Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
File:                     898KdcnvaBuNIzZ9vo7a0FPzvZU.mft (raw, json)
Hash identifier:          3TtUFjUQZNXmjQyHgRCH5VEQyrv069vl9LofbyI+564=
Subject key identifier:   9D:55:46:A5:8C:9A:86:CA:56:9C:71:E9:7D:0F:DD:E4:93:B8:D7:2E
Authority key identifier: F3:DF:0A:75:C9:EF:68:1B:8D:23:36:7D:BE:8E:DA:D0:53:F3:BD:95
Certificate issuer:       /CN=f3df0a75c9ef681b8d23367dbe8edad053f3bd95
Certificate serial:       01A001017BA6AFF126789465F44FEF612FFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
Manifest number:          19FE
Signing time:             Fri 14 Aug 2026 16:01:09 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:09 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:09 +0000
Files and hashes:         1: 898KdcnvaBuNIzZ9vo7a0FPzvZU.crl (hash: 4TFDSXPYtXAugqEgMVHbNau/088o+PV3JapXubI0Smc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:7b:a6:af:f1:26:78:94:65:f4:4f:ef:61:2f:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3df0a75c9ef681b8d23367dbe8edad053f3bd95
        Validity
            Not Before: Aug 14 16:01:09 2026 GMT
            Not After : Aug 15 16:01:09 2026 GMT
        Subject: CN=9d5546a58c9a86ca569c71e97d0fdde493b8d72e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:57:7d:79:62:a7:5d:ed:a5:05:8d:06:09:a1:
                    ad:1d:7c:eb:0e:ed:a6:e9:40:47:bc:db:85:05:c7:
                    49:8d:0f:58:5c:e1:9e:8b:d8:a6:18:de:36:2d:cf:
                    a5:8a:77:0a:62:7d:38:88:c1:69:0f:57:88:a8:93:
                    de:10:71:ba:b0:e3:0d:18:4b:66:37:cb:c1:97:13:
                    66:41:16:ab:28:55:f9:c8:17:f1:cc:44:8b:41:21:
                    e4:d8:d2:6d:13:6c:e5:33:79:25:bf:f2:f3:07:a1:
                    8f:52:6b:46:cf:f7:19:e7:11:07:1c:ae:42:b0:ea:
                    7f:ed:96:7e:6c:7d:7e:78:7a:52:2e:8e:fa:8f:e1:
                    dc:7b:50:51:24:41:d7:d9:44:8a:5d:8f:c7:15:c8:
                    7c:34:d7:3e:a7:c4:15:b0:fb:bb:26:52:28:77:b4:
                    c9:f6:14:a1:a5:d1:f9:71:38:58:1a:64:a6:a3:ea:
                    7d:7a:60:e4:43:c2:d9:87:cd:99:40:4a:49:9c:7e:
                    fe:c2:10:b9:68:8d:0d:d3:ab:1e:af:69:0f:b2:aa:
                    fc:d9:e1:a8:c2:b5:99:72:ec:0e:eb:e9:14:61:d8:
                    75:aa:f9:b4:c6:f8:2b:96:8d:be:b7:33:f3:1f:11:
                    5e:3c:bb:4d:f3:ae:47:2e:3b:1a:08:68:cb:d2:b4:
                    76:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:55:46:A5:8C:9A:86:CA:56:9C:71:E9:7D:0F:DD:E4:93:B8:D7:2E
            X509v3 Authority Key Identifier:
                keyid:F3:DF:0A:75:C9:EF:68:1B:8D:23:36:7D:BE:8E:DA:D0:53:F3:BD:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a4:40:f2:62:2f:31:ff:f7:a2:22:9e:0b:f2:bb:b6:9c:45:
         4b:a9:53:2f:84:42:24:86:e0:0c:f4:05:a5:93:d6:51:23:99:
         ba:3b:25:e4:cd:00:c7:bb:00:da:7d:cd:33:4e:fc:dc:a0:6e:
         a8:50:1c:f6:3d:13:6e:38:fb:97:e8:80:91:77:4f:0f:8f:5b:
         ad:84:2b:34:8d:1d:7d:f7:90:ab:de:f1:53:73:0c:e2:6c:0f:
         b1:a8:51:f5:c0:11:28:30:3d:13:26:2d:2b:1d:93:01:e3:9e:
         57:da:cd:11:bd:20:4b:2a:21:05:25:3a:c7:96:ce:86:3f:a0:
         14:85:43:8a:47:6f:e3:2e:ea:37:60:35:a2:67:6b:8b:96:c0:
         c7:6a:5c:4f:f4:2d:50:31:19:ba:a9:12:a4:16:2e:d1:85:6d:
         aa:e0:1c:49:6c:95:eb:38:ec:b2:2d:84:79:e4:54:66:d0:7a:
         f2:28:5a:10:fc:5f:f7:7c:d3:08:b7:56:7a:20:ac:7e:1b:9d:
         79:c5:6c:93:d2:e0:8a:ee:0a:c8:81:50:8c:bb:98:ce:1f:67:
         d8:5a:27:ef:07:d8:5c:ec:d9:48:72:e1:63:28:ba:c8:a4:c0:
         6b:7e:b5:e1:03:f2:12:1d:f5:36:d1:97:d9:b2:dd:5a:ac:31:
         2e:23:2a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----