Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
File:                     Mn2iLLkBOLBQg37c8ew2pauMQqw.mft (raw, json)
Hash identifier:          B3y+nCTpr48nxVqv2IH5LolTnP17S6z3ro55rYHriQM=
Subject key identifier:   51:4B:D5:08:C0:1C:86:A6:B1:58:6B:2F:51:45:60:27:53:24:41:27
Authority key identifier: 32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC
Certificate issuer:       /CN=327da22cb90138b050837edcf1ec36a5ab8c42ac
Certificate serial:       019D9999B3945F136B8AF81F784CEC0636DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
Manifest number:          1521
Signing time:             Fri 17 Apr 2026 04:01:20 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:20 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:20 +0000
Files and hashes:         1: Mn2iLLkBOLBQg37c8ew2pauMQqw.crl (hash: eQFd9N1ewG7BIOzaj7g/9XZb3yGxiogGeE/uj6FXtLk=)
                          2: a_L8u_9OUTVsQn035qkg5zotc6w.roa (hash: i3QS2JwoyFZ8oKKUfbp9cckYFMGKSBc22cz4ktopp/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:b3:94:5f:13:6b:8a:f8:1f:78:4c:ec:06:36:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=327da22cb90138b050837edcf1ec36a5ab8c42ac
        Validity
            Not Before: Apr 17 04:01:20 2026 GMT
            Not After : Apr 18 04:01:20 2026 GMT
        Subject: CN=514bd508c01c86a6b1586b2f5145602753244127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:82:1d:be:ca:2c:cf:55:e8:a9:6b:50:6b:67:
                    39:b6:19:53:f8:94:e9:f9:fb:be:05:ef:dc:20:59:
                    0c:47:02:58:05:f1:3c:7a:5f:f9:d8:6b:ff:ce:34:
                    d6:77:ed:fb:10:da:4b:49:72:e4:60:71:7f:2d:4f:
                    70:58:e1:8a:81:53:bb:62:fc:9d:8a:c2:47:7a:19:
                    4a:60:c1:fe:d5:4a:c8:d2:ea:8d:33:f0:67:f7:c7:
                    8c:bb:8d:43:c2:49:47:a7:80:9d:3e:b2:aa:ce:03:
                    a7:7a:98:d0:f0:2a:7a:2f:80:2c:e0:3b:28:41:9c:
                    f9:cb:34:c0:20:8b:3f:e8:3e:a1:45:bb:6e:8e:88:
                    67:09:0d:fd:65:07:0c:20:62:c3:b3:26:8e:43:54:
                    0c:9c:bd:d8:8b:bb:a7:dc:fc:e5:7e:8d:93:69:11:
                    4c:f4:e2:d1:e0:d3:ae:62:e5:36:0b:24:ef:32:bc:
                    dc:f7:2d:cc:64:ec:7f:e3:72:e1:da:46:27:bd:22:
                    e8:57:38:98:6f:39:1b:5d:5c:8e:70:9c:41:59:cf:
                    84:37:48:cc:82:bf:00:2a:ed:0c:79:f2:35:d9:12:
                    1a:ac:c4:1f:23:73:18:6a:77:d6:15:5e:dd:ba:fc:
                    da:7d:cf:72:7a:e5:69:3e:a8:47:4f:91:f5:cd:29:
                    d4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4B:D5:08:C0:1C:86:A6:B1:58:6B:2F:51:45:60:27:53:24:41:27
            X509v3 Authority Key Identifier:
