Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
File:                     1-TVqludOotcrZUXIfHnSEtcqe94.mft (raw, json)
Hash identifier:          Ctl7AbJG3VYPNAZYsNJV78bx+0pbfEfSI7ezdNUGZ1g=
Subject key identifier:   38:FE:73:9A:45:E6:E9:5D:D6:9F:4F:ED:E4:64:88:C4:71:7D:9D:DB
Authority key identifier: F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
Certificate issuer:       /CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Certificate serial:       01A17D739BC5DDC97B85BF02BCA2B4E41289
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
Manifest number:          1999
Signing time:             Tue 27 Oct 2026 13:01:30 +0000
Manifest this update:     Tue 27 Oct 2026 13:01:30 +0000
Manifest next update:     Wed 28 Oct 2026 13:01:30 +0000
Files and hashes:         1: 1-TVqludOotcrZUXIfHnSEtcqe94.crl (hash: fXHWTMamKAs1bOU0PyMZVjESHbPBJpkwiHyZz2chPJA=)
                          2: sDWM_DhpRyRWUD2ROyiBU9tXXyU.roa (hash: Jens7OiCrejocf06H1XaSPttnLpxxGplzlx3u03vPxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:73:9b:c5:dd:c9:7b:85:bf:02:bc:a2:b4:e4:12:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
        Validity
            Not Before: Oct 27 13:01:30 2026 GMT
            Not After : Oct 28 13:01:30 2026 GMT
        Subject: CN=38fe739a45e6e95dd69f4fede46488c4717d9ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cb:96:f6:5f:29:fd:f2:f9:6c:ba:28:ac:56:
                    8c:dc:cc:4c:3f:c9:e6:1f:99:58:5d:90:63:b8:f6:
                    9a:85:49:9f:85:46:e6:c5:01:40:e1:ea:b8:96:46:
                    ed:68:7e:2d:a2:8d:1c:39:08:31:35:c4:7f:4b:4e:
                    fc:a7:e2:61:f2:9f:34:8b:f7:e7:64:ad:b7:09:65:
                    28:81:7e:37:c8:1a:00:79:60:68:df:61:02:78:84:
                    80:eb:4c:3a:b4:4d:5c:7b:7f:88:25:08:06:21:e6:
                    cd:7c:ce:f9:b6:0d:51:64:5d:5a:2a:33:60:b2:ac:
                    be:47:a6:7f:52:b6:64:24:eb:d8:da:f3:8c:36:11:
                    4a:30:15:85:b3:e4:2e:59:37:f2:93:82:6a:52:3e:
                    b7:70:e9:ab:6f:a2:07:42:05:6a:2e:f4:86:50:b7:
                    7a:23:f8:e4:82:70:e5:98:56:36:02:d1:b1:f3:d0:
                    fc:79:1a:ef:d2:2c:38:bc:e5:5e:79:15:c9:2c:f8:
                    a9:d1:12:9c:7d:38:7b:35:c7:5a:46:a6:23:8d:a5:
                    82:e6:51:1d:f4:bb:2a:8b:53:28:c5:b6:aa:55:2a:
                    07:be:31:cf:5d:bd:19:71:05:78:1e:27:ab:4a:cf:
                    b0:fc:a5:aa:0d:30:be:89:cb:7a:e6:6e:88:c5:a1:
                    9c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FE:73:9A:45:E6:E9:5D:D6:9F:4F:ED:E4:64:88:C4:71:7D:9D:DB
            X509v3 Authority Key Identifier:
                keyid:F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ac:4d:bb:d1:61:cc:7d:b2:b2:45:e9:53:bf:58:d9:13:7e:
         c1:02:7b:46:b5:f6:8c:16:e5:c1:24:1b:86:00:dc:2e:7d:cf:
         ef:a6:0c:20:94:8b:1c:c0:33:9c:d9:66:15:2a:e9:55:5b:be:
         e3:54:07:41:24:e8:5f:f3:98:c5:ae:c4:92:8d:b0:f6:1c:7e:
         55:a0:70:f0:6a:41:2f:2e:87:10:87:08:09:de:52:21:69:56:
         33:21:b0:ec:b0:1f:f9:7a:c3:90:9d:cd:79:13:83:41:da:f5:
         d7:13:ff:a8:71:20:0a:34:07:60:27:c7:3d:aa:a9:db:15:df:
         a6:f5:e7:a8:c5:a6:5d:e3:99:64:c6:da:6a:52:fd:ec:69:6e:
         87:f8:0e:08:78:55:0c:ec:6a:47:0f:ce:2c:57:a6:c5:aa:0f:
         35:b6:cb:33:f5:36:38:6d:8a:9e:9a:f3:8f:8e:b3:95:9c:3f:
         6e:2c:dd:45:17:df:a5:75:fb:ed:16:db:db:fa:8b:04:ab:ca:
         a1:34:5d:7b:8b:58:40:43:62:1e:82:01:ce:af:a7:d4:72:25:
         cd:07:48:ff:b3:0a:d5:e6:ab:0d:ef:79:1b:48:7f:74:ed:1c:
         e3:1e:06:55:4b:65:f5:2e:44:c7:00:1f:96:12:09:df:77:ea:
         ae:5d:df:34
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaF9c5vF3cl7hb8CvKK05BKJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MzU2YTk2ZTc0ZWEyZDcyYjY1NDVjODdjNzlkMjEyZDcy
YTdiZGUwHhcNMjYxMDI3MTMwMTMwWhcNMjYxMDI4MTMwMTMwWjAzMTEwLwYDVQQD
EygzOGZlNzM5YTQ1ZTZlOTVkZDY5ZjRmZWRlNDY0ODhjNDcxN2Q5ZGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8uW9l8p/fL5bLoorFaM3MxMP8nm
H5lYXZBjuPaahUmfhUbmxQFA4eq4lkbtaH4too0cOQgxNcR/S078p+Jh8p80i/fn
ZK23CWUogX43yBoAeWBo32ECeISA60w6tE1ce3+IJQgGIebNfM75tg1RZF1aKjNg
sqy+R6Z/UrZkJOvY2vOMNhFKMBWFs+QuWTfyk4JqUj63cOmrb6IHQgVqLvSGULd6
I/jkgnDlmFY2AtGx89D8eRrv0iw4vOVeeRXJLPip0RKcfTh7NcdaRqYjjaWC5lEd
9Lsqi1MoxbaqVSoHvjHPXb0ZcQV4HierSs+w/KWqDTC+ict65m6IxaGc7wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDj+c5pF5uld1p9P7eRkiMRxfZ3bMB8GA1UdIwQY
MBaAFPk1apbnTqLXK2VFyHx50hLXKnveMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1UVnFsdWRPb3RjclpVWElmSG5TRXRjcWU5NC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvOWY0NTlmLTI2NGQtNDZjZS04N2Iw
LWNiYjdkMmJmNmZhMS8xLzEtVFZxbHVkT290Y3JaVVhJZkhuU0V0Y3FlOTQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2UyLzlmNDU5Zi0yNjRkLTQ2Y2UtODdiMC1jYmI3ZDJiZjZm
YTEvMS8xLVRWcWx1ZE9vdGNyWlVYSWZIblNFdGNxZTk0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6xN
u9FhzH2yskXpU79Y2RN+wQJ7RrX2jBblwSQbhgDcLn3P76YMIJSLHMAznNlmFSrp
VVu+41QHQSToX/OYxa7Eko2w9hx+VaBw8GpBLy6HEIcICd5SIWlWMyGw7LAf+XrD
kJ3NeRODQdr11xP/qHEgCjQHYCfHPaqp2xXfpvXnqMWmXeOZZMbaalL97Gluh/gO
CHhVDOxqRw/OLFemxaoPNbbLM/U2OG2Knprzj46zlZw/bizdRRffpXX77Rbb2/qL
BKvKoTRde4tYQENiHoIBzq+n1HIlzQdI/7MK1earDe95G0h/dO0c4x4GVUtl9S5E
xwAflhIJ33fqrl3fNA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:21:27 2026 by rpki-client