Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
File:                     NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft (raw, json)
Hash identifier:          MqzIQggykhpDXOOr79hNVmJ718KrRiskcq7ptBdmoRg=
Subject key identifier:   19:16:2F:41:C2:5A:9A:50:D1:51:CF:D9:9A:AA:D6:37:BC:20:92:11
Authority key identifier: 35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
Certificate issuer:       /CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Certificate serial:       019D9998EA9C1F0C8B4BC072A939CC65ED7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
Manifest number:          15E9
Signing time:             Fri 17 Apr 2026 04:00:28 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:28 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:28 +0000
Files and hashes:         1: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl (hash: ffuyB8OsF3rEINuSQS20idH/EWBnnPrA8v5KrmmRSiY=)
                          2: yY2vlrWyIY4apa6paDeTCxfPgaU.roa (hash: 6y+VApPzYyS4SGDKt87iuWrwk2coenfHGpex1d3nrQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:98:ea:9c:1f:0c:8b:4b:c0:72:a9:39:cc:65:ed:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359c7243bef2dc775ae67692889d5d26c1b2d148
        Validity
            Not Before: Apr 17 04:00:28 2026 GMT
            Not After : Apr 18 04:00:28 2026 GMT
        Subject: CN=19162f41c25a9a50d151cfd99aaad637bc209211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e1:21:b0:b9:0a:cb:34:b2:cd:72:dd:cc:cb:
                    0a:3b:d3:be:c0:ec:fa:70:30:90:b4:21:0a:45:c7:
                    9e:7f:50:65:71:1b:1b:fc:ee:6b:5a:f3:e7:36:5b:
                    d3:b3:a1:90:3b:bf:3a:59:ad:e4:24:bd:85:52:5a:
                    19:ae:5a:f4:56:d0:1e:9f:f0:a8:28:bf:c0:e1:94:
                    66:b9:3a:ca:71:96:b0:51:80:38:d6:e8:12:5b:d7:
                    f4:69:d8:ec:83:9b:ff:41:e8:3a:3c:ca:59:7e:15:
                    6a:7a:83:8f:56:9e:d2:e7:5b:b7:48:b0:0d:f5:9b:
                    5f:52:18:4b:fd:37:4e:7f:f3:b1:34:48:62:dd:b0:
                    b9:53:19:c5:b5:8e:a1:62:88:9c:a5:0f:19:40:18:
                    14:ea:71:6a:39:8c:74:ac:c0:c7:d9:94:fc:55:c4:
                    9f:ee:ec:07:c0:9f:00:4a:6b:3d:49:df:c6:54:08:
                    0d:eb:ce:2c:ca:09:07:b1:9b:c5:7d:4b:4d:8f:b9:
                    f3:e0:55:8e:28:77:af:56:78:c8:97:8c:67:35:bd:
                    c1:7f:bf:e7:53:60:e4:b8:01:e3:1a:cb:e4:ea:e3:
                    04:51:5e:d1:5e:d1:b3:df:83:8d:1e:c8:de:04:57:
                    c5:20:eb:e5:f6:b0:c6:bb:50:ed:19:68:a0:4c:40:
                    d5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:16:2F:41:C2:5A:9A:50:D1:51:CF:D9:9A:AA:D6:37:BC:20:92:11
