Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
File:                     egvN7ozoOcTSBBPIYkI8ygT9xgo.mft (raw, json)
Hash identifier:          wNS9OQKzcr6v50RpLhqYKK6YWldHrjSXzNdfrSsuPgI=
Subject key identifier:   51:E3:6E:4F:61:38:0D:1D:DF:98:E3:27:64:49:14:C6:F6:78:6D:F6
Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
Certificate issuer:       /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Certificate serial:       019D9B50DB3C28FEBC732C08028FA46AD2F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
Manifest number:          1224
Signing time:             Fri 17 Apr 2026 12:01:00 +0000
Manifest this update:     Fri 17 Apr 2026 12:01:00 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:00 +0000
Files and hashes:         1: 53H4kGtC_SbzrsI-Vzd9TCGN8wY.roa (hash: rLB3dTRqcK5WY3gJz81sl+g0PUHVo5VwKbPsiJ+N2Ok=)
                          2: EP-EAgqiDi1Uxc1mLP43RrvoWe0.roa (hash: kIJAbYf7/TAQT5Y3mOwU5/SUvXYx6069NZi8uJFH8FY=)
                          3: E_XmM5IBFyFELEnknKVAb_189qw.roa (hash: Mlub1KTpnHaSVLTaB/n4LoTON1L2ATvKiA1EUAmQpUg=)
                          4: OIq2o5hKdaMH_2PTUWzIlIKfs2g.roa (hash: gefzhJXJU82C+eFShlNs7p/wt0aYa1LR779QRT2gD0A=)
                          5: c0q33XIOQrm5W1qjd8fw_F2VySw.roa (hash: PxSJmR26K9n2xvyDwPVrN57pqz+8nMCKwGzKiK0FnUE=)
                          6: egvN7ozoOcTSBBPIYkI8ygT9xgo.crl (hash: /c++TC1XyBiv7Rhh7Wc+yGkh+UceNaic/uiqqmL1IZw=)
                          7: oIFu7Vss_FsSg6ba6OZTOOzWH40.roa (hash: Om63+Vuo/DpGh5dNs3H906zkOfMO055KyU7UPPEoe9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:50:db:3c:28:fe:bc:73:2c:08:02:8f:a4:6a:d2:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
        Validity
            Not Before: Apr 17 12:01:00 2026 GMT
            Not After : Apr 18 12:01:00 2026 GMT
        Subject: CN=51e36e4f61380d1ddf98e327644914c6f6786df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:89:29:ef:9a:4a:c1:2e:88:3d:8b:c4:43:20:
                    ba:dc:f7:48:48:47:ea:41:17:03:9d:69:97:f2:b6:
                    cb:a9:36:b2:b1:1f:00:84:81:a6:78:43:d1:d3:6f:
                    ca:ab:11:8d:21:a0:96:dc:3a:82:ac:14:1b:06:25:
                    61:a3:87:8a:38:21:5e:5a:40:11:3d:14:e6:a3:27:
                    b7:c1:ea:18:84:c6:fd:3f:3e:5e:80:8a:d9:40:63:
                    7c:f7:56:91:6f:ac:d9:ed:b2:25:ce:c6:cf:87:77:
                    1d:83:3c:5c:93:bb:3c:7c:79:e7:22:2a:8c:a7:cb:
                    1a:34:38:d0:dd:31:91:d5:81:e9:e6:a6:5f:61:72:
                    32:d5:ea:c6:66:2d:e8:3d:37:01:93:7b:3d:68:43:
                    a9:85:15:2e:d2:e1:30:9e:ae:40:35:fb:df:15:11:
                    8b:43:56:c0:3e:7b:c4:10:38:c5:c2:a7:44:f7:c2:
                    c9:32:f4:df:4e:52:95:c5:ee:90:0e:77:e5:f9:62:
                    1a:67:ae:f2:35:a3:5a:79:ec:bb:bb:68:30:48:6e:
                    e1:95:18:c0:19:68:0c:76:64:9e:78:1c:c1:9f:85:
                    cc:96:41:57:25:64:17:3e:4f:97:10:cc:48:50:be:
                    ed:9b:7a:43:6e:19:6b:39:4d:98:e8:11:a5:18:25:
                    6f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E3:6E:4F:61:38:0D:1D:DF:98:E3:27:64:49:14:C6:F6:78:6D:F6
            X509v3 Authority Key Identifier:
                keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:7a:17:40:14:f8:94:fd:e7:63:4a:d6:cb:4e:01:49:a2:46:
         49:7f:00:9a:84:bb:3a:cc:e3:98:19:71:46:2c:0e:91:77:09:
         72:fc:a5:a6:7d:a1:88:6e:dd:87:49:03:04:da:8b:63:a8:bd:
         c6:11:a0:38:a2:e8:fe:b8:cd:d5:66:77:55:5b:43:1d:00:55:
         78:2f:c3:f3:46:52:f2:ba:20:98:8f:67:25:47:1f:24:ae:d8:
         78:b7:c6:45:18:d9:d5:df:c2:ea:08:bf:22:08:59:9b:4a:8f:
         5e:67:5c:82:8a:aa:46:99:c4:be:b1:dc:5e:c0:8b:30:f5:07:
         2b:e4:a5:2d:0e:95:2e:c4:a5:7e:2f:97:ae:a3:db:0a:3b:52:
         a8:ee:63:de:aa:1c:b1:8b:bf:01:fa:0f:cd:47:e3:cd:c6:17:
         a1:2e:0d:c2:6d:80:a8:57:0b:73:c8:a0:32:7b:f4:e7:af:eb:
         2a:e5:b1:c8:ae:6c:13:d3:0f:87:28:1b:9d:11:64:dd:52:94:
         65:f3:65:3e:2e:79:f3:90:05:96:dd:6e:d8:b2:b4:dd:24:24:
         14:e7:7b:3f:45:1f:00:2d:45:01:e7:0b:45:f7:e0:86:90:b4:
         93:0c:80:ff:b3:37:f6:f4:ec:7d:86:2c:92:36:8c:ad:1c:9a:
         8a:07:78:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUNs8KP68cywIAo+katLzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMGJjZGVlOGNlODM5YzRkMjA0MTNjODYyNDIzY2NhMDRm
ZGM2MGEwHhcNMjYwNDE3MTIwMTAwWhcNMjYwNDE4MTIwMTAwWjAzMTEwLwYDVQQD
Eyg1MWUzNmU0ZjYxMzgwZDFkZGY5OGUzMjc2NDQ5MTRjNmY2Nzg2ZGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYkp75pKwS6IPYvEQyC63PdISEfq
QRcDnWmX8rbLqTaysR8AhIGmeEPR02/KqxGNIaCW3DqCrBQbBiVho4eKOCFeWkAR
PRTmoye3weoYhMb9Pz5egIrZQGN891aRb6zZ7bIlzsbPh3cdgzxck7s8fHnnIiqM
p8saNDjQ3TGR1YHp5qZfYXIy1erGZi3oPTcBk3s9aEOphRUu0uEwnq5ANfvfFRGL
Q1bAPnvEEDjFwqdE98LJMvTfTlKVxe6QDnfl+WIaZ67yNaNaeey7u2gwSG7hlRjA
GWgMdmSeeBzBn4XMlkFXJWQXPk+XEMxIUL7tm3pDbhlrOU2Y6BGlGCVvzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHjbk9hOA0d35jjJ2RJFMb2eG32MB8GA1UdIwQY
MBaAFHoLze6M6DnE0gQTyGJCPMoE/cYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWd2Tjdvem9PY1RTQkJQSVlrSTh5Z1Q5eGdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81NGU5MTItYjUwMy00NTRjLWE0MzMt
NGRlZjU3MzY1MTY5LzEvZWd2Tjdvem9PY1RTQkJQSVlrSTh5Z1Q5eGdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81NGU5MTItYjUwMy00NTRjLWE0MzMtNGRlZjU3MzY1MTY5
LzEvZWd2Tjdvem9PY1RTQkJQSVlrSTh5Z1Q5eGdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHoXQBT4
lP3nY0rWy04BSaJGSX8AmoS7OszjmBlxRiwOkXcJcvylpn2hiG7dh0kDBNqLY6i9
xhGgOKLo/rjN1WZ3VVtDHQBVeC/D80ZS8rogmI9nJUcfJK7YeLfGRRjZ1d/C6gi/
IghZm0qPXmdcgoqqRpnEvrHcXsCLMPUHK+SlLQ6VLsSlfi+XrqPbCjtSqO5j3qoc
sYu/AfoPzUfjzcYXoS4Nwm2AqFcLc8igMnv056/rKuWxyK5sE9MPhygbnRFk3VKU
ZfNlPi5585AFlt1u2LK03SQkFOd7P0UfAC1FAecLRffghpC0kwyA/7M39vTsfYYs
kjaMrRyaigd4pQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:42:41 2026 by rpki-client