Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
File:                     t0zj88XlovnYuKTHeoNh-KIW860.mft (raw, json)
Hash identifier:          ugZIlX9Ob7d2QxORfQtX5+D/PeJleN/szNCjKuBEpGs=
Subject key identifier:   D6:D8:B4:FA:CA:D9:09:9E:A1:3B:30:BA:61:C1:95:E5:D7:27:97:D7
Authority key identifier: B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
Certificate issuer:       /CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Certificate serial:       019D99621CAE185D3CE87A9A8FA50972C55F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
Manifest number:          13DD
Signing time:             Fri 17 Apr 2026 03:00:37 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:37 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:37 +0000
Files and hashes:         1: 7yXVbkDIped5AlVJWBLhNwB93qU.roa (hash: U+X2A4hl4OztYccmnndX5mgP9l1pKYkV+aIE4TVtE9o=)
                          2: Lac9mI8_0GODDuYUWUFmqBSt9mc.roa (hash: CCm67OvIIp58ZZddyH8lbNoIHH7qksW59/3/CScmsJ8=)
                          3: g4mflD0Y4dFeWIYXrHeIdFF1Tzk.roa (hash: LWoE8PLWl9I6/87QZF5e3VTAa9OFMyf8LK0mAIwQhYU=)
                          4: t0zj88XlovnYuKTHeoNh-KIW860.crl (hash: /1hp6KsFUAOh949DtiLd2xC62oUCOTCHWhGoebDCeGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:1c:ae:18:5d:3c:e8:7a:9a:8f:a5:09:72:c5:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
        Validity
            Not Before: Apr 17 03:00:37 2026 GMT
            Not After : Apr 18 03:00:37 2026 GMT
        Subject: CN=d6d8b4facad9099ea13b30ba61c195e5d72797d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0c:7e:21:2a:ad:39:71:39:01:2f:df:71:9f:
                    ee:d8:db:62:98:77:fe:1b:f4:ba:45:64:1a:74:0c:
                    31:2f:a1:3f:4c:67:5e:a1:38:02:26:36:a2:6a:73:
                    e5:5d:7d:8a:36:04:cc:12:2f:81:67:3c:1b:cf:db:
                    a9:15:c6:73:d0:ca:a0:8b:40:cb:14:6e:c7:5b:a0:
                    41:4d:f6:0a:e4:cd:c9:a6:2d:a9:72:51:01:a7:db:
                    b3:d8:ba:76:1c:30:5f:97:20:99:b3:55:5d:c6:ff:
                    cc:9a:49:6e:24:52:98:44:46:1f:02:3b:d6:14:c1:
                    a3:fc:d7:6f:1c:45:a7:c6:d0:21:bc:f0:97:ec:92:
                    80:91:10:e7:f2:ec:4d:b9:05:f1:93:e9:ed:d7:42:
                    94:17:86:9f:28:f0:ce:98:c0:dc:ad:2f:ea:67:02:
                    4f:43:a9:ff:57:74:e3:e9:3d:34:60:97:eb:85:fe:
                    ef:f8:a4:e3:bb:5a:fb:a2:8f:c0:cd:26:f9:1c:3b:
                    02:2a:d4:c0:89:df:a1:fb:36:2e:92:16:d9:85:21:
                    a4:df:c9:56:02:81:27:10:dc:eb:45:74:5c:ed:c8:
                    b4:65:55:34:1f:06:66:3e:99:0d:48:06:30:23:ba:
                    1f:74:c7:31:d6:1c:c6:22:c1:a9:88:43:09:94:c3:
                    8a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D8:B4:FA:CA:D9:09:9E:A1:3B:30:BA:61:C1:95:E5:D7:27:97:D7
            X509v3 Authority Key Identifier:
                keyid:B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:0d:3a:33:cc:e9:c2:86:ae:b2:3e:27:6f:e2:c0:fa:70:b2:
         96:0f:a1:dc:37:fc:df:92:c6:73:26:77:5e:20:44:56:3c:f7:
         5d:cf:33:25:34:78:a9:85:53:c0:26:c3:d1:3a:e3:66:54:52:
         73:a1:35:5e:f3:ad:e0:12:27:82:9a:15:7b:0a:e8:7c:2c:50:
         20:91:10:3d:6d:4a:e6:1b:06:90:3d:7d:65:91:e8:fa:90:3f:
         96:3b:1c:92:41:5f:50:97:bc:d7:ae:9a:7f:f7:a6:23:18:f3:
         9e:92:01:20:cd:69:d6:3d:81:db:c1:7d:03:25:00:fe:d8:7e:
         8f:e4:17:4a:78:a9:7b:58:96:cd:a6:cc:d9:5a:10:15:f5:6d:
         8d:65:c5:1c:99:ad:72:20:23:12:19:f2:48:09:be:2e:ab:e1:
         a0:82:6c:e0:82:c7:35:e0:16:87:a5:52:40:1b:d1:35:c4:6c:
         d7:49:aa:d6:15:9d:af:e2:56:fb:bd:d2:59:73:be:40:a5:7a:
         6b:3f:6b:8e:bb:e3:b9:4c:46:66:43:00:78:f3:a2:bd:e7:6d:
         a2:e7:37:75:e4:fa:4f:0d:ac:eb:6e:e5:f3:a3:10:f8:0e:a6:
         6f:92:6d:00:8b:a7:d1:71:e5:81:fd:0f:b4:86:00:1f:a5:9e:
         c7:05:e4:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYhyuGF086Hqaj6UJcsVfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NGNlM2YzYzVlNWEyZjlkOGI4YTRjNzdhODM2MWY4YTIx
NmYzYWQwHhcNMjYwNDE3MDMwMDM3WhcNMjYwNDE4MDMwMDM3WjAzMTEwLwYDVQQD
EyhkNmQ4YjRmYWNhZDkwOTllYTEzYjMwYmE2MWMxOTVlNWQ3Mjc5N2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wx+ISqtOXE5AS/fcZ/u2NtimHf+
G/S6RWQadAwxL6E/TGdeoTgCJjaianPlXX2KNgTMEi+BZzwbz9upFcZz0Mqgi0DL
FG7HW6BBTfYK5M3Jpi2pclEBp9uz2Lp2HDBflyCZs1Vdxv/MmkluJFKYREYfAjvW
FMGj/NdvHEWnxtAhvPCX7JKAkRDn8uxNuQXxk+nt10KUF4afKPDOmMDcrS/qZwJP
Q6n/V3Tj6T00YJfrhf7v+KTju1r7oo/AzSb5HDsCKtTAid+h+zYukhbZhSGk38lW
AoEnENzrRXRc7ci0ZVU0HwZmPpkNSAYwI7ofdMcx1hzGIsGpiEMJlMOKnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbYtPrK2QmeoTswumHBleXXJ5fXMB8GA1UdIwQY
MBaAFLdM4/PF5aL52Likx3qDYfiiFvOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDB6ajg4WGxvdm5ZdUtUSGVvTmgtS0lXODYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hYzY4MWYtMDVkMi00MDQ1LWFlMTAt
NWViZGQ5ZTI4ODdjLzEvdDB6ajg4WGxvdm5ZdUtUSGVvTmgtS0lXODYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9hYzY4MWYtMDVkMi00MDQ1LWFlMTAtNWViZGQ5ZTI4ODdj
LzEvdDB6ajg4WGxvdm5ZdUtUSGVvTmgtS0lXODYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUA06M8zp
woausj4nb+LA+nCylg+h3Df835LGcyZ3XiBEVjz3Xc8zJTR4qYVTwCbD0TrjZlRS
c6E1XvOt4BIngpoVewrofCxQIJEQPW1K5hsGkD19ZZHo+pA/ljsckkFfUJe8166a
f/emIxjznpIBIM1p1j2B28F9AyUA/th+j+QXSnipe1iWzabM2VoQFfVtjWXFHJmt
ciAjEhnySAm+LqvhoIJs4ILHNeAWh6VSQBvRNcRs10mq1hWdr+JW+73SWXO+QKV6
az9rjrvjuUxGZkMAePOivedtouc3deT6Tw2s627l86MQ+A6mb5JtAIun0XHlgf0P
tIYAH6WexwXkwQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:47 2026 by rpki-client