Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
File:                     mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft (raw, json)
Hash identifier:          F5PgYc5dhYQMG1xOSB7m4BN8ffsSS7KLBn39TttcVik=
Subject key identifier:   C8:7B:D5:1C:6C:74:91:BE:59:26:F1:4D:8D:AB:6C:AB:6B:59:BA:24
Authority key identifier: 9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1
Certificate issuer:       /CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
Certificate serial:       019D9818D5553CD8924B24DF3F0461D7DFE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
Manifest number:          1604
Signing time:             Thu 16 Apr 2026 21:00:57 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:57 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:57 +0000
Files and hashes:         1: 5SVfxpykBtGisNJ_fWGkKKRqAXE.roa (hash: majDLjjox5+IIo91UtEcKltEO1Uytp4RkTkKzUgxr90=)
                          2: SEsp20Y0XXvSsNuzjgdPL2liaKA.roa (hash: 9EBYTUo7KyjxRP8OrlDLn9ulnQLVPYnZMVUIu94H7LM=)
                          3: jsoEFjjxqQANYzwZkbp4FKNWNvc.roa (hash: oqsei08QZLwI9OpLYx05MZOPBm5p1aTMIy+k0VyYQTc=)
                          4: mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl (hash: k4hD8Iux+HaML+6pwMKSTc7vuiLNzjbU71NqY6fpnVU=)
                          5: yJEHfcJRgkFuNVIuhioT_sp3dfg.roa (hash: bQzhx47BAwnINhp4yvgiQNvYfmYBagWvwXbBTrw311U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:d5:55:3c:d8:92:4b:24:df:3f:04:61:d7:df:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
        Validity
            Not Before: Apr 16 21:00:57 2026 GMT
            Not After : Apr 17 21:00:57 2026 GMT
        Subject: CN=c87bd51c6c7491be5926f14d8dab6cab6b59ba24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:78:e2:f5:b6:e3:c9:c5:f8:10:64:49:33:f2:
                    a8:4e:09:b1:8d:05:e5:c6:5d:71:de:ab:29:39:ef:
                    ef:12:d6:02:b9:f8:b8:26:33:c0:39:dd:82:f5:df:
                    3d:c3:c8:b9:65:36:18:00:d3:95:53:08:a1:1a:83:
                    1b:b5:26:00:72:97:a2:c6:1f:c2:d9:99:e8:c4:a4:
                    a1:0b:f7:d4:b5:5e:f5:da:6f:c3:fe:2b:31:28:18:
                    72:5a:ea:22:9b:43:a9:2a:c5:ac:a1:9a:1a:ac:65:
                    36:a8:22:45:a1:78:c3:bd:55:11:d8:8a:9b:ce:c6:
                    bb:84:98:e3:0b:f0:b0:55:b2:d9:88:0b:d0:80:e4:
                    fc:0a:e5:b6:f8:c1:f1:4a:3c:59:c6:fb:dc:6a:f1:
                    8e:d9:26:7d:bc:a4:af:85:70:6c:e3:27:93:9f:1b:
                    45:fb:10:10:c9:ab:33:88:a1:9b:e8:79:f6:08:b6:
                    36:85:b7:d7:d5:f5:5c:9d:a5:54:d7:09:3b:0c:ab:
                    be:79:9d:1d:38:0c:f4:38:f4:2c:5a:f4:74:a5:94:
                    de:b7:51:2f:46:4a:5d:60:42:db:68:6c:50:5d:70:
                    1c:6f:99:77:6a:72:04:89:c6:a2:52:29:f3:1a:4f:
                    fa:c9:47:01:ae:f3:4c:18:c2:71:a8:bd:df:00:53:
