Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft
File:                     L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft (raw, json)
Hash identifier:          ztHHCB8A+n5B5hWEpFCyYyCs2FTuxBnAXPNKmudJFeA=
Subject key identifier:   39:C8:CD:93:BC:A3:39:1A:8C:B8:DD:A4:62:51:55:66:D4:56:E7:B0
Authority key identifier: 2F:70:53:26:64:34:3C:B3:D2:89:70:23:A1:27:F6:0B:A9:17:A5:DD
Certificate issuer:       /CN=2f70532664343cb3d2897023a127f60ba917a5dd
Certificate serial:       019D988634CF308FEBAEE1E938AFB12503B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft
Manifest number:          0EB4
Signing time:             Thu 16 Apr 2026 23:00:25 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:25 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:25 +0000
Files and hashes:         1: L3BTJmQ0PLPSiXAjoSf2C6kXpd0.crl (hash: dR3TPforkNqf5y/obl/F6xdXiLIZi1N4OcR5dBjkeXk=)
                          2: TsNw6_rUlF3WyS0xB9lA_qFI5N0.roa (hash: o/jK1+Sozn92VWRitjnWkL3+T8fEVmw/zg1uz6fdVJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:34:cf:30:8f:eb:ae:e1:e9:38:af:b1:25:03:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f70532664343cb3d2897023a127f60ba917a5dd
        Validity
            Not Before: Apr 16 23:00:25 2026 GMT
            Not After : Apr 17 23:00:25 2026 GMT
        Subject: CN=39c8cd93bca3391a8cb8dda462515566d456e7b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e7:a2:c0:5d:6e:86:e8:94:69:40:1b:74:99:
                    8f:48:07:a1:67:cf:42:15:98:30:06:9b:08:17:3f:
                    9d:23:db:63:a6:08:b8:09:fc:05:26:4d:48:28:38:
                    45:e1:75:83:2e:09:89:90:ec:f8:a1:ea:7d:a8:8c:
                    c6:56:02:3b:ab:ff:f2:04:ea:cd:c4:9a:cf:32:49:
                    1f:e4:b6:ad:d6:b1:f1:fb:06:a2:bd:c3:88:b3:b8:
                    0a:bb:f7:ce:32:7c:20:bc:a3:25:5b:83:d9:2b:80:
                    6e:06:1d:8c:15:e4:9b:4e:49:9d:df:b5:a3:d0:29:
                    cd:32:d5:e8:77:d0:cd:d6:37:47:e2:53:71:eb:a8:
                    65:89:9b:c4:e8:05:87:5c:b2:04:d2:82:fb:02:a8:
                    bc:ed:06:88:f3:04:07:83:68:91:64:5e:69:5d:a1:
                    8b:43:dc:9d:3d:76:0b:ab:4e:26:e5:97:30:5c:6f:
                    52:23:b6:ca:16:98:f4:b1:2d:0f:52:c3:c8:49:85:
                    70:8e:6b:fb:88:70:a0:0c:59:4d:9e:19:32:60:46:
                    bd:4e:12:b6:6d:e3:61:83:39:fb:d1:46:20:5e:e7:
                    75:40:56:08:d7:d7:f9:7d:8a:a9:43:33:01:52:23:
                    b9:58:17:d9:4b:95:53:b9:41:16:ab:ef:ea:9f:0f:
                    0d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C8:CD:93:BC:A3:39:1A:8C:B8:DD:A4:62:51:55:66:D4:56:E7:B0
            X509v3 Authority Key Identifier:
                keyid:2F:70:53:26:64:34:3C:B3:D2:89:70:23:A1:27:F6:0B:A9:17:A5:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:29:79:98:46:85:cb:ec:f2:98:d5:5e:16:85:c7:05:1e:1b:
         be:4e:d1:97:be:30:8f:5d:71:58:4a:08:f9:05:e0:53:7c:95:
         8f:7d:28:a4:e9:19:43:c4:8b:6b:c1:b7:e4:6e:13:bb:16:29:
         7f:77:38:26:99:fa:2c:f6:7c:23:1f:1f:a8:59:f8:61:2c:b1:
         ed:cb:fa:6f:62:79:ee:86:8b:be:63:db:61:f9:40:23:44:19:
         2e:32:10:d9:48:27:04:ce:3b:19:59:20:c8:79:73:10:78:f8:
         e4:85:c6:6a:64:9b:2d:17:c3:a2:e8:b0:74:71:81:20:b7:af:
         3d:4b:a6:f5:9c:77:c0:76:61:0e:39:ca:4f:cb:0a:64:2e:84:
         4f:ea:71:a3:44:ca:ab:b1:81:33:f9:a8:6f:8d:60:30:48:78:
         93:0c:3f:a0:47:9b:af:c6:a8:fc:cc:ae:11:f5:86:ac:f8:6b:
         9f:7e:84:0c:e2:ca:ea:bb:27:9a:9c:76:8d:00:28:22:6c:53:
         7c:b1:46:3f:84:9d:a8:e8:90:03:85:90:d2:00:d6:f5:fd:6b:
         b4:4a:83:17:ad:c3:a8:29:2a:25:88:5d:6d:02:8b:d3:cc:e6:
         99:fd:8c:61:c3:ef:ed:c7:df:0a:e1:82:b5:47:b8:9e:5e:77:
         bb:b6:d9:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YhjTPMI/rruHpOK+xJQO5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNzA1MzI2NjQzNDNjYjNkMjg5NzAyM2ExMjdmNjBiYTkx
N2E1ZGQwHhcNMjYwNDE2MjMwMDI1WhcNMjYwNDE3MjMwMDI1WjAzMTEwLwYDVQQD
EygzOWM4Y2Q5M2JjYTMzOTFhOGNiOGRkYTQ2MjUxNTU2NmQ0NTZlN2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOeiwF1uhuiUaUAbdJmPSAehZ89C
FZgwBpsIFz+dI9tjpgi4CfwFJk1IKDhF4XWDLgmJkOz4oep9qIzGVgI7q//yBOrN
xJrPMkkf5Lat1rHx+waivcOIs7gKu/fOMnwgvKMlW4PZK4BuBh2MFeSbTkmd37Wj
0CnNMtXod9DN1jdH4lNx66hliZvE6AWHXLIE0oL7Aqi87QaI8wQHg2iRZF5pXaGL
Q9ydPXYLq04m5ZcwXG9SI7bKFpj0sS0PUsPISYVwjmv7iHCgDFlNnhkyYEa9ThK2
beNhgzn70UYgXud1QFYI19f5fYqpQzMBUiO5WBfZS5VTuUEWq+/qnw8NEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnIzZO8ozkajLjdpGJRVWbUVuewMB8GA1UdIwQY
MBaAFC9wUyZkNDyz0olwI6En9gupF6XdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDNCVEptUTBQTFBTaVhBam9TZjJDNmtYcGQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82YzU5YzAtZWNkOC00NzI3LWIxZGUt
MzE1YTc5ZjU5ZTE4LzEvTDNCVEptUTBQTFBTaVhBam9TZjJDNmtYcGQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC82YzU5YzAtZWNkOC00NzI3LWIxZGUtMzE1YTc5ZjU5ZTE4
LzEvTDNCVEptUTBQTFBTaVhBam9TZjJDNmtYcGQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSl5mEaF
y+zymNVeFoXHBR4bvk7Rl74wj11xWEoI+QXgU3yVj30opOkZQ8SLa8G35G4TuxYp
f3c4Jpn6LPZ8Ix8fqFn4YSyx7cv6b2J57oaLvmPbYflAI0QZLjIQ2UgnBM47GVkg
yHlzEHj45IXGamSbLRfDouiwdHGBILevPUum9Zx3wHZhDjnKT8sKZC6ET+pxo0TK
q7GBM/mob41gMEh4kww/oEebr8ao/MyuEfWGrPhrn36EDOLK6rsnmpx2jQAoImxT
fLFGP4SdqOiQA4WQ0gDW9f1rtEqDF63DqCkqJYhdbQKL08zmmf2MYcPv7cffCuGC
tUe4nl53u7bZow==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:35:20 2026 by rpki-client