Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
File:                     01CzV9ze5o--vcVVPbMknG6Clsc.mft (raw, json)
Hash identifier:          uYlK3tImUDTd9fp/rh31kt5qc4rAq8EMbHs79ZkiuTA=
Subject key identifier:   B2:25:3F:F7:6F:43:74:8D:29:C7:CD:E9:3D:42:16:36:F6:AA:82:8A
Authority key identifier: D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
Certificate issuer:       /CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Certificate serial:       01A00138272B39DDFEB16E4263F923E29EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
Manifest number:          090A
Signing time:             Fri 14 Aug 2026 17:00:52 +0000
Manifest this update:     Fri 14 Aug 2026 17:00:52 +0000
Manifest next update:     Sat 15 Aug 2026 17:00:52 +0000
Files and hashes:         1: 01CzV9ze5o--vcVVPbMknG6Clsc.crl (hash: 7iDJ+06ywS0F8U+nFWPUCPf2Q3Wh6qI3mYWx+8OQ3eQ=)
                          2: 4VA7wZJaiHWG2GAPtA5u1BDcn4I.roa (hash: PqJvEzmh32UVxsDr7waFI7G4gmqJkPLZ5CaOrNIefv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:38:27:2b:39:dd:fe:b1:6e:42:63:f9:23:e2:9e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
        Validity
            Not Before: Aug 14 17:00:52 2026 GMT
            Not After : Aug 15 17:00:52 2026 GMT
        Subject: CN=b2253ff76f43748d29c7cde93d421636f6aa828a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ba:1b:52:d6:2c:97:6b:37:c2:9a:2f:f1:ce:
                    91:4e:d9:cc:8a:7e:4c:2c:f7:6b:07:3d:c2:eb:05:
                    f3:14:ca:0b:c1:cd:45:22:35:f6:d7:58:5a:8a:36:
                    c9:7d:50:08:78:95:c9:b1:0c:d0:1e:d9:3a:ea:3e:
                    59:a8:42:23:53:93:57:93:3e:7c:aa:9b:3c:d6:67:
                    08:27:21:f4:69:19:fb:b7:51:09:80:0a:f8:f9:2b:
                    fc:0f:65:28:ca:1c:86:87:80:7c:ff:ff:11:7f:be:
                    5a:ee:90:c3:54:76:df:da:0c:11:a1:82:a0:46:0e:
                    e4:b1:40:d3:a5:23:5f:47:24:4e:ed:4b:07:36:bc:
                    4a:80:38:a5:da:d0:52:56:1b:5e:be:d3:11:b3:d3:
                    e4:1a:1f:a5:7f:d5:1b:0d:56:df:2d:df:69:8f:44:
                    ed:bd:67:45:ea:f5:7e:e5:57:42:ec:2f:1c:02:0c:
                    eb:30:1c:fc:58:f0:16:57:30:bb:14:d8:ff:08:45:
                    a4:6e:62:80:ea:f3:de:d5:46:50:0a:56:e8:65:12:
                    26:d3:65:4d:65:1f:27:bc:47:f9:a9:6a:d7:8b:59:
                    3b:37:54:f0:54:18:30:da:15:ab:65:ee:9c:86:8f:
                    b7:44:5e:91:9b:87:28:7f:c2:14:d2:96:28:aa:5f:
                    2b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:25:3F:F7:6F:43:74:8D:29:C7:CD:E9:3D:42:16:36:F6:AA:82:8A
