Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
File:                     481lehIFMt8z3lD-GsKzYgrErk8.mft (raw, json)
Hash identifier:          rRU0kAmk4e18rMMRaR+o+8FzImYdbngR8UzWszoxMWY=
Subject key identifier:   30:F8:F1:91:C6:46:68:DF:3E:B6:55:FB:E6:31:4B:7E:36:30:39:DA
Authority key identifier: E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
Certificate issuer:       /CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Certificate serial:       01A0C934BED92EC5A18560FD8558F0CCF383
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
Manifest number:          095C
Signing time:             Tue 22 Sep 2026 13:01:12 +0000
Manifest this update:     Tue 22 Sep 2026 13:01:12 +0000
Manifest next update:     Wed 23 Sep 2026 13:01:12 +0000
Files and hashes:         1: 481lehIFMt8z3lD-GsKzYgrErk8.crl (hash: KTQkclAnhUDBXsVYsbqhbH2NmYxythhrhBdeEAORWTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 13:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:34:be:d9:2e:c5:a1:85:60:fd:85:58:f0:cc:f3:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
        Validity
            Not Before: Sep 22 13:01:12 2026 GMT
            Not After : Sep 23 13:01:12 2026 GMT
        Subject: CN=30f8f191c64668df3eb655fbe6314b7e363039da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6e:a3:81:5c:a2:48:24:52:2e:dd:a7:d7:4f:
                    fb:40:69:ba:33:27:45:54:c8:20:c6:eb:03:6d:96:
                    cf:16:54:5c:a4:f9:15:31:7e:8f:56:5e:cf:71:c8:
                    e9:91:63:a8:92:78:40:89:ab:27:cb:60:cd:23:98:
                    06:80:75:4d:3b:31:67:47:bb:49:9c:f3:bd:8d:35:
                    35:b9:57:ba:ba:3d:bb:b3:b8:19:c3:25:ef:b4:c9:
                    13:73:82:03:4e:b6:e7:2c:32:7f:e8:ca:c3:53:29:
                    fd:76:8c:c8:02:3a:b5:0a:9b:ca:20:3b:b6:ed:6e:
                    da:c7:11:23:3d:e1:37:74:64:4a:88:df:43:38:15:
                    34:86:ef:49:c4:12:fb:dc:35:2c:eb:7d:b4:2f:24:
                    8a:e9:bb:9c:a1:d9:a3:9a:33:b0:f3:c4:fb:82:ac:
                    74:6c:27:05:26:12:e0:69:ee:d7:47:4a:fa:3e:41:
                    17:77:29:2e:e0:11:4e:86:fd:63:dc:09:9e:51:79:
                    97:69:db:97:12:b1:a5:ee:53:2d:4c:fb:30:3e:7a:
                    70:2d:49:bb:48:a3:7a:4f:af:26:e7:53:49:58:4b:
                    e6:ee:ec:11:46:51:34:f5:5f:57:33:d5:49:9a:69:
                    90:dc:3c:d0:9c:45:b3:0f:2d:71:e3:e7:e2:09:57:
                    8e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F8:F1:91:C6:46:68:DF:3E:B6:55:FB:E6:31:4B:7E:36:30:39:DA
            X509v3 Authority Key Identifier:
