Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
File:                     AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft (raw, json)
Hash identifier:          kwGd7zkCK6zp5CAz+YgY4VXzTtmRRmFBmRgYwEOFJEo=
Subject key identifier:   56:DC:FA:5F:E2:E7:6F:53:C5:00:F2:F8:C7:35:8D:23:0E:9F:CD:F9
Authority key identifier: 02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51
Certificate issuer:       /CN=02c4df5b74d99f9796718435c3afd2220cb56751
Certificate serial:       01A0C47C64F9DD1B69C60B144FF6E13C82FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
Manifest number:          07E1
Signing time:             Mon 21 Sep 2026 15:01:21 +0000
Manifest this update:     Mon 21 Sep 2026 15:01:21 +0000
Manifest next update:     Tue 22 Sep 2026 15:01:21 +0000
Files and hashes:         1: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl (hash: 9NJkCZnhXYLnBd/EV+GHz/wIL0/kxtTs+WNdd9T6jTo=)
                          2: Eii8h6uaBr6fEXcjaJ5se8NVU0c.roa (hash: WAw9S4sN6yDFY1nBSSz2zmctfGBwQIAYJa1xn10MbIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:7c:64:f9:dd:1b:69:c6:0b:14:4f:f6:e1:3c:82:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c4df5b74d99f9796718435c3afd2220cb56751
        Validity
            Not Before: Sep 21 15:01:21 2026 GMT
            Not After : Sep 22 15:01:21 2026 GMT
        Subject: CN=56dcfa5fe2e76f53c500f2f8c7358d230e9fcdf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:e7:ef:38:95:ac:bc:60:ae:34:d3:69:40:
                    82:3e:7a:bb:f7:dc:fc:94:e3:37:ae:31:de:29:06:
                    b4:33:40:79:a5:2d:93:08:db:ce:83:c6:3a:ea:85:
                    50:66:fb:c7:c6:f4:2a:02:c3:67:5c:00:70:8a:e9:
                    9d:0c:4a:d5:55:5c:e2:f2:73:4d:39:5a:99:7b:06:
                    c8:88:29:71:81:a6:e0:05:db:9e:d0:45:1f:1b:76:
                    15:1e:74:89:39:57:16:72:d4:5b:d9:65:88:07:8c:
                    6c:f1:d3:02:91:93:56:80:1e:6e:96:4d:05:97:e8:
                    94:38:4d:ac:49:20:29:b4:bd:df:40:d8:c5:73:e1:
                    f9:b8:65:34:d0:9e:bf:f7:26:12:10:3a:01:57:6d:
                    ef:5f:8a:87:41:db:b6:0a:92:bd:99:d5:70:35:3d:
                    80:b0:1b:39:3e:9a:f6:ae:77:cf:57:29:c2:be:5d:
                    11:1b:a0:cb:5c:f2:4b:34:b4:5a:a4:cd:36:3e:31:
                    d3:45:a8:a3:48:d1:51:db:d8:eb:fe:e1:f6:8b:bc:
                    ff:d5:7e:33:36:8f:1a:31:45:8f:b2:fc:e9:fb:f3:
                    c0:24:1e:51:11:d9:3f:98:c4:c5:13:e1:09:9d:c7:
                    30:24:1b:7e:a7:89:47:e2:07:82:b1:98:72:80:52:
                    97:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DC:FA:5F:E2:E7:6F:53:C5:00:F2:F8:C7:35:8D:23:0E:9F:CD:F9
