Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
File:                     EDfew086MutlAvFmKoKiD4teohw.mft (raw, json)
Hash identifier:          tIpriI23OR/AlzYMoUTpQBGXjH+a0cv6WE/RBKhEKK8=
Subject key identifier:   0E:D3:04:91:FE:32:02:40:F6:32:26:87:59:8F:AF:B9:CC:B8:35:7D
Authority key identifier: 10:37:DE:C3:4F:3A:32:EB:65:02:F1:66:2A:82:A2:0F:8B:5E:A2:1C
Certificate issuer:       /CN=1037dec34f3a32eb6502f1662a82a20f8b5ea21c
Certificate serial:       01A0CA47939FAD4AF657FFBB4B2FACE496E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
Manifest number:          1A66
Signing time:             Tue 22 Sep 2026 18:01:23 +0000
Manifest this update:     Tue 22 Sep 2026 18:01:23 +0000
Manifest next update:     Wed 23 Sep 2026 18:01:23 +0000
Files and hashes:         1: EDfew086MutlAvFmKoKiD4teohw.crl (hash: AaW00s+vcFQer6dLIvzXB9Uy7KtotoR1GcVI5nk8lRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 18:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:47:93:9f:ad:4a:f6:57:ff:bb:4b:2f:ac:e4:96:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1037dec34f3a32eb6502f1662a82a20f8b5ea21c
        Validity
            Not Before: Sep 22 18:01:23 2026 GMT
            Not After : Sep 23 18:01:23 2026 GMT
        Subject: CN=0ed30491fe320240f6322687598fafb9ccb8357d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:38:6f:83:ee:8f:7a:3d:bc:02:26:52:4c:aa:
                    bf:b2:f6:01:eb:98:01:50:e3:b7:7f:c6:fe:44:04:
                    b6:8f:3d:f9:9f:a5:4d:8c:2f:78:c0:19:7d:71:fc:
                    50:60:56:41:61:63:b8:67:b2:bd:99:74:82:c4:29:
                    6a:de:bb:c0:b1:af:be:f5:57:f3:51:16:15:c1:9c:
                    5c:40:da:e1:5d:1f:a3:22:bc:b7:d9:b7:53:49:87:
                    4b:45:66:7c:ee:06:2d:cc:1b:25:9c:af:47:f9:c3:
                    f9:ed:7b:37:c5:37:99:38:ae:df:28:ff:bb:b1:84:
                    3c:77:48:33:c9:f2:09:17:25:59:47:0b:59:e5:d7:
                    a1:d8:f2:61:5a:10:7a:70:bd:59:9b:c0:62:45:98:
                    76:12:9a:71:70:e4:9d:99:e2:9a:3b:33:59:f7:92:
                    bf:22:4d:89:f4:25:8d:d8:b7:e3:f4:e6:29:21:90:
                    c8:04:1d:84:1a:48:23:f1:e8:31:89:6a:3c:62:fd:
                    47:93:06:46:19:e2:87:9a:65:10:e0:74:36:67:36:
                    b9:2e:c2:56:00:f4:0e:05:39:3d:b2:2f:8f:19:94:
                    61:bb:8f:33:f0:85:a1:c3:1e:34:87:3f:e0:db:5f:
                    61:8d:38:8a:89:3d:ec:ec:65:80:36:dd:71:69:87:
                    91:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D3:04:91:FE:32:02:40:F6:32:26:87:59:8F:AF:B9:CC:B8:35:7D
            X509v3 Authority Key Identifier:
                keyid:10:37:DE:C3:4F:3A:32:EB:65:02:F1:66:2A:82:A2:0F:8B:5E:A2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:06:9f:a1:b9:2c:b1:aa:32:a9:cf:2a:50:f8:50:03:08:29:
         5c:c5:e1:87:07:db:37:88:ec:8f:01:ec:9e:c1:ad:20:03:71:
         39:5b:64:9c:5c:fb:06:7a:a8:a9:94:8e:35:3f:76:d1:58:ad:
         5a:5c:06:0a:24:11:59:98:44:ea:b9:c2:e6:d3:36:45:c5:ff:
         4f:9f:92:1b:43:45:c0:26:19:ef:d5:a2:8a:2b:e6:03:e3:0a:
         72:81:1a:af:03:1e:83:5a:7a:38:f8:52:94:88:48:61:3a:ce:
         1f:8f:a1:bd:a3:de:7c:a4:fb:52:86:c5:32:2a:6c:40:44:ab:
         d3:d8:b2:33:b8:72:0e:2b:10:c3:3b:f3:be:b1:1b:39:d5:3c:
         ac:4a:30:7d:30:6f:4e:1e:a4:4b:cd:c6:48:9e:24:0b:75:27:
         2b:9c:a6:e4:07:0d:06:1d:ae:a8:4f:65:fa:7e:70:96:30:c4:
         b0:32:f1:3c:b9:68:85:2a:97:cf:9c:37:d3:6d:5c:6f:af:68:
         75:0f:97:73:e1:6a:89:4a:73:81:71:f2:e2:bd:1c:d6:d2:8a:
         a3:bb:48:1e:c7:31:6b:00:6f:0b:78:0c:3e:b6:c2:b9:e4:9d:
         a3:29:9c:d0:d6:e1:b4:85:55:9b:7a:4f:d5:8c:5a:a2:e6:68:
         f1:61:59:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKR5OfrUr2V/+7Sy+s5JbpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMzdkZWMzNGYzYTMyZWI2NTAyZjE2NjJhODJhMjBmOGI1
ZWEyMWMwHhcNMjYwOTIyMTgwMTIzWhcNMjYwOTIzMTgwMTIzWjAzMTEwLwYDVQQD
EygwZWQzMDQ5MWZlMzIwMjQwZjYzMjI2ODc1OThmYWZiOWNjYjgzNTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzhvg+6Pej28AiZSTKq/svYB65gB
UOO3f8b+RAS2jz35n6VNjC94wBl9cfxQYFZBYWO4Z7K9mXSCxClq3rvAsa++9Vfz
URYVwZxcQNrhXR+jIry32bdTSYdLRWZ87gYtzBslnK9H+cP57Xs3xTeZOK7fKP+7
sYQ8d0gzyfIJFyVZRwtZ5deh2PJhWhB6cL1Zm8BiRZh2EppxcOSdmeKaOzNZ95K/
Ik2J9CWN2Lfj9OYpIZDIBB2EGkgj8egxiWo8Yv1HkwZGGeKHmmUQ4HQ2Zza5LsJW
APQOBTk9si+PGZRhu48z8IWhwx40hz/g219hjTiKiT3s7GWANt1xaYeR7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7TBJH+MgJA9jImh1mPr7nMuDV9MB8GA1UdIwQY
MBaAFBA33sNPOjLrZQLxZiqCog+LXqIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRURmZXcwODZNdXRsQXZGbUtvS2lENHRlb2h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9iNjgwYWYtZDVhYi00YjJmLWE4Mzct
MGQ0MWE2NGU5MGVjLzEvRURmZXcwODZNdXRsQXZGbUtvS2lENHRlb2h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9iNjgwYWYtZDVhYi00YjJmLWE4MzctMGQ0MWE2NGU5MGVj
LzEvRURmZXcwODZNdXRsQXZGbUtvS2lENHRlb2h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQafobks
saoyqc8qUPhQAwgpXMXhhwfbN4jsjwHsnsGtIANxOVtknFz7BnqoqZSONT920Vit
WlwGCiQRWZhE6rnC5tM2RcX/T5+SG0NFwCYZ79WiiivmA+MKcoEarwMeg1p6OPhS
lIhIYTrOH4+hvaPefKT7UobFMipsQESr09iyM7hyDisQwzvzvrEbOdU8rEowfTBv
Th6kS83GSJ4kC3UnK5ym5AcNBh2uqE9l+n5wljDEsDLxPLlohSqXz5w3021cb69o
dQ+Xc+FqiUpzgXHy4r0c1tKKo7tIHscxawBvC3gMPrbCueSdoymc0NbhtIVVm3pP
1YxaouZo8WFZSA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:11:18 2026 by rpki-client