Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
File:                     1-hqD-7PhubY4MaaB9rciomUBbJw.mft (raw, json)
Hash identifier:          6Yj2hMaB8SJjOXZNjdV2w/h8DXsLVQMbCFRefLU/TsY=
Subject key identifier:   E7:DA:37:C7:68:79:EB:6F:08:D6:F4:1D:BA:DA:A2:64:79:4B:60:06
Authority key identifier: FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
Certificate issuer:       /CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Certificate serial:       01A13DB7DA16289C118E8843F33E2ED28CA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
Manifest number:          11D9
Signing time:             Thu 15 Oct 2026 04:00:21 +0000
Manifest this update:     Thu 15 Oct 2026 04:00:21 +0000
Manifest next update:     Fri 16 Oct 2026 04:00:21 +0000
Files and hashes:         1: 1-hqD-7PhubY4MaaB9rciomUBbJw.crl (hash: rjdcHrAAtcnyIuKjfWf27xUopeuvE9MSBTr/tW/Nmig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b7:da:16:28:9c:11:8e:88:43:f3:3e:2e:d2:8c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
        Validity
            Not Before: Oct 15 04:00:21 2026 GMT
            Not After : Oct 16 04:00:21 2026 GMT
        Subject: CN=e7da37c76879eb6f08d6f41dbadaa264794b6006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c4:e8:39:61:39:e7:83:7a:0a:2a:81:38:d7:
                    11:6c:3b:58:9d:0a:70:ed:ab:18:df:ca:16:ee:19:
                    ba:14:f7:46:7a:c3:fd:a5:27:ea:4a:11:02:83:f3:
                    1f:8b:ef:ce:ac:f7:0d:4b:df:5b:bf:ee:7a:dc:04:
                    d9:74:03:6a:5b:12:25:f3:99:73:ee:94:09:67:3e:
                    41:a9:c2:bf:1e:bf:4a:bc:65:e9:fd:54:b5:59:f9:
                    bc:5d:c0:6b:a9:4f:d6:36:3c:50:e1:e2:3c:a3:3e:
                    da:a0:b5:68:ad:d6:3e:c5:bc:44:bc:39:c3:bd:41:
                    bd:01:2a:6b:4c:fd:70:d7:fa:eb:85:d9:09:e9:f4:
                    93:a5:9c:7f:08:66:c9:52:5c:eb:7d:85:ef:e3:cf:
                    d7:f1:46:7d:85:bb:82:4b:a6:02:94:11:28:5c:5f:
                    31:ba:8e:b6:ef:b6:f6:a1:13:fe:6c:9d:1a:87:fb:
                    0f:57:71:3e:54:cc:ed:c3:f3:ab:5b:2a:f5:3c:a6:
                    81:de:dc:a2:47:3b:ae:34:07:f5:6b:cb:30:39:30:
                    13:cf:28:1d:08:76:0d:a0:bc:f7:6d:a6:06:3f:07:
                    c0:f7:44:c3:76:67:ed:65:2d:48:c0:01:05:4c:ac:
                    4c:97:d3:c7:c2:da:32:fe:22:cd:f8:d7:19:ad:8f:
                    5e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DA:37:C7:68:79:EB:6F:08:D6:F4:1D:BA:DA:A2:64:79:4B:60:06
            X509v3 Authority Key Identifier:
