Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
File:                     1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft (raw, json)
Hash identifier:          kvgUUhPd7/0f7tz7r4kW2+4Ge3txTLzyzHzwfeV7/YE=
Subject key identifier:   63:8D:6E:13:38:0D:23:D7:C3:D1:E5:92:2D:AB:66:24:25:8B:7A:B1
Authority key identifier: D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
Certificate issuer:       /CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Certificate serial:       01A14760A62E726522A26CC0DEF5902F2DFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
Manifest number:          13A0
Signing time:             Sat 17 Oct 2026 01:01:18 +0000
Manifest this update:     Sat 17 Oct 2026 01:01:18 +0000
Manifest next update:     Sun 18 Oct 2026 01:01:18 +0000
Files and hashes:         1: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl (hash: f0vUiKgkvUFT4KI6JqxSDeRZkBswfh6d+6lWUhKnUf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:47:60:a6:2e:72:65:22:a2:6c:c0:de:f5:90:2f:2d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
        Validity
            Not Before: Oct 17 01:01:18 2026 GMT
            Not After : Oct 18 01:01:18 2026 GMT
        Subject: CN=638d6e13380d23d7c3d1e5922dab6624258b7ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7b:07:b1:bf:45:f4:8e:ae:e7:6a:3c:df:e3:
                    7c:73:5d:8c:3f:f2:c2:67:45:0b:19:fe:fe:22:c7:
                    f8:2e:15:c0:a1:23:ad:ad:6a:90:cf:0e:5f:53:d2:
                    c8:53:2d:e1:cd:e0:d0:13:9e:a1:7d:a8:77:28:18:
                    13:f9:b4:c9:23:4c:f1:d2:bb:15:87:31:80:cb:85:
                    69:ba:9e:3a:30:04:c7:24:ad:fb:9c:52:35:6e:a5:
                    1f:0a:25:7e:76:c8:43:5d:49:f7:a6:7a:bb:04:25:
                    db:0b:66:84:bd:55:12:63:58:4c:f1:f7:88:bc:56:
                    f7:b2:e7:5d:33:d7:f4:ad:54:6d:d8:f5:63:53:bd:
                    c2:ed:61:80:21:88:5a:c5:e6:ac:fc:5a:45:eb:5c:
                    58:a7:43:9f:74:12:d3:67:92:17:f1:76:66:14:a3:
                    62:14:18:9b:6e:15:5b:b9:d9:9f:9e:31:06:48:a8:
                    fb:8a:d8:5e:7f:c2:16:60:67:d4:fa:ab:dd:12:93:
                    b2:aa:e6:01:93:5a:fc:4a:f4:da:96:11:98:9d:c6:
                    d6:a4:e0:2a:5a:7c:61:82:b1:cf:fc:9b:af:e3:b8:
                    b5:8f:24:e9:b3:cb:58:d2:23:d6:7b:86:17:f2:80:
                    45:44:74:f4:48:93:5b:9b:83:e3:5a:d1:ed:34:a6:
                    8f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8D:6E:13:38:0D:23:D7:C3:D1:E5:92:2D:AB:66:24:25:8B:7A:B1
            X509v3 Authority Key Identifier:
                keyid:D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:db:07:c7:d3:29:03:e7:65:c2:d6:bc:69:0f:bd:7a:8f:db:
         19:65:f6:84:c2:c5:fb:05:1c:47:a7:e3:bb:a7:d8:43:c8:9c:
         00:10:b3:27:13:9f:2e:a6:03:38:da:4f:fa:ee:df:d1:97:7d:
         58:a1:bd:95:1c:16:88:fe:b3:28:1d:e3:78:44:9c:76:80:9b:
         3f:ee:98:d0:0b:8e:98:19:df:97:31:63:df:45:7b:8a:66:a6:
         0b:17:21:d3:7a:69:15:c3:80:6a:11:46:30:49:cc:2c:29:a8:
         c8:b7:84:a0:23:2a:73:3b:80:e2:ee:28:5e:58:10:1b:eb:c5:
         b4:aa:6a:0e:6e:bc:63:d9:39:f5:ae:66:2c:b4:b6:f0:70:07:
         c9:64:95:6b:42:69:ed:7e:8a:ad:1a:cd:8d:02:5b:5f:71:86:
         e4:22:7b:fc:e7:93:a3:e3:fb:23:60:23:d3:92:3d:04:6a:3e:
         23:44:17:ff:a3:88:4d:01:13:8f:d8:59:6b:99:f1:f5:0b:5e:
         1c:88:b3:76:20:4b:86:ae:01:d2:78:17:ad:55:e0:9d:36:8f:
         20:7b:b0:d7:f3:2e:c1:de:e6:42:74:6e:3f:f8:a8:81:a5:d1:
         33:d2:81:e8:31:db:9a:f5:f4:59:96:9b:7e:64:ed:cf:80:a3:
         3e:cb:fa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----