            X509v3 Authority Key Identifier:
                keyid:02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:65:43:47:26:02:2f:7b:79:9a:7b:fe:a7:52:43:a8:ba:e1:
         09:21:44:93:43:22:ba:ba:a5:e5:b1:3e:64:e5:70:22:4a:71:
         b9:14:0a:6d:0c:02:cd:66:01:8b:04:a4:7d:cc:bc:f3:ba:2c:
         b5:c2:e5:2d:50:15:58:66:e3:92:c7:7e:ca:a5:7f:3d:6d:d5:
         e4:90:39:fa:23:5e:ea:f4:ff:8e:9e:48:e0:d0:72:34:9f:dd:
         8f:f3:34:62:8e:2b:ca:43:43:64:6c:a7:e3:df:f6:48:ff:ff:
         96:9a:4c:f9:81:6a:3f:6e:15:ef:f2:fe:8b:f0:62:4d:6b:52:
         aa:9a:09:96:4e:17:fa:02:bc:92:2e:59:38:9f:01:a5:16:4b:
         2c:89:66:ab:0e:65:cd:7c:74:fc:4f:f7:48:a0:14:1f:f5:88:
         95:54:4a:9d:5a:bd:00:e1:2b:fe:91:e6:34:ba:27:53:45:96:
         68:82:fa:c7:d2:b5:48:3b:98:59:2c:e9:c8:94:b6:4c:ab:81:
         72:19:cb:fd:8b:17:e7:5a:66:98:75:3f:61:88:3f:5b:03:7d:
         65:ea:0d:df:cd:05:9e:23:72:1b:a3:26:a5:0f:02:6e:62:b7:
         e2:91:40:d7:b7:ee:50:ac:a8:e7:d3:1b:fc:45:1e:b5:3e:f5:
         f6:68:51:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEfGT53RtpxgsUT/bhPIL8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzRkZjViNzRkOTlmOTc5NjcxODQzNWMzYWZkMjIyMGNi
NTY3NTEwHhcNMjYwOTIxMTUwMTIxWhcNMjYwOTIyMTUwMTIxWjAzMTEwLwYDVQQD
Eyg1NmRjZmE1ZmUyZTc2ZjUzYzUwMGYyZjhjNzM1OGQyMzBlOWZjZGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn/n7ziVrLxgrjTTaUCCPnq799z8
lOM3rjHeKQa0M0B5pS2TCNvOg8Y66oVQZvvHxvQqAsNnXABwiumdDErVVVzi8nNN
OVqZewbIiClxgabgBdue0EUfG3YVHnSJOVcWctRb2WWIB4xs8dMCkZNWgB5ulk0F
l+iUOE2sSSAptL3fQNjFc+H5uGU00J6/9yYSEDoBV23vX4qHQdu2CpK9mdVwNT2A
sBs5Ppr2rnfPVynCvl0RG6DLXPJLNLRapM02PjHTRaijSNFR29jr/uH2i7z/1X4z
No8aMUWPsvzp+/PAJB5REdk/mMTFE+EJnccwJBt+p4lH4geCsZhygFKX5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbc+l/i529TxQDy+Mc1jSMOn835MB8GA1UdIwQY
MBaAFALE31t02Z+XlnGENcOv0iIMtWdRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNUZlczVFpuNWVXY1lRMXc2X1NJZ3kxWjFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84ZjVhMWQtNjA4Ny00NmJlLWI0Yjgt
MjFkZTAzYTg1MjM1LzEvQXNUZlczVFpuNWVXY1lRMXc2X1NJZ3kxWjFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS84ZjVhMWQtNjA4Ny00NmJlLWI0YjgtMjFkZTAzYTg1MjM1
LzEvQXNUZlczVFpuNWVXY1lRMXc2X1NJZ3kxWjFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkWVDRyYC
L3t5mnv+p1JDqLrhCSFEk0Miurql5bE+ZOVwIkpxuRQKbQwCzWYBiwSkfcy887os
tcLlLVAVWGbjksd+yqV/PW3V5JA5+iNe6vT/jp5I4NByNJ/dj/M0Yo4rykNDZGyn
49/2SP//lppM+YFqP24V7/L+i/BiTWtSqpoJlk4X+gK8ki5ZOJ8BpRZLLIlmqw5l
zXx0/E/3SKAUH/WIlVRKnVq9AOEr/pHmNLonU0WWaIL6x9K1SDuYWSzpyJS2TKuB
chnL/YsX51pmmHU/YYg/WwN9ZeoN380FniNyG6MmpQ8CbmK34pFA17fuUKyo59Mb
/EUetT719mhRBw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:25:51 2026 by rpki-client