Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
File:                     CWmio5Y1t5dHbx8WM66PJ78ztTM.mft (raw, json)
Hash identifier:          KagI0+ScWt/ep1u2jgjpRlwk5QS2J55YBoMLDLj5J10=
Subject key identifier:   5B:40:18:6D:8F:09:15:32:A0:F9:F0:34:30:48:E1:1C:54:43:01:9E
Authority key identifier: 09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
Certificate issuer:       /CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Certificate serial:       01A0C55797CF93D3C2DED5B4072DCF81EDE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
Manifest number:          0BCD
Signing time:             Mon 21 Sep 2026 19:00:47 +0000
Manifest this update:     Mon 21 Sep 2026 19:00:47 +0000
Manifest next update:     Tue 22 Sep 2026 19:00:47 +0000
Files and hashes:         1: CWmio5Y1t5dHbx8WM66PJ78ztTM.crl (hash: dvH6xwkbZdsRwhqw5/dCL4PerLk5MnAZY6Wpvn+nPis=)
                          2: RsTSr-3jTnG1CeXmaL5yjIv3e7A.roa (hash: U9h7mXi2TPfXP2mWBMjzpDcUhTXc3t6ZDS7Y90GMnqI=)
                          3: V2mAUhiuLSdY43WTX18t68JU52U.roa (hash: 0HD53IzD09TTvFxGJ5/toZ8gNnKRelVvlZQJyDdwGvM=)
                          4: ZYguphbq_OVZXqnSVXPcyY-MrWU.roa (hash: YBNSr4xuGhr4HSUuVKzH8avlZXqqbx+cNVBs9dQx+pg=)
                          5: kNW-FofDRFcYyJ6jdZntLsWi_kQ.roa (hash: vsRui+TumYQf+mEKOxKsjjJTMlbNB6Ytf/Fua/xhVUM=)
                          6: ksfa6RQDM_0VxmjR64arGWZD9rM.roa (hash: eBadilkI77a4zTmLhePWsFBGmFNKACYzx+SMzHBV/40=)
                          7: yNd_DMkIMvgYnrn_7Wsari1U2DE.roa (hash: IEhZvaGq91qhQu5JNN1NRfY/8v2XmumSPV2Zm2UUU6I=)
Validation:               Failed, certificate revoked on Tue 22 Sep 2026 04:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:57:97:cf:93:d3:c2:de:d5:b4:07:2d:cf:81:ed:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0969a2a39635b797476f1f1633ae8f27bf33b533
        Validity
            Not Before: Sep 21 19:00:47 2026 GMT
            Not After : Sep 22 19:00:47 2026 GMT
        Subject: CN=5b40186d8f091532a0f9f0343048e11c5443019e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fa:02:5d:a5:e7:d7:c7:78:36:04:5a:b6:f5:
                    7c:40:fb:33:3e:43:a7:fb:6f:87:e5:bf:cf:c8:29:
                    12:4e:11:c3:9b:75:27:a7:00:50:c5:ad:0b:dd:68:
                    5f:e0:50:4a:29:88:1b:34:0c:e7:05:9c:06:29:c5:
                    95:0e:f2:74:de:19:46:f7:d5:83:6b:01:88:c9:51:
                    5b:ab:bd:4f:72:00:f8:e0:e4:bf:6a:dd:26:94:3b:
                    e5:10:ca:de:f9:1c:10:df:12:13:56:dd:58:53:61:
                    58:1a:5d:10:1a:69:14:2d:0c:5c:74:1b:41:5a:d2:
                    50:cc:a7:e2:09:56:db:8d:a3:c8:8c:a9:84:a6:77:
                    6f:42:16:45:b7:e1:50:18:49:53:6e:cb:9f:c5:92:
                    01:49:10:89:57:a1:83:17:f4:42:55:90:6f:47:38:
                    1f:ef:c1:13:ea:87:de:07:a2:0c:b8:26:58:fa:03:
                    ff:1f:c2:64:27:cf:92:0a:ad:04:90:90:cb:78:6e:
                    19:20:d4:e4:e5:a5:cb:a6:02:ee:be:45:f0:09:d9:
                    97:e4:9d:b7:6c:11:41:f3:34:17:1b:c6:1d:11:6e:
                    dc:1b:ae:c4:f0:0d:62:de:8f:c7:db:79:9a:1b:8c:
                    05:4e:f2:3c:2e:ab:46:51:2e:31:a6:a9:be:e3:ed:
                    43:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:40:18:6D:8F:09:15:32:A0:F9:F0:34:30:48:E1:1C:54:43:01:9E
            X509v3 Authority Key Identifier:
                keyid:09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:63:dc:fb:db:d2:29:9c:8d:8b:28:b5:db:7f:7b:6a:31:44:
         00:f7:44:a7:f8:09:ea:8d:a3:00:4f:17:55:d2:af:54:9a:1b:
         f5:50:11:57:68:16:ae:bc:1a:e6:21:e5:8f:b2:ab:36:70:41:
         4a:2d:68:14:0d:42:5b:42:e6:01:d4:c5:d3:7a:50:5e:fc:65:
         9c:93:26:76:9e:c5:a2:8e:fe:bd:7b:69:2c:c9:08:ba:ca:14:
         42:3d:a9:cd:59:61:6f:eb:32:18:a2:08:c0:5a:e7:8c:d4:d0:
         62:fe:ff:db:ba:94:26:38:6e:54:ab:3d:26:f8:35:74:6f:22:
         82:1a:a0:6f:1d:60:5d:43:e6:b5:5d:65:78:06:00:f9:9c:f5:
         e6:1b:47:85:53:fb:c5:37:e0:c0:45:34:ef:73:71:05:8b:0e:
         e5:ad:79:a2:1f:66:83:bb:55:52:42:b1:36:b9:38:af:76:d6:
         33:55:77:ed:45:a0:3a:4c:63:d3:c7:ea:b8:a1:4c:a3:2d:b6:
         46:a6:03:db:70:9f:a4:6d:3f:8e:35:54:7b:2a:34:3c:b3:de:
         39:02:08:f4:4e:dd:d0:7e:ea:ae:8f:67:1b:63:9a:1c:96:bb:
         fd:30:53:b1:bb:8c:92:47:8a:0c:f9:4e:26:6c:90:c9:53:2c:
         1a:55:7d:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFV5fPk9PC3tW0By3Pge3hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NjlhMmEzOTYzNWI3OTc0NzZmMWYxNjMzYWU4ZjI3YmYz
M2I1MzMwHhcNMjYwOTIxMTkwMDQ3WhcNMjYwOTIyMTkwMDQ3WjAzMTEwLwYDVQQD
Eyg1YjQwMTg2ZDhmMDkxNTMyYTBmOWYwMzQzMDQ4ZTExYzU0NDMwMTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfoCXaXn18d4NgRatvV8QPszPkOn
+2+H5b/PyCkSThHDm3UnpwBQxa0L3Whf4FBKKYgbNAznBZwGKcWVDvJ03hlG99WD
awGIyVFbq71PcgD44OS/at0mlDvlEMre+RwQ3xITVt1YU2FYGl0QGmkULQxcdBtB
WtJQzKfiCVbbjaPIjKmEpndvQhZFt+FQGElTbsufxZIBSRCJV6GDF/RCVZBvRzgf
78ET6ofeB6IMuCZY+gP/H8JkJ8+SCq0EkJDLeG4ZINTk5aXLpgLuvkXwCdmX5J23
bBFB8zQXG8YdEW7cG67E8A1i3o/H23maG4wFTvI8LqtGUS4xpqm+4+1D/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtAGG2PCRUyoPnwNDBI4RxUQwGeMB8GA1UdIwQY
MBaAFAlpoqOWNbeXR28fFjOujye/M7UzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1dtaW81WTF0NWRIYng4V002NlBKNzh6dFRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC82ZGI0MjctZjdkYy00ZWE5LWFlOTUt
NDE0OTA4NzJmYzRlLzEvQ1dtaW81WTF0NWRIYng4V002NlBKNzh6dFRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC82ZGI0MjctZjdkYy00ZWE5LWFlOTUtNDE0OTA4NzJmYzRl
LzEvQ1dtaW81WTF0NWRIYng4V002NlBKNzh6dFRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2Pc+9vS
KZyNiyi12397ajFEAPdEp/gJ6o2jAE8XVdKvVJob9VARV2gWrrwa5iHlj7KrNnBB
Si1oFA1CW0LmAdTF03pQXvxlnJMmdp7Foo7+vXtpLMkIusoUQj2pzVlhb+syGKII
wFrnjNTQYv7/27qUJjhuVKs9Jvg1dG8ighqgbx1gXUPmtV1leAYA+Zz15htHhVP7
xTfgwEU073NxBYsO5a15oh9mg7tVUkKxNrk4r3bWM1V37UWgOkxj08fquKFMoy22
RqYD23CfpG0/jjVUeyo0PLPeOQII9E7d0H7qro9nG2OaHJa7/TBTsbuMkkeKDPlO
JmyQyVMsGlV9Zw==
-----END CERTIFICATE-----