Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
File:                     977TP_AejgncT-3NAROcDneFSq4.mft (raw, json)
Hash identifier:          B6TE03Xm5VSa9XmUD9+bGAN4bJRA/68B27DYMLFkG9M=
Subject key identifier:   D5:33:DB:55:57:D9:E1:FF:23:C6:D6:F2:AA:82:44:97:84:F0:03:96
Authority key identifier: F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
Certificate issuer:       /CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Certificate serial:       019DA48A742BBB9F52731D73F0C33C63342A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
Manifest number:          18CF
Signing time:             Sun 19 Apr 2026 07:00:30 +0000
Manifest this update:     Sun 19 Apr 2026 07:00:30 +0000
Manifest next update:     Mon 20 Apr 2026 07:00:30 +0000
Files and hashes:         1: 977TP_AejgncT-3NAROcDneFSq4.crl (hash: 3DMz4/b1VkPrKrnk6uxKPoIe5m8OmzmfZSqMInD2rg0=)
                          2: K9ARhNUPke1FUpRD3jCOS20cCT8.roa (hash: xemlBpuRtqlzVTp6vvfqrvYIR9l5jVMyrtmPWS3Y4YY=)
                          3: uGNfdvA7X3WyOFyt75e9tVBH91A.roa (hash: 5//JVVveSwHR2hj+bfwWqReYip5bDufgsCMYkbkcBgE=)
                          4: w_HVWxfgMKccvm-uPAq_mXE30RI.roa (hash: nRyRk7kTehxIu33cjbfvuUdw6sNcxsEjbFzAJfWoy80=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:8a:74:2b:bb:9f:52:73:1d:73:f0:c3:3c:63:34:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
        Validity
            Not Before: Apr 19 07:00:30 2026 GMT
            Not After : Apr 20 07:00:30 2026 GMT
        Subject: CN=d533db5557d9e1ff23c6d6f2aa82449784f00396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ea:77:eb:66:c2:ef:c4:73:4f:74:5b:8d:39:
                    bd:24:10:98:7a:b6:83:23:1b:1a:81:0e:c0:83:81:
                    3f:b3:fa:a8:29:1e:75:9a:dd:bf:0a:70:0f:5c:3b:
                    0c:1d:0d:25:54:7e:c6:3f:fb:81:f1:16:02:85:0a:
                    eb:5a:76:9a:d3:07:18:ee:79:2d:3f:55:67:9d:1e:
                    b4:e3:38:8a:48:6d:33:ef:10:9b:9c:9f:1d:91:ab:
                    cb:7c:cb:4c:34:c7:88:01:4c:bb:86:dd:e6:f9:cd:
                    ff:11:58:2d:ee:9c:ce:d8:69:eb:4a:8b:d0:55:4d:
                    37:50:4d:00:52:6d:54:6d:83:0e:2f:0a:d0:53:d3:
                    cf:3c:74:ed:4f:86:bb:4a:39:50:d6:ff:25:a4:71:
                    5f:5c:56:91:66:c6:c3:21:b4:85:11:b6:5f:9f:07:
                    d2:20:e3:ed:5d:bc:7c:6f:55:55:d6:0e:03:ef:a0:
                    b9:d5:8c:91:e9:49:10:d2:3e:02:85:1d:49:f1:a9:
                    7c:4e:8a:c4:1c:64:0d:e7:8f:df:72:41:05:b2:e8:
                    3c:76:d8:08:e3:b5:29:63:90:e5:75:7b:a7:71:e2:
                    82:23:11:87:9a:aa:0d:75:e5:da:eb:f2:4c:12:35:
                    ea:d6:33:dd:a8:7e:bf:29:ef:6e:e3:5d:1f:ad:f4:
                    ed:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:33:DB:55:57:D9:E1:FF:23:C6:D6:F2:AA:82:44:97:84:F0:03:96
            X509v3 Authority Key Identifier:
                keyid:F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:bf:06:03:b8:89:52:20:d6:8e:86:ee:c5:ff:2d:7a:d6:24:
         80:a7:d5:6b:eb:6f:c6:df:56:b8:ca:a4:d7:a0:46:48:69:87:
         63:80:f8:11:95:47:00:4e:d5:28:52:a7:67:a1:56:3a:4a:cc:
         eb:c4:af:c7:dc:49:49:2a:44:92:10:b9:88:1d:73:c3:1b:47:
         ee:e7:f1:ab:cb:ab:a8:5d:2e:36:2d:c3:2f:0c:64:93:0d:b4:
         f7:20:e2:08:c9:91:8c:e2:b9:22:24:b3:5a:86:95:3f:bc:b4:
         bb:a9:6f:88:93:c7:d3:82:2d:6d:90:5f:7b:0d:2e:29:f2:84:
         e5:59:3b:f4:36:8c:bf:7f:2a:7b:d0:c6:b1:85:e4:d4:f6:35:
         59:e2:46:53:3e:33:05:5a:e8:4c:c7:a2:26:ec:d3:b2:0d:3c:
         ae:32:12:d3:c1:cd:a7:a6:d5:06:46:03:d3:c4:b4:ce:a2:74:
         32:29:52:3c:72:d9:05:2f:8d:c6:b3:19:48:53:41:37:0f:bf:
         e8:e9:d3:ab:07:f4:ae:0d:39:67:81:19:7b:48:17:19:89:dd:
         e6:05:a8:1a:9e:53:17:09:4b:81:b9:01:c0:f6:70:83:51:a6:
         db:2e:c8:0c:68:39:66:65:c2:0a:60:c8:46:ff:b1:45:8f:ec:
         de:36:3e:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kinQru59Scx1z8MM8YzQqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YmVkMzNmZjAxZThlMDlkYzRmZWRjZDAxMTM5YzBlNzc4
NTRhYWUwHhcNMjYwNDE5MDcwMDMwWhcNMjYwNDIwMDcwMDMwWjAzMTEwLwYDVQQD
EyhkNTMzZGI1NTU3ZDllMWZmMjNjNmQ2ZjJhYTgyNDQ5Nzg0ZjAwMzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOp362bC78RzT3RbjTm9JBCYeraD
IxsagQ7Ag4E/s/qoKR51mt2/CnAPXDsMHQ0lVH7GP/uB8RYChQrrWnaa0wcY7nkt
P1VnnR604ziKSG0z7xCbnJ8dkavLfMtMNMeIAUy7ht3m+c3/EVgt7pzO2GnrSovQ
VU03UE0AUm1UbYMOLwrQU9PPPHTtT4a7SjlQ1v8lpHFfXFaRZsbDIbSFEbZfnwfS
IOPtXbx8b1VV1g4D76C51YyR6UkQ0j4ChR1J8al8TorEHGQN54/fckEFsug8dtgI
47UpY5DldXunceKCIxGHmqoNdeXa6/JMEjXq1jPdqH6/Ke9u410frfTtxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUz21VX2eH/I8bW8qqCRJeE8AOWMB8GA1UdIwQY
MBaAFPe+0z/wHo4J3E/tzQETnA53hUquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTc3VFBfQWVqZ25jVC0zTkFST2NEbmVGU3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81YTZkMDEtYTM3NS00ZTExLTg3MWUt
OTllNjE0MWRlN2YxLzEvOTc3VFBfQWVqZ25jVC0zTkFST2NEbmVGU3E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS81YTZkMDEtYTM3NS00ZTExLTg3MWUtOTllNjE0MWRlN2Yx
LzEvOTc3VFBfQWVqZ25jVC0zTkFST2NEbmVGU3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALr8GA7iJ
UiDWjobuxf8tetYkgKfVa+tvxt9WuMqk16BGSGmHY4D4EZVHAE7VKFKnZ6FWOkrM
68Svx9xJSSpEkhC5iB1zwxtH7ufxq8urqF0uNi3DLwxkkw209yDiCMmRjOK5IiSz
WoaVP7y0u6lviJPH04ItbZBfew0uKfKE5Vk79DaMv38qe9DGsYXk1PY1WeJGUz4z
BVroTMeiJuzTsg08rjIS08HNp6bVBkYD08S0zqJ0MilSPHLZBS+NxrMZSFNBNw+/
6OnTqwf0rg05Z4EZe0gXGYnd5gWoGp5TFwlLgbkBwPZwg1Gm2y7IDGg5ZmXCCmDI
Rv+xRY/s3jY+kw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:12:20 2026 by rpki-client