Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
File:                     8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft (raw, json)
Hash identifier:          ixYMcENmayo/dwgQ/ivtJ8RRmGGXKYyjnsUYw/F40+c=
Subject key identifier:   03:00:86:12:14:78:B4:0A:98:49:C8:70:57:30:4A:2E:60:37:AF:B0
Authority key identifier: F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
Certificate issuer:       /CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Certificate serial:       019D9999358BDE96640ECE8804777AFAFBA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
Manifest number:          07AB
Signing time:             Fri 17 Apr 2026 04:00:47 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:47 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:47 +0000
Files and hashes:         1: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl (hash: AR90QduCzR9tFocTqAas2eH22JZzun7yBUS8s9hAbCg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:35:8b:de:96:64:0e:ce:88:04:77:7a:fa:fb:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
        Validity
            Not Before: Apr 17 04:00:47 2026 GMT
            Not After : Apr 18 04:00:47 2026 GMT
        Subject: CN=030086121478b40a9849c87057304a2e6037afb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:aa:6d:57:32:d1:b4:ef:75:c1:15:12:f7:f2:
                    2d:74:62:42:c9:ac:21:2d:64:fe:24:7c:16:5c:57:
                    0a:f1:e1:55:ff:bf:c5:c3:44:42:38:32:9b:50:21:
                    77:49:1b:c0:e7:84:a9:7b:87:c2:c5:6c:31:a1:07:
                    be:c2:d0:89:fb:4e:22:54:77:93:2a:68:db:09:86:
                    6b:4b:63:7e:69:e1:33:c5:16:55:37:bc:0d:6b:ac:
                    af:b3:16:5b:6d:15:b6:a1:60:79:e3:1b:f9:ad:2b:
                    6d:c3:36:61:dc:33:ec:07:1c:c9:3c:be:7b:1d:3e:
                    bd:a1:6c:be:3c:4b:07:68:c4:55:f1:7a:e4:d0:4d:
                    3b:da:1c:a5:0f:be:62:d7:ea:68:52:cd:69:83:68:
                    ac:5a:49:8a:f0:56:74:6b:b5:83:72:64:fa:91:51:
                    d9:6a:10:54:07:8e:10:c4:ab:9b:49:6d:9f:92:7b:
                    3e:54:9f:9d:16:3e:1a:26:ef:32:35:ec:d0:29:87:
                    f3:50:b8:2b:3d:1d:55:d7:e8:13:57:cd:7f:7e:59:
                    c2:0a:f2:78:03:09:da:b4:13:ce:f8:c2:27:7a:93:
                    83:62:81:e8:11:2a:c0:79:19:ec:b7:f8:01:98:a1:
                    3c:fc:6c:ef:93:d5:f1:f5:c2:58:8a:94:b6:b6:04:
                    e8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:00:86:12:14:78:B4:0A:98:49:C8:70:57:30:4A:2E:60:37:AF:B0
            X509v3 Authority Key Identifier:
                keyid:F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:37:2d:87:5d:cb:8f:0e:31:eb:42:3c:f0:14:19:aa:e3:9b:
         dc:61:55:34:fe:20:bc:bb:03:22:86:4d:b8:2e:e9:72:e4:c9:
         79:34:bf:f4:b3:44:eb:0f:df:8d:be:28:b9:9b:96:15:8a:79:
         ea:56:11:3e:af:39:ff:ac:6a:b9:8c:e8:11:1c:54:c4:2a:b6:
         93:20:47:54:ab:b4:6e:20:9e:43:ca:6c:9c:28:07:47:0f:7c:
         18:be:2c:56:73:1e:15:56:55:34:63:06:ed:b5:4b:b4:34:9b:
         0e:54:63:72:93:cd:6c:20:1e:cf:53:09:96:df:99:05:5f:2c:
         6b:1b:5b:14:d3:aa:0d:ca:b2:72:8a:e3:7b:1f:a6:13:c0:72:
         1d:69:ee:2c:ba:0a:db:56:6e:14:07:61:5a:67:27:e4:fd:98:
         1f:8c:47:e2:ec:74:3d:d7:f8:d1:67:84:eb:a0:16:4f:d2:8f:
         1f:17:cd:7d:10:bf:23:18:71:32:19:92:f8:8c:4e:e9:5f:25:
         f6:61:e1:8b:da:d5:82:bc:5b:d3:90:74:ed:fe:19:d3:aa:2c:
         07:25:2b:0c:58:84:ac:a5:28:4d:25:1a:56:28:f4:e5:a9:b1:
         f7:7c:d2:11:c1:53:80:d7:7f:5a:40:22:f0:8e:4b:6c:eb:b8:
         ff:e4:35:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmTWL3pZkDs6IBHd6+vuiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwM2YxZjMzNWM3ZDA0YjM2MDhmZDE5MTRhOWMwNTNiMDRh
N2ZjYjkwHhcNMjYwNDE3MDQwMDQ3WhcNMjYwNDE4MDQwMDQ3WjAzMTEwLwYDVQQD
EygwMzAwODYxMjE0NzhiNDBhOTg0OWM4NzA1NzMwNGEyZTYwMzdhZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaptVzLRtO91wRUS9/ItdGJCyawh
LWT+JHwWXFcK8eFV/7/Fw0RCODKbUCF3SRvA54Spe4fCxWwxoQe+wtCJ+04iVHeT
KmjbCYZrS2N+aeEzxRZVN7wNa6yvsxZbbRW2oWB54xv5rSttwzZh3DPsBxzJPL57
HT69oWy+PEsHaMRV8Xrk0E072hylD75i1+poUs1pg2isWkmK8FZ0a7WDcmT6kVHZ
ahBUB44QxKubSW2fkns+VJ+dFj4aJu8yNezQKYfzULgrPR1V1+gTV81/flnCCvJ4
AwnatBPO+MInepODYoHoESrAeRnst/gBmKE8/Gzvk9Xx9cJYipS2tgToCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMAhhIUeLQKmEnIcFcwSi5gN6+wMB8GA1UdIwQY
MBaAFPA/HzNcfQSzYI/RkUqcBTsEp/y5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84OTdjZjctYjM4Ni00Yzg3LTg0MWYt
MzM4YTA3ZThlYmQ2LzEvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi84OTdjZjctYjM4Ni00Yzg3LTg0MWYtMzM4YTA3ZThlYmQ2
LzEvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATcth13L
jw4x60I88BQZquOb3GFVNP4gvLsDIoZNuC7pcuTJeTS/9LNE6w/fjb4ouZuWFYp5
6lYRPq85/6xquYzoERxUxCq2kyBHVKu0biCeQ8psnCgHRw98GL4sVnMeFVZVNGMG
7bVLtDSbDlRjcpPNbCAez1MJlt+ZBV8saxtbFNOqDcqycorjex+mE8ByHWnuLLoK
21ZuFAdhWmcn5P2YH4xH4ux0Pdf40WeE66AWT9KPHxfNfRC/IxhxMhmS+IxO6V8l
9mHhi9rVgrxb05B07f4Z06osByUrDFiErKUoTSUaVij05amx93zSEcFTgNd/WkAi
8I5LbOu4/+Q1UA==
-----END CERTIFICATE-----