Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
File:                     PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft (raw, json)
Hash identifier:          T7Z0MG1fbduPYY2IHwusA4yxOzCtCQPBmnAisZdxzPI=
Subject key identifier:   CE:23:EC:66:9F:40:1E:C9:1B:14:B4:B2:AF:81:39:7A:1B:92:C8:57
Authority key identifier: 3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
Certificate issuer:       /CN=3de2681dda00702a7597a71257e14f7a725e890e
Certificate serial:       019D98F4EA9E4D6F39E1F349914E497A30D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
Manifest number:          0D79
Signing time:             Fri 17 Apr 2026 01:01:20 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:20 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:20 +0000
Files and hashes:         1: IjORSZ-DHS2njbEibdVPiJ07doE.roa (hash: FzfwUHvA2+MAnkkt3/CLPEpFaaB/4mZFGU2wFD1oYDg=)
                          2: JcRvo9eKx7OaD_XqF6ofMiZVW6s.roa (hash: YveWpi6AJgq5ydWYFnpgDOP/dgPBe846GgNOj6NIeio=)
                          3: PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl (hash: APmAh9ZWW5GcJGJprDoq+MSZyNeGP2jjW0Eqo64XWQg=)
                          4: TMAMHptU5L3vkBv93_ALuUDlqmI.roa (hash: vr74guYNZJJo+nJwNDEaeFbfZdAmyE3APxi/3PH5FOw=)
                          5: _tWKsocuF_rpwquYOU5lc0O3uJM.roa (hash: MmXxKOM+EuL1eSrHg+bnsKdzlf0fumiR/2fZPfIg4qU=)
                          6: adu7xMr-sFr4uxv_MuZJYXtm75I.roa (hash: mkOL5n7ZlQqQqd6xIZgR+yb2Xixn7LiRAUIkOJH0g3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:ea:9e:4d:6f:39:e1:f3:49:91:4e:49:7a:30:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de2681dda00702a7597a71257e14f7a725e890e
        Validity
            Not Before: Apr 17 01:01:20 2026 GMT
            Not After : Apr 18 01:01:20 2026 GMT
        Subject: CN=ce23ec669f401ec91b14b4b2af81397a1b92c857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ad:0e:3e:13:90:e5:1a:3a:9e:65:6f:0b:ed:
                    98:bf:15:4e:1c:4a:d6:a1:c7:41:21:fb:5e:7c:bc:
                    e0:d5:e3:5d:14:5a:35:9b:07:2c:d6:0a:16:3f:19:
                    20:b0:09:e4:b2:1e:5f:e0:f8:b0:e7:6a:67:12:d9:
                    e1:95:50:27:7d:cf:be:c8:8b:a4:95:5a:49:61:d5:
                    ee:8c:85:d3:12:81:3e:fb:65:19:4d:eb:56:12:8e:
                    04:35:2f:d0:37:16:e4:58:c3:a5:77:8c:5f:f5:b3:
                    fe:50:08:79:7a:2d:8c:1c:6d:c3:a3:1a:0c:dd:66:
                    eb:3f:b9:ae:f6:f3:ea:07:50:71:13:57:13:69:21:
                    a8:b0:86:29:2b:54:db:b1:1b:c6:9a:e0:b0:58:e3:
                    80:35:51:0c:12:d2:be:18:9f:e5:e1:f4:ba:5d:73:
                    00:12:90:f4:ad:94:f2:4a:e4:11:3b:3d:51:bf:4b:
                    64:8e:ca:e4:b0:71:86:f7:7b:44:8b:1d:05:46:40:
                    9f:77:37:c6:b5:bd:fd:77:51:13:cb:07:b4:d7:a0:
                    0c:66:2c:12:85:9b:92:65:0d:90:bc:b5:ea:88:f9:
                    f1:2d:c5:f7:30:12:ab:6e:19:19:a2:88:e7:c5:50:
                    fa:e9:42:13:3c:8b:bd:00:7a:67:3a:f5:4a:b4:49:
                    ef:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:23:EC:66:9F:40:1E:C9:1B:14:B4:B2:AF:81:39:7A:1B:92:C8:57
            X509v3 Authority Key Identifier:
                keyid:3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c8:a9:92:ac:55:30:96:0b:70:9c:ba:52:cf:11:99:2d:a1:
         4b:fb:5b:22:9c:71:52:60:97:dc:05:3f:a4:9f:7b:e0:8e:8b:
         4f:84:f8:c8:bb:6b:5a:c1:84:bc:e2:ad:59:2d:f0:ac:17:1b:
         fc:f5:82:89:7b:ea:50:03:da:3a:80:c3:d4:61:1f:c8:4e:13:
         8c:6f:57:46:60:61:d7:5c:45:64:9f:e3:f1:09:23:0f:ee:a0:
         db:da:79:6b:99:af:6d:c0:bc:18:4f:b1:ab:1e:9f:7b:d1:c9:
         40:e3:a6:f3:0c:e1:c9:a7:3b:c8:87:73:20:00:80:cc:6e:cf:
         af:6c:e6:8d:29:0e:4b:8e:31:2e:9b:9e:3d:ad:d9:50:b4:09:
         ca:6b:7d:65:d2:a7:cd:23:35:74:d1:8f:93:a7:06:ee:79:06:
         0f:a3:75:19:18:98:f1:b4:5d:89:6a:fe:54:1c:83:1d:5b:f0:
         7a:53:4b:a3:08:04:ae:dd:34:8b:12:03:b1:e8:9b:34:f1:1c:
         65:12:79:15:22:e2:8f:a4:6e:9c:be:13:e2:1e:71:d9:97:6a:
         64:cc:48:5d:3a:23:b5:93:b0:3b:5e:08:f3:b1:8e:ad:20:45:
         0a:20:33:f9:34:6a:84:ca:22:f7:9e:8b:59:04:bf:c4:d2:68:
         19:1e:4e:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9OqeTW854fNJkU5JejDTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZTI2ODFkZGEwMDcwMmE3NTk3YTcxMjU3ZTE0ZjdhNzI1
ZTg5MGUwHhcNMjYwNDE3MDEwMTIwWhcNMjYwNDE4MDEwMTIwWjAzMTEwLwYDVQQD
EyhjZTIzZWM2NjlmNDAxZWM5MWIxNGI0YjJhZjgxMzk3YTFiOTJjODU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq0OPhOQ5Ro6nmVvC+2YvxVOHErW
ocdBIftefLzg1eNdFFo1mwcs1goWPxkgsAnksh5f4Piw52pnEtnhlVAnfc++yIuk
lVpJYdXujIXTEoE++2UZTetWEo4ENS/QNxbkWMOld4xf9bP+UAh5ei2MHG3DoxoM
3WbrP7mu9vPqB1BxE1cTaSGosIYpK1TbsRvGmuCwWOOANVEMEtK+GJ/l4fS6XXMA
EpD0rZTySuQROz1Rv0tkjsrksHGG93tEix0FRkCfdzfGtb39d1ETywe016AMZiwS
hZuSZQ2QvLXqiPnxLcX3MBKrbhkZoojnxVD66UITPIu9AHpnOvVKtEnvcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4j7GafQB7JGxS0sq+BOXobkshXMB8GA1UdIwQY
MBaAFD3iaB3aAHAqdZenElfhT3pyXokOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGVKb0hkb0FjQ3AxbDZjU1YtRlBlbkplaVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zNmQ2ZTQtOGQ3Ny00OGQ1LWFmYjYt
ZTBhYzcyNjNkYjEyLzEvUGVKb0hkb0FjQ3AxbDZjU1YtRlBlbkplaVE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8zNmQ2ZTQtOGQ3Ny00OGQ1LWFmYjYtZTBhYzcyNjNkYjEy
LzEvUGVKb0hkb0FjQ3AxbDZjU1YtRlBlbkplaVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcipkqxV
MJYLcJy6Us8RmS2hS/tbIpxxUmCX3AU/pJ974I6LT4T4yLtrWsGEvOKtWS3wrBcb
/PWCiXvqUAPaOoDD1GEfyE4TjG9XRmBh11xFZJ/j8QkjD+6g29p5a5mvbcC8GE+x
qx6fe9HJQOOm8wzhyac7yIdzIACAzG7Pr2zmjSkOS44xLpuePa3ZULQJymt9ZdKn
zSM1dNGPk6cG7nkGD6N1GRiY8bRdiWr+VByDHVvwelNLowgErt00ixIDseibNPEc
ZRJ5FSLij6RunL4T4h5x2ZdqZMxIXTojtZOwO14I87GOrSBFCiAz+TRqhMoi956L
WQS/xNJoGR5ObA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:33 2026 by rpki-client