Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
File:                     IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json)
Hash identifier:          8aSOlvDOqvv1xdzPZc9B27Q5A0f+yXpl7w/JPXxQE3w=
Subject key identifier:   3E:EF:CE:57:B8:A7:BF:A8:DA:E2:1F:6B:63:7A:A1:2B:B2:6E:6C:68
Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
Certificate issuer:       /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Certificate serial:       019D9818AEFA020E1CF3713022D1287CDB53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
Manifest number:          07E4
Signing time:             Thu 16 Apr 2026 21:00:47 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:47 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:47 +0000
Files and hashes:         1: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: Y1ihPgbt8Co8LqqGdeqPbm6QLQsWkBLtGoZJQlqeIkk=)
                          2: q4ymNypCeYCDh5Jdw23U-ypzjiE.roa (hash: zp/+BxeAmcCMbS7nT6vnltxLIb38O2i4zuujdCCgNJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:ae:fa:02:0e:1c:f3:71:30:22:d1:28:7c:db:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
        Validity
            Not Before: Apr 16 21:00:47 2026 GMT
            Not After : Apr 17 21:00:47 2026 GMT
        Subject: CN=3eefce57b8a7bfa8dae21f6b637aa12bb26e6c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:35:d8:81:e5:ac:72:61:11:1c:05:29:a9:a1:
                    80:3e:6b:d7:ce:a0:9e:f8:1f:4a:5b:d9:93:6b:a3:
                    6b:d6:df:b6:cd:9d:1c:b3:86:e2:fd:73:73:04:44:
                    6b:fa:6d:33:90:09:2e:db:99:4d:18:aa:39:1c:40:
                    df:0b:9b:fd:f5:11:7d:cc:71:d1:ac:04:01:11:60:
                    da:98:58:0c:48:1f:9d:03:c1:32:02:43:ce:8b:1e:
                    69:28:92:17:12:6a:ea:31:fc:08:79:e7:b7:20:48:
                    de:b4:0f:88:34:ab:0d:af:36:47:75:cb:c8:a9:13:
                    9d:1b:1a:e5:a5:2b:3e:12:e7:b6:14:57:57:6a:4f:
                    ac:68:8a:8c:98:48:c8:b1:f3:cb:43:1e:c3:87:04:
                    d3:c3:60:1d:7a:55:12:51:9e:1e:80:52:fe:49:ce:
                    94:74:75:84:b8:70:ed:76:86:44:7f:d2:70:2a:e7:
                    10:99:51:21:4e:1c:88:87:79:e4:ff:6d:d7:8a:d6:
                    10:f9:ec:0d:03:db:c3:ba:31:54:7b:58:e0:92:12:
                    a6:f9:06:cc:62:51:a7:a2:ca:f3:31:b0:6e:c3:37:
                    17:63:28:5e:1a:85:3a:54:30:8b:ce:af:08:b2:7e:
                    d2:b4:e1:b0:23:ed:dd:36:7c:8c:bf:38:6d:2f:65:
                    0d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EF:CE:57:B8:A7:BF:A8:DA:E2:1F:6B:63:7A:A1:2B:B2:6E:6C:68
            X509v3 Authority Key Identifier:
                keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:67:c6:84:33:5f:aa:f4:d7:f3:fe:c3:47:16:b9:98:4f:0a:
         f9:5a:6e:b2:6e:f9:a2:4b:6b:d4:3c:1e:b8:10:13:ad:10:eb:
         65:92:d0:56:d9:f7:f2:43:da:eb:9e:f0:20:49:ff:77:c9:2f:
         a0:91:c5:69:90:92:8f:9c:7a:86:c1:ce:ad:55:93:cd:56:8a:
         cf:ac:79:76:d5:01:9c:02:2c:83:4b:00:3c:5d:a8:33:e9:e8:
         c9:34:a5:b9:da:a2:d4:a9:e0:a0:71:ec:57:79:58:39:43:a9:
         c1:74:39:7e:2c:32:2d:a2:c9:86:84:46:17:a8:18:20:f3:d3:
         a9:9d:24:f6:48:ee:d5:06:99:2d:d6:30:11:00:77:5b:0c:2c:
         63:ba:ea:46:c6:26:ed:ad:f9:81:9a:c5:5b:c3:5d:0e:40:c2:
         99:3d:48:24:01:c4:87:2d:07:26:bd:7a:07:f4:81:6e:73:d0:
         d2:f5:1b:87:af:14:3c:90:c5:ee:50:e1:7c:71:0a:e6:1f:61:
         d0:a2:7a:a7:f6:a3:5c:51:09:d1:e4:26:1b:cc:72:17:6b:e8:
         e1:61:a5:4b:dc:e8:ac:a7:36:1e:2a:89:75:5e:a1:94:74:13:
         9e:de:64:c2:39:50:8d:bf:2f:9f:56:72:27:a1:e5:d9:c0:7f:
         2e:a9:ea:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGK76Ag4c83EwItEofNtTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYTE5ZWQ4NWEyYzBjZmM0ZjUwYmVhZDE2ZmM5ZjZmMTQ2
NWFkMTEwHhcNMjYwNDE2MjEwMDQ3WhcNMjYwNDE3MjEwMDQ3WjAzMTEwLwYDVQQD
EygzZWVmY2U1N2I4YTdiZmE4ZGFlMjFmNmI2MzdhYTEyYmIyNmU2YzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjXYgeWscmERHAUpqaGAPmvXzqCe
+B9KW9mTa6Nr1t+2zZ0cs4bi/XNzBERr+m0zkAku25lNGKo5HEDfC5v99RF9zHHR
rAQBEWDamFgMSB+dA8EyAkPOix5pKJIXEmrqMfwIeee3IEjetA+INKsNrzZHdcvI
qROdGxrlpSs+Eue2FFdXak+saIqMmEjIsfPLQx7DhwTTw2AdelUSUZ4egFL+Sc6U
dHWEuHDtdoZEf9JwKucQmVEhThyIh3nk/23XitYQ+ewNA9vDujFUe1jgkhKm+QbM
YlGnosrzMbBuwzcXYyheGoU6VDCLzq8Isn7StOGwI+3dNnyMvzhtL2UNawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7vzle4p7+o2uIfa2N6oSuybmxoMB8GA1UdIwQY
MBaAFCKhnthaLAz8T1C+rRb8n28UZa0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9lN2VkZmYtODZkYS00NDlmLWI4OWMt
ZDdiMmFkMDFhMWQ3LzEvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9lN2VkZmYtODZkYS00NDlmLWI4OWMtZDdiMmFkMDFhMWQ3
LzEvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmfGhDNf
qvTX8/7DRxa5mE8K+Vpusm75oktr1DweuBATrRDrZZLQVtn38kPa657wIEn/d8kv
oJHFaZCSj5x6hsHOrVWTzVaKz6x5dtUBnAIsg0sAPF2oM+noyTSludqi1KngoHHs
V3lYOUOpwXQ5fiwyLaLJhoRGF6gYIPPTqZ0k9kju1QaZLdYwEQB3WwwsY7rqRsYm
7a35gZrFW8NdDkDCmT1IJAHEhy0HJr16B/SBbnPQ0vUbh68UPJDF7lDhfHEK5h9h
0KJ6p/ajXFEJ0eQmG8xyF2vo4WGlS9zorKc2HiqJdV6hlHQTnt5kwjlQjb8vn1Zy
J6Hl2cB/Lqnqwg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:22:23 2026 by rpki-client