Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
File:                     _qJ-2VhOB8dA_utA17nlfMrF6VA.mft (raw, json)
Hash identifier:          uyliPjLe7PcneYegyN5atlxj2CYSfc6AC84Ebm5gAcE=
Subject key identifier:   4E:8B:E8:AC:A9:F4:C4:39:17:31:2F:FB:0A:E9:D3:F9:AD:30:2A:77
Authority key identifier: FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
Certificate issuer:       /CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Certificate serial:       019D9BF5199B6419577CBDD996AB5499A7AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
Manifest number:          1345
Signing time:             Fri 17 Apr 2026 15:00:24 +0000
Manifest this update:     Fri 17 Apr 2026 15:00:24 +0000
Manifest next update:     Sat 18 Apr 2026 15:00:24 +0000
Files and hashes:         1: DzshirtWicNrDuK0JWqKHNIqs0I.roa (hash: T2DQWKAIsgzJl63HpzB70Owqfsg5T+wUK5RjGOLK3uY=)
                          2: _qJ-2VhOB8dA_utA17nlfMrF6VA.crl (hash: lzxbL5EToj71MtrlSvhUwGvQ1SmpTGBsEo3ikJXNRvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:19:9b:64:19:57:7c:bd:d9:96:ab:54:99:a7:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
        Validity
            Not Before: Apr 17 15:00:24 2026 GMT
            Not After : Apr 18 15:00:24 2026 GMT
        Subject: CN=4e8be8aca9f4c43917312ffb0ae9d3f9ad302a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8e:b4:bd:20:21:b1:68:5c:f3:1a:39:63:6f:
                    54:5c:c8:da:8f:ea:b2:a9:9b:b6:06:2c:10:b6:e8:
                    8e:0d:1c:26:07:2b:81:94:a5:2a:a9:5a:26:91:ea:
                    f5:1d:50:ba:40:98:ce:f3:d9:54:b2:57:1b:75:ba:
                    18:80:98:cf:6a:fb:34:ec:dc:17:e7:f2:42:48:59:
                    9a:e6:e9:2f:cf:5f:ad:1e:09:9f:77:97:57:04:43:
                    c0:4f:3a:f7:fd:97:39:e4:dd:8e:68:2c:56:93:24:
                    29:07:2a:6b:e4:d1:e0:1c:65:ba:cc:c8:ec:7f:6e:
                    d5:b2:d5:10:c3:2c:e6:65:6a:7c:41:2a:71:d2:b6:
                    1e:97:ac:d2:2e:d8:0c:21:01:d5:40:04:ed:b2:7a:
                    6a:2d:2b:3d:d7:4e:44:cf:b9:f5:0e:71:53:03:d4:
                    9a:9f:c5:9d:76:80:fc:d9:96:90:c6:bc:1d:dc:98:
                    80:6e:5c:96:34:1f:26:91:ef:45:16:a0:ea:f1:8c:
                    bc:52:f9:dc:6c:72:32:0e:69:20:3e:c9:28:be:a3:
                    7e:5a:a5:3e:45:17:26:7a:c2:2a:8f:e5:71:ea:84:
                    95:4f:6f:dd:00:37:77:d2:03:e3:21:6c:9b:35:27:
                    be:1b:80:d7:8b:7a:02:be:c6:78:b5:17:17:f4:1f:
                    5a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8B:E8:AC:A9:F4:C4:39:17:31:2F:FB:0A:E9:D3:F9:AD:30:2A:77
