Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
File:                     J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft (raw, json)
Hash identifier:          T9bZhSfjUqsezNJ3CVztYrtT+mIGlfMJazGxQHnjdkw=
Subject key identifier:   57:D6:87:A3:3F:90:4A:2E:C6:4E:C6:99:DA:C7:AF:90:EC:58:E7:9D
Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
Certificate issuer:       /CN=279159ef22f82b936731664ee67c3b6ea96ef443
Certificate serial:       019D9818BD22218F1AB8016827B9B2EB4F18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
Manifest number:          13E3
Signing time:             Thu 16 Apr 2026 21:00:51 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:51 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:51 +0000
Files and hashes:         1: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl (hash: 1zzp5PYhxX8PorMu+fhQ9oWRii6yk9cZ6VTFLxcuims=)
                          2: hWkmko9vUlZH-VtlGHJ4hUuAaoY.roa (hash: WFu8HTGZdnXJYLpBmsk/WG3sNIIitKWRuo38WyAjDOU=)
                          3: rHfKeO-9l9W24wGxoHPVca3O4oc.roa (hash: DOnDxDR60+CHvKP7QQ/+3OYee8LrWlLSO/yOlx6md0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:bd:22:21:8f:1a:b8:01:68:27:b9:b2:eb:4f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443
        Validity
            Not Before: Apr 16 21:00:51 2026 GMT
            Not After : Apr 17 21:00:51 2026 GMT
        Subject: CN=57d687a33f904a2ec64ec699dac7af90ec58e79d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:87:ab:12:d7:85:43:88:1b:b4:cd:2c:7e:20:
                    c1:da:5c:3c:c7:b2:50:8a:b3:26:31:f3:27:33:70:
                    68:7d:c2:76:71:32:92:c1:54:26:79:40:5f:39:01:
                    84:05:47:51:c3:62:30:5d:22:bf:7b:08:29:bd:b8:
                    2c:0e:4c:51:4f:72:4c:c1:bd:cf:ae:38:f6:b7:b4:
                    c3:ce:6c:42:5b:c7:84:85:63:72:69:20:fb:ce:4c:
                    e0:31:41:eb:b3:88:9a:18:3e:98:e2:f5:31:9a:75:
                    51:5e:c2:8f:33:68:f9:f7:8b:03:07:8f:23:45:b8:
                    f6:2e:49:23:54:dc:ab:d2:ed:29:d3:9e:93:64:5e:
                    fe:82:be:ea:97:de:c7:2c:0e:0d:f3:97:53:ef:03:
                    38:9d:2b:62:30:3d:7e:bd:f7:eb:d8:cb:57:0d:ba:
                    5a:87:97:ce:fc:63:f0:c0:f4:66:6a:c9:82:6b:f6:
                    fd:35:d8:a6:1e:0e:c7:e2:78:37:3b:72:ce:68:55:
                    92:c6:4f:aa:1a:ce:d6:0c:4e:3f:16:c8:e9:25:7f:
                    2c:df:30:5f:59:30:62:28:17:88:f7:1f:ca:18:13:
                    22:e7:90:a3:e7:76:1e:0d:d0:b0:80:f4:64:3c:3f:
                    ce:e1:e6:c7:d6:e2:f6:0c:c9:ee:37:54:0c:9c:f1:
                    af:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D6:87:A3:3F:90:4A:2E:C6:4E:C6:99:DA:C7:AF:90:EC:58:E7:9D
            X509v3 Authority Key Identifier:
                keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:0c:44:b3:3b:12:90:7a:a6:c1:0a:93:ab:61:07:72:8d:99:
         01:6b:b6:86:87:26:7c:37:8a:14:d6:44:e0:73:e5:a9:07:02:
         cb:0c:34:7f:c3:ea:16:df:e9:94:f2:3e:04:74:d4:f0:e2:ff:
         9e:b2:f7:07:1d:6e:9e:d0:6f:25:e0:b7:f3:86:52:a0:5c:16:
         ec:c2:d6:57:a8:5d:ff:41:53:e4:1a:0a:31:47:13:74:93:f3:
         55:a0:a4:90:04:d4:6d:d8:b5:e4:1d:00:fa:34:ec:f0:83:1f:
         73:5c:e7:b2:18:2b:d8:e7:4b:d8:f7:e1:b5:b6:c7:b0:36:92:
         91:4c:1f:18:a4:c9:ac:15:94:3d:67:10:5e:de:fe:2a:5f:8d:
         50:1b:87:71:61:d6:ac:18:55:50:30:b0:26:b0:40:5c:8f:e8:
         44:2f:f9:e1:3c:9f:ec:67:1e:5e:b7:87:c3:d4:32:28:3a:24:
         01:27:b5:06:93:4d:e2:dc:72:c0:2b:94:65:cb:1d:44:34:c4:
         5f:b5:d7:83:c2:9f:38:bc:1e:30:88:e0:cf:f0:f7:bf:dd:5f:
         8d:93:d4:d7:ec:91:2d:00:d8:b4:d9:a1:48:7a:f4:a3:b3:0c:
         ec:40:1e:87:8e:8f:ca:61:8e:8c:d4:f6:65:73:ea:b4:fa:4b:
         d4:8c:06:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGL0iIY8auAFoJ7my608YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OTE1OWVmMjJmODJiOTM2NzMxNjY0ZWU2N2MzYjZlYTk2
ZWY0NDMwHhcNMjYwNDE2MjEwMDUxWhcNMjYwNDE3MjEwMDUxWjAzMTEwLwYDVQQD
Eyg1N2Q2ODdhMzNmOTA0YTJlYzY0ZWM2OTlkYWM3YWY5MGVjNThlNzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYerEteFQ4gbtM0sfiDB2lw8x7JQ
irMmMfMnM3BofcJ2cTKSwVQmeUBfOQGEBUdRw2IwXSK/ewgpvbgsDkxRT3JMwb3P
rjj2t7TDzmxCW8eEhWNyaSD7zkzgMUHrs4iaGD6Y4vUxmnVRXsKPM2j594sDB48j
Rbj2LkkjVNyr0u0p056TZF7+gr7ql97HLA4N85dT7wM4nStiMD1+vffr2MtXDbpa
h5fO/GPwwPRmasmCa/b9NdimHg7H4ng3O3LOaFWSxk+qGs7WDE4/FsjpJX8s3zBf
WTBiKBeI9x/KGBMi55Cj53YeDdCwgPRkPD/O4ebH1uL2DMnuN1QMnPGv7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfWh6M/kEouxk7GmdrHr5DsWOedMB8GA1UdIwQY
MBaAFCeRWe8i+CuTZzFmTuZ8O26pbvRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS81YzE1YmUtYWVmMi00YzMxLWJmYjQt
MzFiYWY2ZWVkZThhLzEvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS81YzE1YmUtYWVmMi00YzMxLWJmYjQtMzFiYWY2ZWVkZThh
LzEvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALAxEszsS
kHqmwQqTq2EHco2ZAWu2hocmfDeKFNZE4HPlqQcCyww0f8PqFt/plPI+BHTU8OL/
nrL3Bx1untBvJeC384ZSoFwW7MLWV6hd/0FT5BoKMUcTdJPzVaCkkATUbdi15B0A
+jTs8IMfc1znshgr2OdL2PfhtbbHsDaSkUwfGKTJrBWUPWcQXt7+Kl+NUBuHcWHW
rBhVUDCwJrBAXI/oRC/54Tyf7GceXreHw9QyKDokASe1BpNN4txywCuUZcsdRDTE
X7XXg8KfOLweMIjgz/D3v91fjZPU1+yRLQDYtNmhSHr0o7MM7EAeh46PymGOjNT2
ZXPqtPpL1IwGGg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:57 2026 by rpki-client