Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
File:                     B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft (raw, json)
Hash identifier:          mO5inCv4cIw7V6vja5yIznIapIvScxqq6aCNil4jSJQ=
Subject key identifier:   EC:4E:3D:05:3B:AC:13:B2:36:F2:39:DF:F1:9B:5F:D2:F4:71:D8:D1
Authority key identifier: 07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
Certificate issuer:       /CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Certificate serial:       019D99D05E86E87E8CC935A351AF161DCA05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
Manifest number:          0F82
Signing time:             Fri 17 Apr 2026 05:01:02 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:02 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:02 +0000
Files and hashes:         1: B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl (hash: uw/erECG/o/+KDUxe3li3lbsgtP7XvtT0VmJyRT0cVM=)
                          2: l9fKwFyrFQX0Hu9a5zckE9kVhmM.roa (hash: iDegQAjVriQALUYA5V4FoFzaFt+77MbzNuGJvgXPxkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:5e:86:e8:7e:8c:c9:35:a3:51:af:16:1d:ca:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
        Validity
            Not Before: Apr 17 05:01:02 2026 GMT
            Not After : Apr 18 05:01:02 2026 GMT
        Subject: CN=ec4e3d053bac13b236f239dff19b5fd2f471d8d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9a:3e:25:ae:0e:99:8f:d5:42:f9:c9:02:fd:
                    be:9e:e8:99:ed:84:25:9b:ab:9f:fb:bd:65:28:a4:
                    06:2f:17:2d:95:81:75:04:10:f8:8c:4e:6d:0d:ea:
                    fb:c9:9a:42:1a:a3:7f:7a:7a:a5:ee:b2:52:53:cc:
                    32:e7:5a:da:ff:d1:29:39:27:b2:fc:2e:5e:78:8c:
                    5b:97:23:e4:88:3b:ed:1c:ba:5d:5c:01:00:63:35:
                    e8:73:8e:0e:d3:5e:2f:6d:42:52:ff:05:4e:c4:0c:
                    16:8c:e9:64:b2:b1:ec:f2:93:68:3d:f9:f6:79:b0:
                    a6:f6:5b:78:46:ed:4b:18:31:af:66:c7:fb:57:20:
                    da:d0:79:6f:76:8b:75:da:7f:99:fb:fc:a5:2d:c6:
                    f8:8d:ce:06:8d:c9:9a:d6:15:35:83:f7:cb:b6:f5:
                    c3:1a:44:49:62:52:35:ac:2a:4e:b9:07:76:76:d9:
                    72:79:2e:ce:bc:72:3b:8a:a2:f1:a8:fb:ed:7b:b7:
                    b6:99:11:ce:4f:ea:92:b6:5b:d9:65:32:15:78:15:
                    3f:3a:b6:43:03:4a:4e:49:18:20:42:21:b0:ea:72:
                    a5:c1:3d:6e:62:18:93:89:9d:ad:c9:f2:fe:00:4e:
                    0d:52:44:5f:4e:6d:c2:d1:c8:be:5e:36:59:9d:4e:
                    b2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4E:3D:05:3B:AC:13:B2:36:F2:39:DF:F1:9B:5F:D2:F4:71:D8:D1
