Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
File:                     9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft (raw, json)
Hash identifier:          xAak+/Poap6Z/IVIkP2VQnzcx0+0T/pJTGSBpFoY3Qs=
Subject key identifier:   0B:0A:55:D3:6D:AC:0E:2E:FE:3F:3A:A3:56:03:DA:B5:E4:95:72:E8
Authority key identifier: F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
Certificate issuer:       /CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Certificate serial:       01A0005D0AACF7174072E6E402692090481D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
Manifest number:          19FC
Signing time:             Fri 14 Aug 2026 13:01:32 +0000
Manifest this update:     Fri 14 Aug 2026 13:01:32 +0000
Manifest next update:     Sat 15 Aug 2026 13:01:32 +0000
Files and hashes:         1: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl (hash: 6CdxNokm+7kFSbC6HoYMorK+D5zAh7QgJcoPefr8dAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5d:0a:ac:f7:17:40:72:e6:e4:02:69:20:90:48:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
        Validity
            Not Before: Aug 14 13:01:32 2026 GMT
            Not After : Aug 15 13:01:32 2026 GMT
        Subject: CN=0b0a55d36dac0e2efe3f3aa35603dab5e49572e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5d:a1:21:10:bd:51:c5:4d:a2:58:46:83:05:
                    3c:61:94:90:1c:1c:2f:5c:a6:34:3b:e0:a7:92:f1:
                    06:cd:32:3b:55:23:16:d9:a1:52:df:3f:4e:b7:c9:
                    be:03:b3:7c:5a:92:46:86:77:23:c5:24:21:31:a1:
                    70:58:fe:d1:fd:d6:25:10:8b:3b:40:b3:e6:97:d8:
                    d5:a3:cf:78:7c:37:99:d4:68:d7:fc:1b:fc:cd:23:
                    67:8f:63:35:fb:30:78:d6:2f:f5:33:22:7e:a8:72:
                    30:82:3f:6e:81:c9:56:0e:a7:2d:ab:20:1f:5d:6e:
                    65:a8:0e:dc:fb:ec:46:4e:71:7d:f6:9a:04:75:c0:
                    f8:b4:8a:a6:f2:5c:d7:56:cb:26:e8:4d:98:a1:ff:
                    ae:cd:59:0f:48:ff:f0:9f:93:94:56:3d:96:d6:31:
                    cf:ce:dd:e1:86:c3:6e:b0:4e:d7:4d:fe:30:fd:25:
                    d3:22:c2:b1:ae:25:1e:70:c9:f6:fe:fa:64:0e:f4:
                    90:c9:a9:94:fa:df:13:c1:58:3a:3f:05:98:f9:1d:
                    c3:ba:aa:85:81:18:c8:f6:2b:72:b7:a1:24:58:94:
                    07:32:11:8a:b6:cf:3d:17:8a:25:f6:12:e8:7b:52:
                    7d:a0:03:62:b8:52:11:a6:21:4a:cf:11:42:5b:74:
                    45:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0A:55:D3:6D:AC:0E:2E:FE:3F:3A:A3:56:03:DA:B5:E4:95:72:E8
            X509v3 Authority Key Identifier:
                keyid:F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:d5:d5:3d:62:c6:3a:8d:6f:a6:92:60:30:89:dc:c7:26:b1:
         ce:35:b5:50:d5:03:ba:29:29:d9:be:f5:95:f8:5f:cb:3d:59:
         bb:17:e8:6a:11:85:1f:43:27:30:cd:89:26:2e:99:eb:ba:be:
         5e:c7:e1:97:a0:dd:b5:91:4e:3e:6a:73:5b:9d:16:59:52:07:
         ef:37:45:b3:dc:6f:47:99:3d:b7:d3:9b:8c:3e:d7:bc:4c:9f:
         1a:e0:f5:2e:71:03:30:81:b7:5e:a9:9b:cb:cd:5f:88:84:d7:
         74:68:21:90:2e:aa:e7:a0:00:2f:79:4f:20:76:86:85:53:25:
         e1:a3:d0:29:87:06:b4:16:7a:f7:ae:ce:fd:44:1f:00:54:82:
         98:78:46:66:b1:6c:c8:3c:88:d4:3a:42:8a:41:b5:dd:74:be:
         4b:21:2a:48:a0:4d:c3:69:61:b7:ed:aa:19:ea:33:f2:90:c0:
         e5:fb:63:f1:5e:e9:3f:17:a1:54:69:5c:b2:73:39:cc:fc:dd:
         c7:5b:2b:a0:13:5b:08:da:1b:09:d6:a6:22:e0:1b:6a:7e:70:
         b8:3c:33:1f:8b:d2:2e:9b:fc:eb:44:46:28:d6:5f:58:0c:ce:
         a7:c5:14:58:c1:17:ff:23:4f:b8:32:3a:fc:57:3b:56:5d:12:
         3a:4f:d9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:22 2026 by rpki-client