Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
File:                     Ja5VGvC7XXl36nP2iW8l8eyij50.mft (raw, json)
Hash identifier:          7Y6sWlkE2C3hR6dP9bjyiKrn1KvorHLqA9smbhFLS6o=
Subject key identifier:   85:84:E2:89:39:30:9C:4C:E3:BD:02:38:CC:F4:A8:07:09:64:79:44
Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
Certificate issuer:       /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Certificate serial:       019D99D0A380153F6C4469AC48AD7191B5B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
Manifest number:          13F2
Signing time:             Fri 17 Apr 2026 05:01:20 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:20 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:20 +0000
Files and hashes:         1: 0vxysV8K8K16kmkjIj4RtAbD-UU.roa (hash: iyJv/+zD+LriBgc6xgCjkmEFLCEbY7odbgSqK8CwFw4=)
                          2: Ja5VGvC7XXl36nP2iW8l8eyij50.crl (hash: 97z+p98bX1/4VIpaYO/BL58hQK6yWFj0TQPcbsUbFgg=)
                          3: O0O4Xg_devCgcZBCCVmryZVuD10.roa (hash: wlEVDlOa0NYJ2GQtXHiIWwkp+eia1OUendMc/DWWx98=)
                          4: PDAogfhHzjl2Oe7BmcnlQeQBWEI.roa (hash: ckoFLIB1Tcwfzt65rV/FjUZ2mj8Mb8q8+QFTh956cAA=)
                          5: TBrPU9fPKBDqqHBRaNxMA1UegDw.roa (hash: W7DQYQNuoI+QoqbkUzHRzRQaCn8sMhNXKaSmuQh0wgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:a3:80:15:3f:6c:44:69:ac:48:ad:71:91:b5:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
        Validity
            Not Before: Apr 17 05:01:20 2026 GMT
            Not After : Apr 18 05:01:20 2026 GMT
        Subject: CN=8584e28939309c4ce3bd0238ccf4a80709647944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e1:25:ab:a4:a1:01:ac:85:8e:ae:93:fb:77:
                    1b:13:b1:77:93:2b:a2:35:ed:c5:3a:21:14:0d:33:
                    81:de:69:6c:dd:8f:9d:3f:5e:fd:02:6c:11:dd:d6:
                    39:bd:bf:ec:a8:07:7d:43:f5:ce:6c:6c:4a:bc:a2:
                    ea:65:25:fd:33:69:aa:7a:32:b1:e3:84:8f:c6:a3:
                    f0:85:e7:14:69:b0:06:6e:57:2b:2e:de:fc:76:06:
                    7f:1a:2d:e1:63:67:30:e0:4b:04:14:bf:3b:0a:30:
                    9d:9f:45:fa:36:4f:db:d8:69:1c:28:7d:f9:d5:8d:
                    8e:99:b4:9c:60:93:b0:72:02:ba:84:e1:6f:6d:57:
                    d9:7b:f7:b0:77:76:20:f0:01:ed:6a:7e:95:8f:3e:
                    2b:38:28:4a:6a:b4:50:fe:4d:20:a6:93:fb:d3:f2:
                    5f:d4:41:c5:2c:8f:5b:04:df:c0:fc:1a:33:fc:0c:
                    26:ed:18:b7:87:ab:21:76:60:07:bb:83:53:00:0a:
                    33:a8:6b:c1:47:5d:dc:0f:ef:11:e1:d6:f6:b2:ac:
                    4c:d3:e0:3a:d2:66:ca:d3:a1:d8:fd:4c:8e:48:3a:
                    30:b9:be:e2:28:94:42:0d:90:33:8b:c3:6f:a5:27:
                    53:77:5b:4f:6a:d9:ec:a9:0e:9f:ef:75:bb:13:fe:
                    96:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:84:E2:89:39:30:9C:4C:E3:BD:02:38:CC:F4:A8:07:09:64:79:44
            X509v3 Authority Key Identifier:
                keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d0:f8:f3:e5:26:2c:81:02:01:a4:03:a6:e7:47:a5:60:11:
         45:d1:0e:70:7c:cc:48:18:ab:84:72:d1:0d:1b:c1:16:a4:d6:
         dd:fe:ff:bd:9f:2d:fc:a4:31:16:dc:f2:a4:dd:9a:0f:c6:19:
         2e:f1:7f:46:c8:79:65:02:b8:8e:c1:3c:f1:71:6e:82:a7:9b:
         08:f4:7d:5b:66:4f:82:c8:8a:76:6c:99:0f:18:56:30:5a:10:
         fd:56:08:6a:78:5b:4d:8b:cd:5d:10:f2:86:c1:86:0c:6e:e1:
         3f:e2:f0:c6:3f:d6:4b:11:b9:59:44:8b:0c:0e:60:d7:66:7a:
         2b:ab:bf:27:00:d3:27:0b:06:a7:22:82:ac:ae:b9:e6:bb:63:
         9b:9b:bb:a2:b5:32:ad:aa:68:b5:5d:8e:6e:40:fd:5c:61:be:
         2b:7d:99:bc:6a:d9:6a:9d:ee:b5:15:09:b7:6e:2b:9a:4f:c0:
         28:66:67:c4:b4:67:c0:0a:e2:8f:d9:9c:cf:0e:3a:d3:5e:cc:
         32:c9:45:5f:de:a2:4e:ec:5a:b5:46:74:fb:f7:23:31:3c:6a:
         f9:5b:15:46:03:9d:19:5b:2f:c2:0d:c6:ca:42:1c:a4:57:5d:
         af:4f:a1:67:c5:05:97:c0:5a:76:cc:1a:d8:85:17:19:74:e8:
         08:47:3f:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0KOAFT9sRGmsSK1xkbWzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YWU1NTFhZjBiYjVkNzk3N2VhNzNmNjg5NmYyNWYxZWNh
MjhmOWQwHhcNMjYwNDE3MDUwMTIwWhcNMjYwNDE4MDUwMTIwWjAzMTEwLwYDVQQD
Eyg4NTg0ZTI4OTM5MzA5YzRjZTNiZDAyMzhjY2Y0YTgwNzA5NjQ3OTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOElq6ShAayFjq6T+3cbE7F3kyui
Ne3FOiEUDTOB3mls3Y+dP179AmwR3dY5vb/sqAd9Q/XObGxKvKLqZSX9M2mqejKx
44SPxqPwhecUabAGblcrLt78dgZ/Gi3hY2cw4EsEFL87CjCdn0X6Nk/b2GkcKH35
1Y2OmbScYJOwcgK6hOFvbVfZe/ewd3Yg8AHtan6Vjz4rOChKarRQ/k0gppP70/Jf
1EHFLI9bBN/A/Boz/Awm7Ri3h6shdmAHu4NTAAozqGvBR13cD+8R4db2sqxM0+A6
0mbK06HY/UyOSDowub7iKJRCDZAzi8NvpSdTd1tPatnsqQ6f73W7E/6WKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWE4ok5MJxM470COMz0qAcJZHlEMB8GA1UdIwQY
MBaAFCWuVRrwu115d+pz9olvJfHsoo+dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmE1Vkd2QzdYWGwzNm5QMmlXOGw4ZXlpajUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80MmY4MWItYzQyYy00MjU0LWFiYjkt
MjE0MmY4ZmI2NzZlLzEvSmE1Vkd2QzdYWGwzNm5QMmlXOGw4ZXlpajUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny80MmY4MWItYzQyYy00MjU0LWFiYjktMjE0MmY4ZmI2NzZl
LzEvSmE1Vkd2QzdYWGwzNm5QMmlXOGw4ZXlpajUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGtD48+Um
LIECAaQDpudHpWARRdEOcHzMSBirhHLRDRvBFqTW3f7/vZ8t/KQxFtzypN2aD8YZ
LvF/Rsh5ZQK4jsE88XFugqebCPR9W2ZPgsiKdmyZDxhWMFoQ/VYIanhbTYvNXRDy
hsGGDG7hP+Lwxj/WSxG5WUSLDA5g12Z6K6u/JwDTJwsGpyKCrK655rtjm5u7orUy
rapotV2ObkD9XGG+K32ZvGrZap3utRUJt24rmk/AKGZnxLRnwArij9mczw46017M
MslFX96iTuxatUZ0+/cjMTxq+VsVRgOdGVsvwg3GykIcpFddr0+hZ8UFl8Badswa
2IUXGXToCEc/rA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:57:58 2026 by rpki-client