Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0b3621-80d3-4796-8735-157562499908/1/A2loTGfKqZ_8AYS-rMrw6oipISk.mft
File:                     A2loTGfKqZ_8AYS-rMrw6oipISk.mft (raw, json)
Hash identifier:          PF9/pSN5GIm6j5GkOfeM4wzMCy8JqEsZUt5utckFdig=
Subject key identifier:   29:BC:F0:91:83:FE:AF:F5:D9:4A:4F:D2:60:D1:AF:51:75:95:57:6A
Authority key identifier: 03:69:68:4C:67:CA:A9:9F:FC:01:84:BE:AC:CA:F0:EA:88:A9:21:29
Certificate issuer:       /CN=0369684c67caa99ffc0184beaccaf0ea88a92129
Certificate serial:       01A13E266808A7C4B6BCB1628F0CBAF720E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A2loTGfKqZ_8AYS-rMrw6oipISk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3621-80d3-4796-8735-157562499908/1/A2loTGfKqZ_8AYS-rMrw6oipISk.mft
Manifest number:          0D7B
Signing time:             Thu 15 Oct 2026 06:01:06 +0000
Manifest this update:     Thu 15 Oct 2026 06:01:06 +0000
Manifest next update:     Fri 16 Oct 2026 06:01:06 +0000
Files and hashes:         1: A2loTGfKqZ_8AYS-rMrw6oipISk.crl (hash: 2c496FSpNVcdQfOu2HP1tb6FJUDCss/N66+MCuajVQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3621-80d3-4796-8735-157562499908/1/A2loTGfKqZ_8AYS-rMrw6oipISk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3621-80d3-4796-8735-157562499908/1/A2loTGfKqZ_8AYS-rMrw6oipISk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A2loTGfKqZ_8AYS-rMrw6oipISk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:68:08:a7:c4:b6:bc:b1:62:8f:0c:ba:f7:20:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0369684c67caa99ffc0184beaccaf0ea88a92129
        Validity
            Not Before: Oct 15 06:01:06 2026 GMT
            Not After : Oct 16 06:01:06 2026 GMT
        Subject: CN=29bcf09183feaff5d94a4fd260d1af517595576a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:69:dd:03:3f:c6:47:a5:78:8d:23:9f:ef:9e:
                    ad:d4:6e:79:aa:b5:71:8a:0f:44:b5:83:0f:46:a8:
                    c1:b2:bf:6a:85:39:76:a0:f7:a5:60:6f:ed:11:0b:
                    1b:73:92:43:14:37:c4:25:bd:52:35:73:39:80:b5:
                    34:cd:3d:ef:cf:95:fe:75:19:55:9e:13:09:0d:5a:
                    1b:f9:08:ce:69:1f:83:82:cc:93:b5:70:b8:1d:f7:
                    f2:eb:24:8d:86:1c:f1:c1:12:a5:a5:fe:60:0b:3e:
                    53:64:9d:96:50:c1:47:9a:b1:ad:5d:7d:77:23:bd:
                    2a:b6:1d:9b:12:09:4d:e6:0e:d8:a7:fd:47:06:5a:
                    c9:b7:ee:c4:28:d8:ed:da:75:b4:92:05:7e:44:4c:
                    81:8d:48:a0:65:fa:7f:87:38:7f:31:bc:bb:bd:5b:
                    1e:8b:5a:47:03:7a:ae:96:24:00:47:6d:98:d5:b8:
                    fe:55:ec:8d:51:36:d4:56:a3:10:3f:22:85:f3:ae:
                    59:57:ed:f2:ba:47:09:ac:b9:5d:cd:8f:49:ba:ae:
                    6c:ff:25:d7:94:bd:3c:e2:53:3a:83:b9:80:7a:fa:
                    1d:1f:91:2d:d4:4b:b2:61:b7:72:b1:3b:bd:1c:63:
                    f8:de:cd:8f:e1:48:05:b9:26:80:55:cf:89:13:8b:
                    a7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BC:F0:91:83:FE:AF:F5:D9:4A:4F:D2:60:D1:AF:51:75:95:57:6A
