Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
File:                     tIvY7E4wHJ57CkO-8PPd06RTFVo.mft (raw, json)
Hash identifier:          ODm7YrkOPPYy4OjGij/YUGtHODGaKJamTmF2xfdzmcg=
Subject key identifier:   01:DE:F5:B8:36:11:5D:89:89:5A:AB:25:AD:EC:08:A8:46:00:84:60
Authority key identifier: B4:8B:D8:EC:4E:30:1C:9E:7B:0A:43:BE:F0:F3:DD:D3:A4:53:15:5A
Certificate issuer:       /CN=b48bd8ec4e301c9e7b0a43bef0f3ddd3a453155a
Certificate serial:       019D9BBF1B32C3CE8C0248164E37578DD304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
Manifest number:          0584
Signing time:             Fri 17 Apr 2026 14:01:25 +0000
Manifest this update:     Fri 17 Apr 2026 14:01:25 +0000
Manifest next update:     Sat 18 Apr 2026 14:01:25 +0000
Files and hashes:         1: Rlz6gCewQxlK_6mdm3r5wcJWGug.roa (hash: xyUcAmIySIN4cusVT6aDXyeoMypfFm7A4QhLU41m4OE=)
                          2: tIvY7E4wHJ57CkO-8PPd06RTFVo.crl (hash: pON6g2xZdWOuOFAR/lAd+HH6vA70jZzEgDK8Dx2KhZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:bf:1b:32:c3:ce:8c:02:48:16:4e:37:57:8d:d3:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b48bd8ec4e301c9e7b0a43bef0f3ddd3a453155a
        Validity
            Not Before: Apr 17 14:01:25 2026 GMT
            Not After : Apr 18 14:01:25 2026 GMT
        Subject: CN=01def5b836115d89895aab25adec08a846008460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6a:81:9f:78:19:f7:53:f2:6a:b0:4d:8e:5e:
                    8b:af:db:11:dd:50:32:f7:d6:ea:de:3b:a2:53:ac:
                    eb:75:d8:78:3d:d7:d3:fe:83:4e:fc:d4:8e:12:4e:
                    67:a8:a2:be:06:2a:51:6e:4a:ef:e6:4f:ce:c4:f8:
                    e9:1b:1b:9a:02:95:9c:d9:f9:79:bd:d8:e9:b4:e3:
                    57:42:6d:43:38:31:1e:5a:94:a1:a1:4c:db:de:a0:
                    64:81:60:80:9f:bf:5b:f6:4b:9a:3e:8a:9c:93:d7:
                    9b:33:4c:f1:02:a7:36:e5:86:4e:0b:c8:56:2e:ce:
                    a0:b5:60:23:c3:11:0f:90:ee:16:65:0b:c2:ba:4f:
                    a8:1b:d3:7d:78:29:d7:d1:9b:97:77:ff:80:c5:52:
                    2e:50:50:e3:35:71:fa:1c:c7:f6:c4:9f:d0:28:9f:
                    30:99:e0:a5:65:2b:ca:fc:a0:32:3b:83:bd:a4:20:
                    1f:fb:f6:57:5b:7e:74:ab:d4:02:4c:d5:6a:e7:a8:
                    80:6a:2b:e0:c2:e2:94:a6:b4:67:f6:b8:77:29:5e:
                    d4:90:94:47:2b:52:fd:58:f3:ee:33:67:64:ee:ec:
                    93:ba:4d:86:2a:8b:1b:84:6a:85:42:23:29:72:6a:
                    3f:4a:b4:aa:4c:7f:12:82:c8:ea:cf:7a:64:e7:67:
                    db:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DE:F5:B8:36:11:5D:89:89:5A:AB:25:AD:EC:08:A8:46:00:84:60
            X509v3 Authority Key Identifier:
