Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
File:                     C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft (raw, json)
Hash identifier:          CRZ9xQ78/3gCJUKmjvYrAV+Y61UETHMK9y6G0LSD4BI=
Subject key identifier:   BE:63:70:89:22:5B:80:22:6F:04:58:AB:B6:1C:88:79:46:DB:EA:AE
Authority key identifier: 0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3
Certificate issuer:       /CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
Certificate serial:       019D98F5229AF8DCD50EBB5AF7FBB62526CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
Manifest number:          1892
Signing time:             Fri 17 Apr 2026 01:01:35 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:35 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:35 +0000
Files and hashes:         1: C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl (hash: CPArgQL9I8wZ/I5kfCtVaHdIfe3V9U3C0PJ+N86ce7o=)
                          2: Uv1LOQn-rihpO-VnBwQTGmMa48E.roa (hash: U1Bj99VrPaNBoxUvCEMoBEqTdDcni4KZuGxKdf2wOC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:22:9a:f8:dc:d5:0e:bb:5a:f7:fb:b6:25:26:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
        Validity
            Not Before: Apr 17 01:01:35 2026 GMT
            Not After : Apr 18 01:01:35 2026 GMT
        Subject: CN=be637089225b80226f0458abb61c887946dbeaae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:88:96:21:60:d4:b9:63:26:81:ba:74:37:57:
                    d7:63:c9:ad:78:99:c7:c0:b1:eb:70:3f:7e:b5:08:
                    97:a7:3f:51:ae:a5:d0:b1:c2:99:65:fc:a5:7f:27:
                    f7:c0:97:2b:58:bb:b5:a5:b2:18:fd:4f:be:cb:7f:
                    fc:fa:2e:7b:a4:ef:87:9f:50:1d:b5:dc:cf:27:89:
                    f1:bf:8f:82:cc:8c:23:94:8a:16:6b:05:5d:25:e2:
                    eb:8a:81:e0:c9:b9:5a:c9:d8:45:f8:0a:21:61:75:
                    35:af:a7:2e:ec:00:ac:c1:d4:24:b1:80:4a:cf:42:
                    7d:74:b9:a0:2e:67:50:f0:07:30:56:4f:7d:71:8a:
                    70:25:2b:9a:3c:a4:1e:d4:7b:10:c5:48:4b:ef:a9:
                    72:d9:75:76:07:e3:6e:74:6a:d3:cd:cc:47:a0:70:
                    41:e2:1a:12:eb:3a:15:8b:d8:8f:27:bf:b4:62:ae:
                    1c:47:99:5e:29:9e:c9:00:ff:f3:50:0d:8d:c2:90:
                    0b:f6:03:07:08:54:a2:98:6c:2b:df:3a:4e:1d:fa:
                    01:54:0f:87:1f:5d:05:2b:c1:a7:5d:22:ac:aa:cd:
                    e9:69:20:f2:82:3b:f8:1e:e5:8f:5c:a4:e1:dd:d6:
                    20:81:b6:ec:55:04:bf:1b:9a:f5:76:b9:c5:a2:95:
                    72:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:63:70:89:22:5B:80:22:6F:04:58:AB:B6:1C:88:79:46:DB:EA:AE