            X509v3 Authority Key Identifier:
                keyid:03:69:68:4C:67:CA:A9:9F:FC:01:84:BE:AC:CA:F0:EA:88:A9:21:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2loTGfKqZ_8AYS-rMrw6oipISk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3621-80d3-4796-8735-157562499908/1/A2loTGfKqZ_8AYS-rMrw6oipISk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3621-80d3-4796-8735-157562499908/1/A2loTGfKqZ_8AYS-rMrw6oipISk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:c8:a7:b0:89:e9:c8:8a:f5:90:49:62:4f:e9:80:0f:84:90:
         4f:11:f6:89:7b:da:40:24:b5:66:34:d4:e3:12:5c:c0:67:c1:
         4b:fc:ed:90:d8:96:12:72:64:ed:e0:b5:82:f0:2a:e8:89:f9:
         b2:82:6b:13:3e:00:21:ab:07:38:51:d5:28:e0:36:b3:3f:41:
         1d:33:7a:54:37:a4:b2:1c:ad:11:5e:9f:f7:14:12:0f:4b:08:
         1b:84:17:ff:91:df:89:5b:84:c1:a6:e0:3f:b9:34:c8:fe:6c:
         1c:ac:59:62:ed:9c:2a:2b:76:c3:3a:88:1c:e1:2a:b9:31:3d:
         a4:dd:9a:1f:f0:ad:fb:d2:3f:d3:a6:ef:f9:63:a3:a3:18:a4:
         15:04:c6:2e:09:01:48:3a:ce:6c:c3:c0:80:c5:76:b4:0e:83:
         9e:63:78:3d:69:df:12:62:67:b1:8d:a9:de:10:6e:7a:57:a2:
         3f:61:51:6a:1e:62:55:e9:e2:c8:f0:f2:eb:18:a8:ef:5d:70:
         05:a5:88:49:1a:15:c8:a0:0d:f1:b6:49:d1:31:13:5c:ab:19:
         f6:61:f1:f7:a1:7d:2d:4f:07:0a:30:5b:2e:39:51:23:49:00:
         76:78:96:b6:bf:5e:7e:e2:c1:21:62:c1:b8:b8:2f:d2:3b:0d:
         c9:9d:85:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+JmgIp8S2vLFijwy69yDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNjk2ODRjNjdjYWE5OWZmYzAxODRiZWFjY2FmMGVhODhh
OTIxMjkwHhcNMjYxMDE1MDYwMTA2WhcNMjYxMDE2MDYwMTA2WjAzMTEwLwYDVQQD
EygyOWJjZjA5MTgzZmVhZmY1ZDk0YTRmZDI2MGQxYWY1MTc1OTU1NzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mndAz/GR6V4jSOf756t1G55qrVx
ig9EtYMPRqjBsr9qhTl2oPelYG/tEQsbc5JDFDfEJb1SNXM5gLU0zT3vz5X+dRlV
nhMJDVob+QjOaR+DgsyTtXC4Hffy6ySNhhzxwRKlpf5gCz5TZJ2WUMFHmrGtXX13
I70qth2bEglN5g7Yp/1HBlrJt+7EKNjt2nW0kgV+REyBjUigZfp/hzh/Mby7vVse
i1pHA3quliQAR22Y1bj+VeyNUTbUVqMQPyKF865ZV+3yukcJrLldzY9Juq5s/yXX
lL084lM6g7mAevodH5Et1EuyYbdysTu9HGP43s2P4UgFuSaAVc+JE4uneQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCm88JGD/q/12UpP0mDRr1F1lVdqMB8GA1UdIwQY
MBaAFANpaExnyqmf/AGEvqzK8OqIqSEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTJsb1RHZktxWl84QVlTLXJNcnc2b2lwSVNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wYjM2MjEtODBkMy00Nzk2LTg3MzUt
MTU3NTYyNDk5OTA4LzEvQTJsb1RHZktxWl84QVlTLXJNcnc2b2lwSVNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wYjM2MjEtODBkMy00Nzk2LTg3MzUtMTU3NTYyNDk5OTA4
LzEvQTJsb1RHZktxWl84QVlTLXJNcnc2b2lwSVNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxMinsInp
yIr1kEliT+mAD4SQTxH2iXvaQCS1ZjTU4xJcwGfBS/ztkNiWEnJk7eC1gvAq6In5
soJrEz4AIasHOFHVKOA2sz9BHTN6VDekshytEV6f9xQSD0sIG4QX/5HfiVuEwabg
P7k0yP5sHKxZYu2cKit2wzqIHOEquTE9pN2aH/Ct+9I/06bv+WOjoxikFQTGLgkB
SDrObMPAgMV2tA6DnmN4PWnfEmJnsY2p3hBueleiP2FRah5iVeniyPDy6xio711w
BaWISRoVyKAN8bZJ0TETXKsZ9mHx96F9LU8HCjBbLjlRI0kAdniWtr9efuLBIWLB
uLgv0jsNyZ2F4Q==
-----END CERTIFICATE-----
Generated at Thu Oct 15 13:26:05 2026 by rpki-client