Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft
File:                     t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft (raw, json)
Hash identifier:          7OG/vOjvP78+cgOhgpfDxaTE3vPtu85AiwIh8dsUBJE=
Subject key identifier:   6F:44:38:5C:00:D1:95:ED:64:A2:5A:C0:E2:40:E5:3C:4B:68:55:19
Authority key identifier: B7:9C:2D:E3:EB:30:91:80:F4:F5:A5:AF:2D:56:FE:42:58:78:46:48
Certificate issuer:       /CN=b79c2de3eb309180f4f5a5af2d56fe4258784648
Certificate serial:       019D9AAC4FDF674E8C0FA204866D6D15C801
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft
Manifest number:          09D4
Signing time:             Fri 17 Apr 2026 09:01:16 +0000
Manifest this update:     Fri 17 Apr 2026 09:01:16 +0000
Manifest next update:     Sat 18 Apr 2026 09:01:16 +0000
Files and hashes:         1: O3jJqwByUIEUnhHlOFee0Yzt6gg.roa (hash: TX2mHbMp/LUKoxPthyOcmH+FA50JbLoahkLETRZ/Uwg=)
                          2: t5wt4-swkYD09aWvLVb-Qlh4Rkg.crl (hash: qa5fhJT9piGtd3D5sAfPNggoXk1hfZksP/2yX3moFCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 09:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ac:4f:df:67:4e:8c:0f:a2:04:86:6d:6d:15:c8:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79c2de3eb309180f4f5a5af2d56fe4258784648
        Validity
            Not Before: Apr 17 09:01:16 2026 GMT
            Not After : Apr 18 09:01:16 2026 GMT
        Subject: CN=6f44385c00d195ed64a25ac0e240e53c4b685519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:27:8a:ad:5f:6d:5d:de:d3:15:48:7b:31:d5:
                    07:4c:f9:72:1b:f0:92:a3:58:5c:18:3c:c8:97:3e:
                    9d:51:37:2c:eb:d2:4c:39:62:bc:87:01:63:58:d7:
                    63:4a:27:0c:2c:21:c6:28:3e:2f:8d:c0:a0:5c:65:
                    26:30:1f:f0:d7:44:43:38:04:bc:05:8e:19:59:02:
                    b1:ac:3d:e2:a3:93:3f:10:f2:ba:24:c1:55:94:bb:
                    45:13:f6:e6:99:02:fa:eb:48:61:83:96:88:a1:1c:
                    2d:a5:6f:9a:1a:be:f1:63:d0:22:da:10:fe:39:ab:
                    14:09:5d:2b:b0:16:e0:8d:19:86:e4:ea:b5:80:74:
                    41:14:95:a9:0e:d3:e4:c0:87:05:3e:60:1b:3b:bf:
                    ae:2d:e7:ce:dc:28:ca:7f:f4:0b:0e:88:ff:f1:68:
                    6a:7c:96:a2:a3:5a:bc:b4:e9:e1:12:fb:61:b6:d0:
                    92:8d:b3:2e:7e:d9:b1:23:6f:2d:f7:66:52:44:f1:
                    7a:85:ca:7a:cf:78:1e:64:2f:30:76:f3:e0:94:93:
                    f2:84:7f:59:e0:ae:e4:16:bd:f5:db:cb:4b:9b:05:
                    87:be:99:c6:79:97:f0:43:3a:5f:58:b4:a5:92:e9:
                    52:7c:98:33:ad:fa:5e:4b:bd:d3:3c:d9:b1:71:d7:
                    0a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:44:38:5C:00:D1:95:ED:64:A2:5A:C0:E2:40:E5:3C:4B:68:55:19
