Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/58a4e1-dfc1-4d81-b2c6-216597e03f11/1/MXBn6Bphoh_cFIWY72ull1f6A4A.mft
File:                     MXBn6Bphoh_cFIWY72ull1f6A4A.mft (raw, json)
Hash identifier:          mEe3STLb5Cm4+5OCTxz8beIpC6y5wS277Z8KHJQd17g=
Subject key identifier:   16:9B:64:A6:CB:AA:AC:30:F2:30:40:60:2F:AB:C2:89:5B:5F:C9:41
Authority key identifier: 31:70:67:E8:1A:61:A2:1F:DC:14:85:98:EF:6B:A5:97:57:FA:03:80
Certificate issuer:       /CN=317067e81a61a21fdc148598ef6ba59757fa0380
Certificate serial:       019D99D0166DD0FBA380997257DDB1C6B511
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MXBn6Bphoh_cFIWY72ull1f6A4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/58a4e1-dfc1-4d81-b2c6-216597e03f11/1/MXBn6Bphoh_cFIWY72ull1f6A4A.mft
Manifest number:          0B49
Signing time:             Fri 17 Apr 2026 05:00:44 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:44 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:44 +0000
Files and hashes:         1: BbwIiJ0dE-v7C232paq9FAoO3W4.roa (hash: WYFi/4LJa1Z0T8GMuSQAQGpR48GKoJ2nZUJN8YeKMtE=)
                          2: MXBn6Bphoh_cFIWY72ull1f6A4A.crl (hash: 5YsX5k7O5HruWlzD+W6r39p/r9FfGPBILC/JOBNyHqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/58a4e1-dfc1-4d81-b2c6-216597e03f11/1/MXBn6Bphoh_cFIWY72ull1f6A4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/58a4e1-dfc1-4d81-b2c6-216597e03f11/1/MXBn6Bphoh_cFIWY72ull1f6A4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MXBn6Bphoh_cFIWY72ull1f6A4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:16:6d:d0:fb:a3:80:99:72:57:dd:b1:c6:b5:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317067e81a61a21fdc148598ef6ba59757fa0380
        Validity
            Not Before: Apr 17 05:00:44 2026 GMT
            Not After : Apr 18 05:00:44 2026 GMT
        Subject: CN=169b64a6cbaaac30f23040602fabc2895b5fc941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4c:22:6d:94:1f:4b:21:2b:c0:2b:c8:0b:51:
                    3c:ed:27:c6:e2:77:f8:d3:a6:98:f7:f1:ea:2d:81:
                    3e:b0:f4:9c:ea:29:b6:33:62:8d:85:56:1f:50:15:
                    fb:15:f7:2f:0c:48:d0:3e:4f:d4:82:9f:d4:46:42:
                    e8:5a:3e:98:3a:55:43:79:c5:e7:d8:d7:2a:9e:29:
                    3c:3a:53:f1:8b:72:3d:58:36:db:2a:4c:be:e6:36:
                    bd:0f:27:63:01:b3:ad:c5:aa:78:07:80:05:6f:df:
                    29:69:f5:3b:d1:83:3e:b1:c1:70:2b:18:07:80:f8:
                    56:bb:e9:d2:e1:02:3c:11:89:f3:5f:34:f4:6b:ce:
                    2e:04:7e:24:99:72:10:96:3d:49:f4:41:cf:7c:5d:
                    7a:00:db:cc:79:3e:dd:39:0c:d4:30:f8:a9:13:08:
                    73:03:22:61:fe:35:41:13:c2:02:da:12:a9:92:4f:
                    29:92:41:76:6a:db:af:20:95:e8:d3:1f:a2:8d:2c:
                    e9:11:6a:5e:d2:6f:03:57:a8:6e:75:75:05:77:6f:
                    04:7d:bd:9c:96:0b:bf:e0:83:4a:3a:ec:20:55:ef:
                    72:ae:85:a5:4a:8b:8c:cf:c3:eb:43:a2:06:b0:39:
                    69:82:ca:d7:4b:f7:5a:cd:c3:19:1f:63:c6:5a:c3:
                    1f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9B:64:A6:CB:AA:AC:30:F2:30:40:60:2F:AB:C2:89:5B:5F:C9:41
