Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
File:                     AclpL7GkCf800a87grjj2mRnXDI.mft (raw, json)
Hash identifier:          mGasnd756H372yzptfOAPCfrh4MnTVNMZP/oWrZ5aTI=
Subject key identifier:   9F:24:96:73:5F:19:E7:9E:31:EC:74:C1:B6:3A:6A:4A:87:2B:3D:82
Authority key identifier: 01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32
Certificate issuer:       /CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
Certificate serial:       01A0CB90309B5EAC0E477C51A9FF3441502D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
Manifest number:          0FDE
Signing time:             Wed 23 Sep 2026 00:00:19 +0000
Manifest this update:     Wed 23 Sep 2026 00:00:19 +0000
Manifest next update:     Thu 24 Sep 2026 00:00:19 +0000
Files and hashes:         1: AclpL7GkCf800a87grjj2mRnXDI.crl (hash: wvGW5yPMDHgga8tr4YAw3iP9N+T08TVWLoDfb/MaJbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:90:30:9b:5e:ac:0e:47:7c:51:a9:ff:34:41:50:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
        Validity
            Not Before: Sep 23 00:00:19 2026 GMT
            Not After : Sep 24 00:00:19 2026 GMT
        Subject: CN=9f2496735f19e79e31ec74c1b63a6a4a872b3d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a6:a0:14:8a:d0:c3:d3:89:f5:87:f7:f4:8a:
                    d0:c2:54:84:80:43:fe:da:3e:5d:0e:95:a1:c1:a1:
                    fe:6e:cf:0a:b3:12:92:2a:eb:10:d6:e1:bb:d3:57:
                    b7:18:9c:71:84:ae:c2:1e:d6:12:a6:3a:55:09:77:
                    6d:a8:2f:58:78:72:3b:30:c9:c4:74:36:93:c1:6a:
                    21:26:5e:e9:97:ab:49:b3:37:78:b6:fc:ff:6b:68:
                    9e:cb:f5:84:40:d4:23:88:0d:ae:83:92:1e:c2:7c:
                    ed:ef:89:96:09:fd:dc:32:19:d7:b3:4e:c5:fd:65:
                    1b:82:25:d8:c2:f6:a1:8e:e7:79:33:c0:98:e5:7f:
                    56:e8:34:d7:78:43:96:cc:ff:4b:dd:10:fa:af:cd:
                    06:6a:04:93:14:c7:9b:51:6d:58:22:79:75:f3:b9:
                    b3:39:9b:f7:3d:63:c3:20:7b:7c:fb:69:f0:bf:e1:
                    3c:f1:67:3c:11:4d:31:2b:4c:88:c2:18:de:5b:1d:
                    b0:1c:31:f2:79:e9:99:23:9d:36:23:7f:6c:ee:dd:
                    d5:3a:a4:e6:25:da:1c:cd:5e:c4:ae:27:19:87:3d:
                    b7:52:41:aa:e1:4a:97:0b:3f:dd:40:86:d3:da:68:
                    47:10:d4:b8:cc:e8:a4:85:29:1f:df:0a:4a:f2:fa:
                    ab:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:24:96:73:5F:19:E7:9E:31:EC:74:C1:B6:3A:6A:4A:87:2B:3D:82
            X509v3 Authority Key Identifier:
                keyid:01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:52:ae:f0:24:8f:3f:51:49:79:c8:81:d3:c6:e4:6e:b4:e0:
         67:e3:40:d6:7c:23:91:43:66:fd:a6:51:b5:de:b2:49:7d:75:
         01:25:31:b6:8e:35:10:59:cd:e3:b8:97:df:ae:92:8e:73:d9:
         a2:e3:bc:69:9d:07:96:c9:49:12:e2:e2:33:dd:c7:1a:d3:74:
         01:48:79:07:f4:d1:fb:29:3c:8f:96:59:99:08:95:e4:d5:b9:
         f8:d4:41:c9:02:54:54:a8:5a:cf:7d:e2:d9:0f:3f:ff:0a:34:
         7a:63:49:ae:79:6e:01:b9:fa:1c:96:6c:ad:0f:01:76:53:a4:
         8f:1f:b1:60:ca:72:16:c2:0f:e9:ef:38:80:f2:5f:6c:56:71:
         4b:1e:31:83:00:75:72:b0:0d:df:7e:25:e3:e3:5d:41:71:bd:
         9a:65:bd:cd:12:1c:e9:2e:b5:d5:0f:d1:0d:d8:94:93:3d:9e:
         7c:1d:63:cd:4b:09:f0:eb:4d:cb:84:fb:51:23:93:38:f8:26:
         e5:a3:f5:fa:20:a3:bf:db:e1:55:23:e9:ac:55:f4:e3:4c:26:
         cf:12:5e:00:9a:33:9d:53:c7:76:69:9c:2e:6f:b3:b4:dd:bb:
         e9:04:29:5b:c2:9c:d2:c7:25:fd:94:d2:c5:7e:d6:7c:2d:54:
         fe:1f:26:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLkDCbXqwOR3xRqf80QVAtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYzk2OTJmYjFhNDA5ZmYzNGQxYWYzYjgyYjhlM2RhNjQ2
NzVjMzIwHhcNMjYwOTIzMDAwMDE5WhcNMjYwOTI0MDAwMDE5WjAzMTEwLwYDVQQD
Eyg5ZjI0OTY3MzVmMTllNzllMzFlYzc0YzFiNjNhNmE0YTg3MmIzZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aagFIrQw9OJ9Yf39IrQwlSEgEP+
2j5dDpWhwaH+bs8KsxKSKusQ1uG701e3GJxxhK7CHtYSpjpVCXdtqC9YeHI7MMnE
dDaTwWohJl7pl6tJszd4tvz/a2iey/WEQNQjiA2ug5Iewnzt74mWCf3cMhnXs07F
/WUbgiXYwvahjud5M8CY5X9W6DTXeEOWzP9L3RD6r80GagSTFMebUW1YInl187mz
OZv3PWPDIHt8+2nwv+E88Wc8EU0xK0yIwhjeWx2wHDHyeemZI502I39s7t3VOqTm
JdoczV7EricZhz23UkGq4UqXCz/dQIbT2mhHENS4zOikhSkf3wpK8vqr7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8klnNfGeeeMex0wbY6akqHKz2CMB8GA1UdIwQY
MBaAFAHJaS+xpAn/NNGvO4K449pkZ1wyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWNscEw3R2tDZjgwMGE4N2dyamoybVJuWERJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82MzBmZWMtZGQ1Ni00NmFjLWEwMzgt
ZGRiODkwZDc4ZmU5LzEvQWNscEw3R2tDZjgwMGE4N2dyamoybVJuWERJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy82MzBmZWMtZGQ1Ni00NmFjLWEwMzgtZGRiODkwZDc4ZmU5
LzEvQWNscEw3R2tDZjgwMGE4N2dyamoybVJuWERJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFKu8CSP
P1FJeciB08bkbrTgZ+NA1nwjkUNm/aZRtd6ySX11ASUxto41EFnN47iX366SjnPZ
ouO8aZ0HlslJEuLiM93HGtN0AUh5B/TR+yk8j5ZZmQiV5NW5+NRByQJUVKhaz33i
2Q8//wo0emNJrnluAbn6HJZsrQ8BdlOkjx+xYMpyFsIP6e84gPJfbFZxSx4xgwB1
crAN334l4+NdQXG9mmW9zRIc6S611Q/RDdiUkz2efB1jzUsJ8OtNy4T7USOTOPgm
5aP1+iCjv9vhVSPprFX040wmzxJeAJoznVPHdmmcLm+ztN276QQpW8Kc0scl/ZTS
xX7WfC1U/h8m/w==
-----END CERTIFICATE-----