Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
File:                     jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft (raw, json)
Hash identifier:          3kObOA/0zkfeIsKyhwQYJ3dYg7rCuX6rbDVeVrB9XLM=
Subject key identifier:   DB:22:3A:A2:83:07:6F:F6:9A:11:7C:93:05:37:CA:5D:12:58:23:83
Authority key identifier: 8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A
Certificate issuer:       /CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
Certificate serial:       019D99D02F63247FDAD4005FF28433708EA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
Manifest number:          099D
Signing time:             Fri 17 Apr 2026 05:00:50 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:50 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:50 +0000
Files and hashes:         1: BmoelkPQt4i3BlkcahPvi7qWXN4.roa (hash: z9IVfQbmn+DFxr8Krtk/I8KiP3Zb6ONjO0YjL8dGC3M=)
                          2: jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl (hash: 4PNX0hxdeD9Jtu2eQwz68Ujiz1iXiyD6NME2VWbJbRk=)
                          3: mNu3U5HOimkLMXrE7Xd3w0-SVZA.roa (hash: Q8HW68vvE5dt2JCgiuU6uY8uDN63CVOq6IX7sRD6oHI=)
                          4: zzcGdYNOZhe1jEco9OqFbyYvT9k.roa (hash: J+hhTkidSQB0Te9LHI8bfOqIwkK9dHKinjSyKGXTXTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:2f:63:24:7f:da:d4:00:5f:f2:84:33:70:8e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
        Validity
            Not Before: Apr 17 05:00:50 2026 GMT
            Not After : Apr 18 05:00:50 2026 GMT
        Subject: CN=db223aa283076ff69a117c930537ca5d12582383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:af:16:63:ba:b0:da:7c:8a:42:79:16:f7:c5:
                    fb:8f:03:0b:34:32:7c:75:dc:65:12:85:a6:d1:0e:
                    fb:73:82:8e:84:5f:1b:f0:f6:d6:f7:17:66:8b:f9:
                    e8:5b:43:7e:8e:c4:1f:18:a1:b7:9e:c3:b7:78:bd:
                    3c:60:79:0c:36:91:d3:ac:f6:a8:5f:52:d2:d7:e3:
                    54:b8:b9:9d:37:7e:18:a0:c5:7f:22:d6:db:19:55:
                    a6:03:c3:6a:6b:44:85:b3:6f:a4:dd:89:4c:07:72:
                    1e:a7:2c:78:f1:04:12:39:c1:eb:02:18:b4:f5:b3:
                    b2:9c:db:1f:de:52:2d:b5:25:aa:99:90:10:16:68:
                    1d:1a:c7:c2:64:4d:6c:c1:e0:79:72:0f:ec:8d:61:
                    2c:8c:22:79:68:df:50:d9:40:5d:87:ce:77:1d:61:
                    d0:1a:44:20:95:b2:8f:d7:f4:69:b8:30:90:11:52:
                    cd:4c:ab:ff:40:d4:f8:58:45:f2:f7:73:a3:a8:0b:
                    9e:37:bb:89:87:e2:45:53:77:f3:64:fb:d6:55:54:
                    0a:39:f7:10:bd:a1:a0:a2:07:19:5e:48:df:d8:9a:
                    e8:de:08:c2:f7:3f:62:4a:b9:b4:4e:33:62:d0:dc:
                    50:0d:6b:02:f2:d8:21:2b:61:f5:67:f6:9c:45:57:
                    79:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:22:3A:A2:83:07:6F:F6:9A:11:7C:93:05:37:CA:5D:12:58:23:83
            X509v3 Authority Key Identifier:
                keyid:8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:fb:fd:ee:f1:93:dd:02:dd:24:d8:b7:13:32:b9:63:0d:a8:
         46:47:22:29:52:a7:a3:e3:ec:b8:d5:aa:53:9e:cc:c9:3f:e2:
         df:5b:03:e2:ea:e4:aa:d3:8d:1b:e5:d2:7c:c3:57:74:07:99:
         9d:85:10:ed:0a:84:a8:0d:f4:fa:4f:c4:a2:fd:c6:29:a7:de:
         33:ba:79:27:0f:dc:44:66:4d:35:75:4c:46:cf:0a:68:51:74:
         a1:7d:83:cc:71:b0:5a:df:0a:c4:06:d9:31:03:00:3f:e6:73:
         44:0a:df:5d:9c:92:9e:7b:51:2f:bb:65:ad:b2:52:5c:f3:ed:
         6b:59:9e:22:e8:f1:02:4d:2c:48:62:6b:14:e3:42:ae:0e:0f:
         68:2b:e0:ce:84:4e:d1:60:89:3b:bc:08:3d:9b:24:9b:49:f7:
         97:1a:28:a9:cc:89:b9:66:92:c7:31:eb:20:2c:16:11:1f:e1:
         f1:97:ab:72:69:e2:e5:6d:a8:12:38:ad:02:ce:0c:81:1e:16:
         58:54:36:74:45:bf:fe:1a:e3:72:59:41:cc:72:c1:6e:ae:b6:
         93:cd:76:b6:29:ea:60:c9:02:d2:dd:3e:d7:60:48:af:e4:37:
         25:5d:9c:13:de:ff:81:81:4c:14:ce:e4:eb:84:e1:6a:fa:76:
         3c:a9:e9:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0C9jJH/a1ABf8oQzcI6lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZmZmMjE1MzhlMjI1NjE4MzE0NjE1ZTRmMGQwNjg4Yjdi
MGRkNWEwHhcNMjYwNDE3MDUwMDUwWhcNMjYwNDE4MDUwMDUwWjAzMTEwLwYDVQQD
EyhkYjIyM2FhMjgzMDc2ZmY2OWExMTdjOTMwNTM3Y2E1ZDEyNTgyMzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa8WY7qw2nyKQnkW98X7jwMLNDJ8
ddxlEoWm0Q77c4KOhF8b8PbW9xdmi/noW0N+jsQfGKG3nsO3eL08YHkMNpHTrPao
X1LS1+NUuLmdN34YoMV/ItbbGVWmA8Nqa0SFs2+k3YlMB3Iepyx48QQSOcHrAhi0
9bOynNsf3lIttSWqmZAQFmgdGsfCZE1sweB5cg/sjWEsjCJ5aN9Q2UBdh853HWHQ
GkQglbKP1/RpuDCQEVLNTKv/QNT4WEXy93OjqAueN7uJh+JFU3fzZPvWVVQKOfcQ
vaGgogcZXkjf2Jro3gjC9z9iSrm0TjNi0NxQDWsC8tghK2H1Z/acRVd5uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsiOqKDB2/2mhF8kwU3yl0SWCODMB8GA1UdIwQY
MBaAFIz/8hU44iVhgxRhXk8NBoi3sN1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalBfeUZUamlKV0dERkdGZVR3MEdpTGV3M1ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82NzUwMWEtNzhkYi00YzM4LThhOTUt
MjYxNjY2YzNhNTg5LzEvalBfeUZUamlKV0dERkdGZVR3MEdpTGV3M1ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi82NzUwMWEtNzhkYi00YzM4LThhOTUtMjYxNjY2YzNhNTg5
LzEvalBfeUZUamlKV0dERkdGZVR3MEdpTGV3M1ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/v97vGT
3QLdJNi3EzK5Yw2oRkciKVKno+PsuNWqU57MyT/i31sD4urkqtONG+XSfMNXdAeZ
nYUQ7QqEqA30+k/Eov3GKafeM7p5Jw/cRGZNNXVMRs8KaFF0oX2DzHGwWt8KxAbZ
MQMAP+ZzRArfXZySnntRL7tlrbJSXPPta1meIujxAk0sSGJrFONCrg4PaCvgzoRO
0WCJO7wIPZskm0n3lxooqcyJuWaSxzHrICwWER/h8Zercmni5W2oEjitAs4MgR4W
WFQ2dEW//hrjcllBzHLBbq62k812tinqYMkC0t0+12BIr+Q3JV2cE97/gYFMFM7k
64Thavp2PKnpFg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:14:34 2026 by rpki-client