Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
File:                     1uDRyowZYcCxEoqlW4V5axIECpU.mft (raw, json)
Hash identifier:          39n/PADMnUtNFP0bJZJ4+/Gg5sYh7uPc9opBcsTpQIU=
Subject key identifier:   A8:26:EB:2E:59:AE:EA:AF:B5:F3:FB:D5:5A:F8:8D:B5:22:8D:F8:3C
Authority key identifier: D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95
Certificate issuer:       /CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
Certificate serial:       01A000CA3952BA05C883E61CDF42E6E1F76E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
Manifest number:          0F0B
Signing time:             Fri 14 Aug 2026 15:00:47 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:47 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:47 +0000
Files and hashes:         1: 1uDRyowZYcCxEoqlW4V5axIECpU.crl (hash: erfbWr7fLHoBrbo8+dyLCEn0iUiryr0RrUUIS32mR1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:39:52:ba:05:c8:83:e6:1c:df:42:e6:e1:f7:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
        Validity
            Not Before: Aug 14 15:00:47 2026 GMT
            Not After : Aug 15 15:00:47 2026 GMT
        Subject: CN=a826eb2e59aeeaafb5f3fbd55af88db5228df83c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:08:bf:a1:10:fb:68:42:39:c4:a5:0b:7f:a1:
                    65:9e:65:d2:32:69:6d:f8:aa:17:71:6c:72:3f:fa:
                    40:da:51:5a:c7:76:02:c6:25:49:ab:29:7b:84:6e:
                    26:b5:11:03:54:86:94:19:b6:3b:d7:d5:9e:40:f1:
                    ab:11:8e:7e:68:17:13:67:9c:33:14:8c:9b:c3:84:
                    60:21:0c:7c:1d:21:9e:e9:5e:78:67:65:a1:98:70:
                    38:59:3f:d9:30:e7:2c:eb:f8:82:d5:c9:64:86:9c:
                    96:a8:2f:60:ce:3b:2f:3d:11:18:53:01:29:44:51:
                    a3:d4:70:6b:e0:c8:10:90:d3:6a:11:54:a1:6a:79:
                    45:e4:76:fb:e6:b8:d7:fd:b6:34:d7:84:66:38:c4:
                    d0:7a:d9:bc:bb:ec:d2:74:68:93:b6:75:0a:4a:66:
                    8b:48:36:2a:5e:9e:51:4a:e9:8d:51:36:94:fa:93:
                    5e:40:02:61:b5:e1:e4:8a:57:39:25:7b:46:17:b8:
                    d0:2e:99:9b:e0:0f:2b:89:e6:24:98:84:00:e3:9d:
                    08:83:d1:3a:90:ab:da:37:0e:df:5d:b3:2e:57:bc:
                    14:a7:f7:d2:82:f4:04:0d:38:56:3c:89:56:9b:da:
                    d8:e0:84:e5:78:c9:fa:4d:99:e1:ca:ac:a2:71:ab:
                    a9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:26:EB:2E:59:AE:EA:AF:B5:F3:FB:D5:5A:F8:8D:B5:22:8D:F8:3C
            X509v3 Authority Key Identifier:
                keyid:D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:c1:bf:8e:8e:0a:6c:16:03:6c:f6:25:a3:4c:a1:af:1f:1d:
         4c:6c:db:b1:bf:a8:c1:ee:4d:19:06:85:1c:dd:92:a9:80:36:
         91:3e:3b:86:8f:c7:e4:4d:96:ae:62:1d:9c:5c:c0:83:c2:3c:
         55:c5:3f:86:a4:bd:e0:cb:12:6f:bd:01:c5:0e:58:12:dd:ae:
         38:66:2e:83:c9:0a:f3:c4:2f:3d:3a:6a:d9:83:8f:17:c4:af:
         90:d1:f0:b0:b3:b9:b7:51:17:60:b3:59:c6:cd:5f:c5:0d:04:
         cb:98:ec:26:58:b3:aa:70:a7:d2:b1:18:23:79:84:e7:46:ad:
         04:5b:6e:bb:4e:35:95:54:51:e0:76:53:df:41:fe:88:53:d0:
         40:57:8e:39:6f:af:d8:6a:ed:dc:b2:4b:43:57:e9:1a:e4:16:
         e9:b8:f7:fb:e1:d0:de:68:6d:2a:8c:a3:75:6e:eb:d7:ad:94:
         42:00:4d:8a:68:16:01:ee:d8:e2:4e:de:85:d0:34:46:fa:94:
         d1:15:ba:7b:a9:db:d8:70:76:a4:60:57:06:38:c9:35:06:71:
         72:47:89:6d:bb:17:bf:87:18:10:c1:1b:81:e4:d8:e4:26:f8:
         03:1c:34:6d:a6:75:cf:9d:f2:81:9f:14:eb:52:51:1f:34:f3:
         ac:1e:4e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----