Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/ee6oG28z9ptgubAduZrUbZDT1zs.mft
File:                     ee6oG28z9ptgubAduZrUbZDT1zs.mft (raw, json)
Hash identifier:          Fv+fUv9Q5uaWnGHdxk4kkYU+6V3kG4DZS95octn0unw=
Subject key identifier:   D1:E6:BC:AE:D5:B4:7D:0C:86:B1:A7:A6:32:E6:8C:0F:2C:8B:C7:AF
Authority key identifier: 79:EE:A8:1B:6F:33:F6:9B:60:B9:B0:1D:B9:9A:D4:6D:90:D3:D7:3B
Certificate issuer:       /CN=79eea81b6f33f69b60b9b01db99ad46d90d3d73b
Certificate serial:       019DA52FB6E3455EDA56D295E758B3C35D53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ee6oG28z9ptgubAduZrUbZDT1zs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/ee6oG28z9ptgubAduZrUbZDT1zs.mft
Manifest number:          1C
Signing time:             Sun 19 Apr 2026 10:01:00 +0000
Manifest this update:     Sun 19 Apr 2026 10:01:00 +0000
Manifest next update:     Mon 20 Apr 2026 10:01:00 +0000
Files and hashes:         1: Ib9hh-TMy8NWgCF2SB6saERuDZY.roa (hash: vnCBy8FHgjLaxM5X4Kapy6zgVqNK6usUxo/Q7DSia5s=)
                          2: ee6oG28z9ptgubAduZrUbZDT1zs.crl (hash: V6ccHZeZJNJYG/Ons8Ou7MGXv3ZKe/TtISMkYtUp8iA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/ee6oG28z9ptgubAduZrUbZDT1zs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/ee6oG28z9ptgubAduZrUbZDT1zs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ee6oG28z9ptgubAduZrUbZDT1zs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a5:2f:b6:e3:45:5e:da:56:d2:95:e7:58:b3:c3:5d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79eea81b6f33f69b60b9b01db99ad46d90d3d73b
        Validity
            Not Before: Apr 19 10:01:00 2026 GMT
            Not After : Apr 20 10:01:00 2026 GMT
        Subject: CN=d1e6bcaed5b47d0c86b1a7a632e68c0f2c8bc7af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:00:70:b1:ce:16:be:9a:7b:8f:0d:1b:ce:d9:
                    a6:1c:ae:4f:bf:c9:aa:fe:e6:c3:e3:27:78:03:88:
                    99:7a:b2:ef:21:5b:4f:ee:70:3a:5c:2a:3d:62:1e:
                    cf:66:24:b5:1f:96:59:b8:c0:c2:f2:19:07:a7:31:
                    8f:a4:7f:7b:85:a1:da:a3:59:de:ee:42:e1:4f:50:
                    f6:e7:ef:5e:57:43:93:b7:2f:96:5c:1a:92:5e:1d:
                    7d:0d:47:43:86:6b:7f:f6:33:20:42:79:49:c8:af:
                    56:cd:b9:de:cc:5d:e2:7e:72:18:98:89:12:69:1c:
                    75:62:32:84:d1:46:25:df:32:94:cc:58:cb:27:dd:
                    33:95:42:ce:c7:f9:6d:2b:c4:44:4f:f3:82:e3:ab:
                    9a:db:21:c4:b2:45:01:9f:27:7b:a8:a6:69:2d:22:
                    89:54:cf:3b:6c:04:3e:b9:2e:b6:51:83:3b:ce:0b:
                    19:d9:e2:be:b3:b9:71:47:24:bb:59:2f:cb:01:c9:
                    32:5c:0f:27:3e:c9:b8:86:32:f2:0e:18:98:78:e5:
                    a5:0d:99:a6:b1:85:dd:95:a1:7c:d8:63:d0:30:83:
                    d2:9c:b6:4a:b5:a5:29:d7:34:8c:8b:7a:b6:c3:19:
                    f4:2d:72:a9:de:e1:aa:80:b7:3a:28:9b:e8:d0:9c:
                    c0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E6:BC:AE:D5:B4:7D:0C:86:B1:A7:A6:32:E6:8C:0F:2C:8B:C7:AF
