Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
File:                     A7zvl2ZC1UtLShmY8LP_SIRakm0.mft (raw, json)
Hash identifier:          ZiBGji2UBPyKn6d0hH3Ca+eAJDBoywCFJwjBUUYPVaU=
Subject key identifier:   56:A9:5D:5A:14:53:BB:8B:82:7F:07:C0:49:16:D7:71:E8:94:7D:63
Authority key identifier: 03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D
Certificate issuer:       /CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
Certificate serial:       019D98BDA6A66C6E0968AC191F5E66E04F6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
Manifest number:          12BB
Signing time:             Fri 17 Apr 2026 00:00:58 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:58 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:58 +0000
Files and hashes:         1: A7zvl2ZC1UtLShmY8LP_SIRakm0.crl (hash: o0V3fDlQ+3zTMdwKgHwpAUmN95w/rUKu20NdVy9ma3w=)
                          2: EHGORi86xgHpvwoBk068qPN7iqE.roa (hash: YNshrsxOuHcW6UCsa9oev2SY9StlDKp1vMjVv/oevCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:a6:a6:6c:6e:09:68:ac:19:1f:5e:66:e0:4f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
        Validity
            Not Before: Apr 17 00:00:58 2026 GMT
            Not After : Apr 18 00:00:58 2026 GMT
        Subject: CN=56a95d5a1453bb8b827f07c04916d771e8947d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:38:8d:a5:37:4a:a8:bd:64:79:83:ef:22:eb:
                    2b:9e:99:59:8a:17:34:a8:ba:3d:21:d6:06:f9:bf:
                    1c:0e:da:cc:df:25:4b:9d:a7:df:f0:a7:25:e4:65:
                    86:1f:d3:66:ad:5c:79:cf:34:a6:46:3f:d8:db:f4:
                    09:cc:e8:2c:7b:ce:6f:49:19:db:c6:8c:c8:17:aa:
                    21:ce:90:4a:d4:98:35:a8:ab:8a:2e:2a:1b:8d:bb:
                    f7:21:05:31:30:7c:32:ff:c1:7c:fb:e0:9a:32:a4:
                    1f:21:19:67:f3:cf:03:89:9e:1f:1d:f2:3d:f0:0d:
                    84:8e:58:f1:4e:2e:bb:b4:07:17:cd:3d:45:1b:ed:
                    ea:37:e5:fb:73:5b:d7:08:73:56:8e:f6:a7:28:28:
                    26:3e:b5:75:5d:48:ff:ea:45:3a:8c:97:7b:61:df:
                    48:f9:4b:99:65:ba:66:58:7e:04:cc:7d:e9:4b:f9:
                    e3:68:3e:2a:89:a0:48:5e:aa:e4:38:43:f1:34:b9:
                    54:1f:09:f2:5d:f8:05:ca:15:35:28:5a:25:5c:54:
                    53:85:52:40:12:73:2f:97:0d:e9:ab:f2:d8:8a:fc:
                    9d:c4:62:97:80:5a:3e:f2:d1:d4:89:a0:8e:d5:ab:
                    79:85:d1:bd:c8:db:c3:16:06:96:43:f8:09:50:72:
                    f2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A9:5D:5A:14:53:BB:8B:82:7F:07:C0:49:16:D7:71:E8:94:7D:63
            X509v3 Authority Key Identifier:
                keyid:03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d3:38:27:2c:b1:21:c2:9f:37:c0:2d:d6:2d:71:55:b3:71:
         af:9f:9a:9b:0e:0f:68:a7:4d:f1:83:21:96:35:2c:06:f5:93:
         ea:f0:f5:e6:70:9e:b5:e8:96:2c:7e:12:5c:46:8d:e5:95:9b:
         da:64:4a:49:eb:d4:ab:0d:03:28:b1:3e:c5:d7:fc:5c:d9:95:
         7e:f8:f9:a9:71:9d:6c:ea:23:86:c6:7a:84:a3:0b:69:a6:88:
         30:4b:2c:58:55:06:de:da:2e:12:40:a1:5f:77:6d:85:45:76:
         cb:15:82:f0:ab:11:00:46:a5:6c:29:62:af:21:65:c6:50:7a:
         06:77:68:6f:26:a2:d6:ba:aa:88:7a:8c:76:76:95:b8:e9:23:
         25:45:ba:32:65:ea:ef:19:f5:93:98:0b:93:f7:27:61:1d:28:
         a5:54:a3:01:7f:88:31:2f:69:7e:93:dc:73:bb:51:77:88:76:
         04:96:87:97:ec:32:3d:ca:bb:04:26:a5:18:01:14:99:08:a4:
         f7:be:4a:9d:1e:2e:e4:e2:a3:b3:a7:c8:0c:cd:63:1c:65:56:
         8a:1e:0f:ee:83:9f:f1:3b:bc:b6:b7:75:90:1e:2e:f0:e4:96:
         a7:26:c3:e0:63:45:7f:97:07:14:cf:c4:c5:06:d9:45:80:b0:
         d6:0d:7b:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvaambG4JaKwZH15m4E9tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYmNlZjk3NjY0MmQ1NGI0YjRhMTk5OGYwYjNmZjQ4ODQ1
YTkyNmQwHhcNMjYwNDE3MDAwMDU4WhcNMjYwNDE4MDAwMDU4WjAzMTEwLwYDVQQD
Eyg1NmE5NWQ1YTE0NTNiYjhiODI3ZjA3YzA0OTE2ZDc3MWU4OTQ3ZDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTiNpTdKqL1keYPvIusrnplZihc0
qLo9IdYG+b8cDtrM3yVLnaff8Kcl5GWGH9NmrVx5zzSmRj/Y2/QJzOgse85vSRnb
xozIF6ohzpBK1Jg1qKuKLiobjbv3IQUxMHwy/8F8++CaMqQfIRln888DiZ4fHfI9
8A2EjljxTi67tAcXzT1FG+3qN+X7c1vXCHNWjvanKCgmPrV1XUj/6kU6jJd7Yd9I
+UuZZbpmWH4EzH3pS/njaD4qiaBIXqrkOEPxNLlUHwnyXfgFyhU1KFolXFRThVJA
EnMvlw3pq/LYivydxGKXgFo+8tHUiaCO1at5hdG9yNvDFgaWQ/gJUHLygQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFapXVoUU7uLgn8HwEkW13HolH1jMB8GA1UdIwQY
MBaAFAO875dmQtVLS0oZmPCz/0iEWpJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTd6dmwyWkMxVXRMU2htWThMUF9TSVJha20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9jZjZiMDctMDNiMi00ZWJlLWI5NjYt
ZjFlOWJmMmJmZjIxLzEvQTd6dmwyWkMxVXRMU2htWThMUF9TSVJha20wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9jZjZiMDctMDNiMi00ZWJlLWI5NjYtZjFlOWJmMmJmZjIx
LzEvQTd6dmwyWkMxVXRMU2htWThMUF9TSVJha20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNM4Jyyx
IcKfN8At1i1xVbNxr5+amw4PaKdN8YMhljUsBvWT6vD15nCeteiWLH4SXEaN5ZWb
2mRKSevUqw0DKLE+xdf8XNmVfvj5qXGdbOojhsZ6hKMLaaaIMEssWFUG3touEkCh
X3dthUV2yxWC8KsRAEalbCliryFlxlB6Bndobyai1rqqiHqMdnaVuOkjJUW6MmXq
7xn1k5gLk/cnYR0opVSjAX+IMS9pfpPcc7tRd4h2BJaHl+wyPcq7BCalGAEUmQik
975KnR4u5OKjs6fIDM1jHGVWih4P7oOf8Tu8trd1kB4u8OSWpybD4GNFf5cHFM/E
xQbZRYCw1g174A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:28:18 2026 by rpki-client