Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft
File:                     r22p1WtCwrgWsa5rGFElq_IVk-8.mft (raw, json)
Hash identifier:          F/nLEcSM80MTpqPLdKt+e5yeku1BoQs4ikLTx9CdTao=
Subject key identifier:   B1:6A:8C:7C:C0:74:51:BE:CB:60:CF:AA:5C:FF:88:DE:8A:E9:18:D8
Authority key identifier: AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF
Certificate issuer:       /CN=af6da9d56b42c2b816b1ae6b185125abf21593ef
Certificate serial:       019D9D07CF81FFF078399D29DF9852771936
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft
Manifest number:          037A
Signing time:             Fri 17 Apr 2026 20:00:27 +0000
Manifest this update:     Fri 17 Apr 2026 20:00:27 +0000
Manifest next update:     Sat 18 Apr 2026 20:00:27 +0000
Files and hashes:         1: 3vsJC6fNuGN4-OcDnwBO6CepBDE.roa (hash: wGJI9xj8xX1LfIyL9p4tn79/tsV9eiEKpUNCD9TJPfk=)
                          2: F2aeFjJsEe0Ev-pYnuxbm8GUj-s.roa (hash: //RGqq5vbdwe1kcXBXm0ImZrQGGNEM4aNxYmS22uVKk=)
                          3: Ml1bL44N6RRHfCMhiwaHxYoFYqE.roa (hash: mv51AxdRu44rhiit2eu9uxAPSqaXVemKhG4H6GIdqJU=)
                          4: QZX4N0nFVU70Vj9ggeWrbayajWQ.roa (hash: fTLW/j3hk4V2QwQlXrG/uL9IIw5WAjCaWcGJ+gp3yXU=)
                          5: VoMhQ5y_uxLsu5nfRtG8bOviLlw.roa (hash: fnlgaHZDH37hg0Ckb563HOlkmEqGNqOIf1PdxlJVeTo=)
                          6: r22p1WtCwrgWsa5rGFElq_IVk-8.crl (hash: tHzAa+ulK+tEGQDr5dYZpXPma3G3pLHj3HPCCpq6NT0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:07:cf:81:ff:f0:78:39:9d:29:df:98:52:77:19:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af6da9d56b42c2b816b1ae6b185125abf21593ef
        Validity
            Not Before: Apr 17 20:00:27 2026 GMT
            Not After : Apr 18 20:00:27 2026 GMT
        Subject: CN=b16a8c7cc07451becb60cfaa5cff88de8ae918d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:56:7a:bd:8a:4f:6d:1f:64:75:c1:39:ab:8b:
                    ce:61:b9:dd:84:86:ce:b1:d6:29:24:33:1a:1a:d6:
                    40:c9:37:bb:02:30:3e:71:5f:4f:ea:b1:10:9a:0c:
                    b7:24:d8:0f:67:71:65:57:29:fb:87:52:ab:5d:1c:
                    cd:8f:2f:0c:5e:c2:5f:df:53:74:4d:00:d2:93:24:
                    63:a4:27:d7:75:04:1a:9d:c5:d9:6e:de:42:38:e1:
                    af:7c:d0:e4:c6:c7:f6:dd:26:c2:96:39:86:cd:b3:
                    3f:e7:6a:39:3a:c8:07:3e:1c:8a:76:d8:74:59:bb:
                    e3:26:69:ee:1d:fa:05:39:fa:ed:4d:1e:0e:3b:60:
                    2f:8e:11:a8:f2:0d:b2:c4:82:e2:aa:fc:86:c7:96:
                    53:db:4b:d1:91:7a:68:df:9c:b8:39:98:e2:60:72:
                    f2:05:ca:03:2a:cc:90:3f:d2:4c:93:4d:06:05:90:
                    59:34:4d:89:60:2e:fc:31:37:ff:8c:cd:ae:e0:00:
                    d0:f4:fb:eb:b4:33:28:dc:4b:35:db:b4:e3:d0:10:
                    5a:27:85:22:04:84:e7:cb:d3:4f:82:b8:cd:6e:23:
                    aa:0e:0c:cf:4f:13:b5:28:6a:6b:aa:3a:e0:e9:0f:
                    94:a7:59:27:d8:cf:e3:fd:e6:d1:2e:f3:74:47:2a:
                    b4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6A:8C:7C:C0:74:51:BE:CB:60:CF:AA:5C:FF:88:DE:8A:E9:18:D8
            X509v3 Authority Key Identifier:
                keyid:AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:e2:9e:8f:b3:88:7e:b7:cf:80:5c:2c:26:ae:33:22:77:ed:
         40:f7:34:85:01:90:73:26:1b:00:61:2b:71:a1:cb:d8:96:29:
         0e:fa:b1:d0:47:fa:72:36:54:aa:68:f8:68:4a:20:08:24:9d:
         da:fa:d4:aa:88:99:3e:13:60:2b:ed:af:fa:a4:4a:7c:53:18:
         c7:69:9f:10:79:7e:5c:b7:38:06:75:92:a6:7d:22:af:ec:3a:
         bc:d4:42:48:da:bd:9b:d8:53:ef:02:17:ee:f7:31:23:67:1e:
         8c:da:93:58:23:64:18:03:29:a8:94:4f:61:0c:60:84:8f:42:
         23:e2:6f:6c:12:da:e6:da:fa:30:a7:ef:05:6c:4c:a5:5f:4f:
         67:9c:74:dd:71:92:fe:6f:78:a1:b6:1f:75:b7:96:ef:49:be:
         09:85:cf:17:d3:d8:18:75:53:fd:57:88:0b:6e:7c:83:b7:81:
         d5:33:cf:00:c1:0b:be:cc:0d:a1:92:35:7b:8f:d2:f3:56:3e:
         39:34:bb:03:b6:4f:88:d6:4a:b4:38:30:06:f1:87:21:af:01:
         b9:7e:1e:a7:4e:39:54:80:d1:22:93:27:05:22:28:4d:d9:50:
         26:82:c9:3b:80:ac:2b:ef:dc:53:95:9e:be:d4:b8:50:eb:51:
         47:22:a0:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dB8+B//B4OZ0p35hSdxk2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNmRhOWQ1NmI0MmMyYjgxNmIxYWU2YjE4NTEyNWFiZjIx
NTkzZWYwHhcNMjYwNDE3MjAwMDI3WhcNMjYwNDE4MjAwMDI3WjAzMTEwLwYDVQQD
EyhiMTZhOGM3Y2MwNzQ1MWJlY2I2MGNmYWE1Y2ZmODhkZThhZTkxOGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1Z6vYpPbR9kdcE5q4vOYbndhIbO
sdYpJDMaGtZAyTe7AjA+cV9P6rEQmgy3JNgPZ3FlVyn7h1KrXRzNjy8MXsJf31N0
TQDSkyRjpCfXdQQancXZbt5COOGvfNDkxsf23SbCljmGzbM/52o5OsgHPhyKdth0
WbvjJmnuHfoFOfrtTR4OO2AvjhGo8g2yxILiqvyGx5ZT20vRkXpo35y4OZjiYHLy
BcoDKsyQP9JMk00GBZBZNE2JYC78MTf/jM2u4ADQ9PvrtDMo3Es127Tj0BBaJ4Ui
BITny9NPgrjNbiOqDgzPTxO1KGprqjrg6Q+Up1kn2M/j/ebRLvN0Ryq0MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFqjHzAdFG+y2DPqlz/iN6K6RjYMB8GA1UdIwQY
MBaAFK9tqdVrQsK4FrGuaxhRJavyFZPvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84OTczNzgtYzU1Ni00MzUyLTlhMDQt
YjEwYTgzMmJjYTQzLzEvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy84OTczNzgtYzU1Ni00MzUyLTlhMDQtYjEwYTgzMmJjYTQz
LzEvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIuKej7OI
frfPgFwsJq4zInftQPc0hQGQcyYbAGErcaHL2JYpDvqx0Ef6cjZUqmj4aEogCCSd
2vrUqoiZPhNgK+2v+qRKfFMYx2mfEHl+XLc4BnWSpn0ir+w6vNRCSNq9m9hT7wIX
7vcxI2cejNqTWCNkGAMpqJRPYQxghI9CI+JvbBLa5tr6MKfvBWxMpV9PZ5x03XGS
/m94obYfdbeW70m+CYXPF9PYGHVT/VeIC258g7eB1TPPAMELvswNoZI1e4/S81Y+
OTS7A7ZPiNZKtDgwBvGHIa8BuX4ep045VIDRIpMnBSIoTdlQJoLJO4CsK+/cU5We
vtS4UOtRRyKg/A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:46:45 2026 by rpki-client