Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
File:                     sDwwLC9SJ349CraEL2iqX40Nd4c.mft (raw, json)
Hash identifier:          jMPWEEpZWiyAiPqQYXjeXs0B/5Sj2sGtSZu8vJM0yEo=
Subject key identifier:   A2:00:27:A7:5F:1F:2B:F2:94:0F:B7:11:42:4C:7A:2A:63:EE:E6:4B
Authority key identifier: B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
Certificate issuer:       /CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Certificate serial:       019D992B51C6B17B74C342E1C049873574AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
Manifest number:          0F4B
Signing time:             Fri 17 Apr 2026 02:00:45 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:45 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:45 +0000
Files and hashes:         1: YQDkcvZP0TolQ9Rb2J9bf8U7wD8.roa (hash: bLjbl+wMhiL7sRh09UL9i2a7It+tGXyibFC5+VSFo1A=)
                          2: hbF5ZzHsgcMp5iCgolJMPYy0iCk.roa (hash: 7SFeRpPNNir0THQNHogkPoRqinwuTC1jSrURc0Ccc1k=)
                          3: sDwwLC9SJ349CraEL2iqX40Nd4c.crl (hash: 6C5IyHWZoULn8C0bXAkxE7j55aNZfNZGV98zkNFrhFs=)
                          4: zNU6IDjxCzR9kstGaRPoOLdFKys.roa (hash: /0Ll+33Qv6p8kiSxadN/S3UUnMBmdYJpGWJ0vqXCXNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:51:c6:b1:7b:74:c3:42:e1:c0:49:87:35:74:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
        Validity
            Not Before: Apr 17 02:00:45 2026 GMT
            Not After : Apr 18 02:00:45 2026 GMT
        Subject: CN=a20027a75f1f2bf2940fb711424c7a2a63eee64b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1e:9e:cc:0a:8b:39:4c:bb:12:6f:c9:4c:e6:
                    61:75:1a:d8:1a:4d:e6:c0:36:55:8b:a2:5d:d9:30:
                    c2:e6:64:fb:0b:e7:8b:a3:46:f4:7d:2f:e1:cc:d3:
                    1c:51:a0:a0:8e:6d:18:3f:77:96:84:43:a9:41:c8:
                    7b:75:36:00:e8:10:54:9a:9f:16:8f:15:73:b4:51:
                    ab:ff:13:a2:79:26:84:c4:0d:65:57:8d:d8:1b:d1:
                    9f:dd:63:d7:0a:76:7f:63:52:5d:d9:f4:15:71:1a:
                    7c:65:bf:5d:c3:d3:9e:7a:78:77:43:fa:fa:6f:e1:
                    2a:75:7a:fa:e8:ca:44:de:87:80:44:fe:f7:42:40:
                    51:58:74:4b:c9:90:a1:60:86:a9:9b:d2:a5:71:b2:
                    f5:51:9e:44:dc:3a:57:a6:f3:e3:28:88:c5:c0:b3:
                    be:70:bb:21:33:e2:5d:a2:aa:ac:ca:d6:04:55:a2:
                    f6:4e:32:3a:88:c2:69:26:5d:a6:ac:19:d7:70:58:
                    65:39:6d:e9:20:fe:a0:bb:d8:8d:17:a1:3a:e3:be:
                    5e:d9:af:1f:b9:61:cf:76:34:e9:ac:4b:60:cc:78:
                    50:60:93:3b:6a:71:37:b2:40:02:27:a8:dd:14:b8:
                    a6:26:ab:29:6b:df:66:21:c1:f8:78:87:2c:b6:c4:
                    45:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:00:27:A7:5F:1F:2B:F2:94:0F:B7:11:42:4C:7A:2A:63:EE:E6:4B
            X509v3 Authority Key Identifier:
                keyid:B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:d3:fa:5f:15:4f:b3:34:ba:ac:d4:0e:86:d3:3f:f7:be:ca:
         42:09:64:8e:d4:83:41:b5:7a:d3:56:20:b7:6c:a2:7c:4c:0b:
         b3:5c:2f:09:88:86:5f:ab:8b:03:2f:06:aa:5f:8e:e1:ce:b1:
         f2:e1:24:f8:17:1f:e0:07:3e:9d:85:b7:b4:01:39:6b:ca:22:
         0d:c7:aa:04:b9:de:b7:ef:1b:67:0a:20:0d:40:03:a7:20:01:
         ac:80:f1:aa:24:02:66:9d:49:4c:01:8d:49:86:eb:fa:a3:e5:
         b8:77:c0:7a:30:ba:a2:20:bb:4b:bf:88:66:5e:89:3b:10:08:
         1c:09:95:ad:ca:b2:90:54:a4:07:ea:29:b8:d6:90:a0:74:8d:
         45:64:f5:56:89:98:b4:69:5c:93:18:15:b7:7f:97:87:de:96:
         8e:0d:05:fa:8a:ce:6f:23:65:2d:06:fc:f2:c6:16:e1:86:4a:
         8c:be:0c:47:dd:ed:ae:3b:99:41:1b:93:fe:cb:3a:18:f8:6d:
         4a:28:97:09:b0:6f:f4:e7:24:4f:6a:bf:0b:f4:c0:b9:13:96:
         00:1c:b8:af:27:39:25:9b:d9:66:1c:71:f9:c5:9d:ea:2a:98:
         96:b9:d3:9e:c5:35:ff:05:44:1a:5e:12:52:77:fe:87:51:dc:
         c6:98:c6:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK1HGsXt0w0LhwEmHNXSrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwM2MzMDJjMmY1MjI3N2UzZDBhYjY4NDJmNjhhYTVmOGQw
ZDc3ODcwHhcNMjYwNDE3MDIwMDQ1WhcNMjYwNDE4MDIwMDQ1WjAzMTEwLwYDVQQD
EyhhMjAwMjdhNzVmMWYyYmYyOTQwZmI3MTE0MjRjN2EyYTYzZWVlNjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh6ezAqLOUy7Em/JTOZhdRrYGk3m
wDZVi6Jd2TDC5mT7C+eLo0b0fS/hzNMcUaCgjm0YP3eWhEOpQch7dTYA6BBUmp8W
jxVztFGr/xOieSaExA1lV43YG9Gf3WPXCnZ/Y1Jd2fQVcRp8Zb9dw9Oeenh3Q/r6
b+EqdXr66MpE3oeARP73QkBRWHRLyZChYIapm9KlcbL1UZ5E3DpXpvPjKIjFwLO+
cLshM+JdoqqsytYEVaL2TjI6iMJpJl2mrBnXcFhlOW3pIP6gu9iNF6E6475e2a8f
uWHPdjTprEtgzHhQYJM7anE3skACJ6jdFLimJqspa99mIcH4eIcstsRFrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIAJ6dfHyvylA+3EUJMeipj7uZLMB8GA1UdIwQY
MBaAFLA8MCwvUid+PQq2hC9oql+NDXeHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hMmVjOWMtOWQ3Ni00ZTk0LTllM2Et
NmY3MDI0YzNhYWQ3LzEvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9hMmVjOWMtOWQ3Ni00ZTk0LTllM2EtNmY3MDI0YzNhYWQ3
LzEvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATdP6XxVP
szS6rNQOhtM/977KQglkjtSDQbV601Ygt2yifEwLs1wvCYiGX6uLAy8Gql+O4c6x
8uEk+Bcf4Ac+nYW3tAE5a8oiDceqBLnet+8bZwogDUADpyABrIDxqiQCZp1JTAGN
SYbr+qPluHfAejC6oiC7S7+IZl6JOxAIHAmVrcqykFSkB+opuNaQoHSNRWT1VomY
tGlckxgVt3+Xh96Wjg0F+orObyNlLQb88sYW4YZKjL4MR93trjuZQRuT/ss6GPht
SiiXCbBv9OckT2q/C/TAuROWABy4ryc5JZvZZhxx+cWd6iqYlrnTnsU1/wVEGl4S
Unf+h1HcxpjGFQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:23:37 2026 by rpki-client