Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
File:                     98ci2uJwhooZg4p81JnVnCZ52JE.mft (raw, json)
Hash identifier:          hvCg5vw4TL9eb6MwS/uTkEAyuBxbkFW1jUYWXAY6PI8=
Subject key identifier:   B0:42:38:8A:2A:7C:9F:8D:FE:2E:CA:91:E4:E7:D4:50:7D:1C:8C:A2
Authority key identifier: F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
Certificate issuer:       /CN=f7c722dae270868a19838a7cd499d59c2679d891
Certificate serial:       019D9C62EDE14588729089B7947B6C242074
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
Manifest number:          07B1
Signing time:             Fri 17 Apr 2026 17:00:22 +0000
Manifest this update:     Fri 17 Apr 2026 17:00:22 +0000
Manifest next update:     Sat 18 Apr 2026 17:00:22 +0000
Files and hashes:         1: 6yx-hlX2k3FRL0OGcdbdnhCXDLc.roa (hash: hiif9D0W/a5cIuWmQF/v/caYp1mtbUtJIKKVOQpQZ+w=)
                          2: 98ci2uJwhooZg4p81JnVnCZ52JE.crl (hash: /WeT4jONtF1K1jWNCQtKiLswzO5q4yCXkeE1R2YzPcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:62:ed:e1:45:88:72:90:89:b7:94:7b:6c:24:20:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7c722dae270868a19838a7cd499d59c2679d891
        Validity
            Not Before: Apr 17 17:00:22 2026 GMT
            Not After : Apr 18 17:00:22 2026 GMT
        Subject: CN=b042388a2a7c9f8dfe2eca91e4e7d4507d1c8ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7a:b4:b5:44:a9:90:3e:f5:a2:8e:06:f8:69:
                    3f:3d:85:dc:62:27:21:79:bd:7b:08:65:19:ea:67:
                    05:28:e6:cb:79:75:98:ac:83:12:9f:50:76:a0:9d:
                    a0:d6:8e:d1:87:bb:d4:b6:64:57:ad:39:1d:de:21:
                    3b:33:ca:cf:93:ae:f0:71:73:33:fc:60:08:cd:70:
                    c3:9a:7b:9a:a4:51:6b:db:91:76:b9:a2:6a:6b:d4:
                    a3:76:34:dd:b4:e7:79:ee:8b:d8:7a:ba:df:cd:0f:
                    ed:14:90:db:09:f4:c6:fc:2e:91:06:b7:c6:e5:49:
                    3c:f0:f7:b4:f6:b0:3e:c3:45:e4:d2:36:96:9f:7c:
                    0a:44:a5:6e:14:9a:5a:46:71:7f:a0:8f:f2:ce:06:
                    bd:16:0e:64:a1:d8:a4:05:0c:38:7e:39:53:16:21:
                    56:a1:98:14:fe:58:d3:3c:8b:68:01:60:f6:89:13:
                    d0:1a:b6:ff:33:3e:73:51:ea:42:bd:d0:ce:5b:51:
                    23:bb:b6:15:ae:6b:db:78:86:f4:e3:cb:c6:77:24:
                    5b:64:40:cb:bb:17:df:ea:c7:5e:7b:e2:c2:d7:e7:
                    51:d9:5d:bf:f2:fc:4a:43:43:6e:26:b5:77:0f:0f:
                    2b:36:29:86:87:f1:e7:79:b0:81:05:89:e2:c9:d4:
                    40:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:42:38:8A:2A:7C:9F:8D:FE:2E:CA:91:E4:E7:D4:50:7D:1C:8C:A2
            X509v3 Authority Key Identifier:
                keyid:F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f3:b2:09:27:85:18:72:46:2b:31:de:73:59:17:1c:91:91:
         e9:c0:b4:74:14:9b:63:d6:69:02:7d:83:27:b2:24:4a:67:85:
         48:a4:3f:e3:c7:73:ed:0d:61:55:68:0d:d2:72:d5:f9:31:c9:
         a5:f9:b2:a1:7e:49:88:31:be:07:8e:a6:2a:ee:b9:34:97:4f:
         21:24:ad:b9:52:2a:d9:7e:7a:59:b4:bd:05:b5:53:d8:f7:20:
         82:b8:3c:cd:29:50:d6:d9:2c:a1:eb:0f:34:9f:24:6b:e8:8f:
         a0:02:a0:dd:7c:39:3f:11:66:79:19:54:fa:9f:22:8b:16:f9:
         36:fa:da:8a:d5:c2:9d:7d:fd:62:da:f1:57:79:33:a1:9f:ef:
         3c:41:44:42:80:b2:aa:b3:65:94:1d:17:d2:01:0d:63:23:19:
         ab:36:26:1c:77:19:51:a5:d1:e1:46:7e:ee:0e:f1:76:6d:1f:
         c9:ea:dd:82:cb:8d:f1:6a:25:a0:1a:50:80:6e:ff:a9:e8:32:
         48:67:98:48:b4:28:84:0c:76:29:ef:e9:ce:9d:17:c3:46:b8:
         88:8a:47:c8:03:76:f8:55:6f:24:86:0c:2c:60:d9:27:7c:19:
         33:ee:d5:69:b6:c4:18:95:21:11:2e:b3:5e:e9:5f:33:1b:be:
         18:2b:71:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cYu3hRYhykIm3lHtsJCB0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YzcyMmRhZTI3MDg2OGExOTgzOGE3Y2Q0OTlkNTljMjY3
OWQ4OTEwHhcNMjYwNDE3MTcwMDIyWhcNMjYwNDE4MTcwMDIyWjAzMTEwLwYDVQQD
EyhiMDQyMzg4YTJhN2M5ZjhkZmUyZWNhOTFlNGU3ZDQ1MDdkMWM4Y2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXq0tUSpkD71oo4G+Gk/PYXcYich
eb17CGUZ6mcFKObLeXWYrIMSn1B2oJ2g1o7Rh7vUtmRXrTkd3iE7M8rPk67wcXMz
/GAIzXDDmnuapFFr25F2uaJqa9SjdjTdtOd57ovYerrfzQ/tFJDbCfTG/C6RBrfG
5Uk88Pe09rA+w0Xk0jaWn3wKRKVuFJpaRnF/oI/yzga9Fg5kodikBQw4fjlTFiFW
oZgU/ljTPItoAWD2iRPQGrb/Mz5zUepCvdDOW1Eju7YVrmvbeIb048vGdyRbZEDL
uxff6sdee+LC1+dR2V2/8vxKQ0NuJrV3Dw8rNimGh/HnebCBBYniydRAMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBCOIoqfJ+N/i7KkeTn1FB9HIyiMB8GA1UdIwQY
MBaAFPfHItricIaKGYOKfNSZ1ZwmediRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOThjaTJ1Sndob29aZzRwODFKblZuQ1o1MkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81MGUwZjEtNDYxNC00MzU4LTkzN2Et
MmVkZTY3MjdlMTM5LzEvOThjaTJ1Sndob29aZzRwODFKblZuQ1o1MkpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni81MGUwZjEtNDYxNC00MzU4LTkzN2EtMmVkZTY3MjdlMTM5
LzEvOThjaTJ1Sndob29aZzRwODFKblZuQ1o1MkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPOyCSeF
GHJGKzHec1kXHJGR6cC0dBSbY9ZpAn2DJ7IkSmeFSKQ/48dz7Q1hVWgN0nLV+THJ
pfmyoX5JiDG+B46mKu65NJdPISStuVIq2X56WbS9BbVT2Pcggrg8zSlQ1tksoesP
NJ8ka+iPoAKg3Xw5PxFmeRlU+p8iixb5NvraitXCnX39YtrxV3kzoZ/vPEFEQoCy
qrNllB0X0gENYyMZqzYmHHcZUaXR4UZ+7g7xdm0fyerdgsuN8WoloBpQgG7/qegy
SGeYSLQohAx2Ke/pzp0Xw0a4iIpHyAN2+FVvJIYMLGDZJ3wZM+7VabbEGJUhES6z
XulfMxu+GCtx5Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:59:36 2026 by rpki-client