Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
File:                     i3P4NzXIqxCgqNROFwEo8COEbnk.mft (raw, json)
Hash identifier:          cHYTG/VvYX+hlV0c0xMUrFnI0SF+bq2Idv0DXpbSHzA=
Subject key identifier:   77:A8:53:93:CC:E2:9B:1E:FD:2F:A2:00:C0:93:0D:DF:1C:10:9B:83
Authority key identifier: 8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
Certificate issuer:       /CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Certificate serial:       019D9B87BDA0551249086799A1C031885259
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
Manifest number:          0786
Signing time:             Fri 17 Apr 2026 13:00:57 +0000
Manifest this update:     Fri 17 Apr 2026 13:00:57 +0000
Manifest next update:     Sat 18 Apr 2026 13:00:57 +0000
Files and hashes:         1: 6tHZhT7N21w3Z616ewGEbAeKLdw.roa (hash: drk0jZRid095U5sVAWQhFh5KREeBBkf7MnZyeJizYAc=)
                          2: i3P4NzXIqxCgqNROFwEo8COEbnk.crl (hash: 9QK+zkIW/5b0LNu5mq0gvTD7Kfwh3PJ/qB6KqIDjjas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:bd:a0:55:12:49:08:67:99:a1:c0:31:88:52:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b73f83735c8ab10a0a8d44e170128f023846e79
        Validity
            Not Before: Apr 17 13:00:57 2026 GMT
            Not After : Apr 18 13:00:57 2026 GMT
        Subject: CN=77a85393cce29b1efd2fa200c0930ddf1c109b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:92:63:80:7a:98:48:08:f9:4c:13:89:3d:db:
                    2b:93:ca:90:28:8a:40:58:51:8f:c8:ba:b6:d8:85:
                    9b:d9:b6:03:f6:3c:eb:c5:db:19:82:2a:c6:63:3e:
                    bc:3b:84:e0:34:b1:e5:5c:ea:67:7b:6f:be:00:e4:
                    19:5c:39:55:cb:a3:82:11:57:7b:42:73:11:c8:47:
                    05:cf:ed:af:9c:aa:93:81:2f:ff:3d:07:5d:f9:d3:
                    00:e3:e6:47:7e:c1:82:8f:53:91:50:54:6d:83:61:
                    86:94:c5:47:5d:fc:f7:91:d6:d0:12:1d:48:e3:22:
                    58:d8:1d:0b:24:20:21:2b:1a:32:ce:c2:e3:31:40:
                    2c:4e:c3:85:91:49:92:40:d7:05:31:78:66:a3:74:
                    d7:b9:75:d9:f0:cb:d3:f2:e4:9b:cb:b6:0b:f0:40:
                    33:ae:80:35:63:5b:31:29:76:ef:64:9d:a4:fd:e2:
                    f6:62:32:17:06:f1:10:99:e0:01:da:ae:2d:96:f5:
                    7e:64:1f:f5:3c:ef:f1:54:98:3b:d6:a0:ab:ce:dc:
                    ba:a9:36:f6:63:f1:23:41:ba:a8:85:89:9c:75:ca:
                    02:c8:21:4f:ad:ef:b2:dc:63:bc:43:92:d7:61:e9:
                    ee:d5:6e:8e:4d:80:53:2e:01:ab:40:8b:a1:26:a1:
                    9c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A8:53:93:CC:E2:9B:1E:FD:2F:A2:00:C0:93:0D:DF:1C:10:9B:83
            X509v3 Authority Key Identifier:
                keyid:8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:04:00:75:64:09:bd:a7:c5:64:17:20:71:81:98:59:b8:82:
         ee:65:49:90:cf:7d:07:6d:dc:67:f6:7a:6b:04:af:0d:7d:79:
         e7:db:8e:fe:46:22:85:20:4b:b2:4c:d9:f9:21:b8:d8:df:fb:
         e4:75:50:0c:fb:66:bf:06:33:98:3a:24:f9:09:db:53:87:89:
         e6:33:a2:1f:71:96:8e:bf:39:7e:c5:b0:a6:d9:3e:fb:dc:66:
         3a:1a:d3:b0:1e:f6:0f:d2:a1:33:8b:34:09:76:ac:fc:46:0a:
         91:b6:de:e5:86:7f:a4:bc:d2:e8:c5:77:8d:af:05:fc:04:ba:
         00:ed:11:b5:60:b8:d4:a7:f0:54:26:87:2b:48:00:cf:b5:ec:
         eb:9c:ce:cf:37:aa:c8:c8:e7:7d:0e:4b:57:87:f8:b0:52:2a:
         97:a0:a0:49:ae:fd:3f:71:6f:f0:66:a6:5c:e6:36:f5:cc:8e:
         ba:eb:df:4f:19:97:cf:2c:e4:ed:71:a0:4f:fe:e7:3f:d9:e3:
         cd:9a:13:88:69:1d:22:37:7f:26:95:36:80:a1:b8:37:15:87:
         25:49:76:04:fb:82:13:aa:ca:52:4d:d7:13:71:ec:06:59:55:
         50:43:6f:07:8d:c5:11:13:bf:96:ef:2a:7b:86:6c:4c:c8:ff:
         2d:6d:27:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh72gVRJJCGeZocAxiFJZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNzNmODM3MzVjOGFiMTBhMGE4ZDQ0ZTE3MDEyOGYwMjM4
NDZlNzkwHhcNMjYwNDE3MTMwMDU3WhcNMjYwNDE4MTMwMDU3WjAzMTEwLwYDVQQD
Eyg3N2E4NTM5M2NjZTI5YjFlZmQyZmEyMDBjMDkzMGRkZjFjMTA5YjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pJjgHqYSAj5TBOJPdsrk8qQKIpA
WFGPyLq22IWb2bYD9jzrxdsZgirGYz68O4TgNLHlXOpne2++AOQZXDlVy6OCEVd7
QnMRyEcFz+2vnKqTgS//PQdd+dMA4+ZHfsGCj1ORUFRtg2GGlMVHXfz3kdbQEh1I
4yJY2B0LJCAhKxoyzsLjMUAsTsOFkUmSQNcFMXhmo3TXuXXZ8MvT8uSby7YL8EAz
roA1Y1sxKXbvZJ2k/eL2YjIXBvEQmeAB2q4tlvV+ZB/1PO/xVJg71qCrzty6qTb2
Y/EjQbqohYmcdcoCyCFPre+y3GO8Q5LXYenu1W6OTYBTLgGrQIuhJqGcAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHeoU5PM4pse/S+iAMCTDd8cEJuDMB8GA1UdIwQY
MBaAFItz+Dc1yKsQoKjUThcBKPAjhG55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTNQNE56WElxeENncU5ST0Z3RW84Q09FYm5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNzZhOTUtZjdhZS00NGI5LTlkOGQt
NjVkZDdmNTJlNDZjLzEvaTNQNE56WElxeENncU5ST0Z3RW84Q09FYm5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNzZhOTUtZjdhZS00NGI5LTlkOGQtNjVkZDdmNTJlNDZj
LzEvaTNQNE56WElxeENncU5ST0Z3RW84Q09FYm5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQQAdWQJ
vafFZBcgcYGYWbiC7mVJkM99B23cZ/Z6awSvDX1559uO/kYihSBLskzZ+SG42N/7
5HVQDPtmvwYzmDok+QnbU4eJ5jOiH3GWjr85fsWwptk++9xmOhrTsB72D9KhM4s0
CXas/EYKkbbe5YZ/pLzS6MV3ja8F/AS6AO0RtWC41KfwVCaHK0gAz7Xs65zOzzeq
yMjnfQ5LV4f4sFIql6CgSa79P3Fv8GamXOY29cyOuuvfTxmXzyzk7XGgT/7nP9nj
zZoTiGkdIjd/JpU2gKG4NxWHJUl2BPuCE6rKUk3XE3HsBllVUENvB43FERO/lu8q
e4ZsTMj/LW0nqg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:46:40 2026 by rpki-client