Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
File:                     2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft (raw, json)
Hash identifier:          Z/bP7hMuuM+WfsF5WYjKMYNz8MMBbLZfO21rwDr07Rs=
Subject key identifier:   02:94:5B:8C:7F:22:FF:36:78:43:B1:C5:C4:E7:0F:FE:68:E0:CC:C4
Authority key identifier: D9:FE:0C:C3:14:3F:99:C5:E5:58:36:A3:FF:6C:0B:66:FC:20:C4:D5
Certificate issuer:       /CN=d9fe0cc3143f99c5e55836a3ff6c0b66fc20c4d5
Certificate serial:       01A13DB81F898B578B86B3083237B758D66D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
Manifest number:          0F42
Signing time:             Thu 15 Oct 2026 04:00:39 +0000
Manifest this update:     Thu 15 Oct 2026 04:00:39 +0000
Manifest next update:     Fri 16 Oct 2026 04:00:39 +0000
Files and hashes:         1: 2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl (hash: fTsvqHNYWIwe6L4+3v0XbSuLfez1aJSWR/b17sbiv1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 04:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b8:1f:89:8b:57:8b:86:b3:08:32:37:b7:58:d6:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9fe0cc3143f99c5e55836a3ff6c0b66fc20c4d5
        Validity
            Not Before: Oct 15 04:00:39 2026 GMT
            Not After : Oct 16 04:00:39 2026 GMT
        Subject: CN=02945b8c7f22ff367843b1c5c4e70ffe68e0ccc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:21:fe:b7:74:1d:35:49:ed:5d:5c:37:25:4d:
                    7e:11:42:87:8a:ad:32:10:3a:01:1b:18:f0:c9:74:
                    8c:65:d4:7f:b7:b5:75:b1:38:ac:47:4d:98:4d:bb:
                    4b:4e:da:f1:a8:cf:00:7f:ea:77:4f:74:7a:cc:36:
                    7b:02:86:ef:fd:d2:11:1f:92:16:cd:4d:ce:f4:c7:
                    72:09:af:65:1f:a2:75:c6:18:49:70:f9:d8:98:b5:
                    50:a6:43:31:d5:66:a7:72:8d:1b:3b:a6:36:81:a7:
                    0f:4f:ed:6f:32:f2:da:98:0f:f2:09:07:b9:79:3b:
                    ac:36:f9:64:90:2e:48:a7:d7:54:48:44:e6:09:0a:
                    fb:cd:38:c2:10:20:80:74:69:40:48:df:5e:1b:be:
                    5c:3a:b5:99:94:6b:64:07:1b:51:60:62:df:01:dd:
                    ed:3f:42:98:26:69:f2:df:70:cc:89:c1:3a:01:a6:
                    54:65:c2:de:ee:dd:68:a9:ae:52:a3:59:cd:29:e9:
                    f8:42:42:a4:d5:9d:43:4c:28:c0:28:ef:f6:81:d0:
                    92:3f:ee:19:e3:4f:12:3e:f1:96:1a:15:58:70:e8:
                    13:3e:69:55:28:46:94:8d:61:77:63:94:31:ac:83:
                    cd:89:24:7a:63:db:13:12:99:e0:86:ab:1b:ce:44:
                    d3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:94:5B:8C:7F:22:FF:36:78:43:B1:C5:C4:E7:0F:FE:68:E0:CC:C4
            X509v3 Authority Key Identifier:
