Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
File:                     a08STJHKoMyRw7m7T4rbBjJiJKE.mft (raw, json)
Hash identifier:          u3GLyiUSq6Px6D1IlagIfXqE8WompGi3yRmXPt7vw3Q=
Subject key identifier:   D3:4E:D4:F5:51:92:D1:91:3B:E2:07:2C:F7:EE:AE:53:C2:79:81:08
Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
Certificate issuer:       /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Certificate serial:       019D9AAC806C8BCBE6BE0FFC3399FD9AB775
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
Manifest number:          0E1B
Signing time:             Fri 17 Apr 2026 09:01:29 +0000
Manifest this update:     Fri 17 Apr 2026 09:01:29 +0000
Manifest next update:     Sat 18 Apr 2026 09:01:29 +0000
Files and hashes:         1: QgMG-u89Y-TWbT4Gt6ZsQgsTYNI.roa (hash: sETsQ4q/+Tu+FYDJynqCF64iSLCcXXD4r9m9lwpRbx8=)
                          2: a08STJHKoMyRw7m7T4rbBjJiJKE.crl (hash: mHFlpSN5BcjUQmfrA/MLwjmpW7ECYejoRTzuaiIYaQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 09:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ac:80:6c:8b:cb:e6:be:0f:fc:33:99:fd:9a:b7:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
        Validity
            Not Before: Apr 17 09:01:29 2026 GMT
            Not After : Apr 18 09:01:29 2026 GMT
        Subject: CN=d34ed4f55192d1913be2072cf7eeae53c2798108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ef:a1:97:47:b1:eb:21:a7:6c:c2:aa:97:5a:
                    d3:c3:50:04:32:03:8b:70:52:ba:95:2a:9e:27:44:
                    13:61:3e:b7:d5:6a:d4:26:d5:5e:54:25:54:9c:70:
                    19:3e:af:3e:a3:b0:2c:f6:83:5f:51:44:2a:e4:8d:
                    b9:8f:ec:21:60:b8:6d:af:d0:a5:75:9b:71:cd:50:
                    74:8c:3f:bb:d3:40:99:c3:c8:41:47:fe:a2:b9:c1:
                    64:86:9b:e2:f9:9d:9e:44:8a:94:fa:1e:97:1b:f5:
                    0a:e3:79:11:2a:4c:f6:66:07:13:d4:8a:3a:db:32:
                    5b:aa:de:a2:d2:07:30:f7:ee:b9:8d:36:1e:78:da:
                    39:b6:51:b3:94:a5:b6:fe:ad:8b:ed:95:56:2c:c5:
                    54:43:69:99:23:21:12:ba:ce:3f:d4:ac:7f:cf:b9:
                    e0:59:4f:84:0a:0f:77:c5:29:7f:a8:57:39:29:bd:
                    68:1c:9f:39:b9:0e:ad:8f:81:0b:e9:11:8c:67:36:
                    41:14:f3:ca:e2:f5:f0:3f:70:0d:11:e9:c9:2c:0b:
                    3a:02:b7:ba:3f:5e:3d:07:3b:a5:55:8c:76:f3:12:
                    ac:9c:e5:eb:fd:12:3c:39:e9:a6:f6:84:39:6b:dc:
                    61:f2:f2:db:b8:b0:19:da:73:fd:90:71:ca:63:99:
                    0c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4E:D4:F5:51:92:D1:91:3B:E2:07:2C:F7:EE:AE:53:C2:79:81:08