            X509v3 Authority Key Identifier:
                keyid:0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:83:b5:63:81:fd:de:34:0a:1b:10:1f:99:f9:3e:ac:09:af:
         77:15:c1:19:d3:2b:8b:e0:7a:a2:e5:2e:23:5a:56:50:4b:ba:
         fe:93:25:34:8f:b4:6d:fe:23:34:a0:0f:95:7b:7b:dc:7c:a6:
         8e:1b:f8:83:ed:42:6d:2d:74:4b:90:8e:a5:26:af:91:5d:aa:
         d9:99:bb:4e:d8:e1:d5:b2:47:41:b5:6c:17:9f:a8:43:f2:57:
         2a:a8:29:01:96:47:65:94:4f:76:1f:36:14:ed:bd:5d:64:c1:
         71:93:1e:c4:b0:2a:e5:8d:cb:be:49:6d:a4:88:a1:82:39:46:
         98:60:21:51:85:2b:e8:84:e6:09:64:fc:f4:74:86:23:75:08:
         29:f5:19:9d:e5:5b:d1:30:df:d8:48:d9:0a:76:97:0c:98:a4:
         60:bf:13:32:c6:c8:08:14:d9:52:07:a7:df:0a:5a:3d:39:d3:
         9c:42:d6:d0:60:24:dc:83:da:e7:0a:05:09:e0:38:8c:6f:ab:
         8f:ea:06:47:9f:fd:b6:8a:4c:86:4f:ea:53:69:e7:7a:c3:35:
         3c:0e:4d:e6:b4:23:7a:33:44:e1:87:c6:d1:f8:5f:23:e6:c2:
         3f:c1:78:ad:d2:50:f8:d0:b7:af:0f:92:5e:f9:a5:12:fa:ae:
         5f:41:4c:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9SKa+NzVDrta9/u2JSbMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiOGUyMGM0OGU4OTczYzMzMWUzM2NlNTUxOTVhMzIxNzcz
ZjBhYzMwHhcNMjYwNDE3MDEwMTM1WhcNMjYwNDE4MDEwMTM1WjAzMTEwLwYDVQQD
EyhiZTYzNzA4OTIyNWI4MDIyNmYwNDU4YWJiNjFjODg3OTQ2ZGJlYWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04iWIWDUuWMmgbp0N1fXY8mteJnH
wLHrcD9+tQiXpz9RrqXQscKZZfylfyf3wJcrWLu1pbIY/U++y3/8+i57pO+Hn1Ad
tdzPJ4nxv4+CzIwjlIoWawVdJeLrioHgyblaydhF+AohYXU1r6cu7ACswdQksYBK
z0J9dLmgLmdQ8AcwVk99cYpwJSuaPKQe1HsQxUhL76ly2XV2B+NudGrTzcxHoHBB
4hoS6zoVi9iPJ7+0Yq4cR5leKZ7JAP/zUA2NwpAL9gMHCFSimGwr3zpOHfoBVA+H
H10FK8GnXSKsqs3paSDygjv4HuWPXKTh3dYggbbsVQS/G5r1drnFopVynQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5jcIkiW4AibwRYq7YciHlG2+quMB8GA1UdIwQY
MBaAFAuOIMSOiXPDMeM85VGVoyF3PwrDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzQ0Z3hJNkpjOE14NHp6bFVaV2pJWGNfQ3NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80YTYxM2EtMzFlZi00YTczLThkYTQt
YTVhZjkzN2ZiYzA1LzEvQzQ0Z3hJNkpjOE14NHp6bFVaV2pJWGNfQ3NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS80YTYxM2EtMzFlZi00YTczLThkYTQtYTVhZjkzN2ZiYzA1
LzEvQzQ0Z3hJNkpjOE14NHp6bFVaV2pJWGNfQ3NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr4O1Y4H9
3jQKGxAfmfk+rAmvdxXBGdMri+B6ouUuI1pWUEu6/pMlNI+0bf4jNKAPlXt73Hym
jhv4g+1CbS10S5COpSavkV2q2Zm7Ttjh1bJHQbVsF5+oQ/JXKqgpAZZHZZRPdh82
FO29XWTBcZMexLAq5Y3LvkltpIihgjlGmGAhUYUr6ITmCWT89HSGI3UIKfUZneVb
0TDf2EjZCnaXDJikYL8TMsbICBTZUgen3wpaPTnTnELW0GAk3IPa5woFCeA4jG+r
j+oGR5/9topMhk/qU2nnesM1PA5N5rQjejNE4YfG0fhfI+bCP8F4rdJQ+NC3rw+S
XvmlEvquX0FMhw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:17 2026 by rpki-client