                keyid:32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:15:05:fe:d1:c9:45:ae:6a:d9:21:37:58:a9:8f:86:a2:78:
         f3:50:5a:f9:01:42:82:06:f3:34:cc:1f:49:39:54:84:27:65:
         dc:7d:12:99:a5:aa:53:80:e4:a5:91:a2:be:aa:70:05:fa:27:
         0a:31:a9:e9:2e:77:91:19:9b:fb:e4:52:d2:a4:04:d6:a1:e5:
         2c:9c:c6:81:ee:70:cd:95:9d:74:9d:4f:dc:9d:76:e8:e4:11:
         1f:61:4a:ac:11:68:e5:d0:3c:25:e1:5e:4f:e9:0c:4d:33:21:
         b6:76:bd:88:f2:e8:02:60:db:62:b7:6f:3b:ab:ad:0c:37:12:
         56:72:a4:f9:0d:8c:32:28:ca:28:f1:5b:97:6e:0c:c5:14:96:
         1d:13:49:2b:1a:46:62:d7:5a:5e:05:30:0f:15:d3:53:e6:0c:
         c5:63:c8:cb:09:39:a1:ec:3c:49:57:a0:be:dc:e7:3e:c8:10:
         c2:c4:08:de:a1:0a:a9:54:c3:a1:1f:c4:23:ed:4e:6c:6a:c4:
         75:0f:09:7e:9f:a3:92:14:82:22:f5:42:95:0b:f3:b6:b0:08:
         04:3c:bd:8b:33:94:25:0f:73:ee:61:26:17:20:0e:91:ae:c0:
         7d:79:81:13:14:03:49:0a:c0:83:21:5c:4d:26:23:5f:63:fa:
         80:c8:09:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmbOUXxNrivgfeEzsBjbeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyN2RhMjJjYjkwMTM4YjA1MDgzN2VkY2YxZWMzNmE1YWI4
YzQyYWMwHhcNMjYwNDE3MDQwMTIwWhcNMjYwNDE4MDQwMTIwWjAzMTEwLwYDVQQD
Eyg1MTRiZDUwOGMwMWM4NmE2YjE1ODZiMmY1MTQ1NjAyNzUzMjQ0MTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44Idvsosz1XoqWtQa2c5thlT+JTp
+fu+Be/cIFkMRwJYBfE8el/52Gv/zjTWd+37ENpLSXLkYHF/LU9wWOGKgVO7Yvyd
isJHehlKYMH+1UrI0uqNM/Bn98eMu41DwklHp4CdPrKqzgOnepjQ8Cp6L4As4Dso
QZz5yzTAIIs/6D6hRbtujohnCQ39ZQcMIGLDsyaOQ1QMnL3Yi7un3Pzlfo2TaRFM
9OLR4NOuYuU2CyTvMrzc9y3MZOx/43Lh2kYnvSLoVziYbzkbXVyOcJxBWc+EN0jM
gr8AKu0MefI12RIarMQfI3MYanfWFV7duvzafc9yeuVpPqhHT5H1zSnUZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFL1QjAHIamsVhrL1FFYCdTJEEnMB8GA1UdIwQY
MBaAFDJ9oiy5ATiwUIN+3PHsNqWrjEKsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW4yaUxMa0JPTEJRZzM3YzhldzJwYXVNUXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC83MDA4ZmMtYWNjNC00ZWY1LThmYjkt
OTA3OTVmYjM5MjhjLzEvTW4yaUxMa0JPTEJRZzM3YzhldzJwYXVNUXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC83MDA4ZmMtYWNjNC00ZWY1LThmYjktOTA3OTVmYjM5Mjhj
LzEvTW4yaUxMa0JPTEJRZzM3YzhldzJwYXVNUXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRUF/tHJ
Ra5q2SE3WKmPhqJ481Ba+QFCggbzNMwfSTlUhCdl3H0SmaWqU4DkpZGivqpwBfon
CjGp6S53kRmb++RS0qQE1qHlLJzGge5wzZWddJ1P3J126OQRH2FKrBFo5dA8JeFe
T+kMTTMhtna9iPLoAmDbYrdvO6utDDcSVnKk+Q2MMijKKPFbl24MxRSWHRNJKxpG
YtdaXgUwDxXTU+YMxWPIywk5oew8SVegvtznPsgQwsQI3qEKqVTDoR/EI+1ObGrE
dQ8Jfp+jkhSCIvVClQvztrAIBDy9izOUJQ9z7mEmFyAOka7AfXmBExQDSQrAgyFc
TSYjX2P6gMgJNg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:09 2026 by rpki-client