Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft
File:                     rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft (raw, json)
Hash identifier:          8ODWsiB5/fl4/Ha7UfdSWnFgZFa5ZWYla+hzztImQ5Q=
Subject key identifier:   80:F5:E0:DA:35:FC:B5:BC:A9:78:01:7B:F3:52:23:06:67:B3:84:A8
Authority key identifier: AC:32:87:56:DE:CE:8F:29:F9:7F:41:B8:1A:08:7D:B5:24:E1:59:B7
Certificate issuer:       /CN=ac328756dece8f29f97f41b81a087db524e159b7
Certificate serial:       019D98F44DE30DF6D71231F9FEA30653E899
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft
Manifest number:          150C
Signing time:             Fri 17 Apr 2026 01:00:40 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:40 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:40 +0000
Files and hashes:         1: W3MdpZwq4nd-n5ES7yDiCOVHqpo.roa (hash: 8BK9ZS1JvVx0ZUCH1KW40WgG0466nVGYcl484oqJH48=)
                          2: rDKHVt7Ojyn5f0G4Ggh9tSThWbc.crl (hash: RczEfVTU88LDqimHxp/gwbgkqdsu/45JA9URs9FueBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:4d:e3:0d:f6:d7:12:31:f9:fe:a3:06:53:e8:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac328756dece8f29f97f41b81a087db524e159b7
        Validity
            Not Before: Apr 17 01:00:40 2026 GMT
            Not After : Apr 18 01:00:40 2026 GMT
        Subject: CN=80f5e0da35fcb5bca978017bf352230667b384a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a1:28:cf:f5:77:be:74:fe:cd:35:0f:a3:35:
                    aa:a0:4d:2d:8d:c4:d2:18:81:69:e3:a1:ee:7f:8e:
                    1a:09:7f:77:28:ab:68:ee:2a:fe:eb:e7:4d:d1:46:
                    0f:c1:eb:4e:d1:fd:b6:f7:ee:97:c9:04:a7:44:4d:
                    59:98:7c:ff:b2:cd:d8:c4:89:43:8d:13:f6:1a:b6:
                    70:66:47:60:b1:db:fd:1c:9e:db:77:ee:bb:0f:7c:
                    27:b5:31:fa:71:f5:16:7f:a0:de:10:9c:ac:ca:e7:
                    4b:b6:70:74:45:ee:31:f1:7d:f2:b1:91:a9:a1:de:
                    91:25:bd:fe:2c:87:d0:cd:c3:71:85:e4:f7:72:13:
                    b6:36:35:dc:6d:35:38:5f:42:e8:41:d4:a1:98:bd:
                    05:df:22:18:cf:eb:c9:6d:7a:59:f5:ed:30:e8:e2:
                    93:e4:98:6d:ab:f1:09:44:e7:c2:99:50:10:44:86:
                    3f:94:d3:57:26:86:18:de:15:48:60:43:2b:e4:6c:
                    19:e4:d6:a9:a8:bf:94:18:f9:c6:e7:a2:31:97:b0:
                    37:38:3a:29:07:1d:6c:e0:48:2f:0c:ec:31:ee:e4:
                    29:4c:66:e2:5a:2a:1c:1d:3e:3b:b0:b6:5a:dd:3c:
                    9a:3f:d5:8a:83:3e:59:c4:9f:70:ec:95:3e:4a:69:
                    2d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F5:E0:DA:35:FC:B5:BC:A9:78:01:7B:F3:52:23:06:67:B3:84:A8
            X509v3 Authority Key Identifier:
                keyid:AC:32:87:56:DE:CE:8F:29:F9:7F:41:B8:1A:08:7D:B5:24:E1:59:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:25:2f:a9:e5:ce:8a:26:7b:5b:be:04:d9:41:92:bf:a4:90:
         15:78:af:56:63:52:d3:cc:8b:5e:8f:18:c3:71:a2:fb:ad:49:
         a1:e7:fa:df:6c:61:cd:a3:bc:cf:ce:fd:d9:0b:2d:32:f8:8e:
         18:6b:6f:83:4c:7c:6a:6e:1c:f8:99:ee:4c:b7:de:e6:d2:24:
         f2:4d:41:57:3f:06:43:10:4e:20:4a:6e:e7:b5:d9:7f:10:48:
         e7:0d:46:e3:8b:52:8a:6b:8f:b1:26:af:5d:e6:2c:5d:a9:36:
         5f:40:2a:00:08:22:59:86:eb:43:86:29:22:34:c9:4c:76:fa:
         58:6c:d6:ca:25:d3:5b:f6:1c:34:1e:46:2e:9c:58:d4:03:97:
         b9:6c:0c:ac:d9:93:95:e0:22:f4:23:5d:b8:08:8b:7f:ba:aa:
         76:43:dc:17:0f:ae:e2:b6:80:dd:45:db:9e:4e:7f:55:4f:57:
         8c:b8:dd:bd:ca:8a:d7:1f:02:62:9f:f1:64:08:43:19:e6:8f:
         81:1e:39:d5:01:2b:40:8f:8f:25:76:80:aa:b9:42:50:99:93:
         39:df:5c:29:5e:d9:09:e9:08:24:a8:1f:f0:7f:f2:dc:fc:c3:
         b4:ff:3f:f7:59:5d:d4:21:1e:0a:32:db:67:ea:79:da:97:51:
         b2:27:fa:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9E3jDfbXEjH5/qMGU+iZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMzI4NzU2ZGVjZThmMjlmOTdmNDFiODFhMDg3ZGI1MjRl
MTU5YjcwHhcNMjYwNDE3MDEwMDQwWhcNMjYwNDE4MDEwMDQwWjAzMTEwLwYDVQQD
Eyg4MGY1ZTBkYTM1ZmNiNWJjYTk3ODAxN2JmMzUyMjMwNjY3YjM4NGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6Eoz/V3vnT+zTUPozWqoE0tjcTS
GIFp46Huf44aCX93KKto7ir+6+dN0UYPwetO0f229+6XyQSnRE1ZmHz/ss3YxIlD
jRP2GrZwZkdgsdv9HJ7bd+67D3wntTH6cfUWf6DeEJysyudLtnB0Re4x8X3ysZGp
od6RJb3+LIfQzcNxheT3chO2NjXcbTU4X0LoQdShmL0F3yIYz+vJbXpZ9e0w6OKT
5Jhtq/EJROfCmVAQRIY/lNNXJoYY3hVIYEMr5GwZ5NapqL+UGPnG56Ixl7A3ODop
Bx1s4EgvDOwx7uQpTGbiWiocHT47sLZa3TyaP9WKgz5ZxJ9w7JU+SmktAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFID14No1/LW8qXgBe/NSIwZns4SoMB8GA1UdIwQY
MBaAFKwyh1bezo8p+X9BuBoIfbUk4Vm3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckRLSFZ0N09qeW41ZjBHNEdnaDl0U1RoV2JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mYjc4YWQtOTE4ZS00NGMyLTk1MDEt
MDI0YWQ0ZmIzNzA4LzEvckRLSFZ0N09qeW41ZjBHNEdnaDl0U1RoV2JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mYjc4YWQtOTE4ZS00NGMyLTk1MDEtMDI0YWQ0ZmIzNzA4
LzEvckRLSFZ0N09qeW41ZjBHNEdnaDl0U1RoV2JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSUvqeXO
iiZ7W74E2UGSv6SQFXivVmNS08yLXo8Yw3Gi+61Joef632xhzaO8z8792QstMviO
GGtvg0x8am4c+JnuTLfe5tIk8k1BVz8GQxBOIEpu57XZfxBI5w1G44tSimuPsSav
XeYsXak2X0AqAAgiWYbrQ4YpIjTJTHb6WGzWyiXTW/YcNB5GLpxY1AOXuWwMrNmT
leAi9CNduAiLf7qqdkPcFw+u4raA3UXbnk5/VU9XjLjdvcqK1x8CYp/xZAhDGeaP
gR451QErQI+PJXaAqrlCUJmTOd9cKV7ZCekIJKgf8H/y3PzDtP8/91ld1CEeCjLb
Z+p52pdRsif6Vg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:24:20 2026 by rpki-client