Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
File:                     2nVBcltyi1qJ87-vIPh2VWPC8_s.mft (raw, json)
Hash identifier:          pbVqXIli+n+ydAo12aNthWDY228OUy5Erg6sK6Z/GI8=
Subject key identifier:   3D:E3:27:89:52:DA:E4:CE:D9:F9:93:71:D0:EA:EA:FC:DE:3F:FC:40
Authority key identifier: DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
Certificate issuer:       /CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Certificate serial:       01A0C9D928BBC038FA4C411FB20699424A4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
Manifest number:          1A64
Signing time:             Tue 22 Sep 2026 16:00:47 +0000
Manifest this update:     Tue 22 Sep 2026 16:00:47 +0000
Manifest next update:     Wed 23 Sep 2026 16:00:47 +0000
Files and hashes:         1: 2nVBcltyi1qJ87-vIPh2VWPC8_s.crl (hash: QB9prbonSGZlQ/PE3SmCn5xZyRXYv9KAgM/PiCdi3K8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:d9:28:bb:c0:38:fa:4c:41:1f:b2:06:99:42:4a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
        Validity
            Not Before: Sep 22 16:00:47 2026 GMT
            Not After : Sep 23 16:00:47 2026 GMT
        Subject: CN=3de3278952dae4ced9f99371d0eaeafcde3ffc40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b9:6a:1a:6a:79:cd:27:22:7b:23:33:8a:9a:
                    0c:73:83:4f:4e:dd:17:49:09:73:59:4c:75:9e:c8:
                    5e:87:45:7a:1e:64:63:c2:c3:c5:b6:b6:50:74:d0:
                    df:d9:11:e6:54:c3:6c:9a:bd:31:06:83:e5:35:21:
                    68:96:2e:e5:e8:e9:87:f7:2b:ae:dd:82:54:79:7d:
                    f2:3d:9e:74:80:a2:d2:e2:1d:bc:7b:f6:0e:c8:ed:
                    cc:9f:4d:45:8d:fc:f1:9a:5a:04:df:e1:88:c3:f6:
                    4c:45:91:ff:60:07:e8:1f:1a:02:54:89:1b:82:f7:
                    d8:73:f9:f8:a9:e4:14:56:2c:e8:68:8e:a2:ca:da:
                    68:d0:58:08:36:4a:ca:e8:e0:20:d3:52:79:f1:7b:
                    95:80:a6:29:a0:4d:5c:76:81:55:b5:bc:79:5c:d2:
                    ec:c3:78:e0:d3:01:af:80:7f:59:20:3b:74:6f:86:
                    ab:29:c1:d2:49:95:70:00:67:75:3c:51:dd:cc:09:
                    0c:95:35:f3:c8:c6:cf:f5:68:a7:a5:fb:1c:6f:e1:
                    26:7d:6b:c4:69:d5:13:f7:22:b3:a6:83:71:9b:b2:
                    1f:0f:90:da:dc:f3:6e:c5:39:b9:64:f6:0c:59:5c:
                    f1:fb:a7:0a:da:33:3d:4b:d4:70:19:1b:e4:bd:a9:
                    de:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E3:27:89:52:DA:E4:CE:D9:F9:93:71:D0:EA:EA:FC:DE:3F:FC:40
            X509v3 Authority Key Identifier:
                keyid:DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:96:62:ce:b1:ee:82:10:8f:b7:43:d5:a3:28:63:09:3f:32:
         4a:df:d7:4c:3a:65:d7:c3:97:a2:83:1b:d1:98:1c:51:a0:a1:
         3f:58:27:9f:07:50:d7:7e:fd:5c:de:fb:38:68:0e:6f:93:00:
         95:72:16:8e:d2:79:8c:2a:85:0e:e4:80:4d:4d:8b:47:da:2d:
         b9:8b:78:06:f3:3c:e9:49:05:6f:39:03:95:de:ae:f2:7c:35:
         d0:d7:03:12:2d:6d:f0:3e:a8:d3:1c:3a:8a:90:ef:f5:c4:39:
         a9:6d:03:a1:e2:2c:eb:92:bc:93:02:05:8e:ec:64:ce:ba:98:
         e9:f4:3c:1f:4e:90:07:c9:5d:2d:4f:aa:a1:55:0d:63:c4:85:
         0c:e5:27:e3:99:47:bf:a1:70:fc:41:0f:82:b2:d3:4f:63:c5:
         c6:76:54:6f:04:f0:82:f6:99:0a:a1:d8:0e:5c:42:cb:9d:21:
         10:13:39:6f:6a:a4:12:bd:c6:77:12:90:f2:41:8e:c7:2d:62:
         05:5c:73:a5:96:4a:86:8d:0f:8b:1f:4f:84:94:f1:9a:b4:7a:
         e1:3d:73:1d:e2:df:28:ad:0c:30:85:ff:e4:c8:a8:35:0a:06:
         09:11:6a:44:14:a1:9a:7b:0a:dc:d7:bc:76:c0:d1:cd:42:7b:
         21:75:77:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJ2Si7wDj6TEEfsgaZQkpNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzU0MTcyNWI3MjhiNWE4OWYzYmZhZjIwZjg3NjU1NjNj
MmYzZmIwHhcNMjYwOTIyMTYwMDQ3WhcNMjYwOTIzMTYwMDQ3WjAzMTEwLwYDVQQD
EygzZGUzMjc4OTUyZGFlNGNlZDlmOTkzNzFkMGVhZWFmY2RlM2ZmYzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7lqGmp5zScieyMzipoMc4NPTt0X
SQlzWUx1nsheh0V6HmRjwsPFtrZQdNDf2RHmVMNsmr0xBoPlNSFoli7l6OmH9yuu
3YJUeX3yPZ50gKLS4h28e/YOyO3Mn01FjfzxmloE3+GIw/ZMRZH/YAfoHxoCVIkb
gvfYc/n4qeQUVizoaI6iytpo0FgINkrK6OAg01J58XuVgKYpoE1cdoFVtbx5XNLs
w3jg0wGvgH9ZIDt0b4arKcHSSZVwAGd1PFHdzAkMlTXzyMbP9Winpfscb+EmfWvE
adUT9yKzpoNxm7IfD5Da3PNuxTm5ZPYMWVzx+6cK2jM9S9RwGRvkvaneLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3jJ4lS2uTO2fmTcdDq6vzeP/xAMB8GA1UdIwQY
MBaAFNp1QXJbcotaifO/ryD4dlVjwvP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5WQmNsdHlpMXFKODctdklQaDJWV1BDOF9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80ZDM5YjEtZmM5YS00NDc2LWE3OWMt
ZGI4ZmQ1MDdkMWI2LzEvMm5WQmNsdHlpMXFKODctdklQaDJWV1BDOF9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny80ZDM5YjEtZmM5YS00NDc2LWE3OWMtZGI4ZmQ1MDdkMWI2
LzEvMm5WQmNsdHlpMXFKODctdklQaDJWV1BDOF9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZZizrHu
ghCPt0PVoyhjCT8ySt/XTDpl18OXooMb0ZgcUaChP1gnnwdQ1379XN77OGgOb5MA
lXIWjtJ5jCqFDuSATU2LR9otuYt4BvM86UkFbzkDld6u8nw10NcDEi1t8D6o0xw6
ipDv9cQ5qW0DoeIs65K8kwIFjuxkzrqY6fQ8H06QB8ldLU+qoVUNY8SFDOUn45lH
v6Fw/EEPgrLTT2PFxnZUbwTwgvaZCqHYDlxCy50hEBM5b2qkEr3GdxKQ8kGOxy1i
BVxzpZZKho0Pix9PhJTxmrR64T1zHeLfKK0MMIX/5MioNQoGCRFqRBShmnsK3Ne8
dsDRzUJ7IXV3Mw==
-----END CERTIFICATE-----