Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
File:                     _LiYPlKfyUm4n6s3A7eVt4sah1w.mft (raw, json)
Hash identifier:          AdGsx3TRxohVibsSj1GGnVINtse7Z6jeLf3ArFgUyoU=
Subject key identifier:   C9:99:2F:DE:FC:08:C8:E5:29:B8:1F:47:60:DF:C8:5C:6A:52:34:56
Authority key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
Certificate issuer:       /CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Certificate serial:       019D99631428410634DFC3B1879F32118AEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
Manifest number:          0D2E
Signing time:             Fri 17 Apr 2026 03:01:40 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:40 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:40 +0000
Files and hashes:         1: _LiYPlKfyUm4n6s3A7eVt4sah1w.crl (hash: NmKaRfsymkKqLViEyo5oEqDQgko2feVn5VatS/aQ8Eg=)
                          2: prQ66WR-2hX9fe4qngBkX-oQAis.roa (hash: qCnV7ilduwTB9MzFqgP4zRzlhz0MnbggECjM60aFcrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:63:14:28:41:06:34:df:c3:b1:87:9f:32:11:8a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb8983e529fc949b89fab3703b795b78b1a875c
        Validity
            Not Before: Apr 17 03:01:40 2026 GMT
            Not After : Apr 18 03:01:40 2026 GMT
        Subject: CN=c9992fdefc08c8e529b81f4760dfc85c6a523456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:64:df:e9:e6:df:82:06:47:64:15:cb:82:43:
                    34:a8:86:56:10:11:84:12:b3:f1:90:dd:50:e2:d5:
                    1d:0d:62:75:c4:11:3e:f4:9a:c2:e0:bb:b6:85:cd:
                    90:e3:c2:60:28:69:e4:2d:5f:95:f6:5f:70:e4:18:
                    52:1d:4b:81:57:a0:c2:b5:5f:05:5f:19:c0:3f:03:
                    7b:22:b7:5f:33:de:aa:7b:9a:a5:f6:fc:f3:be:99:
                    ee:81:23:ad:d5:35:95:5e:f0:d5:54:0c:a2:40:bc:
                    6b:64:2b:fc:b8:b5:17:f5:44:b0:51:c9:60:b2:28:
                    85:a8:39:a7:5c:9b:bd:2b:ba:87:5f:5f:b0:f9:5b:
                    0c:f3:ef:92:69:8f:56:52:7e:2f:c4:5d:fb:4c:60:
                    e8:e4:69:b9:a7:b4:89:33:f8:f0:23:a2:10:42:95:
                    70:bb:e9:78:a1:1a:09:2d:a3:ec:db:61:de:90:e4:
                    8b:2c:92:19:78:16:fa:7a:56:0d:1d:b1:fb:85:3a:
                    57:9f:e1:58:6e:f3:34:23:1f:a7:71:84:87:b2:30:
                    de:e2:9e:81:3f:fc:55:6a:83:02:f8:b5:19:dd:92:
                    23:2f:1f:7e:66:24:b6:1e:f3:01:90:53:0b:de:d1:
                    8c:bd:eb:76:77:bd:68:e6:d2:2d:39:3c:1b:9b:39:
                    d4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:99:2F:DE:FC:08:C8:E5:29:B8:1F:47:60:DF:C8:5C:6A:52:34:56
            X509v3 Authority Key Identifier:
                keyid:FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:67:7f:ca:c6:ed:76:a1:83:5d:53:74:95:c2:4c:60:b9:9b:
         5f:c0:ef:1b:2a:49:d3:9a:0c:3f:e3:57:e6:10:95:54:de:0c:
         41:62:59:d2:e6:f3:70:b0:62:a2:82:8b:65:5e:a7:c4:66:0d:
         cd:97:0f:ee:e4:70:32:73:9f:c4:e8:1f:26:27:29:ad:6f:54:
         a1:ec:bf:c1:26:e4:c6:a9:f2:dc:cf:f9:55:09:dd:b4:c3:3a:
         f0:59:a2:83:26:63:42:fb:81:62:00:b3:5e:9e:15:41:1c:52:
         38:8d:37:6d:0e:a2:b2:8a:0e:50:72:bb:9d:98:76:3e:d3:08:
         17:dc:ba:c3:5c:48:77:c2:c0:a6:21:db:ff:07:4e:43:5d:38:
         27:a3:fa:aa:62:ec:9e:7a:44:29:11:04:fc:1a:f8:1a:78:66:
         4f:11:76:81:e5:b4:99:3d:03:30:e5:a6:a8:6b:54:5f:2d:b2:
         9a:66:64:34:6a:b8:ea:3f:2a:f2:d8:38:4f:df:24:00:e3:76:
         2f:0e:06:e4:d8:6c:f4:10:af:3e:86:0c:30:f8:6f:71:90:4c:
         cc:6e:c5:b6:86:5d:b4:da:b1:3d:e6:00:3b:60:88:87:54:a2:
         27:02:ae:50:a4:70:4f:f9:37:f1:a4:34:2f:12:1b:89:69:5e:
         98:15:47:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYxQoQQY038Oxh58yEYrqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYjg5ODNlNTI5ZmM5NDliODlmYWIzNzAzYjc5NWI3OGIx
YTg3NWMwHhcNMjYwNDE3MDMwMTQwWhcNMjYwNDE4MDMwMTQwWjAzMTEwLwYDVQQD
EyhjOTk5MmZkZWZjMDhjOGU1MjliODFmNDc2MGRmYzg1YzZhNTIzNDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGTf6ebfggZHZBXLgkM0qIZWEBGE
ErPxkN1Q4tUdDWJ1xBE+9JrC4Lu2hc2Q48JgKGnkLV+V9l9w5BhSHUuBV6DCtV8F
XxnAPwN7IrdfM96qe5ql9vzzvpnugSOt1TWVXvDVVAyiQLxrZCv8uLUX9USwUclg
siiFqDmnXJu9K7qHX1+w+VsM8++SaY9WUn4vxF37TGDo5Gm5p7SJM/jwI6IQQpVw
u+l4oRoJLaPs22HekOSLLJIZeBb6elYNHbH7hTpXn+FYbvM0Ix+ncYSHsjDe4p6B
P/xVaoMC+LUZ3ZIjLx9+ZiS2HvMBkFML3tGMvet2d71o5tItOTwbmznU6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmZL978CMjlKbgfR2DfyFxqUjRWMB8GA1UdIwQY
MBaAFPy4mD5Sn8lJuJ+rNwO3lbeLGodcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80ZjEwYTMtNmIyMS00ODA1LThlMDMt
OTMxZmYzZDlkZjQxLzEvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80ZjEwYTMtNmIyMS00ODA1LThlMDMtOTMxZmYzZDlkZjQx
LzEvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2d/ysbt
dqGDXVN0lcJMYLmbX8DvGypJ05oMP+NX5hCVVN4MQWJZ0ubzcLBiooKLZV6nxGYN
zZcP7uRwMnOfxOgfJicprW9Uoey/wSbkxqny3M/5VQndtMM68FmigyZjQvuBYgCz
Xp4VQRxSOI03bQ6isooOUHK7nZh2PtMIF9y6w1xId8LApiHb/wdOQ104J6P6qmLs
nnpEKREE/Br4GnhmTxF2geW0mT0DMOWmqGtUXy2ymmZkNGq46j8q8tg4T98kAON2
Lw4G5Nhs9BCvPoYMMPhvcZBMzG7FtoZdtNqxPeYAO2CIh1SiJwKuUKRwT/k38aQ0
LxIbiWlemBVHDg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:55:22 2026 by rpki-client