Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
File:                     29B3gCIiIDwWzo6v1Z8LCsHb58M.mft (raw, json)
Hash identifier:          sdFCg5eQlAxYgg8DV6iDLmJd7afsaywM1JJa7bC/++A=
Subject key identifier:   F0:51:56:C5:13:86:53:90:B9:16:16:8D:F6:E5:15:32:50:7F:7B:C2
Authority key identifier: DB:D0:77:80:22:22:20:3C:16:CE:8E:AF:D5:9F:0B:0A:C1:DB:E7:C3
Certificate issuer:       /CN=dbd077802222203c16ce8eafd59f0b0ac1dbe7c3
Certificate serial:       01A00100DEC156C227EAF1E451BBB1555293
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
Manifest number:          12B5
Signing time:             Fri 14 Aug 2026 16:00:29 +0000
Manifest this update:     Fri 14 Aug 2026 16:00:29 +0000
Manifest next update:     Sat 15 Aug 2026 16:00:29 +0000
Files and hashes:         1: 29B3gCIiIDwWzo6v1Z8LCsHb58M.crl (hash: ViJF03quOjIyQxtV/x1467vgDWpynRu8ReI7oB2AWBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:00:de:c1:56:c2:27:ea:f1:e4:51:bb:b1:55:52:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbd077802222203c16ce8eafd59f0b0ac1dbe7c3
        Validity
            Not Before: Aug 14 16:00:29 2026 GMT
            Not After : Aug 15 16:00:29 2026 GMT
        Subject: CN=f05156c513865390b916168df6e51532507f7bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4d:88:ff:3a:1c:77:bc:a5:9c:e8:2d:18:2c:
                    9b:8d:51:12:ee:81:b8:37:7e:4e:82:3f:2b:d7:e9:
                    d3:bc:04:90:65:d9:23:7d:17:c5:b6:f8:60:43:22:
                    e4:de:49:9d:7d:bf:fa:84:90:c1:8b:66:57:be:71:
                    43:93:9b:a1:a9:e9:72:f2:79:a0:df:5f:45:61:81:
                    f9:49:23:fd:ab:70:3e:6e:e9:cf:55:2e:3f:d1:7d:
                    b2:83:ce:0b:b4:9c:4b:90:ac:9e:4d:33:79:39:f8:
                    ea:52:55:6f:ee:c2:17:a9:89:1b:98:19:27:67:81:
                    26:74:11:38:8c:d2:ad:f6:8f:15:7d:20:8a:39:f3:
                    c4:67:85:79:ee:3f:b4:6a:06:f8:f1:1a:f4:99:96:
                    29:dc:c1:8c:29:14:41:03:07:9a:67:86:16:e3:54:
                    1d:4e:ec:2e:cf:03:c5:42:98:57:44:84:cf:01:89:
                    bb:29:59:05:4c:50:08:12:48:f2:82:30:cd:f2:42:
                    ba:15:2d:00:f1:c9:3d:e6:10:2c:d1:d2:d0:21:c7:
                    08:17:7c:59:c4:8d:7d:b6:84:cb:98:1f:80:2b:f2:
                    c6:22:6f:ae:56:f2:c4:4b:bd:82:1d:84:d4:3d:f9:
                    4b:ea:47:30:a4:3c:8a:91:32:17:15:b6:44:3b:7d:
                    bd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:51:56:C5:13:86:53:90:B9:16:16:8D:F6:E5:15:32:50:7F:7B:C2
            X509v3 Authority Key Identifier:
                keyid:DB:D0:77:80:22:22:20:3C:16:CE:8E:AF:D5:9F:0B:0A:C1:DB:E7:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:15:9e:10:a8:f3:00:81:8a:96:74:cf:9e:e4:da:8e:0a:9a:
         2c:37:f5:cc:bf:cb:0e:62:bb:46:88:3a:1e:de:d4:7a:7c:1c:
         88:20:b2:f0:cf:d0:64:dc:55:b8:43:fe:b1:fe:f3:23:43:58:
         b7:06:a0:9b:f1:38:12:dd:e9:ba:d3:95:76:45:58:70:7f:da:
         1f:36:97:fa:94:40:93:8e:49:ed:a0:12:60:2a:de:89:ef:ca:
         e1:7a:80:6b:77:47:ee:1d:71:0d:7e:7a:40:92:0d:3e:62:ec:
         8a:f0:a4:b9:d7:c1:67:f3:ba:42:da:1d:6c:a6:d2:5b:82:3b:
         3b:30:35:20:55:e2:0f:fe:e2:3d:13:e0:5e:9f:44:a6:47:c8:
         53:e9:a8:db:81:c7:9e:b3:4a:f9:09:04:01:eb:7c:46:ed:a3:
         23:b4:37:de:d7:fd:5f:4a:6e:6a:b2:23:95:1f:3a:6a:d3:1a:
         28:35:14:57:32:b6:97:17:5e:51:77:f4:4b:cd:28:28:f5:72:
         0e:6d:09:85:20:9b:82:bd:e0:75:d2:1c:bd:70:41:84:66:84:
         63:5e:3c:bf:07:91:9c:5e:51:dc:50:c0:73:72:e8:0a:09:31:
         63:9f:49:1f:7e:6b:07:2b:5b:d4:1a:34:fb:c7:14:18:89:aa:
         8a:af:2e:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAN7BVsIn6vHkUbuxVVKTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZDA3NzgwMjIyMjIwM2MxNmNlOGVhZmQ1OWYwYjBhYzFk
YmU3YzMwHhcNMjYwODE0MTYwMDI5WhcNMjYwODE1MTYwMDI5WjAzMTEwLwYDVQQD
EyhmMDUxNTZjNTEzODY1MzkwYjkxNjE2OGRmNmU1MTUzMjUwN2Y3YmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU2I/zocd7ylnOgtGCybjVES7oG4
N35Ogj8r1+nTvASQZdkjfRfFtvhgQyLk3kmdfb/6hJDBi2ZXvnFDk5uhqely8nmg
319FYYH5SSP9q3A+bunPVS4/0X2yg84LtJxLkKyeTTN5OfjqUlVv7sIXqYkbmBkn
Z4EmdBE4jNKt9o8VfSCKOfPEZ4V57j+0agb48Rr0mZYp3MGMKRRBAweaZ4YW41Qd
TuwuzwPFQphXRITPAYm7KVkFTFAIEkjygjDN8kK6FS0A8ck95hAs0dLQIccIF3xZ
xI19toTLmB+AK/LGIm+uVvLES72CHYTUPflL6kcwpDyKkTIXFbZEO3291wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBRVsUThlOQuRYWjfblFTJQf3vCMB8GA1UdIwQY
MBaAFNvQd4AiIiA8Fs6Or9WfCwrB2+fDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjlCM2dDSWlJRHdXem82djFaOExDc0hiNThNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81ZmEwOTQtZWZhNS00Y2Y3LTg2YjAt
NWRkOTQ1MjllZWVhLzEvMjlCM2dDSWlJRHdXem82djFaOExDc0hiNThNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS81ZmEwOTQtZWZhNS00Y2Y3LTg2YjAtNWRkOTQ1MjllZWVh
LzEvMjlCM2dDSWlJRHdXem82djFaOExDc0hiNThNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnRWeEKjz
AIGKlnTPnuTajgqaLDf1zL/LDmK7Rog6Ht7UenwciCCy8M/QZNxVuEP+sf7zI0NY
twagm/E4Et3putOVdkVYcH/aHzaX+pRAk45J7aASYCreie/K4XqAa3dH7h1xDX56
QJINPmLsivCkudfBZ/O6QtodbKbSW4I7OzA1IFXiD/7iPRPgXp9EpkfIU+mo24HH
nrNK+QkEAet8Ru2jI7Q33tf9X0puarIjlR86atMaKDUUVzK2lxdeUXf0S80oKPVy
Dm0JhSCbgr3gddIcvXBBhGaEY148vweRnF5R3FDAc3LoCgkxY59JH35rBytb1Bo0
+8cUGImqiq8ulg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:23:54 2026 by rpki-client