Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
File:                     L46D7v5_FLnkSQo27r2IHhY8zBs.mft (raw, json)
Hash identifier:          6Y8Op+rCl1cKRdHFkqBXNm09iVEB+au+63xgAH3QTfI=
Subject key identifier:   65:40:2B:D6:9B:23:39:27:03:07:86:DD:60:23:34:35:3F:5C:80:F0
Authority key identifier: 2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B
Certificate issuer:       /CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
Certificate serial:       019D9A74A0FAD5ADD235818F11DF14695D84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
Manifest number:          1608
Signing time:             Fri 17 Apr 2026 08:00:27 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:27 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:27 +0000
Files and hashes:         1: L46D7v5_FLnkSQo27r2IHhY8zBs.crl (hash: SdjmUREqjyAu25BvuLwyeVTnSLCIIibpDz7eI0v39gI=)
                          2: tNjZH9-x1g7HqUfJGt0InZjB23w.roa (hash: RRoUsNS1EP4tRlbwAyzXgXLAhFiDzTM4MGWjbgquZiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:a0:fa:d5:ad:d2:35:81:8f:11:df:14:69:5d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
        Validity
            Not Before: Apr 17 08:00:27 2026 GMT
            Not After : Apr 18 08:00:27 2026 GMT
        Subject: CN=65402bd69b233927030786dd602334353f5c80f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1d:da:c5:ab:bc:a4:13:a6:08:56:65:c8:5f:
                    2b:6b:ce:4d:dd:3a:e6:2e:05:aa:68:1d:25:09:62:
                    ce:9c:26:1a:d9:c2:c2:bb:8b:c0:97:ce:16:79:16:
                    54:9a:85:c1:04:2a:8f:78:2f:d0:6e:02:d7:44:5b:
                    fd:b3:40:45:80:a9:8d:9c:91:aa:87:9d:d3:09:ee:
                    0d:1e:61:04:26:6c:7f:aa:f1:e4:54:a5:37:5e:e7:
                    71:0a:7d:3b:6d:93:52:a5:03:c8:54:0a:6f:93:67:
                    44:7f:b5:25:07:a7:9c:77:ea:83:c5:67:6f:20:31:
                    02:55:7e:10:6f:08:8b:e0:90:4e:c7:b8:83:fd:0d:
                    8d:21:11:38:66:e9:c1:c4:06:ea:e8:f2:35:93:0e:
                    1f:d2:6e:8d:50:97:a0:a0:f9:f1:bb:50:51:69:6e:
                    5e:ae:49:b8:b2:e3:f5:dd:b3:70:67:a8:ac:3a:57:
                    a0:bb:4b:a6:1e:db:e6:12:24:a1:5e:5e:14:e3:86:
                    d5:97:a3:be:7f:a4:d0:c4:2e:4e:23:93:76:d3:48:
                    04:78:02:8b:1a:3b:fc:83:53:2a:a2:84:9e:98:6a:
                    ed:c2:c0:f7:5f:cb:e1:30:f0:1f:76:c7:87:b1:e6:
                    9f:ae:84:5d:d0:73:f3:6f:9b:65:79:96:3f:1a:94:
                    91:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:40:2B:D6:9B:23:39:27:03:07:86:DD:60:23:34:35:3F:5C:80:F0
            X509v3 Authority Key Identifier:
                keyid:2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:01:33:fb:95:a5:9f:da:cd:8f:1b:d5:2a:f3:21:24:08:d6:
         d1:78:e0:41:a0:c3:7b:2a:3f:12:27:42:0c:8a:15:49:7a:20:
         9a:6b:80:61:2e:e1:80:15:30:a3:95:93:6c:cc:a9:70:d0:ec:
         54:ee:0a:39:6e:6c:63:44:7d:4b:54:6e:24:ec:0a:ca:df:b3:
         5b:62:51:6d:49:42:f4:7e:98:0d:0c:85:cb:ac:ce:94:2d:e8:
         a0:8c:ec:2b:47:45:5b:a3:18:d4:57:50:d5:a6:41:c2:3c:4f:
         7b:cd:1e:05:49:36:38:69:a7:7e:f1:f8:d9:71:9f:cd:01:2b:
         58:1a:a5:1c:35:85:d2:0f:26:ae:ca:26:ef:de:48:f9:8a:6c:
         6d:6b:82:f6:9c:cc:96:a7:5f:aa:84:4f:b1:90:c1:6a:a1:cb:
         cc:1e:09:09:7a:e0:ac:dc:1d:ab:20:c9:55:83:93:06:fc:5c:
         b9:b7:5f:28:f5:24:67:ed:38:a1:06:d2:3a:e1:3a:7e:f0:19:
         e9:d5:29:29:56:c7:92:be:db:77:d0:96:e6:b4:d3:d0:05:23:
         96:44:1d:e0:48:cc:a1:7b:47:2d:c9:f3:d7:eb:8d:8c:08:52:
         42:6f:89:a6:aa:83:f9:f5:18:4c:87:2d:a2:9c:e8:c0:a7:bb:
         b0:92:54:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adKD61a3SNYGPEd8UaV2EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOGU4M2VlZmU3ZjE0YjllNDQ5MGEzNmVlYmQ4ODFlMTYz
Y2NjMWIwHhcNMjYwNDE3MDgwMDI3WhcNMjYwNDE4MDgwMDI3WjAzMTEwLwYDVQQD
Eyg2NTQwMmJkNjliMjMzOTI3MDMwNzg2ZGQ2MDIzMzQzNTNmNWM4MGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx3axau8pBOmCFZlyF8ra85N3Trm
LgWqaB0lCWLOnCYa2cLCu4vAl84WeRZUmoXBBCqPeC/QbgLXRFv9s0BFgKmNnJGq
h53TCe4NHmEEJmx/qvHkVKU3XudxCn07bZNSpQPIVApvk2dEf7UlB6ecd+qDxWdv
IDECVX4QbwiL4JBOx7iD/Q2NIRE4ZunBxAbq6PI1kw4f0m6NUJegoPnxu1BRaW5e
rkm4suP13bNwZ6isOlegu0umHtvmEiShXl4U44bVl6O+f6TQxC5OI5N200gEeAKL
Gjv8g1MqooSemGrtwsD3X8vhMPAfdseHseafroRd0HPzb5tleZY/GpSRWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVAK9abIzknAweG3WAjNDU/XIDwMB8GA1UdIwQY
MBaAFC+Og+7+fxS55EkKNu69iB4WPMwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDQ2RDd2NV9GTG5rU1FvMjdyMklIaFk4ekJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lYjI2ZjctMTMwMy00MjEwLWE5ZDgt
MWViM2I4YTk0MWY3LzEvTDQ2RDd2NV9GTG5rU1FvMjdyMklIaFk4ekJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9lYjI2ZjctMTMwMy00MjEwLWE5ZDgtMWViM2I4YTk0MWY3
LzEvTDQ2RDd2NV9GTG5rU1FvMjdyMklIaFk4ekJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQAEz+5Wl
n9rNjxvVKvMhJAjW0XjgQaDDeyo/EidCDIoVSXogmmuAYS7hgBUwo5WTbMypcNDs
VO4KOW5sY0R9S1RuJOwKyt+zW2JRbUlC9H6YDQyFy6zOlC3ooIzsK0dFW6MY1FdQ
1aZBwjxPe80eBUk2OGmnfvH42XGfzQErWBqlHDWF0g8mrsom795I+YpsbWuC9pzM
lqdfqoRPsZDBaqHLzB4JCXrgrNwdqyDJVYOTBvxcubdfKPUkZ+04oQbSOuE6fvAZ
6dUpKVbHkr7bd9CW5rTT0AUjlkQd4EjMoXtHLcnz1+uNjAhSQm+JpqqD+fUYTIct
opzowKe7sJJUgA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:59:21 2026 by rpki-client