Not Before: Oct  7 12:00:37 2026 GMT
            Not After : Oct  8 12:00:37 2026 GMT
        Subject: CN=6913805636468dcec230466044441f561a2394bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4c:ed:3e:02:d4:9c:6f:78:f0:ff:4b:8d:17:
                    fe:04:73:69:2b:1c:03:f5:99:51:5b:4d:5a:72:11:
                    ca:89:eb:be:e9:b8:89:3b:94:1a:ee:d1:f5:0c:51:
                    a2:77:22:d1:4e:4a:c6:88:5b:9c:65:72:98:61:50:
                    d9:6e:42:25:a1:79:3d:57:dc:d4:27:05:15:ea:96:
                    ec:2e:be:ee:51:31:f3:f8:a3:62:ca:4f:14:68:3e:
                    3b:cc:e8:68:50:ef:dd:53:82:86:bf:f6:b1:de:fd:
                    24:93:35:a9:af:5b:ba:7a:23:aa:7c:55:03:45:c2:
                    46:b4:2d:c6:fc:2f:2a:13:33:7d:c1:e7:2e:cd:92:
                    60:e0:9d:cc:09:44:58:4f:2e:c3:6a:06:2f:62:ce:
                    b2:e6:d7:56:98:0e:ee:4f:0d:b5:1b:6f:03:b9:95:
                    3e:ab:ac:28:ca:63:56:65:8b:7c:68:e1:32:bd:0b:
                    4c:74:3a:a5:bc:19:14:37:42:6b:6c:ad:77:19:b5:
                    fb:3c:a7:ff:da:de:1c:2d:f4:97:60:0c:b1:4b:5b:
                    fa:e2:fc:7e:81:0d:51:e1:e8:1e:fc:7e:de:69:40:
                    d1:7d:1f:c0:3f:7a:7d:a7:41:6f:33:1e:e4:58:aa:
                    d5:7d:30:49:53:b9:d6:af:4e:96:a4:69:7b:e7:d4:
                    90:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:13:80:56:36:46:8D:CE:C2:30:46:60:44:44:1F:56:1A:23:94:BC
            X509v3 Authority Key Identifier:
                keyid:0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:49:d0:d0:e8:75:38:90:7c:75:5e:b3:d9:c2:d1:7e:af:ba:
         2c:90:4f:f9:e6:b5:3a:fd:ae:c0:36:c2:e9:48:44:0e:f1:f6:
         c4:99:a1:ee:4b:54:1a:43:eb:9c:6c:ef:00:1b:cb:ad:0a:2b:
         f8:4b:c7:13:d0:06:93:69:92:26:70:87:e4:cf:1c:8e:c8:c3:
         0b:30:73:81:05:4a:3a:4c:e5:e7:45:b8:b6:e0:df:8f:b6:33:
         83:1b:e8:d9:cc:16:bc:43:a0:95:7b:3a:c4:9b:fd:2b:46:b0:
         02:62:c5:92:6f:db:20:61:be:ae:0c:5c:30:3c:52:3f:c5:31:
         13:10:b5:72:52:57:26:a5:24:19:35:d4:df:e0:da:81:88:b0:
         cf:37:46:45:10:f9:3c:26:8b:47:12:e5:5a:1f:26:61:c7:86:
         82:3a:86:1e:0e:63:35:61:ce:66:f7:a8:8b:e5:7c:54:23:2a:
         8b:09:85:4a:8d:3e:6c:5e:89:ab:22:2b:5a:66:90:d0:f0:d3:
         3d:55:c1:3a:e2:9c:98:ae:ee:02:e5:0a:60:ed:53:e8:29:43:
         2f:bf:1c:52:6a:8c:1e:c1:eb:ea:f0:3d:a6:91:5a:3e:5d:5b:
         70:d9:c0:28:33:96:07:08:ed:42:a9:26:13:58:61:4b:36:0d:
         a7:53:89:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEWPK0MZ7PYfpWrRZ9VsjfbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMGY3YTA0ZGQ3MjQ5YTVkMTRiN2RlMDU0MmE0MTk3Mzgw
MDA2Y2MwHhcNMjYxMDA3MTIwMDM3WhcNMjYxMDA4MTIwMDM3WjAzMTEwLwYDVQQD
Eyg2OTEzODA1NjM2NDY4ZGNlYzIzMDQ2NjA0NDQ0MWY1NjFhMjM5NGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikztPgLUnG948P9LjRf+BHNpKxwD
9ZlRW01achHKieu+6biJO5Qa7tH1DFGidyLRTkrGiFucZXKYYVDZbkIloXk9V9zU
JwUV6pbsLr7uUTHz+KNiyk8UaD47zOhoUO/dU4KGv/ax3v0kkzWpr1u6eiOqfFUD
RcJGtC3G/C8qEzN9wecuzZJg4J3MCURYTy7DagYvYs6y5tdWmA7uTw21G28DuZU+
q6woymNWZYt8aOEyvQtMdDqlvBkUN0JrbK13GbX7PKf/2t4cLfSXYAyxS1v64vx+
gQ1R4ege/H7eaUDRfR/AP3p9p0FvMx7kWKrVfTBJU7nWr06WpGl759SQjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkTgFY2Ro3OwjBGYEREH1YaI5S8MB8GA1UdIwQY
MBaAFAwPegTdckml0Ut94FQqQZc4AAbMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREE5NkJOMXlTYVhSUzMzZ1ZDcEJsemdBQnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8xMWRiMTQtZTg0NS00ZTRmLWE2OTIt
YTNjYmVmZmY3Nzc3LzEvREE5NkJOMXlTYVhSUzMzZ1ZDcEJsemdBQnN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8xMWRiMTQtZTg0NS00ZTRmLWE2OTItYTNjYmVmZmY3Nzc3
LzEvREE5NkJOMXlTYVhSUzMzZ1ZDcEJsemdBQnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZknQ0Oh1
OJB8dV6z2cLRfq+6LJBP+ea1Ov2uwDbC6UhEDvH2xJmh7ktUGkPrnGzvABvLrQor
+EvHE9AGk2mSJnCH5M8cjsjDCzBzgQVKOkzl50W4tuDfj7Yzgxvo2cwWvEOglXs6
xJv9K0awAmLFkm/bIGG+rgxcMDxSP8UxExC1clJXJqUkGTXU3+DagYiwzzdGRRD5
PCaLRxLlWh8mYceGgjqGHg5jNWHOZveoi+V8VCMqiwmFSo0+bF6JqyIrWmaQ0PDT
PVXBOuKcmK7uAuUKYO1T6ClDL78cUmqMHsHr6vA9ppFaPl1bcNnAKDOWBwjtQqkm
E1hhSzYNp1OJnA==
-----END CERTIFICATE-----
Generated at Wed Oct 7 23:11:27 2026 by rpki-client