            X509v3 Authority Key Identifier:
                keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:89:42:69:06:18:7c:bc:0a:6a:dd:9d:4e:6b:e4:ee:25:d2:
         4e:23:8f:35:0b:42:69:e2:d7:93:47:22:26:79:bf:de:fc:63:
         e6:08:ce:b1:84:d0:22:61:d7:a2:81:03:81:60:c1:4e:15:89:
         5c:30:5a:66:58:38:46:cf:e2:38:59:82:5f:ca:4c:cb:78:35:
         dc:98:cd:72:77:3a:8b:83:02:d0:4b:d9:0e:36:5c:83:8b:ad:
         75:02:88:53:cb:91:f3:04:b0:62:c5:a2:5b:a7:b2:58:4b:c5:
         e2:14:c3:31:1e:f4:de:cf:ea:4d:51:0e:8d:17:d7:24:f3:66:
         b2:9f:9d:4c:2a:eb:21:e7:fd:9a:11:91:d6:a2:b9:ec:05:f3:
         96:b5:24:f6:62:66:bb:de:8e:60:ab:86:4c:a2:24:f1:18:04:
         85:e0:f7:78:13:91:4a:16:d3:ef:49:8b:88:3f:b8:28:f4:82:
         83:94:93:c0:a0:03:2e:73:e4:46:04:42:42:5b:04:e3:bc:6b:
         a7:36:d5:25:0d:18:bb:05:61:b0:79:01:6e:de:03:c5:50:ec:
         c5:73:04:0d:7f:25:a1:41:14:09:6b:50:0d:e1:37:6f:fd:00:
         02:d4:5c:ae:5d:f8:bb:86:c3:b7:cd:c5:00:4c:0f:e6:23:bd:
         0b:1e:56:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arIBsi8vmvg/8M5n9mrd1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNGYxMjRjOTFjYWEwY2M5MWMzYjliYjRmOGFkYjA2MzI2
MjI0YTEwHhcNMjYwNDE3MDkwMTI5WhcNMjYwNDE4MDkwMTI5WjAzMTEwLwYDVQQD
EyhkMzRlZDRmNTUxOTJkMTkxM2JlMjA3MmNmN2VlYWU1M2MyNzk4MTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm++hl0ex6yGnbMKql1rTw1AEMgOL
cFK6lSqeJ0QTYT631WrUJtVeVCVUnHAZPq8+o7As9oNfUUQq5I25j+whYLhtr9Cl
dZtxzVB0jD+700CZw8hBR/6iucFkhpvi+Z2eRIqU+h6XG/UK43kRKkz2ZgcT1Io6
2zJbqt6i0gcw9+65jTYeeNo5tlGzlKW2/q2L7ZVWLMVUQ2mZIyESus4/1Kx/z7ng
WU+ECg93xSl/qFc5Kb1oHJ85uQ6tj4EL6RGMZzZBFPPK4vXwP3ANEenJLAs6Are6
P149BzulVYx28xKsnOXr/RI8Oemm9oQ5a9xh8vLbuLAZ2nP9kHHKY5kMfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNO1PVRktGRO+IHLPfurlPCeYEIMB8GA1UdIwQY
MBaAFGtPEkyRyqDMkcO5u0+K2wYyYiShMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMjRhYzktYWQxYy00ZWM3LTkzNzMt
YjY1MjYyY2YxOTgzLzEvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9jMjRhYzktYWQxYy00ZWM3LTkzNzMtYjY1MjYyY2YxOTgz
LzEvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx4lCaQYY
fLwKat2dTmvk7iXSTiOPNQtCaeLXk0ciJnm/3vxj5gjOsYTQImHXooEDgWDBThWJ
XDBaZlg4Rs/iOFmCX8pMy3g13JjNcnc6i4MC0EvZDjZcg4utdQKIU8uR8wSwYsWi
W6eyWEvF4hTDMR703s/qTVEOjRfXJPNmsp+dTCrrIef9mhGR1qK57AXzlrUk9mJm
u96OYKuGTKIk8RgEheD3eBORShbT70mLiD+4KPSCg5STwKADLnPkRgRCQlsE47xr
pzbVJQ0YuwVhsHkBbt4DxVDsxXMEDX8loUEUCWtQDeE3b/0AAtRcrl34u4bDt83F
AEwP5iO9Cx5WPw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:28:57 2026 by rpki-client