Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
File:                     SInGeZ92tFIvCZH2uTNP1ttUHVs.mft (raw, json)
Hash identifier:          n9daMEA/4A/rqrbHiXc7KDr4+EPekchCjkGF0ZkH1go=
Subject key identifier:   E2:96:FD:87:57:73:7D:17:E9:32:69:A6:8A:9D:B0:EF:B9:4A:32:38
Authority key identifier: 48:89:C6:79:9F:76:B4:52:2F:09:91:F6:B9:33:4F:D6:DB:54:1D:5B
Certificate issuer:       /CN=4889c6799f76b4522f0991f6b9334fd6db541d5b
Certificate serial:       019D98F49B6296838278B755275F275A027B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
Manifest number:          13BC
Signing time:             Fri 17 Apr 2026 01:01:00 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:00 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:00 +0000
Files and hashes:         1: SInGeZ92tFIvCZH2uTNP1ttUHVs.crl (hash: pNBW5HOTBQa81PHE1aJexaJMaeU9/JOyWgANGvtAtus=)
                          2: WOkGbyqq4VI_KoVl7cYkzt-fEXk.roa (hash: Ugqf20CmLTnvB2fFDNQ15zZbw8WaquPL+vAoe7z+8xI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:9b:62:96:83:82:78:b7:55:27:5f:27:5a:02:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4889c6799f76b4522f0991f6b9334fd6db541d5b
        Validity
            Not Before: Apr 17 01:01:00 2026 GMT
            Not After : Apr 18 01:01:00 2026 GMT
        Subject: CN=e296fd8757737d17e93269a68a9db0efb94a3238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bb:e1:89:52:ea:38:e4:4e:0a:e6:cd:04:93:
                    3d:23:e0:d1:3a:5a:d8:76:e9:7d:58:74:fd:f3:d7:
                    e1:9c:a5:ab:47:63:0c:6e:f8:cb:f9:ce:b3:1e:3a:
                    96:57:cd:62:50:00:a6:fa:af:33:e4:af:a7:c8:34:
                    06:ba:09:1d:a3:a9:b5:3e:cd:58:3f:2c:63:e1:33:
                    c7:b1:84:4f:13:8c:b6:0e:2b:f0:66:86:c6:95:50:
                    76:b0:c9:f1:10:9b:f2:7d:1b:7d:16:15:8b:4c:f8:
                    31:89:ab:f9:7e:96:bb:dc:3f:36:c0:06:dc:4b:af:
                    84:de:f7:95:50:99:fa:22:21:c9:f4:26:98:7c:49:
                    40:0a:f6:69:18:22:e4:75:04:bf:c0:63:7e:4b:fe:
                    45:67:18:76:a1:96:bf:d5:3b:71:c7:5a:dd:f9:df:
                    b7:b6:01:09:2a:92:de:b8:e2:d2:ef:34:d2:65:6c:
                    64:67:b3:16:c6:f5:87:21:88:ac:60:92:86:d5:ff:
                    d2:57:24:7e:e1:4e:3a:cd:e0:ff:12:a6:4d:93:45:
                    d5:6d:88:9d:a2:9c:d0:ff:0d:d9:74:94:b2:bc:0e:
                    34:41:64:34:b7:92:d6:d2:de:31:b2:52:a2:3a:2f:
                    bc:5c:bb:20:81:b0:c4:00:b2:ac:a4:23:d7:20:3b:
                    83:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:96:FD:87:57:73:7D:17:E9:32:69:A6:8A:9D:B0:EF:B9:4A:32:38
            X509v3 Authority Key Identifier:
                keyid:48:89:C6:79:9F:76:B4:52:2F:09:91:F6:B9:33:4F:D6:DB:54:1D:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ea:84:25:33:f9:44:3c:cf:e4:18:eb:fe:30:bb:42:be:42:
         67:bf:aa:a4:27:ac:8b:4f:f7:2f:28:ff:94:65:cd:c7:14:c8:
         9a:94:d0:3c:f9:07:be:c5:26:76:30:0d:c9:16:74:2b:66:9f:
         3e:7e:a9:7e:e1:31:7c:e8:a0:4c:a2:40:16:a2:97:1d:b5:7c:
         cc:b7:a8:d6:ba:7d:64:fd:e1:7b:e4:9e:ac:f6:55:c8:6c:d5:
         02:b8:54:14:b3:f3:b2:07:19:15:d4:aa:c8:de:a1:9a:60:84:
         d8:92:20:ea:8d:88:61:8b:49:55:64:0d:bf:5d:f5:52:b4:51:
         67:42:98:dd:2a:14:0f:14:6a:49:ab:89:35:e6:a2:b7:35:df:
         34:ec:47:64:cc:e0:c4:02:72:21:92:23:14:1a:51:29:83:bc:
         52:87:d4:7d:f7:51:79:88:ff:87:48:87:73:32:a0:62:b7:05:
         27:e4:7d:7d:46:c3:61:66:f3:d2:a8:e0:1d:9e:42:fc:9e:52:
         62:c0:ae:fe:b9:6f:91:0c:3c:a2:83:1f:ba:1d:22:93:92:f0:
         ed:ae:9f:03:c2:54:6e:3e:07:3f:a3:f6:35:b1:88:ee:af:a1:
         22:ab:0c:d8:3d:89:ba:dc:6e:c3:1c:89:da:8f:f8:33:79:d0:
         ac:42:6c:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9JtiloOCeLdVJ18nWgJ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ODljNjc5OWY3NmI0NTIyZjA5OTFmNmI5MzM0ZmQ2ZGI1
NDFkNWIwHhcNMjYwNDE3MDEwMTAwWhcNMjYwNDE4MDEwMTAwWjAzMTEwLwYDVQQD
EyhlMjk2ZmQ4NzU3NzM3ZDE3ZTkzMjY5YTY4YTlkYjBlZmI5NGEzMjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrvhiVLqOOROCubNBJM9I+DROlrY
dul9WHT989fhnKWrR2MMbvjL+c6zHjqWV81iUACm+q8z5K+nyDQGugkdo6m1Ps1Y
Pyxj4TPHsYRPE4y2DivwZobGlVB2sMnxEJvyfRt9FhWLTPgxiav5fpa73D82wAbc
S6+E3veVUJn6IiHJ9CaYfElACvZpGCLkdQS/wGN+S/5FZxh2oZa/1Ttxx1rd+d+3
tgEJKpLeuOLS7zTSZWxkZ7MWxvWHIYisYJKG1f/SVyR+4U46zeD/EqZNk0XVbYid
opzQ/w3ZdJSyvA40QWQ0t5LW0t4xslKiOi+8XLsggbDEALKspCPXIDuDlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKW/YdXc30X6TJppoqdsO+5SjI4MB8GA1UdIwQY
MBaAFEiJxnmfdrRSLwmR9rkzT9bbVB1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0luR2VaOTJ0Rkl2Q1pIMnVUTlAxdHRVSFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi85YWQ3N2EtNzI5ZC00NzI3LTlhYWEt
ZjU3YmRjYzczYjE2LzEvU0luR2VaOTJ0Rkl2Q1pIMnVUTlAxdHRVSFZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi85YWQ3N2EtNzI5ZC00NzI3LTlhYWEtZjU3YmRjYzczYjE2
LzEvU0luR2VaOTJ0Rkl2Q1pIMnVUTlAxdHRVSFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+qEJTP5
RDzP5Bjr/jC7Qr5CZ7+qpCesi0/3Lyj/lGXNxxTImpTQPPkHvsUmdjANyRZ0K2af
Pn6pfuExfOigTKJAFqKXHbV8zLeo1rp9ZP3he+SerPZVyGzVArhUFLPzsgcZFdSq
yN6hmmCE2JIg6o2IYYtJVWQNv131UrRRZ0KY3SoUDxRqSauJNeaitzXfNOxHZMzg
xAJyIZIjFBpRKYO8UofUffdReYj/h0iHczKgYrcFJ+R9fUbDYWbz0qjgHZ5C/J5S
YsCu/rlvkQw8ooMfuh0ik5Lw7a6fA8JUbj4HP6P2NbGI7q+hIqsM2D2JutxuwxyJ
2o/4M3nQrEJs3Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:07 2026 by rpki-client