            X509v3 Authority Key Identifier:
                keyid:D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:77:58:1a:d2:b0:1b:60:03:cf:a6:17:93:e0:c0:97:58:8f:
         70:20:b0:e9:38:67:7d:e1:ee:2e:a5:67:1c:ea:33:b5:79:52:
         80:d6:2f:1f:63:75:c3:e4:4b:10:73:2f:08:48:f8:8c:a7:35:
         5a:39:0a:ed:84:38:15:ea:6d:cd:07:4f:b4:a9:77:43:4e:fb:
         a2:2c:40:a3:9a:7e:ee:4f:1f:3d:bf:d6:9a:57:eb:73:9f:0b:
         59:52:6b:b3:3b:7f:c8:b8:6c:6e:3b:fc:5e:7c:b4:6e:f6:94:
         64:ee:80:fa:27:95:0b:d7:92:b9:6d:1c:47:d8:13:4d:2e:f1:
         8a:a8:00:9a:3f:90:2a:bc:71:b6:e8:51:9b:4b:c2:c8:e0:3b:
         7c:36:70:49:c1:eb:6e:62:ed:35:ba:18:2c:5a:63:c5:97:ee:
         ce:08:4f:5e:40:00:35:09:09:1b:f6:83:2a:40:6d:07:94:d3:
         c3:59:34:08:f8:24:f6:f0:1a:ea:b7:0b:6e:e3:b3:17:eb:d1:
         55:68:4e:9a:93:a5:ee:6d:25:05:b2:85:52:a1:1d:84:a5:fd:
         66:bd:a1:e6:7b:bf:c7:1c:94:49:f1:bf:4c:70:98:43:9e:53:
         c2:0d:a0:72:9e:6c:da:16:4b:2d:5b:47:9b:c3:17:31:a7:a1:
         30:20:89:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABOCcrOd3+sW5CY/kj4p71MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTBiMzU3ZGNkZWU2OGZiZWJkYzU1NTNkYjMyNDljNmU4
Mjk2YzcwHhcNMjYwODE0MTcwMDUyWhcNMjYwODE1MTcwMDUyWjAzMTEwLwYDVQQD
EyhiMjI1M2ZmNzZmNDM3NDhkMjljN2NkZTkzZDQyMTYzNmY2YWE4MjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbobUtYsl2s3wpov8c6RTtnMin5M
LPdrBz3C6wXzFMoLwc1FIjX211haijbJfVAIeJXJsQzQHtk66j5ZqEIjU5NXkz58
qps81mcIJyH0aRn7t1EJgAr4+Sv8D2UoyhyGh4B8//8Rf75a7pDDVHbf2gwRoYKg
Rg7ksUDTpSNfRyRO7UsHNrxKgDil2tBSVhtevtMRs9PkGh+lf9UbDVbfLd9pj0Tt
vWdF6vV+5VdC7C8cAgzrMBz8WPAWVzC7FNj/CEWkbmKA6vPe1UZQClboZRIm02VN
ZR8nvEf5qWrXi1k7N1TwVBgw2hWrZe6cho+3RF6Rm4cof8IU0pYoql8rwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIlP/dvQ3SNKcfN6T1CFjb2qoKKMB8GA1UdIwQY
MBaAFNNQs1fc3uaPvr3FVT2zJJxugpbHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYjU2OTYtZTc3Ni00MDIxLWJhZGYt
ZmZlZDUzZjQ1ZGVkLzEvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wYjU2OTYtZTc3Ni00MDIxLWJhZGYtZmZlZDUzZjQ1ZGVk
LzEvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXdYGtKw
G2ADz6YXk+DAl1iPcCCw6ThnfeHuLqVnHOoztXlSgNYvH2N1w+RLEHMvCEj4jKc1
WjkK7YQ4FeptzQdPtKl3Q077oixAo5p+7k8fPb/Wmlfrc58LWVJrszt/yLhsbjv8
Xny0bvaUZO6A+ieVC9eSuW0cR9gTTS7xiqgAmj+QKrxxtuhRm0vCyOA7fDZwScHr
bmLtNboYLFpjxZfuzghPXkAANQkJG/aDKkBtB5TTw1k0CPgk9vAa6rcLbuOzF+vR
VWhOmpOl7m0lBbKFUqEdhKX9Zr2h5nu/xxyUSfG/THCYQ55Twg2gcp5s2hZLLVtH
m8MXMaehMCCJsQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:28 2026 by rpki-client