Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft
File:                     mXFUBuche_wTgSpHBMYq4JnnyP8.mft (raw, json)
Hash identifier:          b5y0bjwW10i5rY0j+6yspOeQ+IdCj6b5z0WR2jv+8nw=
Subject key identifier:   D2:B9:82:C3:87:A4:A7:6E:D9:38:E4:5F:D8:B5:75:E6:66:93:BB:E1
Authority key identifier: 99:71:54:06:E7:21:7B:FC:13:81:2A:47:04:C6:2A:E0:99:E7:C8:FF
Certificate issuer:       /CN=99715406e7217bfc13812a4704c62ae099e7c8ff
Certificate serial:       019D9A3F13130D84E79D44660B5ECAD4F8C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft
Manifest number:          05DF
Signing time:             Fri 17 Apr 2026 07:01:58 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:58 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:58 +0000
Files and hashes:         1: mXFUBuche_wTgSpHBMYq4JnnyP8.crl (hash: Kf3SHmQmF7JBbvvgigrMGG4aYEqFOLLUFLvR54zVjsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3f:13:13:0d:84:e7:9d:44:66:0b:5e:ca:d4:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99715406e7217bfc13812a4704c62ae099e7c8ff
        Validity
            Not Before: Apr 17 07:01:58 2026 GMT
            Not After : Apr 18 07:01:58 2026 GMT
        Subject: CN=d2b982c387a4a76ed938e45fd8b575e66693bbe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:53:d2:c6:11:d5:6c:cf:ce:b4:4c:38:3a:d1:
                    26:ea:87:74:04:15:bc:24:2d:d5:00:e4:c3:98:a3:
                    19:4d:f3:bf:e1:a9:03:fa:a9:5a:a6:0e:61:85:66:
                    32:ca:c0:c6:34:98:97:23:de:87:2c:9b:fb:45:8f:
                    4f:25:0f:1d:d8:f4:fd:56:e8:dd:31:3f:58:16:cb:
                    e7:e8:95:77:11:e4:19:3f:32:56:d8:88:cc:e7:e7:
                    32:46:96:8a:e3:d7:d9:1a:17:c0:25:85:f4:01:ed:
                    44:86:28:71:7a:27:ba:b8:a1:60:8b:d8:e7:10:b9:
                    1a:86:b8:e1:37:ee:dc:47:dd:6f:23:78:7f:c3:12:
                    7b:a1:92:73:a5:ba:ae:f7:01:78:7b:7f:d2:da:43:
                    07:c7:d8:37:f6:83:84:e6:11:86:3a:63:35:6d:f3:
                    09:df:61:17:08:84:7f:2c:ec:ff:eb:a3:8f:6b:dd:
                    f8:43:da:3c:59:20:72:12:51:23:b1:d7:10:40:2f:
                    f9:18:e6:1b:17:4c:92:e5:b3:30:8e:95:77:34:5b:
                    1d:fc:d0:f8:0e:0c:00:97:91:30:8b:e5:c0:c1:83:
                    7e:ae:e0:db:13:8f:ae:cc:4d:4a:3f:7b:8a:83:fe:
                    df:9f:23:55:4b:f6:15:56:c5:b9:05:be:10:90:e5:
                    26:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B9:82:C3:87:A4:A7:6E:D9:38:E4:5F:D8:B5:75:E6:66:93:BB:E1
            X509v3 Authority Key Identifier:
                keyid:99:71:54:06:E7:21:7B:FC:13:81:2A:47:04:C6:2A:E0:99:E7:C8:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:4e:ae:7f:ec:bc:2c:75:0b:ee:af:43:55:39:51:ac:0a:c8:
         06:6a:4c:98:e7:93:b8:02:e0:85:de:d1:75:4c:27:52:8c:9b:
         56:84:fa:4f:2a:30:8d:b5:7e:0a:b4:31:0c:b2:b1:4c:2d:6a:
         6e:63:2b:aa:e5:bc:2a:ff:e6:9c:e5:4d:cc:b7:09:07:15:d3:
         8c:cb:3c:fc:02:81:d4:05:16:a7:f8:a7:67:ba:af:a4:31:bb:
         9c:06:69:35:b6:7b:f4:a7:b6:fd:9a:6a:b2:94:8e:47:20:7c:
         9e:2e:9b:1c:db:4c:c2:e3:ef:6a:18:99:84:f1:de:3b:cd:08:
         ec:98:00:10:33:43:e3:ef:f3:f2:e0:ef:dd:b0:6f:46:05:9e:
         b0:27:6e:73:30:d7:54:02:1a:45:7a:5e:3b:c5:03:b5:c0:c6:
         9a:04:bd:61:cf:c8:05:51:a7:5b:e4:0c:b2:a6:28:9a:b9:7d:
         7a:43:68:0b:68:15:e5:c0:1b:c3:b0:fe:f4:7b:fa:c7:4a:c3:
         5d:bd:83:2a:9a:0a:96:92:ca:ca:f4:38:04:eb:27:38:ec:40:
         3b:f2:60:8d:69:0d:db:50:00:0f:79:24:4f:ae:1b:8c:f9:f3:
         9f:f9:c7:d3:30:c9:2e:16:1e:f2:9b:33:36:9b:29:76:b2:f9:
         f5:d8:25:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPxMTDYTnnURmC17K1PjAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NzE1NDA2ZTcyMTdiZmMxMzgxMmE0NzA0YzYyYWUwOTll
N2M4ZmYwHhcNMjYwNDE3MDcwMTU4WhcNMjYwNDE4MDcwMTU4WjAzMTEwLwYDVQQD
EyhkMmI5ODJjMzg3YTRhNzZlZDkzOGU0NWZkOGI1NzVlNjY2OTNiYmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslPSxhHVbM/OtEw4OtEm6od0BBW8
JC3VAOTDmKMZTfO/4akD+qlapg5hhWYyysDGNJiXI96HLJv7RY9PJQ8d2PT9Vujd
MT9YFsvn6JV3EeQZPzJW2IjM5+cyRpaK49fZGhfAJYX0Ae1Ehihxeie6uKFgi9jn
ELkahrjhN+7cR91vI3h/wxJ7oZJzpbqu9wF4e3/S2kMHx9g39oOE5hGGOmM1bfMJ
32EXCIR/LOz/66OPa934Q9o8WSByElEjsdcQQC/5GOYbF0yS5bMwjpV3NFsd/ND4
DgwAl5Ewi+XAwYN+ruDbE4+uzE1KP3uKg/7fnyNVS/YVVsW5Bb4QkOUmqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNK5gsOHpKdu2TjkX9i1deZmk7vhMB8GA1UdIwQY
MBaAFJlxVAbnIXv8E4EqRwTGKuCZ58j/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVhGVUJ1Y2hlX3dUZ1NwSEJNWXE0Sm5ueVA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80ZTllMzctNmU2Ni00MWIxLWFhOTkt
MTUxNmI2ZDgyZTJkLzEvbVhGVUJ1Y2hlX3dUZ1NwSEJNWXE0Sm5ueVA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS80ZTllMzctNmU2Ni00MWIxLWFhOTktMTUxNmI2ZDgyZTJk
LzEvbVhGVUJ1Y2hlX3dUZ1NwSEJNWXE0Sm5ueVA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdk6uf+y8
LHUL7q9DVTlRrArIBmpMmOeTuALghd7RdUwnUoybVoT6TyowjbV+CrQxDLKxTC1q
bmMrquW8Kv/mnOVNzLcJBxXTjMs8/AKB1AUWp/inZ7qvpDG7nAZpNbZ79Ke2/Zpq
spSORyB8ni6bHNtMwuPvahiZhPHeO80I7JgAEDND4+/z8uDv3bBvRgWesCduczDX
VAIaRXpeO8UDtcDGmgS9Yc/IBVGnW+QMsqYomrl9ekNoC2gV5cAbw7D+9Hv6x0rD
Xb2DKpoKlpLKyvQ4BOsnOOxAO/JgjWkN21AAD3kkT64bjPnzn/nH0zDJLhYe8psz
NpspdrL59dgl5w==
-----END CERTIFICATE-----