Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
File:                     mCbZDesQFiidwO-MRLU06fsnG1s.mft (raw, json)
Hash identifier:          IGg9bGjziRz7oRM4NCG6lGdTCCkwRT6vtCxM/aF+hJw=
Subject key identifier:   0E:00:A1:45:4C:5B:22:9E:ED:7A:93:05:00:97:F3:BB:D3:5B:C3:EA
Authority key identifier: 98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
Certificate issuer:       /CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Certificate serial:       019D99D072D4F3A0D9E1913BBB36958C023C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
Manifest number:          15FD
Signing time:             Fri 17 Apr 2026 05:01:07 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:07 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:07 +0000
Files and hashes:         1: j1JDL1NRbmDxXB8ccW_ghKg7WSw.roa (hash: j1who2P7dA+z1wAH/SO7xSlnqBCmbnDiBNhev3xgB9A=)
                          2: mCbZDesQFiidwO-MRLU06fsnG1s.crl (hash: /bB75A8LMYOiedKkaTI0UO+rDZNQ3IdnOlgooBk/fHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:72:d4:f3:a0:d9:e1:91:3b:bb:36:95:8c:02:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
        Validity
            Not Before: Apr 17 05:01:07 2026 GMT
            Not After : Apr 18 05:01:07 2026 GMT
        Subject: CN=0e00a1454c5b229eed7a93050097f3bbd35bc3ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fd:e6:08:c8:a3:67:c7:9f:e9:52:0e:d6:f5:
                    55:31:8b:24:5e:c9:8c:27:3e:10:42:2a:52:2b:a9:
                    af:05:1d:b7:73:57:b7:15:48:00:7b:c9:d4:41:5f:
                    42:61:b1:e6:b7:25:e6:e0:43:a2:66:88:e7:ca:24:
                    34:4d:41:21:40:0a:64:e8:53:86:38:8a:ae:a3:43:
                    31:f0:83:df:71:a3:51:34:01:40:e7:40:ae:55:7e:
                    04:97:22:6f:49:e0:b1:1c:d0:a6:27:05:66:93:fa:
                    ed:f5:c6:d7:f0:c5:19:79:e6:b4:6d:a0:33:1d:b1:
                    d6:8f:16:7f:94:75:d7:57:9e:c0:2c:6a:89:16:25:
                    07:17:bf:a4:47:6a:0c:f1:7d:7c:29:43:ee:c7:46:
                    ef:54:77:14:0b:5d:e2:b5:87:9a:b4:e6:c1:1a:95:
                    2c:8d:eb:34:99:a1:6d:4b:4f:dc:1c:0a:50:51:8f:
                    8c:c8:10:29:0f:58:2a:7c:db:f3:f7:50:f6:37:14:
                    24:3f:38:a6:dc:d0:7e:c9:23:8a:31:86:ba:47:ea:
                    a0:a9:27:3d:ba:ba:be:78:ae:f5:5a:0a:1a:7d:73:
                    13:13:7d:a3:dd:5f:cb:74:8b:9e:7d:ff:dd:9e:af:
                    06:8b:7d:9c:87:3e:86:1f:7c:99:63:03:b0:d0:48:
                    b9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:00:A1:45:4C:5B:22:9E:ED:7A:93:05:00:97:F3:BB:D3:5B:C3:EA
            X509v3 Authority Key Identifier:
                keyid:98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c2:aa:75:48:a0:d8:0c:0a:f6:d8:26:1c:30:5a:bb:0c:e5:
         9f:1a:02:1e:8e:37:8a:97:df:2a:da:21:e2:10:2c:3e:19:87:
         58:f2:f0:09:49:fa:45:eb:52:53:0d:c7:37:f7:df:09:36:41:
         0d:e9:2d:04:82:9f:f3:64:3d:c1:ac:50:1e:7d:b0:7c:f8:4b:
         f2:bb:bb:89:74:26:de:90:c0:09:52:64:2f:fe:86:c7:d6:8b:
         a2:7c:27:b0:5d:d1:3a:ec:93:5d:d6:00:8a:f2:b4:fb:fc:dc:
         45:14:d3:f8:73:c6:99:bc:44:df:c8:39:c1:fc:1a:9d:a7:2d:
         a9:ce:e1:c2:ba:06:c9:3b:a2:c2:59:02:39:b1:13:8a:17:da:
         62:83:4b:85:4e:95:76:c4:60:25:f5:23:b8:fa:f9:59:24:53:
         ba:8f:e8:e9:56:f2:2d:4f:28:94:f4:67:3f:c6:7d:ce:b1:10:
         9b:fa:1e:ad:34:e7:08:11:e6:b9:1f:17:6d:f8:80:5d:29:74:
         12:d2:10:f2:fa:48:be:e8:70:f0:46:01:03:d7:a5:9a:fd:68:
         8b:03:b6:24:ba:7a:b4:41:d2:dd:80:6c:ef:ae:7c:b9:b3:8c:
         c2:c7:92:6c:01:2a:c5:36:c4:42:27:f0:04:57:b0:94:b2:4d:
         42:d4:3d:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0HLU86DZ4ZE7uzaVjAI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MjZkOTBkZWIxMDE2Mjg5ZGMwZWY4YzQ0YjUzNGU5ZmIy
NzFiNWIwHhcNMjYwNDE3MDUwMTA3WhcNMjYwNDE4MDUwMTA3WjAzMTEwLwYDVQQD
EygwZTAwYTE0NTRjNWIyMjllZWQ3YTkzMDUwMDk3ZjNiYmQzNWJjM2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/3mCMijZ8ef6VIO1vVVMYskXsmM
Jz4QQipSK6mvBR23c1e3FUgAe8nUQV9CYbHmtyXm4EOiZojnyiQ0TUEhQApk6FOG
OIquo0Mx8IPfcaNRNAFA50CuVX4ElyJvSeCxHNCmJwVmk/rt9cbX8MUZeea0baAz
HbHWjxZ/lHXXV57ALGqJFiUHF7+kR2oM8X18KUPux0bvVHcUC13itYeatObBGpUs
jes0maFtS0/cHApQUY+MyBApD1gqfNvz91D2NxQkPzim3NB+ySOKMYa6R+qgqSc9
urq+eK71WgoafXMTE32j3V/LdIueff/dnq8Gi32chz6GH3yZYwOw0Ei5SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4AoUVMWyKe7XqTBQCX87vTW8PqMB8GA1UdIwQY
MBaAFJgm2Q3rEBYoncDvjES1NOn7JxtbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUNiWkRlc1FGaWlkd08tTVJMVTA2ZnNuRzFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NTM4NDktYmUyZS00MzJmLTg3YTYt
YTY0ZGFkNjdiNzM1LzEvbUNiWkRlc1FGaWlkd08tTVJMVTA2ZnNuRzFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy84NTM4NDktYmUyZS00MzJmLTg3YTYtYTY0ZGFkNjdiNzM1
LzEvbUNiWkRlc1FGaWlkd08tTVJMVTA2ZnNuRzFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsKqdUig
2AwK9tgmHDBauwzlnxoCHo43ipffKtoh4hAsPhmHWPLwCUn6RetSUw3HN/ffCTZB
DektBIKf82Q9waxQHn2wfPhL8ru7iXQm3pDACVJkL/6Gx9aLonwnsF3ROuyTXdYA
ivK0+/zcRRTT+HPGmbxE38g5wfwanactqc7hwroGyTuiwlkCObETihfaYoNLhU6V
dsRgJfUjuPr5WSRTuo/o6VbyLU8olPRnP8Z9zrEQm/oerTTnCBHmuR8XbfiAXSl0
EtIQ8vpIvuhw8EYBA9elmv1oiwO2JLp6tEHS3YBs7658ubOMwseSbAEqxTbEQifw
BFewlLJNQtQ9pQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:13:27 2026 by rpki-client