Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
File:                     5NU8R_Id1mUrZ_70lclP39FSjOs.mft (raw, json)
Hash identifier:          osYjAtQDe+1aC3UTCRE9uk9kqGSIbC0edrqr02XjJ8g=
Subject key identifier:   F2:7D:F5:B9:8B:5D:EF:ED:BF:77:E1:33:9C:A8:50:1E:1D:80:94:01
Authority key identifier: E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB
Certificate issuer:       /CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb
Certificate serial:       019D9C633DED1585E5DB112B875A98E38445
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
Manifest number:          026D
Signing time:             Fri 17 Apr 2026 17:00:42 +0000
Manifest this update:     Fri 17 Apr 2026 17:00:42 +0000
Manifest next update:     Sat 18 Apr 2026 17:00:42 +0000
Files and hashes:         1: 5NU8R_Id1mUrZ_70lclP39FSjOs.crl (hash: uSPJ2E7H4L5BLYuXZg7yrClQ3etrK/jw3J8Djq9sPUY=)
                          2: DGLs36BU_cILxHYLxiJQIBEtMJI.roa (hash: qUohKLi8iKm8w87fsK66S0pB8JkDeoGnUD+Ll8azgYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:63:3d:ed:15:85:e5:db:11:2b:87:5a:98:e3:84:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb
        Validity
            Not Before: Apr 17 17:00:42 2026 GMT
            Not After : Apr 18 17:00:42 2026 GMT
        Subject: CN=f27df5b98b5defedbf77e1339ca8501e1d809401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b2:b0:07:aa:30:d8:ef:24:e3:34:93:45:db:
                    39:29:45:13:d2:e8:36:85:f3:90:57:2b:0a:fc:cd:
                    d6:4b:9a:bf:7c:15:88:ab:25:f6:67:e1:77:41:33:
                    82:96:71:93:0e:20:6e:d0:9f:8d:d5:25:6a:0b:6a:
                    0d:f7:8e:80:2f:2a:e5:19:1d:cc:6a:d8:51:ec:62:
                    85:ec:87:6e:cd:0d:88:d5:2e:b1:1d:32:72:90:ea:
                    58:d9:12:5b:63:40:c2:f2:71:14:9b:ff:3b:a3:64:
                    e8:e5:02:c2:d0:38:a3:4d:6c:35:9e:fd:47:10:da:
                    22:26:e8:aa:83:c0:88:b7:64:61:e8:1f:d5:e8:83:
                    d4:97:1e:f0:79:a9:4e:6a:63:b9:86:83:67:9d:28:
                    15:85:8d:23:59:8f:a8:3f:3a:b6:23:af:8c:03:6d:
                    54:e5:27:f0:6a:9e:ad:60:a5:be:9a:1b:c8:ad:68:
                    50:41:5e:48:48:53:15:e6:83:b1:5a:6d:ca:41:d0:
                    7a:7f:d6:ae:f5:ca:97:97:e7:4d:d6:5c:3c:59:80:
                    9b:5a:2d:49:7b:ea:50:f9:cb:a6:d8:7e:36:db:11:
                    61:a3:d6:ae:0b:51:de:80:16:19:2e:76:22:4d:ac:
                    27:88:0d:92:40:f9:7b:5b:05:aa:07:c5:62:57:00:
                    c3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7D:F5:B9:8B:5D:EF:ED:BF:77:E1:33:9C:A8:50:1E:1D:80:94:01
            X509v3 Authority Key Identifier:
