Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
File:                     xJ7uJN6rVSARm2o9oEV9OcQGQds.mft (raw, json)
Hash identifier:          GQcHqpyXZTcPWScd7lB81QvhCmZwiuUqZtD6iTdJUo0=
Subject key identifier:   77:1E:48:EB:2A:87:25:68:4B:35:80:32:BE:4A:99:01:0D:2B:BD:AD
Authority key identifier: C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB
Certificate issuer:       /CN=c49eee24deab5520119b6a3da0457d39c40641db
Certificate serial:       019D9AE2A4394D4F59E6E6E7BACC50FD1037
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
Manifest number:          11E8
Signing time:             Fri 17 Apr 2026 10:00:37 +0000
Manifest this update:     Fri 17 Apr 2026 10:00:37 +0000
Manifest next update:     Sat 18 Apr 2026 10:00:37 +0000
Files and hashes:         1: w_6UCf2xWqx3O-O-dOo2JUNA-Og.roa (hash: fBGvP8lF6sKoiZdNpgR7ynCDnNW1bXWeroCO7zDMZqA=)
                          2: xJ7uJN6rVSARm2o9oEV9OcQGQds.crl (hash: AqoGihD/eA5LCgMCqNzRwaE9nKckKr2DgDiIfqOlmKw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e2:a4:39:4d:4f:59:e6:e6:e7:ba:cc:50:fd:10:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c49eee24deab5520119b6a3da0457d39c40641db
        Validity
            Not Before: Apr 17 10:00:37 2026 GMT
            Not After : Apr 18 10:00:37 2026 GMT
        Subject: CN=771e48eb2a8725684b358032be4a99010d2bbdad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:61:2d:a4:04:38:72:9e:3c:07:9f:0a:54:70:
                    7b:c2:54:b1:83:70:8e:a8:7c:6e:e6:73:10:9e:76:
                    bb:57:0e:58:f3:21:92:8e:30:e5:6b:5f:1f:f8:27:
                    33:71:a7:ca:7d:be:f6:c2:bd:34:ba:31:5c:7d:5f:
                    8f:3e:91:52:a4:83:6f:fd:fd:62:96:80:46:5d:65:
                    33:16:55:3c:53:ec:5b:6f:93:89:3b:25:04:08:38:
                    f7:cf:42:51:c3:bc:a0:60:7c:48:0d:4d:65:c7:5d:
                    1b:50:2b:e2:b6:b1:57:89:80:db:35:60:21:d0:c1:
                    eb:d7:c9:b8:43:6a:e2:66:64:4a:f6:1a:ec:e4:b0:
                    b3:e5:07:d5:3f:bb:70:a9:15:4c:a8:94:d7:bf:fa:
                    f9:03:f6:f8:e2:9b:f9:9b:f8:35:e5:fa:a3:ca:33:
                    e6:f3:82:94:bd:83:d5:09:c1:8c:04:60:2f:0e:a4:
                    2f:e2:bb:2a:36:01:92:09:cc:37:1d:35:1e:87:9d:
                    f6:e6:0f:a3:70:3c:7d:2c:9b:93:dc:0a:31:1c:73:
                    82:55:2d:76:2c:33:5e:28:c1:be:22:98:fb:74:ee:
                    77:71:bb:ad:0b:3d:3f:69:48:7e:bd:5b:22:57:12:
                    8b:c3:50:68:c7:ec:17:2a:f2:a9:7a:87:62:94:29:
                    9a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1E:48:EB:2A:87:25:68:4B:35:80:32:BE:4A:99:01:0D:2B:BD:AD
            X509v3 Authority Key Identifier:
