Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft
File:                     jRvvcwUnquHs-PswhWWdb9_u15c.mft (raw, json)
Hash identifier:          Sn+vggyJkV9z+VP/U4vbi/K7df2YnjLoroVGDcVyWmM=
Subject key identifier:   18:24:86:93:D5:04:DA:AA:44:9F:AC:68:EF:CD:C4:C1:D0:69:71:4F
Authority key identifier: 8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97
Certificate issuer:       /CN=8d1bef730527aae1ecf8fb3085659d6fdfeed797
Certificate serial:       019D996220FC36980548E44653E4D39159AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft
Manifest number:          08E4
Signing time:             Fri 17 Apr 2026 03:00:38 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:38 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:38 +0000
Files and hashes:         1: jRvvcwUnquHs-PswhWWdb9_u15c.crl (hash: VR4FaI7zIb4qoYgKk5EZivc0LTDpbU7o2dQkbo64fVc=)
                          2: nykf0zrTCoPd1iM-xAnh89_VJaM.roa (hash: MbWss0wBitxLQn7qC9neXRi6hi6X3oH2hMY4Zjhb/A4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:20:fc:36:98:05:48:e4:46:53:e4:d3:91:59:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d1bef730527aae1ecf8fb3085659d6fdfeed797
        Validity
            Not Before: Apr 17 03:00:38 2026 GMT
            Not After : Apr 18 03:00:38 2026 GMT
        Subject: CN=18248693d504daaa449fac68efcdc4c1d069714f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:66:b1:b0:69:38:c9:fd:3e:b3:94:5b:5c:69:
                    bb:c1:af:f9:5d:39:05:0c:a0:b1:b3:ba:ca:f4:43:
                    dd:37:4f:42:a4:fd:eb:45:52:2c:0a:7a:77:db:53:
                    70:37:94:69:74:21:e2:8c:09:7e:f9:78:e7:fe:92:
                    4f:e8:ca:10:33:4f:64:7e:b8:f3:ae:3a:e9:fd:f7:
                    0c:dc:71:cc:69:b5:e6:2a:5a:28:c9:01:28:a7:78:
                    b7:88:67:0d:87:94:7b:47:b6:66:42:db:a7:cc:ce:
                    9b:e7:61:f5:c5:c0:b4:ae:e2:29:8d:00:90:6e:41:
                    cf:c2:b0:b7:cd:95:e5:3a:0a:0a:14:e5:92:80:3b:
                    f6:69:d1:7c:c9:b5:32:69:ec:35:c4:b1:90:16:56:
                    b1:82:78:21:f8:06:d5:8b:95:98:6b:87:0c:6f:17:
                    55:0d:44:f3:f3:8e:64:dd:b6:51:c8:8a:32:c9:c3:
                    e4:56:5e:59:c7:a6:96:17:e4:13:3b:31:d0:9f:f2:
                    09:11:8e:dd:9b:21:b6:4f:fb:f5:b5:81:99:df:94:
                    d7:22:7a:56:86:d5:ed:50:e5:b3:2a:33:54:d2:91:
                    47:a4:27:7b:c7:4b:87:c7:1b:2a:18:0e:1e:fc:ea:
                    c2:28:16:1c:bd:eb:a6:1c:4a:7d:d0:82:25:56:06:
                    db:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:24:86:93:D5:04:DA:AA:44:9F:AC:68:EF:CD:C4:C1:D0:69:71:4F
            X509v3 Authority Key Identifier:
                keyid:8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:81:c3:8f:15:29:f7:1b:ff:c3:fc:d9:6a:b5:b4:b8:87:47:
         5b:c7:cd:dc:f6:27:71:24:92:68:8a:88:db:a8:d1:79:2e:81:
         b7:d4:43:24:1d:f3:31:e5:f4:9e:64:b7:bc:0d:2f:7e:c4:eb:
         cb:06:4e:cd:f9:bd:65:e3:73:0d:77:d7:c6:e0:48:f1:1a:4e:
         49:16:76:db:b5:af:04:1f:7d:8c:f0:96:29:a0:c6:f3:36:35:
         95:85:1c:27:ed:be:02:75:9b:f1:b7:15:83:52:0e:44:78:5f:
         61:f4:7b:38:f7:ab:06:0c:67:5f:85:8d:25:88:79:31:b0:37:
         2f:da:8e:fe:95:06:7a:aa:ef:b6:a7:ec:3a:8d:89:be:a9:c6:
         f1:07:48:01:a0:e5:29:1f:f3:72:d2:d7:5f:b9:13:bc:92:9f:
         05:1b:4a:67:9e:1a:3c:23:43:f6:e4:6c:37:ed:61:bf:81:ca:
         fc:0b:21:47:03:44:e5:9f:30:ce:89:2d:61:db:f2:ee:9d:54:
         4e:20:e3:2f:07:91:79:48:dc:cb:e1:d9:8f:6c:5f:a2:cb:6a:
         03:3f:dd:30:b6:8c:49:83:79:08:23:ad:8c:e3:70:d6:c4:f0:
         1f:a4:2f:a6:cd:7d:bd:b8:48:89:e8:21:6c:40:e1:7b:54:38:
         89:5a:b4:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYiD8NpgFSORGU+TTkVmtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMWJlZjczMDUyN2FhZTFlY2Y4ZmIzMDg1NjU5ZDZmZGZl
ZWQ3OTcwHhcNMjYwNDE3MDMwMDM4WhcNMjYwNDE4MDMwMDM4WjAzMTEwLwYDVQQD
EygxODI0ODY5M2Q1MDRkYWFhNDQ5ZmFjNjhlZmNkYzRjMWQwNjk3MTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGaxsGk4yf0+s5RbXGm7wa/5XTkF
DKCxs7rK9EPdN09CpP3rRVIsCnp321NwN5RpdCHijAl++Xjn/pJP6MoQM09kfrjz
rjrp/fcM3HHMabXmKlooyQEop3i3iGcNh5R7R7ZmQtunzM6b52H1xcC0ruIpjQCQ
bkHPwrC3zZXlOgoKFOWSgDv2adF8ybUyaew1xLGQFlaxgngh+AbVi5WYa4cMbxdV
DUTz845k3bZRyIoyycPkVl5Zx6aWF+QTOzHQn/IJEY7dmyG2T/v1tYGZ35TXInpW
htXtUOWzKjNU0pFHpCd7x0uHxxsqGA4e/OrCKBYcveumHEp90IIlVgbblwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgkhpPVBNqqRJ+saO/NxMHQaXFPMB8GA1UdIwQY
MBaAFI0b73MFJ6rh7Pj7MIVlnW/f7teXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJ2dmN3VW5xdUhzLVBzd2hXV2RiOV91MTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iNzE2YWQtZWQwNC00ZGU0LWI5OTQt
NGFhYjJkNjhmYTVhLzEvalJ2dmN3VW5xdUhzLVBzd2hXV2RiOV91MTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iNzE2YWQtZWQwNC00ZGU0LWI5OTQtNGFhYjJkNjhmYTVh
LzEvalJ2dmN3VW5xdUhzLVBzd2hXV2RiOV91MTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIHDjxUp
9xv/w/zZarW0uIdHW8fN3PYncSSSaIqI26jReS6Bt9RDJB3zMeX0nmS3vA0vfsTr
ywZOzfm9ZeNzDXfXxuBI8RpOSRZ227WvBB99jPCWKaDG8zY1lYUcJ+2+AnWb8bcV
g1IORHhfYfR7OPerBgxnX4WNJYh5MbA3L9qO/pUGeqrvtqfsOo2JvqnG8QdIAaDl
KR/zctLXX7kTvJKfBRtKZ54aPCND9uRsN+1hv4HK/AshRwNE5Z8wzoktYdvy7p1U
TiDjLweReUjcy+HZj2xfostqAz/dMLaMSYN5CCOtjONw1sTwH6Qvps19vbhIiegh
bEDhe1Q4iVq0dg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:12 2026 by rpki-client