Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
File:                     l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft (raw, json)
Hash identifier:          lISgQAOO7DRuA4mfA/jqKbvkrMOANJ3e7Bn2AqkSVYE=
Subject key identifier:   8D:CD:71:64:D9:F6:73:1F:E2:2E:0C:20:BD:B1:E4:70:AC:ED:8B:B3
Authority key identifier: 97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82
Certificate issuer:       /CN=974506f3f202d86849bb4dd5c7539d22b4df5182
Certificate serial:       019D9962B5054BEA04046C18327B58A0814F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
Manifest number:          0B4F
Signing time:             Fri 17 Apr 2026 03:01:16 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:16 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:16 +0000
Files and hashes:         1: JmukJcLMTVnoHK721SIDdRGwjZc.roa (hash: rPjeyMPjxCCECDKXZfovT9WYlr1pvcOFIEVBpeffV88=)
                          2: l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl (hash: uyMrDMcqlHl8XTHcYe9kMEoXuym8ngzzcPt+/boUq/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:b5:05:4b:ea:04:04:6c:18:32:7b:58:a0:81:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974506f3f202d86849bb4dd5c7539d22b4df5182
        Validity
            Not Before: Apr 17 03:01:16 2026 GMT
            Not After : Apr 18 03:01:16 2026 GMT
        Subject: CN=8dcd7164d9f6731fe22e0c20bdb1e470aced8bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:1b:46:5b:30:9f:35:97:d4:f3:e9:3a:04:85:
                    7d:3a:ad:e1:9f:e5:aa:f2:a6:65:69:2b:6a:9f:c7:
                    c8:b3:77:02:52:47:d8:96:6a:7f:cd:2d:0b:5c:11:
                    b5:2e:b3:25:57:02:9c:60:90:07:02:5f:44:3e:97:
                    a9:83:d8:a4:3f:01:d9:72:c6:5b:24:bb:33:df:39:
                    f2:2d:56:c9:f9:ea:75:e7:c9:85:fb:20:46:7c:b1:
                    ee:68:1c:83:db:7c:8c:c3:3e:cc:68:52:36:85:26:
                    66:b8:75:ff:14:04:72:b7:54:af:ed:20:39:86:a1:
                    96:50:31:c7:38:f3:02:a1:e7:25:d7:fd:af:3e:fc:
                    7a:df:d2:de:24:a7:2e:7f:45:90:c8:85:23:72:6e:
                    ec:16:2c:49:7a:b6:60:08:fc:28:33:6f:52:76:ac:
                    c4:c6:41:e0:40:3f:66:99:f7:ad:12:5f:90:db:d0:
                    c5:cc:9b:c5:34:6f:56:fa:fb:f6:91:09:2a:a4:db:
                    03:f5:41:33:fa:ce:a9:9b:98:93:4d:26:0d:df:4a:
                    5c:67:b4:54:62:57:64:4a:13:76:9c:51:26:b6:4c:
                    fd:8f:b7:6f:1f:de:d7:f4:d8:92:0c:90:fd:57:b3:
                    b4:1b:54:6d:30:31:1a:c0:ba:52:d2:aa:ff:f0:3e:
                    81:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CD:71:64:D9:F6:73:1F:E2:2E:0C:20:BD:B1:E4:70:AC:ED:8B:B3