                keyid:C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:15:f7:2d:36:b1:bc:61:ce:9c:47:d7:6d:b8:ad:2c:39:ab:
         d0:aa:91:0c:68:97:38:c8:ee:77:54:e4:47:35:e5:5e:77:22:
         c8:00:39:77:40:fa:3d:f7:df:a8:9a:b7:10:cd:b8:3a:09:24:
         5f:d5:9b:42:b6:af:21:44:4e:32:a5:5d:25:be:74:14:22:29:
         8f:b0:b7:96:b9:00:ae:3e:3b:87:51:72:3f:97:ce:e9:a4:35:
         25:45:17:29:95:f2:65:37:26:bb:a4:84:46:ba:bb:ad:87:aa:
         5c:c7:dc:f7:41:5d:9c:31:8a:87:54:d2:fb:6d:30:0e:bc:fc:
         45:06:c3:a6:67:1a:98:87:e2:bc:7e:24:ec:9e:da:48:80:e0:
         cb:cc:dd:05:97:0f:1a:f2:f8:f5:2d:50:76:12:31:21:4f:1c:
         8e:80:8b:60:02:2a:29:34:bf:94:34:51:18:47:da:da:96:f4:
         81:e9:99:6b:e5:5f:6b:fd:26:0b:47:33:f5:27:de:1f:66:d2:
         9f:0a:f3:ff:5a:87:80:78:91:14:0f:34:2b:e3:48:2b:28:c0:
         ff:a0:fa:9a:01:07:31:10:80:57:cf:ab:d5:6f:f0:43:15:f9:
         72:cd:8b:6b:2f:27:8c:af:94:d9:56:3a:52:03:26:45:d1:cf:
         08:c8:28:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4qQ5TU9Z5ubnusxQ/RA3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OWVlZTI0ZGVhYjU1MjAxMTliNmEzZGEwNDU3ZDM5YzQw
NjQxZGIwHhcNMjYwNDE3MTAwMDM3WhcNMjYwNDE4MTAwMDM3WjAzMTEwLwYDVQQD
Eyg3NzFlNDhlYjJhODcyNTY4NGIzNTgwMzJiZTRhOTkwMTBkMmJiZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmEtpAQ4cp48B58KVHB7wlSxg3CO
qHxu5nMQnna7Vw5Y8yGSjjDla18f+CczcafKfb72wr00ujFcfV+PPpFSpINv/f1i
loBGXWUzFlU8U+xbb5OJOyUECDj3z0JRw7ygYHxIDU1lx10bUCvitrFXiYDbNWAh
0MHr18m4Q2riZmRK9hrs5LCz5QfVP7twqRVMqJTXv/r5A/b44pv5m/g15fqjyjPm
84KUvYPVCcGMBGAvDqQv4rsqNgGSCcw3HTUeh5325g+jcDx9LJuT3AoxHHOCVS12
LDNeKMG+Ipj7dO53cbutCz0/aUh+vVsiVxKLw1Box+wXKvKpeodilCmaaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHceSOsqhyVoSzWAMr5KmQENK72tMB8GA1UdIwQY
MBaAFMSe7iTeq1UgEZtqPaBFfTnEBkHbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEo3dUpONnJWU0FSbTJvOW9FVjlPY1FHUWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85Nzg2ZjQtZGQ1NC00ZTQzLWFlYTQt
NTljNGMxMGFlYmQ5LzEveEo3dUpONnJWU0FSbTJvOW9FVjlPY1FHUWRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85Nzg2ZjQtZGQ1NC00ZTQzLWFlYTQtNTljNGMxMGFlYmQ5
LzEveEo3dUpONnJWU0FSbTJvOW9FVjlPY1FHUWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPBX3LTax
vGHOnEfXbbitLDmr0KqRDGiXOMjud1TkRzXlXnciyAA5d0D6PfffqJq3EM24Ogkk
X9WbQravIUROMqVdJb50FCIpj7C3lrkArj47h1FyP5fO6aQ1JUUXKZXyZTcmu6SE
Rrq7rYeqXMfc90FdnDGKh1TS+20wDrz8RQbDpmcamIfivH4k7J7aSIDgy8zdBZcP
GvL49S1QdhIxIU8cjoCLYAIqKTS/lDRRGEfa2pb0gemZa+Vfa/0mC0cz9SfeH2bS
nwrz/1qHgHiRFA80K+NIKyjA/6D6mgEHMRCAV8+r1W/wQxX5cs2Lay8njK+U2VY6
UgMmRdHPCMgoBQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:42:00 2026 by rpki-client