Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
File:                     d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft (raw, json)
Hash identifier:          m4VimSzqVhKAlcCqHBqm6uzYgGNXsVr3UO8dMpH4X7o=
Subject key identifier:   09:BA:F6:99:CB:0F:06:14:9C:A9:68:2B:B3:24:FB:75:65:4C:21:B2
Authority key identifier: 77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
Certificate issuer:       /CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Certificate serial:       019DA379172F5E8312269A07547FF7BB56E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
Manifest number:          0FAC
Signing time:             Sun 19 Apr 2026 02:01:55 +0000
Manifest this update:     Sun 19 Apr 2026 02:01:55 +0000
Manifest next update:     Mon 20 Apr 2026 02:01:55 +0000
Files and hashes:         1: 1-x1SQoCge1oAxdF8NH1g432c8v4.roa (hash: gGNG1VzQDUnu5gmTgkEbwFhdDKx8kxbSdmHR7f+ftE8=)
                          2: d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl (hash: mDjEjSRPRphcachP8Lpk2YznQiX0kEar7Ab9zDBj18s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:79:17:2f:5e:83:12:26:9a:07:54:7f:f7:bb:56:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
        Validity
            Not Before: Apr 19 02:01:55 2026 GMT
            Not After : Apr 20 02:01:55 2026 GMT
        Subject: CN=09baf699cb0f06149ca9682bb324fb75654c21b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d9:42:f4:c8:f8:a8:a9:e1:c6:1a:d6:0d:f7:
                    84:f9:23:3b:52:63:53:37:ad:c1:f3:8e:ab:f3:47:
                    5a:f7:cd:e6:bf:07:68:d7:e9:f7:27:22:f5:29:6a:
                    fc:c2:ce:fb:07:b1:ea:8d:e9:98:b3:8c:f0:79:53:
                    bb:c7:e7:20:af:6c:48:d0:aa:60:f5:86:bc:38:df:
                    5c:d5:7c:e9:ad:2b:7e:79:3f:7b:72:4c:1d:7a:66:
                    60:ca:1a:c8:15:9d:f1:68:55:af:3c:f5:21:41:41:
                    f5:92:5e:a4:41:e1:2c:4a:e2:b6:83:e4:0a:fd:f3:
                    da:a9:54:71:11:b5:9d:02:46:84:68:fa:5b:f0:dd:
                    4c:5e:8c:f3:e7:25:0a:ed:bf:d4:f1:fc:ee:af:38:
                    da:a2:0a:a0:36:ae:8e:0d:ea:89:66:4c:a4:5e:1f:
                    c5:a3:ba:35:4c:8b:9d:41:72:a6:d9:56:16:1a:ba:
                    6e:5b:0b:60:7c:04:9c:4c:57:f5:eb:92:49:32:47:
                    e0:2d:c2:79:f0:eb:57:5f:4f:dd:7c:54:0d:d1:6f:
                    a7:86:37:7b:c6:11:45:9d:30:ff:11:43:5a:d7:56:
                    5a:65:1f:a1:d6:d7:e3:7a:c0:81:ca:9d:5d:94:97:
                    c8:f1:53:18:1a:60:41:9c:ec:fc:61:1e:e3:4a:43:
                    6a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BA:F6:99:CB:0F:06:14:9C:A9:68:2B:B3:24:FB:75:65:4C:21:B2
