Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
File:                     _KXnwS9jZpo_aAySaEpD-ohO0Uw.mft (raw, json)
Hash identifier:          zLLMCblRBXMj2MCGfE0sGNbjmN+5HqKB74uigbH94AU=
Subject key identifier:   76:42:08:48:1E:54:E8:EF:8F:97:20:47:52:11:AF:C7:73:4A:44:C9
Authority key identifier: FC:A5:E7:C1:2F:63:66:9A:3F:68:0C:92:68:4A:43:FA:88:4E:D1:4C
Certificate issuer:       /CN=fca5e7c12f63669a3f680c92684a43fa884ed14c
Certificate serial:       019D99623BA54FB9DF2FF1FC11CF5E4463F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
Manifest number:          17C3
Signing time:             Fri 17 Apr 2026 03:00:44 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:44 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:44 +0000
Files and hashes:         1: _KXnwS9jZpo_aAySaEpD-ohO0Uw.crl (hash: QSfCoMAXiA969+QAKEQgNwc7pzG0ShFr16Hn852/uVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:3b:a5:4f:b9:df:2f:f1:fc:11:cf:5e:44:63:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fca5e7c12f63669a3f680c92684a43fa884ed14c
        Validity
            Not Before: Apr 17 03:00:44 2026 GMT
            Not After : Apr 18 03:00:44 2026 GMT
        Subject: CN=764208481e54e8ef8f9720475211afc7734a44c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ab:21:42:0b:ba:1b:4a:c4:78:f8:31:32:7c:
                    af:f5:74:85:5e:a0:77:13:fe:22:ed:16:98:a5:4a:
                    ac:16:2b:68:40:3c:33:33:a6:0b:70:ff:ee:c7:23:
                    7d:90:a0:6e:0b:6e:95:33:ad:a7:0d:9c:c6:8c:53:
                    72:81:08:9c:50:e1:87:93:aa:e0:05:99:f3:9f:6f:
                    6a:48:ce:83:0d:e6:f0:96:b9:4d:6b:df:5a:57:f7:
                    f1:c9:c1:ad:ec:8b:71:ba:19:d7:e2:6d:48:b8:b5:
                    c5:19:cf:02:0b:01:2b:e2:7f:8f:91:86:54:48:92:
                    37:59:65:6e:39:2d:7a:03:40:1c:30:01:9f:a0:cd:
                    cb:20:7c:1f:6c:32:eb:9e:3e:64:ca:9d:b5:0d:4c:
                    5d:21:ed:a4:79:8d:b7:4d:27:04:9f:ca:1f:4b:60:
                    38:41:66:ba:34:2c:01:9f:2c:73:c7:76:4e:40:70:
                    f3:4a:28:43:74:1d:99:92:d6:ff:70:bb:71:68:86:
                    96:9d:7c:24:74:f3:15:9f:2c:9d:93:76:3d:51:f5:
                    a0:ce:77:3a:61:88:f1:fa:ea:4f:36:c8:f2:90:35:
                    c3:ec:3f:89:ba:8b:fb:a3:32:58:76:2f:e0:bd:ac:
                    9f:94:43:0a:7f:af:13:24:70:47:f9:89:08:01:24:
                    4d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:42:08:48:1E:54:E8:EF:8F:97:20:47:52:11:AF:C7:73:4A:44:C9
            X509v3 Authority Key Identifier:
                keyid:FC:A5:E7:C1:2F:63:66:9A:3F:68:0C:92:68:4A:43:FA:88:4E:D1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:53:7b:39:b0:a4:f7:ed:ef:28:13:d6:24:31:c9:a0:ac:5c:
         1a:55:cd:c7:ed:cb:0d:61:df:bd:c3:95:9f:44:65:6d:14:c9:
         06:85:e6:29:b1:e4:41:9c:d7:ef:0c:7a:2a:86:9a:5e:3f:d7:
         f1:d2:a0:32:7f:ad:69:5f:e3:88:46:a0:94:c4:a6:bb:1a:4a:
         5e:e1:e0:1f:c7:f7:17:94:ea:3e:af:f1:b0:79:2c:60:cb:dd:
         59:d4:c3:68:87:2c:e7:58:92:40:5e:0a:cb:88:10:dc:0c:e1:
         74:88:5b:33:b0:3c:5b:06:1b:2d:5f:41:d8:ed:40:8e:e7:9d:
         76:27:a7:a5:a1:f7:32:60:55:cb:ff:05:4d:4a:75:a3:db:0e:
         de:14:e5:3a:9b:ad:d9:2c:32:21:1c:81:41:d2:22:ce:05:4b:
         79:6a:66:f4:f6:88:56:01:ab:ee:15:7d:33:27:9b:cf:e1:26:
         05:2e:c1:d9:4a:e1:bd:00:c8:7c:4d:39:d3:1d:1b:c1:d4:20:
         7f:b6:c9:44:f5:33:ed:54:f1:6c:db:27:07:d2:e6:32:da:54:
         f9:b9:a4:03:27:f5:13:c8:5f:ef:1b:a8:e7:cf:85:e6:bb:75:
         e9:51:cd:fe:42:15:2e:7f:64:e8:c1:2e:17:4b:b8:ae:52:c3:
         87:19:aa:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYjulT7nfL/H8Ec9eRGP2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYTVlN2MxMmY2MzY2OWEzZjY4MGM5MjY4NGE0M2ZhODg0
ZWQxNGMwHhcNMjYwNDE3MDMwMDQ0WhcNMjYwNDE4MDMwMDQ0WjAzMTEwLwYDVQQD
Eyg3NjQyMDg0ODFlNTRlOGVmOGY5NzIwNDc1MjExYWZjNzczNGE0NGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KshQgu6G0rEePgxMnyv9XSFXqB3
E/4i7RaYpUqsFitoQDwzM6YLcP/uxyN9kKBuC26VM62nDZzGjFNygQicUOGHk6rg
BZnzn29qSM6DDebwlrlNa99aV/fxycGt7ItxuhnX4m1IuLXFGc8CCwEr4n+PkYZU
SJI3WWVuOS16A0AcMAGfoM3LIHwfbDLrnj5kyp21DUxdIe2keY23TScEn8ofS2A4
QWa6NCwBnyxzx3ZOQHDzSihDdB2Zktb/cLtxaIaWnXwkdPMVnyydk3Y9UfWgznc6
YYjx+upPNsjykDXD7D+Juov7ozJYdi/gvayflEMKf68TJHBH+YkIASRNpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZCCEgeVOjvj5cgR1IRr8dzSkTJMB8GA1UdIwQY
MBaAFPyl58EvY2aaP2gMkmhKQ/qITtFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0tYbndTOWpacG9fYUF5U2FFcEQtb2hPMFV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC82OWRhMTItYmY0Zi00NzU1LTg3YWUt
NWU5NGYwNDgyYTFkLzEvX0tYbndTOWpacG9fYUF5U2FFcEQtb2hPMFV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC82OWRhMTItYmY0Zi00NzU1LTg3YWUtNWU5NGYwNDgyYTFk
LzEvX0tYbndTOWpacG9fYUF5U2FFcEQtb2hPMFV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFN7ObCk
9+3vKBPWJDHJoKxcGlXNx+3LDWHfvcOVn0RlbRTJBoXmKbHkQZzX7wx6KoaaXj/X
8dKgMn+taV/jiEaglMSmuxpKXuHgH8f3F5TqPq/xsHksYMvdWdTDaIcs51iSQF4K
y4gQ3AzhdIhbM7A8WwYbLV9B2O1AjueddienpaH3MmBVy/8FTUp1o9sO3hTlOput
2SwyIRyBQdIizgVLeWpm9PaIVgGr7hV9Myebz+EmBS7B2UrhvQDIfE050x0bwdQg
f7bJRPUz7VTxbNsnB9LmMtpU+bmkAyf1E8hf7xuo58+F5rt16VHN/kIVLn9k6MEu
F0u4rlLDhxmqvA==
-----END CERTIFICATE-----