Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
File:                     65fOljUzDxRxFMZG72qTR9aJFjs.mft (raw, json)
Hash identifier:          Hv83lfGa6x10IMFhHpMz1RozlrOJP1QBB3GtTfw0GJ8=
Subject key identifier:   81:4F:5D:0B:EA:7F:4B:3E:B3:D3:35:DC:08:54:1D:A2:F8:7E:B6:CF
Authority key identifier: EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
Certificate issuer:       /CN=eb97ce9635330f147114c646ef6a9347d689163b
Certificate serial:       01A0C4E9676852D191AAFB955CAD441A7E6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
Manifest number:          19F4
Signing time:             Mon 21 Sep 2026 17:00:25 +0000
Manifest this update:     Mon 21 Sep 2026 17:00:25 +0000
Manifest next update:     Tue 22 Sep 2026 17:00:25 +0000
Files and hashes:         1: 65fOljUzDxRxFMZG72qTR9aJFjs.crl (hash: p9jJi3WhZZdYXix3PlBQ4zMuShFHv9J850a7b8qJDl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:e9:67:68:52:d1:91:aa:fb:95:5c:ad:44:1a:7e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb97ce9635330f147114c646ef6a9347d689163b
        Validity
            Not Before: Sep 21 17:00:25 2026 GMT
            Not After : Sep 22 17:00:25 2026 GMT
        Subject: CN=814f5d0bea7f4b3eb3d335dc08541da2f87eb6cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9a:93:7a:b4:de:c4:3d:dc:e7:cb:ab:35:17:
                    df:eb:ab:b1:fa:d5:bb:6e:ca:bd:09:4d:47:f1:6a:
                    ed:42:0e:41:44:55:37:8e:e4:d7:43:9b:8c:01:61:
                    7b:74:0b:e7:c3:17:6d:15:a7:9a:71:ba:22:93:3a:
                    99:62:08:59:2a:32:ac:b5:c2:5b:9a:0f:70:6d:8b:
                    b8:9e:2d:cb:79:cf:69:f5:f6:c9:aa:23:9b:e9:8f:
                    f3:91:63:fc:b6:56:0b:ee:b1:53:ab:95:de:ec:f5:
                    99:00:7f:11:3c:59:e4:96:ea:10:42:62:52:0d:44:
                    32:ed:7a:36:c9:74:02:a3:fe:34:ac:08:14:02:cc:
                    f7:0f:c7:37:2b:5f:dc:79:bd:1b:ce:5a:b0:0b:17:
                    07:d1:48:42:9e:eb:63:e8:51:29:ad:4f:a1:31:7f:
                    81:0f:65:f3:f1:72:fd:20:14:09:f1:a7:f8:5b:3c:
                    2d:3e:2c:e9:30:69:74:3f:3b:69:7d:c1:73:dd:ef:
                    29:99:35:f5:ba:17:4d:1c:d0:e2:9b:40:91:2a:29:
                    a4:d7:16:6c:72:69:16:20:69:e4:04:e1:22:e6:54:
                    96:0a:74:dc:fe:8e:71:6e:d0:17:bf:4e:d7:dd:f6:
                    59:cb:a8:5a:fc:a1:81:68:75:74:34:b4:a8:a5:e2:
                    68:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4F:5D:0B:EA:7F:4B:3E:B3:D3:35:DC:08:54:1D:A2:F8:7E:B6:CF
            X509v3 Authority Key Identifier:
                keyid:EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:8d:dd:37:be:ec:2d:0b:58:71:b3:af:60:05:1c:35:03:52:
         21:6d:49:77:57:4b:aa:43:df:9c:3f:90:fd:4a:d0:94:12:93:
         9e:bb:6b:85:46:31:84:59:4f:cb:70:6e:f6:e5:a7:cb:3f:a3:
         2e:5d:75:e1:7c:2e:87:1e:80:d8:ce:d6:bc:1b:6c:ee:5f:59:
         0e:cd:33:af:21:dc:25:a7:0a:95:f7:35:bf:84:46:13:2f:13:
         8d:9b:4d:ae:a2:aa:fe:41:e3:96:e8:9d:50:7a:a4:e4:42:80:
         48:17:cc:ba:85:aa:22:48:63:c4:f7:22:81:68:d2:ae:f5:7d:
         f0:3c:14:17:74:0b:28:32:90:30:e8:39:6e:e1:59:39:c6:2a:
         75:5e:81:9e:46:c3:df:2a:9c:bc:89:96:8d:98:fd:a4:0a:f4:
         a4:0e:35:a9:c5:c6:b9:a8:f9:52:a1:65:36:13:99:67:42:ab:
         1d:27:43:14:35:f3:7b:ed:d9:b0:39:0f:2c:86:e1:fe:0d:69:
         34:e3:6a:62:ec:86:47:ef:15:11:e3:c1:71:1f:cd:94:cd:33:
         c3:7b:48:b0:56:2d:a0:8c:88:00:f1:29:f2:22:e9:28:fe:73:
         49:a3:3c:ee:4c:b4:e6:5d:5e:b9:ba:53:a0:de:83:16:20:a1:
         2b:d9:d6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----