                    3f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7B:D5:1C:6C:74:91:BE:59:26:F1:4D:8D:AB:6C:AB:6B:59:BA:24
            X509v3 Authority Key Identifier:
                keyid:9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:f9:2d:c2:04:9b:3f:df:d4:3d:2c:65:bc:f6:97:76:0e:90:
         d2:7a:ae:89:66:81:9d:90:fe:52:64:87:66:1c:18:ae:d5:8b:
         e9:2e:50:cb:ee:a7:07:62:f7:c0:61:7f:5f:53:7b:a2:fb:de:
         08:18:b9:d2:96:aa:ff:16:9e:cb:eb:60:ef:e7:80:d4:a9:c7:
         63:4b:e4:dd:4c:8b:7f:02:61:a8:71:90:fe:b7:bb:1f:3b:5d:
         87:db:65:27:70:99:e3:d5:08:eb:2c:95:88:82:a2:6b:4d:c0:
         0c:85:e6:59:17:0a:39:6b:df:14:60:d2:97:42:6c:1e:96:96:
         57:c6:ba:bb:e1:d7:c8:6d:0f:2a:28:9a:77:4d:54:35:4e:b9:
         87:9f:5e:3c:81:ba:18:6e:d9:50:47:86:f6:fb:0d:05:0f:9d:
         82:62:ba:4c:32:45:f5:5a:40:e5:5b:e3:33:f7:a3:ae:b8:d9:
         9d:2f:68:57:2d:39:fa:59:52:57:66:d0:4a:ca:ce:e2:77:b8:
         29:bc:c1:65:ee:3f:e4:68:bf:e3:68:e6:ba:c2:c2:2d:df:8e:
         07:87:d9:60:d8:57:88:87:87:b6:e9:46:c2:cb:a3:2c:23:77:
         12:d1:58:b1:12:cb:e9:0f:69:52:5d:8f:0c:8a:38:47:3f:23:
         7d:0a:8d:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGNVVPNiSSyTfPwRh19/hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhN2VkZWFjMGM2YzIwZWE0OWQ0OTI5OTBlNDg1ODU0MWQx
OTBmZjEwHhcNMjYwNDE2MjEwMDU3WhcNMjYwNDE3MjEwMDU3WjAzMTEwLwYDVQQD
EyhjODdiZDUxYzZjNzQ5MWJlNTkyNmYxNGQ4ZGFiNmNhYjZiNTliYTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnji9bbjycX4EGRJM/KoTgmxjQXl
xl1x3qspOe/vEtYCufi4JjPAOd2C9d89w8i5ZTYYANOVUwihGoMbtSYAcpeixh/C
2ZnoxKShC/fUtV712m/D/isxKBhyWuoim0OpKsWsoZoarGU2qCJFoXjDvVUR2Iqb
zsa7hJjjC/CwVbLZiAvQgOT8CuW2+MHxSjxZxvvcavGO2SZ9vKSvhXBs4yeTnxtF
+xAQyasziKGb6Hn2CLY2hbfX1fVcnaVU1wk7DKu+eZ0dOAz0OPQsWvR0pZTet1Ev
RkpdYELbaGxQXXAcb5l3anIEicaiUinzGk/6yUcBrvNMGMJxqL3fAFM/4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMh71RxsdJG+WSbxTY2rbKtrWbokMB8GA1UdIwQY
MBaAFJp+3qwMbCDqSdSSmQ5IWFQdGQ/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW43ZXJBeHNJT3BKMUpLWkRraFlWQjBaRF9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81YThlMDQtZGQwNy00MzVhLWIxYmYt
YWRlZGNhYTNkMjZlLzEvbW43ZXJBeHNJT3BKMUpLWkRraFlWQjBaRF9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My81YThlMDQtZGQwNy00MzVhLWIxYmYtYWRlZGNhYTNkMjZl
LzEvbW43ZXJBeHNJT3BKMUpLWkRraFlWQjBaRF9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvktwgSb
P9/UPSxlvPaXdg6Q0nquiWaBnZD+UmSHZhwYrtWL6S5Qy+6nB2L3wGF/X1N7ovve
CBi50paq/xaey+tg7+eA1KnHY0vk3UyLfwJhqHGQ/re7Hztdh9tlJ3CZ49UI6yyV
iIKia03ADIXmWRcKOWvfFGDSl0JsHpaWV8a6u+HXyG0PKiiad01UNU65h59ePIG6
GG7ZUEeG9vsNBQ+dgmK6TDJF9VpA5VvjM/ejrrjZnS9oVy05+llSV2bQSsrO4ne4
KbzBZe4/5Gi/42jmusLCLd+OB4fZYNhXiIeHtulGwsujLCN3EtFYsRLL6Q9pUl2P
DIo4Rz8jfQqNpQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:22:00 2026 by rpki-client