            X509v3 Authority Key Identifier:
                keyid:31:70:67:E8:1A:61:A2:1F:DC:14:85:98:EF:6B:A5:97:57:FA:03:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXBn6Bphoh_cFIWY72ull1f6A4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/58a4e1-dfc1-4d81-b2c6-216597e03f11/1/MXBn6Bphoh_cFIWY72ull1f6A4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/58a4e1-dfc1-4d81-b2c6-216597e03f11/1/MXBn6Bphoh_cFIWY72ull1f6A4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:2b:b5:a7:df:99:b9:3d:96:43:55:d0:25:4a:f7:25:81:aa:
         80:05:02:d8:22:c5:88:dd:f0:71:d7:1a:00:3a:fb:07:79:56:
         ff:36:2a:47:e9:16:fd:d4:e7:50:37:00:15:e7:01:b0:47:62:
         51:6b:a7:4d:d5:d8:2f:9a:af:d8:7c:a5:d2:73:31:30:9f:d8:
         fd:75:11:21:2b:e2:e5:45:0f:3c:1a:9b:62:39:d1:7c:d6:fa:
         1f:f0:74:be:cd:3f:c8:36:78:76:88:99:69:32:b4:77:ae:e5:
         8e:98:80:e3:14:89:2b:06:ef:8f:45:69:e6:bd:a8:f6:c7:c6:
         c3:9f:ee:d8:b4:72:3a:b0:8f:e4:ba:ae:a2:87:a3:46:3e:fb:
         07:48:ec:aa:3a:f8:a9:b2:37:42:4a:6e:19:34:cc:b4:29:16:
         11:f8:8b:e1:e7:51:82:11:ff:fe:ad:b4:c2:22:1d:a3:99:fb:
         b0:1f:4d:70:03:9f:dc:2e:20:37:d3:c4:e6:ae:02:26:e7:7a:
         0c:01:87:aa:42:69:5c:c5:56:8a:dc:f5:74:1a:04:1e:1a:f1:
         2f:1a:bf:ae:ba:d2:f7:ce:a7:27:0a:7f:29:b7:54:af:d7:b2:
         a3:a5:96:12:77:36:3e:f0:ef:f4:7e:b7:2a:fa:4e:6f:47:de:
         7a:e9:38:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0BZt0PujgJlyV92xxrURMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxNzA2N2U4MWE2MWEyMWZkYzE0ODU5OGVmNmJhNTk3NTdm
YTAzODAwHhcNMjYwNDE3MDUwMDQ0WhcNMjYwNDE4MDUwMDQ0WjAzMTEwLwYDVQQD
EygxNjliNjRhNmNiYWFhYzMwZjIzMDQwNjAyZmFiYzI4OTViNWZjOTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kwibZQfSyErwCvIC1E87SfG4nf4
06aY9/HqLYE+sPSc6im2M2KNhVYfUBX7FfcvDEjQPk/Ugp/URkLoWj6YOlVDecXn
2Ncqnik8OlPxi3I9WDbbKky+5ja9DydjAbOtxap4B4AFb98pafU70YM+scFwKxgH
gPhWu+nS4QI8EYnzXzT0a84uBH4kmXIQlj1J9EHPfF16ANvMeT7dOQzUMPipEwhz
AyJh/jVBE8IC2hKpkk8pkkF2atuvIJXo0x+ijSzpEWpe0m8DV6hudXUFd28Efb2c
lgu/4INKOuwgVe9yroWlSouMz8PrQ6IGsDlpgsrXS/dazcMZH2PGWsMfGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBabZKbLqqww8jBAYC+rwolbX8lBMB8GA1UdIwQY
MBaAFDFwZ+gaYaIf3BSFmO9rpZdX+gOAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVhCbjZCcGhvaF9jRklXWTcydWxsMWY2QTRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi81OGE0ZTEtZGZjMS00ZDgxLWIyYzYt
MjE2NTk3ZTAzZjExLzEvTVhCbjZCcGhvaF9jRklXWTcydWxsMWY2QTRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi81OGE0ZTEtZGZjMS00ZDgxLWIyYzYtMjE2NTk3ZTAzZjEx
LzEvTVhCbjZCcGhvaF9jRklXWTcydWxsMWY2QTRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbSu1p9+Z
uT2WQ1XQJUr3JYGqgAUC2CLFiN3wcdcaADr7B3lW/zYqR+kW/dTnUDcAFecBsEdi
UWunTdXYL5qv2Hyl0nMxMJ/Y/XURISvi5UUPPBqbYjnRfNb6H/B0vs0/yDZ4doiZ
aTK0d67ljpiA4xSJKwbvj0Vp5r2o9sfGw5/u2LRyOrCP5LquooejRj77B0jsqjr4
qbI3QkpuGTTMtCkWEfiL4edRghH//q20wiIdo5n7sB9NcAOf3C4gN9PE5q4CJud6
DAGHqkJpXMVWitz1dBoEHhrxLxq/rrrS986nJwp/KbdUr9eyo6WWEnc2PvDv9H63
KvpOb0feeuk4vg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:23 2026 by rpki-client