            X509v3 Authority Key Identifier:
                keyid:35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:47:55:f8:b7:37:22:c4:47:c0:e6:35:85:8d:f4:80:28:b2:
         79:e8:12:28:28:25:20:94:86:f3:a3:ca:f1:60:7e:70:9d:be:
         1e:27:20:e1:91:b7:41:a1:35:6f:31:7b:df:db:8d:16:f4:56:
         79:d5:3e:9b:c4:f7:07:2a:84:c1:a3:d6:55:5e:5e:09:ec:73:
         a8:7e:b5:78:d8:54:2f:63:04:41:28:6d:a5:de:60:60:a1:80:
         c5:d5:a8:a3:95:fe:ff:85:0d:aa:d9:93:80:b5:59:a9:7e:ea:
         37:51:d1:10:c4:44:0e:b4:80:0e:d0:12:e6:e3:6c:ef:b4:c2:
         cd:2c:6a:64:af:a9:19:c9:f0:9f:11:49:15:bc:c5:42:0e:9b:
         8f:d3:63:dc:a2:6b:83:b8:1b:18:13:e1:b4:eb:02:cb:b3:48:
         a1:f5:50:df:d5:35:3e:56:bc:e3:26:bd:1a:24:04:88:c5:c0:
         be:30:ec:d6:44:a6:1e:77:e1:8d:92:4e:58:49:71:87:5a:6c:
         85:39:45:14:99:7d:18:ed:cf:71:1d:bb:fa:74:fc:bd:89:29:
         77:d1:af:c5:26:bf:14:22:73:32:63:fd:78:ed:1d:dc:15:f9:
         c3:f8:fd:56:72:7a:5f:d9:6e:a4:d5:a2:81:b1:0c:4b:f9:7f:
         51:c7:ba:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmOqcHwyLS8ByqTnMZe16MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OWM3MjQzYmVmMmRjNzc1YWU2NzY5Mjg4OWQ1ZDI2YzFi
MmQxNDgwHhcNMjYwNDE3MDQwMDI4WhcNMjYwNDE4MDQwMDI4WjAzMTEwLwYDVQQD
EygxOTE2MmY0MWMyNWE5YTUwZDE1MWNmZDk5YWFhZDYzN2JjMjA5MjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuEhsLkKyzSyzXLdzMsKO9O+wOz6
cDCQtCEKRceef1BlcRsb/O5rWvPnNlvTs6GQO786Wa3kJL2FUloZrlr0VtAen/Co
KL/A4ZRmuTrKcZawUYA41ugSW9f0adjsg5v/Qeg6PMpZfhVqeoOPVp7S51u3SLAN
9ZtfUhhL/TdOf/OxNEhi3bC5UxnFtY6hYoicpQ8ZQBgU6nFqOYx0rMDH2ZT8VcSf
7uwHwJ8ASms9Sd/GVAgN684sygkHsZvFfUtNj7nz4FWOKHevVnjIl4xnNb3Bf7/n
U2DkuAHjGsvk6uMEUV7RXtGz34ONHsjeBFfFIOvl9rDGu1DtGWigTEDVfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkWL0HCWppQ0VHP2Zqq1je8IJIRMB8GA1UdIwQY
MBaAFDWcckO+8tx3WuZ2koidXSbBstFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlp4eVE3N3kzSGRhNW5hU2lKMWRKc0d5MFVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81NTViYzktNGUxOS00ODI4LThlYmEt
NjFmZmI2NTA2NjQ0LzEvTlp4eVE3N3kzSGRhNW5hU2lKMWRKc0d5MFVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81NTViYzktNGUxOS00ODI4LThlYmEtNjFmZmI2NTA2NjQ0
LzEvTlp4eVE3N3kzSGRhNW5hU2lKMWRKc0d5MFVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkkdV+Lc3
IsRHwOY1hY30gCiyeegSKCglIJSG86PK8WB+cJ2+Hicg4ZG3QaE1bzF739uNFvRW
edU+m8T3ByqEwaPWVV5eCexzqH61eNhUL2MEQShtpd5gYKGAxdWoo5X+/4UNqtmT
gLVZqX7qN1HREMREDrSADtAS5uNs77TCzSxqZK+pGcnwnxFJFbzFQg6bj9Nj3KJr
g7gbGBPhtOsCy7NIofVQ39U1Pla84ya9GiQEiMXAvjDs1kSmHnfhjZJOWElxh1ps
hTlFFJl9GO3PcR27+nT8vYkpd9GvxSa/FCJzMmP9eO0d3BX5w/j9VnJ6X9lupNWi
gbEMS/l/Uce6kg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:50:13 2026 by rpki-client