Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
File:                     R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft (raw, json)
Hash identifier:          vtk69F/Ge1BeDvlA1jvg+UVWXoH6yw1Nebi+e71ydto=
Subject key identifier:   3A:7E:6A:0D:8C:BE:4D:95:58:73:95:5B:6C:F8:C8:D4:DA:DE:EA:55
Authority key identifier: 47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11
Certificate issuer:       /CN=474a63d4fe10a346b812fbf359c9b33778cd4311
Certificate serial:       019D9BF533BADF2CF3CD1FB272595E71D2DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
Manifest number:          057E
Signing time:             Fri 17 Apr 2026 15:00:31 +0000
Manifest this update:     Fri 17 Apr 2026 15:00:31 +0000
Manifest next update:     Sat 18 Apr 2026 15:00:31 +0000
Files and hashes:         1: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl (hash: pfuihvzfucL7GzGCkFLvFn5CnpSglbw9c3riBT3TH0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:33:ba:df:2c:f3:cd:1f:b2:72:59:5e:71:d2:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474a63d4fe10a346b812fbf359c9b33778cd4311
        Validity
            Not Before: Apr 17 15:00:31 2026 GMT
            Not After : Apr 18 15:00:31 2026 GMT
        Subject: CN=3a7e6a0d8cbe4d955873955b6cf8c8d4dadeea55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:21:41:b0:d4:54:9a:73:29:7d:a5:f2:0a:75:
                    23:64:2a:b6:6d:9a:85:78:a1:41:97:1a:9b:b7:88:
                    fa:67:52:02:fd:da:30:14:4e:e6:71:38:c2:13:35:
                    3a:5d:b2:9a:3b:c1:c0:86:b9:b9:d2:2c:b9:62:c8:
                    62:b8:54:88:95:bc:c6:cb:c1:3e:02:d1:6c:9b:6c:
                    5d:cd:d1:d3:2f:4e:d1:88:59:3c:b5:0e:8a:e0:ec:
                    bf:1d:0c:7a:a3:a7:83:e6:94:74:06:b8:09:f1:92:
                    84:74:5c:ed:aa:18:36:f5:bd:6f:27:ed:b2:50:25:
                    c3:e2:cc:08:4d:16:2b:20:a0:44:ba:93:d0:45:1a:
                    da:1b:94:48:5e:b8:86:ce:e8:33:1a:38:fa:58:09:
                    78:ca:66:79:57:c5:80:04:80:11:a3:89:0d:db:68:
                    63:1c:14:e7:76:e2:47:b2:a9:27:23:7b:d4:10:80:
                    d9:54:b4:a3:d6:01:b1:a9:10:35:89:68:9d:cd:0d:
                    b6:a4:4f:ce:df:41:43:15:58:90:9e:28:38:a1:9c:
                    d6:81:91:89:2a:5b:fc:ed:33:b4:e9:cf:f0:5f:fb:
                    3c:e2:1b:76:66:3a:b2:2f:9f:19:43:48:ba:5d:89:
                    e9:82:1c:43:c5:4d:21:5f:49:74:95:17:3f:bf:8f:
                    5a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7E:6A:0D:8C:BE:4D:95:58:73:95:5B:6C:F8:C8:D4:DA:DE:EA:55
            X509v3 Authority Key Identifier:
                keyid:47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:0c:79:81:0c:31:b1:ad:78:9c:cd:84:9b:2a:cb:c2:9b:39:
         65:36:f2:b9:29:78:6a:de:f4:94:2e:0f:2b:13:89:07:49:28:
         0c:57:1c:6b:5a:0e:77:db:67:08:92:16:a7:24:30:be:3d:3f:
         14:5f:6d:e5:0c:06:8d:62:95:df:9e:73:1f:16:42:d1:ca:58:
         0a:f1:c7:f5:b7:4b:27:94:35:01:a2:29:78:29:ed:09:a0:78:
         8b:23:ae:f3:1e:7c:52:e6:b1:ab:c8:43:53:92:b4:05:6d:fb:
         6b:c3:c3:02:d4:41:46:68:3b:c3:85:2e:f3:f3:97:46:71:ca:
         7d:81:64:7f:4f:c7:05:ff:63:03:c2:4e:87:66:fe:31:f1:9e:
         2c:a6:60:8b:6b:4a:20:af:93:a8:ed:14:bd:bf:44:4f:08:ab:
         31:23:6a:aa:af:cb:7d:dc:3f:4e:b2:96:56:5a:0a:a1:12:71:
         21:bf:fd:3b:29:72:dd:73:5d:8b:a7:df:94:1f:cc:34:01:47:
         56:38:af:e4:61:47:1d:4c:60:ca:c0:ff:12:2f:c2:10:40:4a:
         62:00:30:9b:9c:39:20:c9:e6:d1:73:6b:12:6c:a1:52:6f:c4:
         85:24:c5:72:82:fc:c1:7d:f9:aa:1d:fb:61:64:7a:fb:eb:31:
         4c:44:01:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9TO63yzzzR+ycllecdLeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NGE2M2Q0ZmUxMGEzNDZiODEyZmJmMzU5YzliMzM3Nzhj
ZDQzMTEwHhcNMjYwNDE3MTUwMDMxWhcNMjYwNDE4MTUwMDMxWjAzMTEwLwYDVQQD
EygzYTdlNmEwZDhjYmU0ZDk1NTg3Mzk1NWI2Y2Y4YzhkNGRhZGVlYTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yFBsNRUmnMpfaXyCnUjZCq2bZqF
eKFBlxqbt4j6Z1IC/dowFE7mcTjCEzU6XbKaO8HAhrm50iy5YshiuFSIlbzGy8E+
AtFsm2xdzdHTL07RiFk8tQ6K4Oy/HQx6o6eD5pR0BrgJ8ZKEdFztqhg29b1vJ+2y
UCXD4swITRYrIKBEupPQRRraG5RIXriGzugzGjj6WAl4ymZ5V8WABIARo4kN22hj
HBTnduJHsqknI3vUEIDZVLSj1gGxqRA1iWidzQ22pE/O30FDFViQnig4oZzWgZGJ
Klv87TO06c/wX/s84ht2ZjqyL58ZQ0i6XYnpghxDxU0hX0l0lRc/v49aEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDp+ag2Mvk2VWHOVW2z4yNTa3upVMB8GA1UdIwQY
MBaAFEdKY9T+EKNGuBL781nJszd4zUMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjBwajFQNFFvMGE0RXZ2eldjbXpOM2pOUXhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84ZjNjMmYtYzE4NS00YWQ4LTkxODEt
N2I3ZmM3YWFiMTQ0LzEvUjBwajFQNFFvMGE0RXZ2eldjbXpOM2pOUXhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi84ZjNjMmYtYzE4NS00YWQ4LTkxODEtN2I3ZmM3YWFiMTQ0
LzEvUjBwajFQNFFvMGE0RXZ2eldjbXpOM2pOUXhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANwx5gQwx
sa14nM2EmyrLwps5ZTbyuSl4at70lC4PKxOJB0koDFcca1oOd9tnCJIWpyQwvj0/
FF9t5QwGjWKV355zHxZC0cpYCvHH9bdLJ5Q1AaIpeCntCaB4iyOu8x58Uuaxq8hD
U5K0BW37a8PDAtRBRmg7w4Uu8/OXRnHKfYFkf0/HBf9jA8JOh2b+MfGeLKZgi2tK
IK+TqO0Uvb9ETwirMSNqqq/Lfdw/TrKWVloKoRJxIb/9Oyly3XNdi6fflB/MNAFH
Vjiv5GFHHUxgysD/Ei/CEEBKYgAwm5w5IMnm0XNrEmyhUm/EhSTFcoL8wX35qh37
YWR6++sxTEQB7Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:39:53 2026 by rpki-client