                keyid:E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c0:01:f3:03:5a:78:17:c9:50:78:c7:49:d3:d6:35:97:c1:
         49:79:e0:f3:71:16:fe:f8:14:28:9c:d1:71:0a:16:82:52:b2:
         d4:b8:c0:b7:83:d2:40:37:d1:76:cc:47:2a:c2:99:e3:e4:9d:
         05:43:da:54:48:0e:2f:4f:f9:f3:6c:06:28:a8:95:a1:0d:13:
         ba:b5:b2:11:f8:2b:1e:39:b3:ff:33:63:51:04:d8:d0:06:23:
         d6:84:e1:08:94:19:35:76:c5:71:64:87:6d:58:e2:83:e9:8d:
         ae:7c:46:b8:0b:cf:ae:9a:c2:e9:63:c6:38:90:90:52:75:fc:
         0e:dd:de:17:ec:69:2a:9b:83:8d:31:16:69:ea:d1:33:77:f5:
         8e:c4:40:5c:2c:c8:33:db:d6:41:1b:a8:17:86:97:76:4e:1d:
         96:2e:47:9c:8f:b9:4a:fd:f9:f0:62:2d:e2:62:04:e3:80:87:
         6e:a2:dc:b9:dd:99:61:ac:8a:19:71:94:27:47:87:a0:9d:5b:
         76:f1:bb:a4:18:42:34:5b:6d:7b:06:30:7c:60:db:71:2a:91:
         7e:3b:81:e2:99:ab:a5:36:8a:b1:40:74:6b:fd:10:8a:67:c3:
         75:bd:04:8c:79:74:ae:da:56:79:dc:d3:af:ab:ab:a2:2e:37:
         bb:00:05:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJNL7ZLsWhhWD9hVjwzPODMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzY2Q2NTdhMTIwNTMyZGYzM2RlNTBmZTFhYzJiMzYyMGFj
NGFlNGYwHhcNMjYwOTIyMTMwMTEyWhcNMjYwOTIzMTMwMTEyWjAzMTEwLwYDVQQD
EygzMGY4ZjE5MWM2NDY2OGRmM2ViNjU1ZmJlNjMxNGI3ZTM2MzAzOWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW6jgVyiSCRSLt2n10/7QGm6MydF
VMggxusDbZbPFlRcpPkVMX6PVl7PccjpkWOoknhAiasny2DNI5gGgHVNOzFnR7tJ
nPO9jTU1uVe6uj27s7gZwyXvtMkTc4IDTrbnLDJ/6MrDUyn9dozIAjq1CpvKIDu2
7W7axxEjPeE3dGRKiN9DOBU0hu9JxBL73DUs6320LySK6bucodmjmjOw88T7gqx0
bCcFJhLgae7XR0r6PkEXdyku4BFOhv1j3AmeUXmXaduXErGl7lMtTPswPnpwLUm7
SKN6T68m51NJWEvm7uwRRlE09V9XM9VJmmmQ3DzQnEWzDy1x4+fiCVeOTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDD48ZHGRmjfPrZV++YxS342MDnaMB8GA1UdIwQY
MBaAFOPNZXoSBTLfM95Q/hrCs2IKxK5PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDgxbGVoSUZNdDh6M2xELUdzS3pZZ3JFcms4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83NzI0NzYtYTI4My00NjU2LWE2MTQt
MGY5NTZjYWY4MDNjLzEvNDgxbGVoSUZNdDh6M2xELUdzS3pZZ3JFcms4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83NzI0NzYtYTI4My00NjU2LWE2MTQtMGY5NTZjYWY4MDNj
LzEvNDgxbGVoSUZNdDh6M2xELUdzS3pZZ3JFcms4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8AB8wNa
eBfJUHjHSdPWNZfBSXng83EW/vgUKJzRcQoWglKy1LjAt4PSQDfRdsxHKsKZ4+Sd
BUPaVEgOL0/582wGKKiVoQ0TurWyEfgrHjmz/zNjUQTY0AYj1oThCJQZNXbFcWSH
bVjig+mNrnxGuAvPrprC6WPGOJCQUnX8Dt3eF+xpKpuDjTEWaerRM3f1jsRAXCzI
M9vWQRuoF4aXdk4dli5HnI+5Sv358GIt4mIE44CHbqLcud2ZYayKGXGUJ0eHoJ1b
dvG7pBhCNFttewYwfGDbcSqRfjuB4pmrpTaKsUB0a/0QimfDdb0EjHl0rtpWedzT
r6uroi43uwAFsA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:42:13 2026 by rpki-client