                keyid:D9:FE:0C:C3:14:3F:99:C5:E5:58:36:A3:FF:6C:0B:66:FC:20:C4:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:1d:e7:29:81:6b:a5:ca:92:f6:3f:93:85:c3:54:b6:49:87:
         75:48:c2:b7:1d:c0:a6:37:bc:dd:ad:bc:88:48:99:b7:57:df:
         d9:c3:79:fe:2e:ad:1e:75:a5:85:22:11:35:c0:a3:53:cf:d6:
         b0:5c:ec:07:ba:49:fd:5f:b2:3a:3e:2a:ed:e8:b1:9a:17:6b:
         75:42:83:92:80:c1:65:33:e6:f1:75:27:ef:90:8f:93:16:a2:
         df:1e:05:60:4a:ff:77:60:da:55:60:60:1e:e2:80:a7:83:7f:
         b2:02:92:b2:d8:7a:6a:06:13:73:67:f3:3b:56:df:91:31:ab:
         4d:71:a9:f6:fe:30:3b:96:c5:8c:d9:1d:77:73:fe:55:b6:eb:
         d4:02:6f:9c:be:04:0a:ee:2b:ad:ea:47:75:82:02:5a:ad:b1:
         41:2f:16:06:00:c9:87:ae:3f:6a:82:e0:e4:a4:fb:19:7b:96:
         f2:a4:93:c4:62:89:0f:37:0e:77:1c:17:49:42:6e:a5:72:58:
         34:cb:72:c0:45:2c:3b:c5:55:ca:50:74:fc:9d:69:d3:dd:b7:
         2c:46:89:ff:93:8f:35:40:dd:dd:b4:1a:67:d3:1d:31:12:b7:
         2e:70:22:37:de:34:a0:73:6d:3a:74:38:2d:ad:29:8c:9d:a8:
         06:08:2a:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9uB+Ji1eLhrMIMje3WNZtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZmUwY2MzMTQzZjk5YzVlNTU4MzZhM2ZmNmMwYjY2ZmMy
MGM0ZDUwHhcNMjYxMDE1MDQwMDM5WhcNMjYxMDE2MDQwMDM5WjAzMTEwLwYDVQQD
EygwMjk0NWI4YzdmMjJmZjM2Nzg0M2IxYzVjNGU3MGZmZTY4ZTBjY2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviH+t3QdNUntXVw3JU1+EUKHiq0y
EDoBGxjwyXSMZdR/t7V1sTisR02YTbtLTtrxqM8Af+p3T3R6zDZ7Aobv/dIRH5IW
zU3O9MdyCa9lH6J1xhhJcPnYmLVQpkMx1Wanco0bO6Y2gacPT+1vMvLamA/yCQe5
eTusNvlkkC5Ip9dUSETmCQr7zTjCECCAdGlASN9eG75cOrWZlGtkBxtRYGLfAd3t
P0KYJmny33DMicE6AaZUZcLe7t1oqa5So1nNKen4QkKk1Z1DTCjAKO/2gdCSP+4Z
408SPvGWGhVYcOgTPmlVKEaUjWF3Y5QxrIPNiSR6Y9sTEpnghqsbzkTTzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKUW4x/Iv82eEOxxcTnD/5o4MzEMB8GA1UdIwQY
MBaAFNn+DMMUP5nF5Vg2o/9sC2b8IMTVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmY0TXd4UV9tY1hsV0Rhal8yd0xadndneE5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jNDBkYjUtOGM3Yi00MGIyLWIxNDAt
MjYzMTk0OTZkN2RlLzEvMmY0TXd4UV9tY1hsV0Rhal8yd0xadndneE5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9jNDBkYjUtOGM3Yi00MGIyLWIxNDAtMjYzMTk0OTZkN2Rl
LzEvMmY0TXd4UV9tY1hsV0Rhal8yd0xadndneE5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmx3nKYFr
pcqS9j+ThcNUtkmHdUjCtx3Apje83a28iEiZt1ff2cN5/i6tHnWlhSIRNcCjU8/W
sFzsB7pJ/V+yOj4q7eixmhdrdUKDkoDBZTPm8XUn75CPkxai3x4FYEr/d2DaVWBg
HuKAp4N/sgKSsth6agYTc2fzO1bfkTGrTXGp9v4wO5bFjNkdd3P+Vbbr1AJvnL4E
Cu4rrepHdYICWq2xQS8WBgDJh64/aoLg5KT7GXuW8qSTxGKJDzcOdxwXSUJupXJY
NMtywEUsO8VVylB0/J1p0923LEaJ/5OPNUDd3bQaZ9MdMRK3LnAiN940oHNtOnQ4
La0pjJ2oBggq+A==
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:27 2026 by rpki-client