            X509v3 Authority Key Identifier:
                keyid:97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:26:73:c0:40:17:14:27:f6:33:7f:41:13:a1:4f:4c:95:33:
         0e:5c:3d:bd:88:ae:de:5e:98:4d:0e:37:ef:6a:0f:02:6e:7a:
         59:a8:7e:ca:d0:e8:f4:89:33:4e:d9:a9:76:78:22:5c:d6:2c:
         61:72:5e:88:87:aa:b3:32:5a:02:6c:c3:64:59:1b:2e:63:d9:
         45:be:1b:b2:6a:a9:88:ad:6a:d8:9c:cf:fd:34:d6:76:b8:c0:
         9f:7b:2e:7c:1b:b4:f5:fc:b0:9c:18:50:7f:4c:e7:d5:dc:95:
         53:c4:12:eb:da:51:bc:5a:bb:80:ae:43:08:11:21:d1:c8:a0:
         08:8b:b2:46:28:34:c4:de:dc:40:87:f2:6d:35:a1:57:c8:e1:
         c3:88:6f:93:16:ed:8d:8a:25:21:a7:19:33:cd:5c:c5:dc:d9:
         59:1e:bf:3d:ca:a0:08:3e:03:58:b4:1e:4a:f0:d1:df:8c:0a:
         b7:17:27:f5:22:67:b7:4c:38:7c:83:79:92:c0:74:02:76:94:
         97:70:1f:05:27:60:71:6b:0f:86:ce:24:1f:f4:f4:08:1e:76:
         2a:50:48:60:8c:5a:f0:74:38:6b:9c:e4:ca:f4:fa:33:8e:a9:
         30:da:ad:59:4d:d2:ae:71:38:3e:c9:cc:79:5a:b2:9b:58:80:
         ad:e9:fd:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYrUFS+oEBGwYMntYoIFPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NDUwNmYzZjIwMmQ4Njg0OWJiNGRkNWM3NTM5ZDIyYjRk
ZjUxODIwHhcNMjYwNDE3MDMwMTE2WhcNMjYwNDE4MDMwMTE2WjAzMTEwLwYDVQQD
Eyg4ZGNkNzE2NGQ5ZjY3MzFmZTIyZTBjMjBiZGIxZTQ3MGFjZWQ4YmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9RtGWzCfNZfU8+k6BIV9Oq3hn+Wq
8qZlaStqn8fIs3cCUkfYlmp/zS0LXBG1LrMlVwKcYJAHAl9EPpepg9ikPwHZcsZb
JLsz3znyLVbJ+ep158mF+yBGfLHuaByD23yMwz7MaFI2hSZmuHX/FARyt1Sv7SA5
hqGWUDHHOPMCoecl1/2vPvx639LeJKcuf0WQyIUjcm7sFixJerZgCPwoM29SdqzE
xkHgQD9mmfetEl+Q29DFzJvFNG9W+vv2kQkqpNsD9UEz+s6pm5iTTSYN30pcZ7RU
YldkShN2nFEmtkz9j7dvH97X9NiSDJD9V7O0G1RtMDEawLpS0qr/8D6BfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3NcWTZ9nMf4i4MIL2x5HCs7YuzMB8GA1UdIwQY
MBaAFJdFBvPyAthoSbtN1cdTnSK031GCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDBVRzhfSUMyR2hKdTAzVngxT2RJclRmVVlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85MzBjYWYtNzZlZS00NTZjLWFmZTAt
YTI1MjU1MzI5ZGMwLzEvbDBVRzhfSUMyR2hKdTAzVngxT2RJclRmVVlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi85MzBjYWYtNzZlZS00NTZjLWFmZTAtYTI1MjU1MzI5ZGMw
LzEvbDBVRzhfSUMyR2hKdTAzVngxT2RJclRmVVlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkyZzwEAX
FCf2M39BE6FPTJUzDlw9vYiu3l6YTQ4372oPAm56Wah+ytDo9IkzTtmpdngiXNYs
YXJeiIeqszJaAmzDZFkbLmPZRb4bsmqpiK1q2JzP/TTWdrjAn3sufBu09fywnBhQ
f0zn1dyVU8QS69pRvFq7gK5DCBEh0cigCIuyRig0xN7cQIfybTWhV8jhw4hvkxbt
jYolIacZM81cxdzZWR6/PcqgCD4DWLQeSvDR34wKtxcn9SJnt0w4fIN5ksB0AnaU
l3AfBSdgcWsPhs4kH/T0CB52KlBIYIxa8HQ4a5zkyvT6M46pMNqtWU3SrnE4PsnM
eVqym1iAren9SA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:05 2026 by rpki-client