            X509v3 Authority Key Identifier:
                keyid:B7:9C:2D:E3:EB:30:91:80:F4:F5:A5:AF:2D:56:FE:42:58:78:46:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:82:37:95:89:d9:ba:a7:68:6d:89:3a:a9:50:28:20:9a:21:
         6f:33:cb:39:f8:fd:f2:f3:20:84:e4:41:e6:f2:ce:39:ff:49:
         35:17:1c:2a:1b:4f:38:e0:49:3d:75:2a:e4:e3:11:69:77:2b:
         65:79:60:ed:75:89:c4:71:ef:8d:5d:e8:5e:bf:4a:59:60:b0:
         49:3c:91:02:d4:8d:d3:b8:98:b0:6a:53:9d:62:f9:00:cb:4b:
         b6:84:ea:b2:b7:09:ea:1d:38:75:6f:95:d6:ef:56:8d:8f:f7:
         b8:6b:0c:f9:a0:af:cb:80:7e:97:2a:24:1f:35:f5:6d:82:3a:
         59:c2:7f:82:87:49:97:cd:63:17:13:62:30:b2:d2:ed:24:33:
         5a:c2:3d:f8:e3:26:79:a8:9b:5f:da:e6:39:72:4d:fc:88:c4:
         06:92:02:f4:f0:1e:5c:1e:c4:8f:c0:34:08:3b:ea:ab:4f:10:
         48:c4:00:e5:c3:15:5e:e9:ab:cf:66:af:94:3b:b9:fa:77:97:
         0f:28:7a:d6:f4:d1:54:ea:bd:47:d3:23:da:11:ac:74:89:5f:
         85:c9:a4:e7:7a:5d:f0:7c:42:df:ee:ec:18:ce:c6:d7:19:c2:
         ef:d4:d1:e2:1d:84:a3:81:27:9c:48:1f:9e:57:06:10:33:ac:
         56:52:ea:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arE/fZ06MD6IEhm1tFcgBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OWMyZGUzZWIzMDkxODBmNGY1YTVhZjJkNTZmZTQyNTg3
ODQ2NDgwHhcNMjYwNDE3MDkwMTE2WhcNMjYwNDE4MDkwMTE2WjAzMTEwLwYDVQQD
Eyg2ZjQ0Mzg1YzAwZDE5NWVkNjRhMjVhYzBlMjQwZTUzYzRiNjg1NTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ieKrV9tXd7TFUh7MdUHTPlyG/CS
o1hcGDzIlz6dUTcs69JMOWK8hwFjWNdjSicMLCHGKD4vjcCgXGUmMB/w10RDOAS8
BY4ZWQKxrD3io5M/EPK6JMFVlLtFE/bmmQL660hhg5aIoRwtpW+aGr7xY9Ai2hD+
OasUCV0rsBbgjRmG5Oq1gHRBFJWpDtPkwIcFPmAbO7+uLefO3CjKf/QLDoj/8Whq
fJaio1q8tOnhEvthttCSjbMuftmxI28t92ZSRPF6hcp6z3geZC8wdvPglJPyhH9Z
4K7kFr3128tLmwWHvpnGeZfwQzpfWLSlkulSfJgzrfpeS73TPNmxcdcKAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9EOFwA0ZXtZKJawOJA5TxLaFUZMB8GA1UdIwQY
MBaAFLecLePrMJGA9PWlry1W/kJYeEZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDV3dDQtc3drWUQwOWFXdkxWYi1RbGg0UmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81NmEwMDYtOTE5Zi00ODdjLTkzMTYt
MGJiNmE4M2Y5ZjQwLzEvdDV3dDQtc3drWUQwOWFXdkxWYi1RbGg0UmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81NmEwMDYtOTE5Zi00ODdjLTkzMTYtMGJiNmE4M2Y5ZjQw
LzEvdDV3dDQtc3drWUQwOWFXdkxWYi1RbGg0UmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4I3lYnZ
uqdobYk6qVAoIJohbzPLOfj98vMghORB5vLOOf9JNRccKhtPOOBJPXUq5OMRaXcr
ZXlg7XWJxHHvjV3oXr9KWWCwSTyRAtSN07iYsGpTnWL5AMtLtoTqsrcJ6h04dW+V
1u9WjY/3uGsM+aCvy4B+lyokHzX1bYI6WcJ/godJl81jFxNiMLLS7SQzWsI9+OMm
eaibX9rmOXJN/IjEBpIC9PAeXB7Ej8A0CDvqq08QSMQA5cMVXumrz2avlDu5+neX
Dyh61vTRVOq9R9Mj2hGsdIlfhcmk53pd8HxC3+7sGM7G1xnC79TR4h2Eo4EnnEgf
nlcGEDOsVlLq5g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:39:24 2026 by rpki-client