Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
File:                     bBt3vE7dikuDdEdqc0dxm2drdV4.mft (raw, json)
Hash identifier:          iqSOvpLArVhH0jFoYGFSRk3m8K9P2/W5vQ3G8XDnvcU=
Subject key identifier:   BE:23:66:98:CC:31:3B:D2:1C:C6:09:DB:FA:1D:AA:6D:60:D0:B1:C7
Authority key identifier: 6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E
Certificate issuer:       /CN=6c1b77bc4edd8a4b8374476a7347719b676b755e
Certificate serial:       019D98BE2224764CE66D7D3E02CF6468E69C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
Manifest number:          0A57
Signing time:             Fri 17 Apr 2026 00:01:30 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:30 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:30 +0000
Files and hashes:         1: bBt3vE7dikuDdEdqc0dxm2drdV4.crl (hash: vI7nDIzmNDp1KIzH8+baMe3DPFjdjrDw9c5EqXazjrc=)
                          2: e1omXpCIQpnerGyCBf44XvMH7b8.roa (hash: WuuVal2MbC5TVrn+qWtOZo1dB1Kr34wJojmJ2NY5UPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:be:22:24:76:4c:e6:6d:7d:3e:02:cf:64:68:e6:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c1b77bc4edd8a4b8374476a7347719b676b755e
        Validity
            Not Before: Apr 17 00:01:30 2026 GMT
            Not After : Apr 18 00:01:30 2026 GMT
        Subject: CN=be236698cc313bd21cc609dbfa1daa6d60d0b1c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9c:7c:95:38:1b:3c:a9:a3:68:c8:09:87:9f:
                    3b:7c:e5:c5:07:ea:76:c5:70:95:9f:d4:fc:a3:64:
                    fb:61:fe:2c:9e:79:19:57:c1:de:bf:77:a3:7b:a9:
                    df:fb:ca:f1:ea:28:b5:45:09:94:44:da:24:29:a9:
                    4c:61:60:0a:ba:19:c4:10:17:83:44:c1:ea:3b:cc:
                    96:be:c7:e2:4c:7f:6d:23:51:e9:e1:8b:2f:f6:05:
                    68:f9:ea:5f:19:1a:6d:a6:c2:b9:c0:6e:f3:b9:85:
                    4b:bc:4b:a1:31:9d:ac:4b:59:77:27:42:33:c2:b6:
                    c7:44:db:50:2d:08:fa:40:ea:b4:e4:09:70:16:ec:
                    0f:f3:e7:72:3a:3a:76:1c:31:c8:5f:96:50:28:8f:
                    54:0a:33:3f:78:76:ea:98:f0:34:6b:cf:cf:bb:fa:
                    1d:54:fd:45:ca:99:4e:58:df:53:a3:fd:ff:45:97:
                    3d:36:86:9b:c7:d0:01:7e:48:06:01:c2:1c:9c:81:
                    26:f0:b3:e5:3f:99:cb:9a:d6:88:cf:01:5a:c8:2e:
                    5c:02:4b:11:04:ef:2a:98:f7:a2:27:f0:72:2f:08:
                    18:a6:f7:e8:29:e6:b2:47:5a:9a:dc:12:ed:1f:03:
                    e2:85:46:74:a0:86:8a:2a:42:24:90:89:7c:c6:49:
                    fc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:23:66:98:CC:31:3B:D2:1C:C6:09:DB:FA:1D:AA:6D:60:D0:B1:C7
            X509v3 Authority Key Identifier:
                keyid:6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:1a:59:a8:e6:63:ca:6f:d9:3f:98:98:57:db:80:fb:1c:ef:
         35:63:ae:ec:76:d3:f8:a6:84:fc:e4:8f:f0:93:93:c9:73:39:
         52:d4:ef:86:21:23:30:11:17:50:ca:75:03:31:26:3f:fd:f9:
         f3:c5:6b:b2:62:b9:d5:48:ce:56:d4:9a:61:31:2b:c8:0f:ef:
         ee:56:e8:10:c5:83:85:db:94:97:4b:9b:eb:07:4d:96:ec:7e:
         d1:80:2d:93:06:44:1c:86:d3:0c:23:8f:b0:b2:cc:f2:20:fb:
         63:1a:34:34:63:5f:32:92:41:8e:fa:e2:df:3e:08:6e:81:3b:
         6c:e8:31:e5:fa:e4:26:5d:08:56:ce:c4:05:fd:d6:0b:f1:63:
         ec:74:9f:59:0b:a5:35:3a:bb:1d:8a:22:59:2b:64:da:45:67:
         34:59:36:b3:ec:c1:d8:fa:db:52:7b:18:61:10:b6:c0:5e:d1:
         ce:8a:11:bd:84:9c:de:a5:19:de:92:60:62:bd:34:40:a6:55:
         84:46:1e:24:4f:b8:7a:31:c1:22:c9:da:60:6a:e6:ab:99:fa:
         92:91:72:15:d5:a7:15:3a:70:c9:40:98:0a:ec:10:a5:a0:85:
         02:ff:b8:37:08:29:67:d6:35:03:ca:75:78:f8:61:59:3f:13:
         8a:cd:fd:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YviIkdkzmbX0+As9kaOacMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMWI3N2JjNGVkZDhhNGI4Mzc0NDc2YTczNDc3MTliNjc2
Yjc1NWUwHhcNMjYwNDE3MDAwMTMwWhcNMjYwNDE4MDAwMTMwWjAzMTEwLwYDVQQD
EyhiZTIzNjY5OGNjMzEzYmQyMWNjNjA5ZGJmYTFkYWE2ZDYwZDBiMWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJx8lTgbPKmjaMgJh587fOXFB+p2
xXCVn9T8o2T7Yf4snnkZV8Hev3eje6nf+8rx6ii1RQmURNokKalMYWAKuhnEEBeD
RMHqO8yWvsfiTH9tI1Hp4Ysv9gVo+epfGRptpsK5wG7zuYVLvEuhMZ2sS1l3J0Iz
wrbHRNtQLQj6QOq05AlwFuwP8+dyOjp2HDHIX5ZQKI9UCjM/eHbqmPA0a8/Pu/od
VP1FyplOWN9To/3/RZc9Noabx9ABfkgGAcIcnIEm8LPlP5nLmtaIzwFayC5cAksR
BO8qmPeiJ/ByLwgYpvfoKeayR1qa3BLtHwPihUZ0oIaKKkIkkIl8xkn8gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4jZpjMMTvSHMYJ2/odqm1g0LHHMB8GA1UdIwQY
MBaAFGwbd7xO3YpLg3RHanNHcZtna3VeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJ0M3ZFN2Rpa3VEZEVkcWMwZHhtMmRyZFY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zNjdkMzktOGJlNC00ZWNiLTliYjYt
ZmZkOTFiNDI1YTAwLzEvYkJ0M3ZFN2Rpa3VEZEVkcWMwZHhtMmRyZFY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8zNjdkMzktOGJlNC00ZWNiLTliYjYtZmZkOTFiNDI1YTAw
LzEvYkJ0M3ZFN2Rpa3VEZEVkcWMwZHhtMmRyZFY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxpZqOZj
ym/ZP5iYV9uA+xzvNWOu7HbT+KaE/OSP8JOTyXM5UtTvhiEjMBEXUMp1AzEmP/35
88VrsmK51UjOVtSaYTEryA/v7lboEMWDhduUl0ub6wdNlux+0YAtkwZEHIbTDCOP
sLLM8iD7Yxo0NGNfMpJBjvri3z4IboE7bOgx5frkJl0IVs7EBf3WC/Fj7HSfWQul
NTq7HYoiWStk2kVnNFk2s+zB2PrbUnsYYRC2wF7RzooRvYSc3qUZ3pJgYr00QKZV
hEYeJE+4ejHBIsnaYGrmq5n6kpFyFdWnFTpwyUCYCuwQpaCFAv+4NwgpZ9Y1A8p1
ePhhWT8Tis39OQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:23:26 2026 by rpki-client