Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
File:                     078oufsovtkGaqQRPLi-Bl7c9BI.mft (raw, json)
Hash identifier:          JXRqkUQyUAt/zRyslsv+dimbwoSy6V5Bus91nfUBUkk=
Subject key identifier:   89:40:AD:14:84:DB:0A:C8:33:58:6A:02:A0:41:A0:99:F5:A5:02:8F
Authority key identifier: D3:BF:28:B9:FB:28:BE:D9:06:6A:A4:11:3C:B8:BE:06:5E:DC:F4:12
Certificate issuer:       /CN=d3bf28b9fb28bed9066aa4113cb8be065edcf412
Certificate serial:       01A0C5581059A31CE45E8DF042AC566AEB57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
Manifest number:          14EE
Signing time:             Mon 21 Sep 2026 19:01:17 +0000
Manifest this update:     Mon 21 Sep 2026 19:01:17 +0000
Manifest next update:     Tue 22 Sep 2026 19:01:17 +0000
Files and hashes:         1: 078oufsovtkGaqQRPLi-Bl7c9BI.crl (hash: N8hu97jGlmf63oVckSsicFXkHrAehrI0hP89KF450o8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:58:10:59:a3:1c:e4:5e:8d:f0:42:ac:56:6a:eb:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf28b9fb28bed9066aa4113cb8be065edcf412
        Validity
            Not Before: Sep 21 19:01:17 2026 GMT
            Not After : Sep 22 19:01:17 2026 GMT
        Subject: CN=8940ad1484db0ac833586a02a041a099f5a5028f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:38:4f:c4:20:03:ff:82:31:22:5f:f1:10:85:
                    bc:5e:e9:2a:33:d2:77:da:65:15:ee:9d:85:63:dd:
                    ab:3c:f5:00:d5:e6:7c:9a:61:bc:aa:4e:b5:8b:c6:
                    01:80:42:8a:d2:5a:c3:61:0e:c1:b3:8b:33:92:95:
                    24:bd:c4:ac:47:c0:aa:74:74:eb:10:76:70:7a:74:
                    bc:7b:3d:4b:02:2e:e1:1a:e0:f0:6a:f7:70:17:d7:
                    8c:f3:7a:15:6a:39:b6:25:e1:94:c5:10:16:f1:b3:
                    0e:96:4b:50:3e:40:ca:99:d7:df:97:ad:57:18:c3:
                    62:0a:23:5c:4f:c3:4b:63:55:7a:eb:04:03:90:87:
                    13:77:de:be:16:47:7f:02:ff:a7:a4:ef:b9:5f:86:
                    f6:ec:c9:06:b2:bf:88:ee:e5:26:84:9f:39:db:94:
                    8f:44:a5:4b:5b:c7:ef:cc:67:8f:4f:42:12:a7:b9:
                    79:9a:5f:34:0b:d1:cf:29:f7:4b:84:12:e8:c1:9d:
                    ea:3e:42:de:ab:c8:80:92:34:50:33:3f:98:cb:fd:
                    88:90:49:24:46:0b:94:f3:d8:e2:15:8a:87:53:8f:
                    b6:78:20:85:8d:61:81:7d:3f:72:69:6b:d1:fd:4d:
                    a5:9b:5b:57:76:fd:39:dd:b2:02:e0:2c:39:6c:77:
                    5c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:40:AD:14:84:DB:0A:C8:33:58:6A:02:A0:41:A0:99:F5:A5:02:8F
            X509v3 Authority Key Identifier:
                keyid:D3:BF:28:B9:FB:28:BE:D9:06:6A:A4:11:3C:B8:BE:06:5E:DC:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:a4:8c:fa:15:91:f0:35:fc:b3:95:a8:c3:e1:6d:14:08:dc:
         66:5b:40:37:ff:a4:6a:3b:69:5d:f0:05:67:fa:5c:a6:a4:99:
         3e:b7:f1:3e:39:74:a0:ea:92:7b:42:34:e9:58:a3:84:fe:aa:
         58:2d:9a:b0:1b:35:28:0f:29:f8:d9:b9:ee:3b:b7:1b:d0:25:
         f4:40:f5:c0:1f:67:a0:16:cf:8f:15:8a:19:79:5e:d5:68:c4:
         de:33:9d:40:46:24:07:15:e4:69:6e:01:0f:72:1f:ba:ac:87:
         f4:3d:d9:4c:ac:55:e8:c8:2d:45:3e:85:ea:20:78:97:ea:f2:
         a0:c6:6b:c9:26:2c:53:66:78:99:82:a9:79:d4:40:9d:0f:d4:
         70:92:62:5c:db:83:b1:96:9d:63:d7:cf:f2:22:9a:59:bc:98:
         de:6a:aa:b6:3c:92:fa:61:34:f2:a7:3a:f5:a9:88:b3:66:40:
         e2:9b:20:dc:5c:e8:ae:ed:7a:10:9e:1e:0c:e2:04:13:85:57:
         01:65:2c:60:42:d0:69:5c:b4:84:37:9c:06:ac:e0:a3:e6:be:
         85:66:c4:7b:da:99:05:96:71:75:43:d7:cc:75:18:1e:16:61:
         3a:b2:98:14:73:fc:84:fa:48:a7:78:9e:fb:b5:14:d8:93:71:
         97:aa:3b:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFWBBZoxzkXo3wQqxWautXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYmYyOGI5ZmIyOGJlZDkwNjZhYTQxMTNjYjhiZTA2NWVk
Y2Y0MTIwHhcNMjYwOTIxMTkwMTE3WhcNMjYwOTIyMTkwMTE3WjAzMTEwLwYDVQQD
Eyg4OTQwYWQxNDg0ZGIwYWM4MzM1ODZhMDJhMDQxYTA5OWY1YTUwMjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjThPxCAD/4IxIl/xEIW8XukqM9J3
2mUV7p2FY92rPPUA1eZ8mmG8qk61i8YBgEKK0lrDYQ7Bs4szkpUkvcSsR8CqdHTr
EHZwenS8ez1LAi7hGuDwavdwF9eM83oVajm2JeGUxRAW8bMOlktQPkDKmdffl61X
GMNiCiNcT8NLY1V66wQDkIcTd96+Fkd/Av+npO+5X4b27MkGsr+I7uUmhJ8525SP
RKVLW8fvzGePT0ISp7l5ml80C9HPKfdLhBLowZ3qPkLeq8iAkjRQMz+Yy/2IkEkk
RguU89jiFYqHU4+2eCCFjWGBfT9yaWvR/U2lm1tXdv053bIC4Cw5bHdcQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlArRSE2wrIM1hqAqBBoJn1pQKPMB8GA1UdIwQY
MBaAFNO/KLn7KL7ZBmqkETy4vgZe3PQSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDc4b3Vmc292dGtHYXFRUlBMaS1CbDdjOUJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81NjI4MTEtYzU5Yy00YmFiLWI5MjAt
MTgwNGQyMDJkNDZkLzEvMDc4b3Vmc292dGtHYXFRUlBMaS1CbDdjOUJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81NjI4MTEtYzU5Yy00YmFiLWI5MjAtMTgwNGQyMDJkNDZk
LzEvMDc4b3Vmc292dGtHYXFRUlBMaS1CbDdjOUJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApKSM+hWR
8DX8s5Wow+FtFAjcZltAN/+kajtpXfAFZ/pcpqSZPrfxPjl0oOqSe0I06VijhP6q
WC2asBs1KA8p+Nm57ju3G9Al9ED1wB9noBbPjxWKGXle1WjE3jOdQEYkBxXkaW4B
D3IfuqyH9D3ZTKxV6MgtRT6F6iB4l+ryoMZrySYsU2Z4mYKpedRAnQ/UcJJiXNuD
sZadY9fP8iKaWbyY3mqqtjyS+mE08qc69amIs2ZA4psg3Fzoru16EJ4eDOIEE4VX
AWUsYELQaVy0hDecBqzgo+a+hWbEe9qZBZZxdUPXzHUYHhZhOrKYFHP8hPpIp3ie
+7UU2JNxl6o7gw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:48:37 2026 by rpki-client