            X509v3 Authority Key Identifier:
                keyid:77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:5b:2f:99:40:92:f7:d7:e4:45:09:15:f3:71:87:60:fe:f6:
         38:e8:74:34:ae:7a:67:52:24:93:3a:78:b8:79:67:2a:93:80:
         18:0d:d0:f9:d9:f1:38:fb:75:2e:a7:c3:d8:d1:8b:fc:90:d5:
         60:26:b2:67:4e:e2:7c:53:eb:29:29:a1:31:82:76:c0:37:27:
         71:64:9b:db:02:f8:ad:40:dd:df:54:ad:30:e8:93:59:f3:10:
         18:3b:35:db:4f:2b:a5:68:16:d9:b6:d1:a6:e4:cc:7b:8f:85:
         41:f8:57:4a:7a:e4:5d:ec:58:2b:f9:72:07:7b:4f:a5:b3:0c:
         8f:d2:43:71:e0:12:86:fe:50:fc:c4:b5:22:ae:c6:cd:8c:ef:
         5f:8d:3a:f6:08:03:d9:e1:cd:36:b4:e4:c5:db:bb:bd:27:35:
         ab:74:23:25:a7:3a:bb:f3:88:a4:2b:0a:ae:b2:71:21:42:77:
         af:58:1d:4a:d0:82:48:d7:49:fa:23:6b:60:f0:fd:45:2e:ee:
         44:7c:9e:d1:44:0b:bd:b0:b1:88:c7:38:13:20:18:65:b5:07:
         4a:8e:50:cd:55:36:c2:4a:3f:fd:3f:83:5e:d8:c9:2c:ae:c9:
         0d:8e:f2:c0:92:60:f6:81:fe:0f:14:c3:48:14:fe:61:36:74:
         a8:15:ee:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeRcvXoMSJpoHVH/3u1blMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YTM1MGQ5ZmU0ZTlmOTBmZjNlODRlMmY5NjBjYjVkYzNk
NmNlZTEwHhcNMjYwNDE5MDIwMTU1WhcNMjYwNDIwMDIwMTU1WjAzMTEwLwYDVQQD
EygwOWJhZjY5OWNiMGYwNjE0OWNhOTY4MmJiMzI0ZmI3NTY1NGMyMWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tlC9Mj4qKnhxhrWDfeE+SM7UmNT
N63B846r80da983mvwdo1+n3JyL1KWr8ws77B7HqjemYs4zweVO7x+cgr2xI0Kpg
9Ya8ON9c1XzprSt+eT97ckwdemZgyhrIFZ3xaFWvPPUhQUH1kl6kQeEsSuK2g+QK
/fPaqVRxEbWdAkaEaPpb8N1MXozz5yUK7b/U8fzurzjaogqgNq6ODeqJZkykXh/F
o7o1TIudQXKm2VYWGrpuWwtgfAScTFf165JJMkfgLcJ58OtXX0/dfFQN0W+nhjd7
xhFFnTD/EUNa11ZaZR+h1tfjesCByp1dlJfI8VMYGmBBnOz8YR7jSkNqjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAm69pnLDwYUnKloK7Mk+3VlTCGyMB8GA1UdIwQY
MBaAFHejUNn+Tp+Q/z6E4vlgy13D1s7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDZOUTJmNU9uNURfUG9UaS1XRExYY1BXenVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84YmM0NGItNWQ1YS00YjU0LWFiOTEt
ZGExYzUxNWU1YjI5LzEvZDZOUTJmNU9uNURfUG9UaS1XRExYY1BXenVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS84YmM0NGItNWQ1YS00YjU0LWFiOTEtZGExYzUxNWU1YjI5
LzEvZDZOUTJmNU9uNURfUG9UaS1XRExYY1BXenVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOlsvmUCS
99fkRQkV83GHYP72OOh0NK56Z1Ikkzp4uHlnKpOAGA3Q+dnxOPt1LqfD2NGL/JDV
YCayZ07ifFPrKSmhMYJ2wDcncWSb2wL4rUDd31StMOiTWfMQGDs1208rpWgW2bbR
puTMe4+FQfhXSnrkXexYK/lyB3tPpbMMj9JDceAShv5Q/MS1Iq7GzYzvX4069ggD
2eHNNrTkxdu7vSc1q3QjJac6u/OIpCsKrrJxIUJ3r1gdStCCSNdJ+iNrYPD9RS7u
RHye0UQLvbCxiMc4EyAYZbUHSo5QzVU2wko//T+DXtjJLK7JDY7ywJJg9oH+DxTD
SBT+YTZ0qBXurA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:46:37 2026 by rpki-client