                keyid:FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:d6:f5:84:51:c4:c1:b0:d6:38:0b:c3:57:8e:4d:e0:f0:ad:
         6e:01:64:a7:e3:4d:1a:f5:e5:20:06:74:b1:5c:f8:12:c1:b9:
         e6:f3:e1:7a:c2:da:d0:c5:d3:2a:64:f1:89:92:e9:6c:8b:4c:
         c3:f2:f7:a3:a7:bf:68:a1:10:d7:2a:01:ff:eb:a5:68:6f:04:
         21:af:3c:c7:da:2e:e1:7d:5a:09:cf:f8:20:21:71:4a:28:63:
         c6:29:de:49:89:e3:db:08:ca:a0:f4:0c:b2:04:20:5e:c7:0e:
         a0:6c:06:28:63:98:54:8c:ed:04:1c:73:ea:66:4a:45:d8:07:
         83:66:9b:76:b1:8c:8e:cf:38:e8:c9:3c:bc:d8:61:fe:a3:fd:
         16:ed:01:44:e8:8f:25:1d:a3:b8:69:d7:06:5b:cd:a6:70:b1:
         85:28:bd:bb:7e:55:32:d8:cf:f6:61:75:01:b1:96:db:f8:97:
         9d:3a:fb:75:72:f7:ab:4e:27:47:e4:67:cf:0e:82:1e:49:ed:
         d7:b4:79:0a:f4:8d:af:ed:e8:91:4c:89:5e:97:f6:8e:61:c6:
         d8:ee:19:2b:91:0e:67:15:63:18:92:11:df:b1:c5:1b:6b:04:
         1f:f3:91:73:c2:8e:df:f3:13:b7:e8:e2:8a:ef:8f:77:24:f9:
         be:43:f7:c1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaE9t9oWKJwRjohD8z4u0oyoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMWE4M2ZiYjNlMWI5YjYzODMxYTY4MWY2YjcyMmEyNjUw
MTZjOWMwHhcNMjYxMDE1MDQwMDIxWhcNMjYxMDE2MDQwMDIxWjAzMTEwLwYDVQQD
EyhlN2RhMzdjNzY4NzllYjZmMDhkNmY0MWRiYWRhYTI2NDc5NGI2MDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsToOWE554N6CiqBONcRbDtYnQpw
7asY38oW7hm6FPdGesP9pSfqShECg/Mfi+/OrPcNS99bv+563ATZdANqWxIl85lz
7pQJZz5BqcK/Hr9KvGXp/VS1Wfm8XcBrqU/WNjxQ4eI8oz7aoLVordY+xbxEvDnD
vUG9ASprTP1w1/rrhdkJ6fSTpZx/CGbJUlzrfYXv48/X8UZ9hbuCS6YClBEoXF8x
uo6277b2oRP+bJ0ah/sPV3E+VMztw/OrWyr1PKaB3tyiRzuuNAf1a8swOTATzygd
CHYNoLz3baYGPwfA90TDdmftZS1IwAEFTKxMl9PHwtoy/iLN+NcZrY9e+wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOfaN8doeetvCNb0HbraomR5S2AGMB8GA1UdIwQY
MBaAFPoag/uz4bm2ODGmgfa3IqJlAWycMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ocUQtN1BodWJZNE1hYUI5cmNpb21VQmJKdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvNTkyZDQzLTQwZDItNGRlYi05NmI0
LWQwMTI2YTVlMzczMy8xLzEtaHFELTdQaHViWTRNYWFCOXJjaW9tVUJiSncubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RlLzU5MmQ0My00MGQyLTRkZWItOTZiNC1kMDEyNmE1ZTM3
MzMvMS8xLWhxRC03UGh1Ylk0TWFhQjlyY2lvbVVCYkp3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0Nb1
hFHEwbDWOAvDV45N4PCtbgFkp+NNGvXlIAZ0sVz4EsG55vPhesLa0MXTKmTxiZLp
bItMw/L3o6e/aKEQ1yoB/+ulaG8EIa88x9ou4X1aCc/4ICFxSihjxineSYnj2wjK
oPQMsgQgXscOoGwGKGOYVIztBBxz6mZKRdgHg2abdrGMjs846Mk8vNhh/qP9Fu0B
ROiPJR2juGnXBlvNpnCxhSi9u35VMtjP9mF1AbGW2/iXnTr7dXL3q04nR+Rnzw6C
Hknt17R5CvSNr+3okUyJXpf2jmHG2O4ZK5EOZxVjGJIR37HFG2sEH/ORc8KO3/MT
t+jiiu+PdyT5vkP3wQ==
-----END CERTIFICATE-----