Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
File:                     zeICwBqCkO6VMl06Tzf_QOmWSPo.mft (raw, json)
Hash identifier:          toQrlBDA+HXDsKiuflH/k1yy/Kw+aQZwjAcdUHuKMvo=
Subject key identifier:   99:C1:21:C6:2B:3F:78:C4:3F:80:0D:04:56:71:18:1B:22:7B:EB:B3
Authority key identifier: CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
Certificate issuer:       /CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Certificate serial:       019D98F4D8AA23E5426991D7C8AA7EFF7F63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
Manifest number:          1218
Signing time:             Fri 17 Apr 2026 01:01:16 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:16 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:16 +0000
Files and hashes:         1: zeICwBqCkO6VMl06Tzf_QOmWSPo.crl (hash: aU+OnXhJqUIAibiW0roTP2AiUiMnoTLZYnh8b6nHv+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:d8:aa:23:e5:42:69:91:d7:c8:aa:7e:ff:7f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
        Validity
            Not Before: Apr 17 01:01:16 2026 GMT
            Not After : Apr 18 01:01:16 2026 GMT
        Subject: CN=99c121c62b3f78c43f800d045671181b227bebb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f4:01:a9:37:ad:af:2b:82:85:aa:fd:a8:c4:
                    b7:39:06:b7:ed:7e:b5:30:f9:15:7e:ce:a9:43:fe:
                    5f:a5:4b:bf:a3:c6:41:18:00:e6:43:d6:f3:9e:a5:
                    ed:85:c7:bc:43:01:54:1f:0d:20:d6:a1:b2:a1:48:
                    b8:33:a6:69:03:ab:6f:e2:f7:a3:d7:52:d8:6c:82:
                    90:2b:9d:5c:d4:6a:71:c1:5c:7d:75:d7:f6:70:55:
                    f9:40:df:3d:e5:bd:02:b1:b2:46:40:cd:39:56:c1:
                    15:ca:39:31:1d:19:cb:94:9e:96:a0:b6:6a:94:eb:
                    75:fc:a7:10:34:e7:8e:cf:eb:74:c1:86:6c:ee:b9:
                    8b:fd:94:68:eb:37:70:cf:4b:2f:ac:bd:f7:58:31:
                    59:66:b2:6e:75:26:11:f3:b3:22:9b:00:66:c0:80:
                    a2:46:98:47:92:00:29:cc:17:2b:26:b2:a2:d5:ff:
                    e7:d7:cc:cb:ac:50:87:f3:b3:41:71:05:e1:e5:fc:
                    6a:da:ed:ca:b4:fb:89:21:e0:48:13:f6:75:e2:ee:
                    d5:be:26:d9:ba:4d:d1:1f:af:89:eb:5e:82:1f:37:
                    37:ca:ed:cb:62:c0:ff:85:08:b4:61:27:6d:79:92:
                    01:69:3a:c4:b3:60:19:83:ba:58:66:cc:cb:fa:70:
                    8a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C1:21:C6:2B:3F:78:C4:3F:80:0D:04:56:71:18:1B:22:7B:EB:B3
            X509v3 Authority Key Identifier:
                keyid:CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:0c:28:2b:fc:b3:26:3c:14:fe:de:21:bc:a3:c7:57:8b:43:
         aa:46:c9:ce:a5:d6:67:eb:dd:21:3e:5c:bc:05:cd:c3:31:04:
         0a:2b:9f:c8:eb:b3:ac:14:62:73:45:b0:d3:92:13:ff:34:66:
         8a:e6:4d:72:b6:1a:1b:b5:be:49:43:a9:77:f1:77:aa:01:6a:
         dc:21:46:37:40:aa:96:00:dc:6f:f0:76:0a:23:cc:43:bd:9b:
         f1:a2:d5:74:ab:04:db:3d:03:5b:80:34:07:4c:35:68:d4:74:
         9e:de:51:a5:ff:2b:3f:ac:fd:f6:10:02:96:26:ba:f7:f6:c0:
         af:05:57:6a:a8:e5:8b:05:e4:10:9a:6a:14:7c:52:3a:97:21:
         5a:6f:aa:aa:06:45:02:cd:32:d6:be:a0:2e:3e:df:82:bc:f7:
         04:2f:4f:ae:a7:1c:b8:bd:f1:1b:fc:4d:63:17:f7:17:38:03:
         cf:b7:94:19:ff:bc:a4:0f:14:5c:8b:6c:0d:45:d2:bd:45:31:
         b0:c3:b5:ab:88:f9:4c:89:03:cc:bd:16:9e:61:cc:57:f9:f2:
         a9:de:a6:d5:0d:bb:79:76:b9:b9:56:8a:9d:c5:21:01:56:8e:
         e2:3b:94:bd:b1:6a:ed:a7:e2:9f:47:7d:26:c0:38:26:27:87:
         0b:0e:fa:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9NiqI+VCaZHXyKp+/39jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZTIwMmMwMWE4MjkwZWU5NTMyNWQzYTRmMzdmZjQwZTk5
NjQ4ZmEwHhcNMjYwNDE3MDEwMTE2WhcNMjYwNDE4MDEwMTE2WjAzMTEwLwYDVQQD
Eyg5OWMxMjFjNjJiM2Y3OGM0M2Y4MDBkMDQ1NjcxMTgxYjIyN2JlYmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/QBqTetryuChar9qMS3OQa37X61
MPkVfs6pQ/5fpUu/o8ZBGADmQ9bznqXthce8QwFUHw0g1qGyoUi4M6ZpA6tv4vej
11LYbIKQK51c1GpxwVx9ddf2cFX5QN895b0CsbJGQM05VsEVyjkxHRnLlJ6WoLZq
lOt1/KcQNOeOz+t0wYZs7rmL/ZRo6zdwz0svrL33WDFZZrJudSYR87MimwBmwICi
RphHkgApzBcrJrKi1f/n18zLrFCH87NBcQXh5fxq2u3KtPuJIeBIE/Z14u7VvibZ
uk3RH6+J616CHzc3yu3LYsD/hQi0YSdteZIBaTrEs2AZg7pYZszL+nCK5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnBIcYrP3jEP4ANBFZxGBsie+uzMB8GA1UdIwQY
MBaAFM3iAsAagpDulTJdOk83/0Dplkj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemVJQ3dCcUNrTzZWTWwwNlR6Zl9RT21XU1BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wZmNlNGUtMTBkZi00ZjlkLWJjOGYt
OTQzNzgyYzc5ZDBjLzEvemVJQ3dCcUNrTzZWTWwwNlR6Zl9RT21XU1BvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8wZmNlNGUtMTBkZi00ZjlkLWJjOGYtOTQzNzgyYzc5ZDBj
LzEvemVJQ3dCcUNrTzZWTWwwNlR6Zl9RT21XU1BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApQwoK/yz
JjwU/t4hvKPHV4tDqkbJzqXWZ+vdIT5cvAXNwzEECiufyOuzrBRic0Ww05IT/zRm
iuZNcrYaG7W+SUOpd/F3qgFq3CFGN0CqlgDcb/B2CiPMQ72b8aLVdKsE2z0DW4A0
B0w1aNR0nt5Rpf8rP6z99hAClia69/bArwVXaqjliwXkEJpqFHxSOpchWm+qqgZF
As0y1r6gLj7fgrz3BC9PrqccuL3xG/xNYxf3FzgDz7eUGf+8pA8UXItsDUXSvUUx
sMO1q4j5TIkDzL0WnmHMV/nyqd6m1Q27eXa5uVaKncUhAVaO4juUvbFq7afin0d9
JsA4JieHCw763g==
-----END CERTIFICATE-----