                keyid:E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:26:22:8d:db:87:4e:68:ce:df:eb:51:00:fe:bb:7c:bd:24:
         4c:88:6e:fa:b4:d4:8c:71:8d:40:29:7a:aa:6b:15:4b:b1:d9:
         29:4c:bb:cd:f9:97:c7:5c:e1:8c:6f:d8:1b:5c:e1:27:f3:1d:
         ae:4e:d0:e8:16:39:58:48:4f:dd:29:5f:02:a5:5b:e9:d7:a4:
         2b:4b:30:c6:c0:b1:0a:fc:81:c5:45:2a:d4:bd:03:6c:47:e2:
         d1:a7:83:2b:2b:5f:20:b3:8c:8e:fd:b4:dc:54:95:db:e4:e7:
         d1:60:28:7c:fa:85:c2:a9:68:fe:75:0a:d7:62:55:f8:ee:f6:
         58:09:49:5f:2d:92:54:5a:c2:b4:34:3d:e1:4e:c2:f7:43:25:
         4c:0a:eb:56:45:ce:5e:e7:5b:82:bb:16:f5:3b:c2:cc:04:b3:
         44:63:17:34:1f:62:0c:06:72:c7:40:5e:9e:bf:95:f5:32:d1:
         9e:1c:ce:9d:97:e4:0c:10:a0:8f:ae:f4:6f:08:75:04:38:31:
         11:9b:2f:89:f5:84:72:7a:59:c0:83:12:35:5a:1c:fb:ee:54:
         19:c5:c0:6d:ef:ee:04:00:a7:b8:bc:45:a4:be:45:31:72:34:
         da:c1:67:a6:a8:0c:95:4d:23:73:b9:ab:42:08:8a:08:8a:6c:
         a0:84:63:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cYz3tFYXl2xErh1qY44RFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZDUzYzQ3ZjIxZGQ2NjUyYjY3ZmVmNDk1Yzk0ZmRmZDE1
MjhjZWIwHhcNMjYwNDE3MTcwMDQyWhcNMjYwNDE4MTcwMDQyWjAzMTEwLwYDVQQD
EyhmMjdkZjViOThiNWRlZmVkYmY3N2UxMzM5Y2E4NTAxZTFkODA5NDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorKwB6ow2O8k4zSTRds5KUUT0ug2
hfOQVysK/M3WS5q/fBWIqyX2Z+F3QTOClnGTDiBu0J+N1SVqC2oN946ALyrlGR3M
athR7GKF7IduzQ2I1S6xHTJykOpY2RJbY0DC8nEUm/87o2To5QLC0DijTWw1nv1H
ENoiJuiqg8CIt2Rh6B/V6IPUlx7wealOamO5hoNnnSgVhY0jWY+oPzq2I6+MA21U
5Sfwap6tYKW+mhvIrWhQQV5ISFMV5oOxWm3KQdB6f9au9cqXl+dN1lw8WYCbWi1J
e+pQ+cum2H422xFho9auC1HegBYZLnYiTawniA2SQPl7WwWqB8ViVwDDkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJ99bmLXe/tv3fhM5yoUB4dgJQBMB8GA1UdIwQY
MBaAFOTVPEfyHdZlK2f+9JXJT9/RUozrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5VOFJfSWQxbVVyWl83MGxjbFAzOUZTak9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9kNjZhZjMtMjhiNS00MmViLWFkMDEt
OTVkNTNiNTMxNTQ1LzEvNU5VOFJfSWQxbVVyWl83MGxjbFAzOUZTak9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9kNjZhZjMtMjhiNS00MmViLWFkMDEtOTVkNTNiNTMxNTQ1
LzEvNU5VOFJfSWQxbVVyWl83MGxjbFAzOUZTak9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmyYijduH
TmjO3+tRAP67fL0kTIhu+rTUjHGNQCl6qmsVS7HZKUy7zfmXx1zhjG/YG1zhJ/Md
rk7Q6BY5WEhP3SlfAqVb6dekK0swxsCxCvyBxUUq1L0DbEfi0aeDKytfILOMjv20
3FSV2+Tn0WAofPqFwqlo/nUK12JV+O72WAlJXy2SVFrCtDQ94U7C90MlTArrVkXO
XudbgrsW9TvCzASzRGMXNB9iDAZyx0Benr+V9TLRnhzOnZfkDBCgj670bwh1BDgx
EZsvifWEcnpZwIMSNVoc++5UGcXAbe/uBACnuLxFpL5FMXI02sFnpqgMlU0jc7mr
QgiKCIpsoIRjcg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:21:27 2026 by rpki-client