                keyid:B4:8B:D8:EC:4E:30:1C:9E:7B:0A:43:BE:F0:F3:DD:D3:A4:53:15:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d6:c5:bc:50:7e:36:e5:3b:c9:e9:2c:92:82:da:26:58:25:
         52:32:28:ee:39:79:8d:9f:43:9e:90:5b:34:f5:6b:8d:76:d3:
         45:f0:42:3b:a2:f3:0d:6b:c3:17:fd:de:df:4c:30:8e:01:a3:
         c1:35:01:f6:9e:7e:17:9a:ca:31:12:1c:11:95:7d:44:c7:2a:
         b4:d1:fc:12:6f:d2:d0:3e:03:df:ce:52:f6:83:08:18:f7:77:
         1b:50:c2:b2:be:19:4e:d3:70:58:cc:37:d8:ae:31:e2:fa:b6:
         59:b7:06:46:dd:c5:99:d0:15:b9:25:87:51:86:d6:45:35:5f:
         de:a4:0f:22:63:dc:34:7c:5e:0d:c8:b1:9c:24:0a:82:26:dc:
         33:86:e9:50:51:46:b1:4d:1d:07:95:69:a1:c7:92:bd:0a:66:
         59:dc:00:92:67:af:e5:bc:95:7a:04:6f:81:23:c5:95:50:2d:
         7f:88:8e:40:45:32:28:be:aa:10:9e:64:99:c1:a8:10:dd:e3:
         62:78:6f:68:f6:f1:18:77:78:4f:f0:93:f2:08:b4:45:2b:f1:
         41:c6:89:83:80:c1:f5:01:33:93:5d:a3:60:5e:ad:1b:dd:28:
         4e:1d:92:e6:d1:a2:97:ab:a5:85:51:c6:bb:4c:a3:7e:b5:d4:
         d2:28:21:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvxsyw86MAkgWTjdXjdMEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OGJkOGVjNGUzMDFjOWU3YjBhNDNiZWYwZjNkZGQzYTQ1
MzE1NWEwHhcNMjYwNDE3MTQwMTI1WhcNMjYwNDE4MTQwMTI1WjAzMTEwLwYDVQQD
EygwMWRlZjViODM2MTE1ZDg5ODk1YWFiMjVhZGVjMDhhODQ2MDA4NDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2qBn3gZ91PyarBNjl6Lr9sR3VAy
99bq3juiU6zrddh4PdfT/oNO/NSOEk5nqKK+BipRbkrv5k/OxPjpGxuaApWc2fl5
vdjptONXQm1DODEeWpShoUzb3qBkgWCAn79b9kuaPoqck9ebM0zxAqc25YZOC8hW
Ls6gtWAjwxEPkO4WZQvCuk+oG9N9eCnX0ZuXd/+AxVIuUFDjNXH6HMf2xJ/QKJ8w
meClZSvK/KAyO4O9pCAf+/ZXW350q9QCTNVq56iAaivgwuKUprRn9rh3KV7UkJRH
K1L9WPPuM2dk7uyTuk2GKosbhGqFQiMpcmo/SrSqTH8Sgsjqz3pk52fbhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHe9bg2EV2JiVqrJa3sCKhGAIRgMB8GA1UdIwQY
MBaAFLSL2OxOMByeewpDvvDz3dOkUxVaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEl2WTdFNHdISjU3Q2tPLThQUGQwNlJURlZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC83NDM0ZTEtNzQxMy00ZjZhLWEyOWMt
Y2RjODFkYjc3NTMxLzEvdEl2WTdFNHdISjU3Q2tPLThQUGQwNlJURlZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC83NDM0ZTEtNzQxMy00ZjZhLWEyOWMtY2RjODFkYjc3NTMx
LzEvdEl2WTdFNHdISjU3Q2tPLThQUGQwNlJURlZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAedbFvFB+
NuU7yekskoLaJlglUjIo7jl5jZ9DnpBbNPVrjXbTRfBCO6LzDWvDF/3e30wwjgGj
wTUB9p5+F5rKMRIcEZV9RMcqtNH8Em/S0D4D385S9oMIGPd3G1DCsr4ZTtNwWMw3
2K4x4vq2WbcGRt3FmdAVuSWHUYbWRTVf3qQPImPcNHxeDcixnCQKgibcM4bpUFFG
sU0dB5VpoceSvQpmWdwAkmev5byVegRvgSPFlVAtf4iOQEUyKL6qEJ5kmcGoEN3j
YnhvaPbxGHd4T/CT8gi0RSvxQcaJg4DB9QEzk12jYF6tG90oTh2S5tGil6ulhVHG
u0yjfrXU0ighKg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:41:32 2026 by rpki-client