            X509v3 Authority Key Identifier:
                keyid:07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:1b:c1:49:03:5c:22:6c:6a:d0:a6:f3:59:16:6d:06:54:f5:
         e3:53:6f:dd:eb:cf:c1:4b:b9:20:2e:49:44:d4:22:67:b9:9b:
         4f:28:b8:22:7d:0a:6f:4c:4f:ec:39:c7:e9:d5:24:ca:1f:97:
         4f:4f:dc:3f:bf:02:03:00:1f:98:6e:8f:ab:25:aa:77:b1:3d:
         27:a6:af:e0:33:15:f4:4b:ee:73:31:b2:15:4b:77:b8:50:4b:
         0e:11:fc:20:92:58:df:f4:f9:05:de:b2:70:1d:8b:9f:2d:73:
         65:26:3e:e9:7e:7d:16:2a:ef:21:81:a7:63:08:b4:57:2f:a4:
         05:d4:6b:1a:16:82:82:fd:66:fa:fd:bf:4e:84:c2:f7:e6:f2:
         6b:c3:79:44:ba:1d:79:f2:55:a2:e5:22:1d:84:3a:f0:51:01:
         35:3c:0f:01:b8:c4:64:7f:b4:8c:c6:53:2b:d7:1f:9e:5f:81:
         08:f5:88:7e:1f:cb:40:01:c2:c9:ab:07:89:3f:f0:f9:b4:29:
         a0:db:41:ac:05:78:97:ab:a1:52:36:f3:73:de:1d:c0:cf:82:
         3b:0c:ca:39:6d:fa:e4:72:b4:69:37:32:32:8b:a4:e0:97:e3:
         35:44:0f:08:6e:3e:68:84:7a:1c:57:6f:4a:26:65:8b:73:08:
         f7:5f:fc:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0F6G6H6MyTWjUa8WHcoFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NzQzMDA2YThlOWQwZTFiZjIwNTU3YWQ1OTY0MDc4ZmU4
MTI2ZWYwHhcNMjYwNDE3MDUwMTAyWhcNMjYwNDE4MDUwMTAyWjAzMTEwLwYDVQQD
EyhlYzRlM2QwNTNiYWMxM2IyMzZmMjM5ZGZmMTliNWZkMmY0NzFkOGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5o+Ja4OmY/VQvnJAv2+nuiZ7YQl
m6uf+71lKKQGLxctlYF1BBD4jE5tDer7yZpCGqN/enql7rJSU8wy51ra/9EpOSey
/C5eeIxblyPkiDvtHLpdXAEAYzXoc44O014vbUJS/wVOxAwWjOlksrHs8pNoPfn2
ebCm9lt4Ru1LGDGvZsf7VyDa0Hlvdot12n+Z+/ylLcb4jc4Gjcma1hU1g/fLtvXD
GkRJYlI1rCpOuQd2dtlyeS7OvHI7iqLxqPvte7e2mRHOT+qStlvZZTIVeBU/OrZD
A0pOSRggQiGw6nKlwT1uYhiTiZ2tyfL+AE4NUkRfTm3C0ci+XjZZnU6yFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxOPQU7rBOyNvI53/GbX9L0cdjRMB8GA1UdIwQY
MBaAFAd0MAao6dDhvyBVetWWQHj+gSbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjNRd0JxanAwT0dfSUZWNjFaWkFlUDZCSnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82NzljYWItMmNmNC00MGE1LWI1ZWUt
MjQ2NjQ2ZTlkYjFlLzEvQjNRd0JxanAwT0dfSUZWNjFaWkFlUDZCSnU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy82NzljYWItMmNmNC00MGE1LWI1ZWUtMjQ2NjQ2ZTlkYjFl
LzEvQjNRd0JxanAwT0dfSUZWNjFaWkFlUDZCSnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhvBSQNc
Imxq0KbzWRZtBlT141Nv3evPwUu5IC5JRNQiZ7mbTyi4In0Kb0xP7DnH6dUkyh+X
T0/cP78CAwAfmG6PqyWqd7E9J6av4DMV9EvuczGyFUt3uFBLDhH8IJJY3/T5Bd6y
cB2Lny1zZSY+6X59FirvIYGnYwi0Vy+kBdRrGhaCgv1m+v2/ToTC9+bya8N5RLod
efJVouUiHYQ68FEBNTwPAbjEZH+0jMZTK9cfnl+BCPWIfh/LQAHCyasHiT/w+bQp
oNtBrAV4l6uhUjbzc94dwM+COwzKOW365HK0aTcyMouk4JfjNUQPCG4+aIR6HFdv
SiZli3MI91/8Mw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:51 2026 by rpki-client