            X509v3 Authority Key Identifier:
                keyid:FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:8d:4e:31:f8:e5:f4:ec:0c:8b:28:2b:c1:99:dd:d6:4d:91:
         2e:bf:24:69:62:14:68:bd:a8:04:0c:b3:f5:10:a9:b0:8b:b5:
         4c:de:00:3a:2e:07:2a:c4:82:c8:af:ff:69:84:2e:03:ee:ae:
         74:89:ca:2c:f3:40:46:dd:bb:0e:d4:05:84:45:65:94:ed:a8:
         ed:b2:a2:5c:43:a7:ef:77:51:0f:9f:93:37:58:a4:1c:de:13:
         c5:7c:87:91:b8:6e:da:10:63:0a:2c:f6:4d:20:a3:ad:85:09:
         ef:fa:ca:1d:6e:a7:71:70:86:42:b6:80:73:d8:7e:bb:ba:07:
         85:54:31:2b:c0:3b:7e:27:57:be:3d:4b:d7:f8:be:b3:b9:1b:
         fd:28:58:61:c9:91:92:c3:7e:75:02:85:1c:43:f0:ba:9d:85:
         bf:31:83:78:5d:e1:2d:a8:ea:cb:1c:05:fb:8c:6a:f2:1d:d5:
         48:07:d9:72:82:7f:84:de:50:ee:77:91:71:97:27:45:0f:c6:
         7e:e0:68:d3:b6:fb:af:1d:86:44:21:f9:ae:48:40:0b:cb:98:
         dd:3d:f6:f2:e8:80:36:7d:16:79:f1:76:b9:94:fa:4e:12:21:
         52:9a:48:a4:32:13:35:0b:8a:36:e1:0f:bc:3f:5f:53:90:81:
         bf:cb:c4:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9RmbZBlXfL3ZlqtUmaerMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYTI3ZWQ5NTg0ZTA3Yzc0MGZlZWI0MGQ3YjllNTdjY2Fj
NWU5NTAwHhcNMjYwNDE3MTUwMDI0WhcNMjYwNDE4MTUwMDI0WjAzMTEwLwYDVQQD
Eyg0ZThiZThhY2E5ZjRjNDM5MTczMTJmZmIwYWU5ZDNmOWFkMzAyYTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY60vSAhsWhc8xo5Y29UXMjaj+qy
qZu2BiwQtuiODRwmByuBlKUqqVomker1HVC6QJjO89lUslcbdboYgJjPavs07NwX
5/JCSFma5ukvz1+tHgmfd5dXBEPATzr3/Zc55N2OaCxWkyQpBypr5NHgHGW6zMjs
f27VstUQwyzmZWp8QSpx0rYel6zSLtgMIQHVQATtsnpqLSs9105Ez7n1DnFTA9Sa
n8WddoD82ZaQxrwd3JiAblyWNB8mke9FFqDq8Yy8UvncbHIyDmkgPskovqN+WqU+
RRcmesIqj+Vx6oSVT2/dADd30gPjIWybNSe+G4DXi3oCvsZ4tRcX9B9a+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6L6Kyp9MQ5FzEv+wrp0/mtMCp3MB8GA1UdIwQY
MBaAFP6iftlYTgfHQP7rQNe55XzKxelQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wMGVlOTMtOWIwNi00NDkwLTgwM2Qt
OTliNDU2ZmRkOTU0LzEvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wMGVlOTMtOWIwNi00NDkwLTgwM2QtOTliNDU2ZmRkOTU0
LzEvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJI1OMfjl
9OwMiygrwZnd1k2RLr8kaWIUaL2oBAyz9RCpsIu1TN4AOi4HKsSCyK//aYQuA+6u
dInKLPNARt27DtQFhEVllO2o7bKiXEOn73dRD5+TN1ikHN4TxXyHkbhu2hBjCiz2
TSCjrYUJ7/rKHW6ncXCGQraAc9h+u7oHhVQxK8A7fidXvj1L1/i+s7kb/ShYYcmR
ksN+dQKFHEPwup2FvzGDeF3hLajqyxwF+4xq8h3VSAfZcoJ/hN5Q7neRcZcnRQ/G
fuBo07b7rx2GRCH5rkhAC8uY3T328uiANn0WefF2uZT6ThIhUppIpDITNQuKNuEP
vD9fU5CBv8vEiw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:37:39 2026 by rpki-client