Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
File:                     RN9Py46lHhjSkIBcj1Dw30NA29U.mft (raw, json)
Hash identifier:          a04KXnjGUJXZAcF5frmdfqMafNAU9TiZFcz/8YtoztE=
Subject key identifier:   0E:2B:DA:16:34:BE:2D:22:16:9D:25:D3:C9:D6:07:54:17:7C:AC:1C
Authority key identifier: 44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
Certificate issuer:       /CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Certificate serial:       019D988666BE952E5D9606E0E5B3122BD1C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
Manifest number:          071D
Signing time:             Thu 16 Apr 2026 23:00:37 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:37 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:37 +0000
Files and hashes:         1: 1W8oXRyVWj6B25QVlKpKqn4htFc.roa (hash: ylLKhtgKcpGFiJV81EY7Ky60StXV0M2FwWK+HE1XjRU=)
                          2: RN9Py46lHhjSkIBcj1Dw30NA29U.crl (hash: Ed8j4kLW1UIhdnY9Jwjn2+A8vNa6Yni4ERYLj3MB/Fk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:66:be:95:2e:5d:96:06:e0:e5:b3:12:2b:d1:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
        Validity
            Not Before: Apr 16 23:00:37 2026 GMT
            Not After : Apr 17 23:00:37 2026 GMT
        Subject: CN=0e2bda1634be2d22169d25d3c9d60754177cac1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2b:f2:5a:e7:65:69:11:2c:69:a6:b1:56:e1:
                    a1:6f:f8:fe:20:37:d8:b5:c9:80:37:f4:a0:84:10:
                    66:2a:94:85:5d:88:c3:80:f0:15:4b:d2:ef:ce:c0:
                    35:c0:14:41:ae:69:da:bf:da:aa:87:a9:d5:84:36:
                    a8:1b:e3:df:a9:ce:1f:d2:07:b3:41:67:15:ba:5a:
                    59:8a:42:16:36:84:54:52:a6:1e:71:05:4d:7f:85:
                    93:07:dc:e4:63:da:b5:81:fa:13:bd:4c:4e:40:34:
                    94:54:63:5d:0e:e3:f0:b5:91:c0:5f:8d:1d:bf:a9:
                    32:f5:15:9e:47:f0:74:ac:5a:2b:42:bc:99:27:d8:
                    6e:55:a8:b5:a1:93:29:46:d6:c4:1a:71:c3:80:4b:
                    c2:e9:4e:fa:07:58:a9:3e:e2:a8:c4:f0:dc:a1:03:
                    ad:70:66:f4:bd:ad:2d:06:f5:9e:79:21:8b:b8:28:
                    81:45:ea:18:7c:3e:c4:3e:c7:63:2d:0c:b9:d8:3c:
                    cf:5b:a8:68:c3:91:04:c8:06:bf:df:10:7c:f4:f8:
                    1b:66:c6:d3:f8:a7:b6:a3:52:86:ab:d8:6f:bd:a9:
                    71:f7:5d:f5:00:4b:ff:ad:c9:40:e1:11:cd:da:33:
                    6a:ca:d6:66:79:6a:2c:d8:cd:98:90:3c:2c:60:89:
                    ac:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2B:DA:16:34:BE:2D:22:16:9D:25:D3:C9:D6:07:54:17:7C:AC:1C
            X509v3 Authority Key Identifier:
                keyid:44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:8d:31:97:0f:f9:51:8b:4e:4e:eb:9c:07:b0:db:81:f3:c5:
         32:08:67:70:32:a2:9b:33:0b:07:2f:a7:77:0f:77:d8:76:8d:
         85:0e:77:4c:d0:50:70:d0:47:23:1a:0d:bc:e0:d5:41:67:c0:
         84:d5:3f:7d:c4:34:2d:21:20:6e:f4:ef:fd:65:52:35:b8:07:
         df:45:c1:d3:80:fa:50:98:4a:80:c2:9d:c5:3a:ea:0b:45:ef:
         17:87:4f:4e:d6:fd:36:5d:4e:14:67:46:16:79:32:59:29:54:
         d6:0e:a8:80:08:78:5c:6e:d6:7d:7b:de:2d:f9:c6:97:c1:5f:
         71:1f:bd:4c:55:9e:0b:65:05:39:6e:8e:e7:47:10:6d:f2:ee:
         2f:c4:d5:ee:03:7d:eb:b9:18:bf:2a:a0:e0:79:2e:81:62:65:
         9e:db:5b:ea:38:ec:ca:00:2b:13:86:35:41:5d:86:8a:d9:a5:
         ea:a5:a6:a8:94:8a:aa:e0:1f:3c:ae:55:9c:5d:9a:ed:1e:71:
         fd:4c:79:30:44:a4:44:a4:70:06:6e:39:bf:27:52:c3:d4:6c:
         06:7a:6f:d4:83:2e:d6:a5:58:7f:c2:67:e4:4f:c9:9a:2f:da:
         2f:c5:03:62:27:97:b7:8f:bf:30:0b:d8:20:8b:fe:7b:cf:9a:
         ed:99:90:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yhma+lS5dlgbg5bMSK9HCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZGY0ZmNiOGVhNTFlMThkMjkwODA1YzhmNTBmMGRmNDM0
MGRiZDUwHhcNMjYwNDE2MjMwMDM3WhcNMjYwNDE3MjMwMDM3WjAzMTEwLwYDVQQD
EygwZTJiZGExNjM0YmUyZDIyMTY5ZDI1ZDNjOWQ2MDc1NDE3N2NhYzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnivyWudlaREsaaaxVuGhb/j+IDfY
tcmAN/SghBBmKpSFXYjDgPAVS9LvzsA1wBRBrmnav9qqh6nVhDaoG+Pfqc4f0gez
QWcVulpZikIWNoRUUqYecQVNf4WTB9zkY9q1gfoTvUxOQDSUVGNdDuPwtZHAX40d
v6ky9RWeR/B0rForQryZJ9huVai1oZMpRtbEGnHDgEvC6U76B1ipPuKoxPDcoQOt
cGb0va0tBvWeeSGLuCiBReoYfD7EPsdjLQy52DzPW6how5EEyAa/3xB89PgbZsbT
+Ke2o1KGq9hvvalx9131AEv/rclA4RHN2jNqytZmeWos2M2YkDwsYImsBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4r2hY0vi0iFp0l08nWB1QXfKwcMB8GA1UdIwQY
MBaAFETfT8uOpR4Y0pCAXI9Q8N9DQNvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk45UHk0NmxIaGpTa0lCY2oxRHczME5BMjlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83Y2MxODMtZWJhNS00NzQ3LThiMTAt
ZjM4Yzc0OWI2ZTM5LzEvUk45UHk0NmxIaGpTa0lCY2oxRHczME5BMjlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS83Y2MxODMtZWJhNS00NzQ3LThiMTAtZjM4Yzc0OWI2ZTM5
LzEvUk45UHk0NmxIaGpTa0lCY2oxRHczME5BMjlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWI0xlw/5
UYtOTuucB7DbgfPFMghncDKimzMLBy+ndw932HaNhQ53TNBQcNBHIxoNvODVQWfA
hNU/fcQ0LSEgbvTv/WVSNbgH30XB04D6UJhKgMKdxTrqC0XvF4dPTtb9Nl1OFGdG
FnkyWSlU1g6ogAh4XG7WfXveLfnGl8FfcR+9TFWeC2UFOW6O50cQbfLuL8TV7gN9
67kYvyqg4HkugWJlnttb6jjsygArE4Y1QV2Gitml6qWmqJSKquAfPK5VnF2a7R5x
/Ux5MESkRKRwBm45vydSw9RsBnpv1IMu1qVYf8Jn5E/Jmi/aL8UDYieXt4+/MAvY
IIv+e8+a7ZmQ5w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:26:26 2026 by rpki-client