            X509v3 Authority Key Identifier:
                keyid:79:EE:A8:1B:6F:33:F6:9B:60:B9:B0:1D:B9:9A:D4:6D:90:D3:D7:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee6oG28z9ptgubAduZrUbZDT1zs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/ee6oG28z9ptgubAduZrUbZDT1zs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/ee6oG28z9ptgubAduZrUbZDT1zs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ae:63:ac:5e:84:49:df:08:a6:54:70:87:0f:70:20:b7:92:
         28:7b:88:d6:cd:f8:c2:97:3f:2a:1b:1d:9d:e8:dc:be:e5:36:
         b3:80:d3:1e:f9:d1:bc:7b:d0:fd:9e:dc:2e:c6:ee:b8:ff:dc:
         c3:99:60:e0:f2:c3:1f:4d:7d:42:5e:34:6f:ad:5c:f4:90:50:
         fc:90:42:c6:6f:94:9c:d9:61:f3:ee:98:6b:19:f0:e1:5d:78:
         6b:02:14:5f:c3:0b:27:ed:55:67:88:9d:80:fc:e5:0a:fb:47:
         0a:40:8e:70:7a:f2:cd:47:57:24:6f:c4:53:ee:fc:d9:6f:17:
         db:a1:66:e3:01:7c:46:b6:a8:ab:e8:3a:26:5b:99:cb:40:dd:
         7a:2b:6e:d0:ff:55:d7:7c:ba:ff:4a:01:2c:2e:d9:2c:89:fd:
         1f:a0:8f:24:83:48:b0:20:a1:8d:1b:ea:e9:2a:65:52:82:89:
         16:ae:cd:35:ab:fc:15:ee:d6:8b:4e:25:ab:08:11:0a:39:9f:
         94:fe:00:81:b1:93:5c:d7:2c:a4:d2:96:09:c1:41:3a:8c:cd:
         d1:50:99:f3:8a:15:40:a8:9a:43:fd:da:41:16:43:e2:2d:58:
         ba:82:3c:8e:e8:30:bb:2e:c1:78:86:8b:81:91:9f:27:2d:a8:
         c1:a7:7e:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lL7bjRV7aVtKV51izw11TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZWVhODFiNmYzM2Y2OWI2MGI5YjAxZGI5OWFkNDZkOTBk
M2Q3M2IwHhcNMjYwNDE5MTAwMTAwWhcNMjYwNDIwMTAwMTAwWjAzMTEwLwYDVQQD
EyhkMWU2YmNhZWQ1YjQ3ZDBjODZiMWE3YTYzMmU2OGMwZjJjOGJjN2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQBwsc4Wvpp7jw0bztmmHK5Pv8mq
/ubD4yd4A4iZerLvIVtP7nA6XCo9Yh7PZiS1H5ZZuMDC8hkHpzGPpH97haHao1ne
7kLhT1D25+9eV0OTty+WXBqSXh19DUdDhmt/9jMgQnlJyK9WzbnezF3ifnIYmIkS
aRx1YjKE0UYl3zKUzFjLJ90zlULOx/ltK8RET/OC46ua2yHEskUBnyd7qKZpLSKJ
VM87bAQ+uS62UYM7zgsZ2eK+s7lxRyS7WS/LAckyXA8nPsm4hjLyDhiYeOWlDZmm
sYXdlaF82GPQMIPSnLZKtaUp1zSMi3q2wxn0LXKp3uGqgLc6KJvo0JzA3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHmvK7VtH0MhrGnpjLmjA8si8evMB8GA1UdIwQY
MBaAFHnuqBtvM/abYLmwHbma1G2Q09c7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWU2b0cyOHo5cHRndWJBZHVaclViWkRUMXpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hN2IyMWQtMmI4Yy00MjcwLWFlNTEt
YTcxNjgxNGMwN2UzLzEvZWU2b0cyOHo5cHRndWJBZHVaclViWkRUMXpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9hN2IyMWQtMmI4Yy00MjcwLWFlNTEtYTcxNjgxNGMwN2Uz
LzEvZWU2b0cyOHo5cHRndWJBZHVaclViWkRUMXpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlK5jrF6E
Sd8IplRwhw9wILeSKHuI1s34wpc/KhsdnejcvuU2s4DTHvnRvHvQ/Z7cLsbuuP/c
w5lg4PLDH019Ql40b61c9JBQ/JBCxm+UnNlh8+6Yaxnw4V14awIUX8MLJ+1VZ4id
gPzlCvtHCkCOcHryzUdXJG/EU+782W8X26Fm4wF8Rraoq+g6JluZy0Ddeitu0P9V
13y6/0oBLC7ZLIn9H6CPJINIsCChjRvq6SplUoKJFq7NNav8Fe7Wi04lqwgRCjmf
lP4AgbGTXNcspNKWCcFBOozN0VCZ84oVQKiaQ/3aQRZD4i1YuoI8jugwuy7BeIaL
gZGfJy2owad+Hg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:27:43 2026 by rpki-client