Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
File:                     AsNyEO2KVs4O3UV0v3NrYyReWCM.mft (raw, json)
Hash identifier:          Zpy6D4wDdQbJZVz/zAFw4b2yF8krvuzedWgmR+gqJg8=
Subject key identifier:   5A:5F:B1:AB:22:68:C5:77:A1:9E:08:F8:76:98:EC:B9:EA:B5:1A:5A
Authority key identifier: 02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23
Certificate issuer:       /CN=02c37210ed8a56ce0edd4574bf736b63245e5823
Certificate serial:       019D99997C9EC22A97C331FBB53B1F4D47DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
Manifest number:          1850
Signing time:             Fri 17 Apr 2026 04:01:06 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:06 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:06 +0000
Files and hashes:         1: AsNyEO2KVs4O3UV0v3NrYyReWCM.crl (hash: jqCGdV/4gOr6zseWusKlwxjRx6ZFmmpmvjvNH1DifAQ=)
                          2: yXFRfVpkM8r3azCgAbb2sK9w1rs.roa (hash: ORuyNvYgdfyEkEThZ1lM5vg7mN7F8OavMybx+qBeHmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:7c:9e:c2:2a:97:c3:31:fb:b5:3b:1f:4d:47:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c37210ed8a56ce0edd4574bf736b63245e5823
        Validity
            Not Before: Apr 17 04:01:06 2026 GMT
            Not After : Apr 18 04:01:06 2026 GMT
        Subject: CN=5a5fb1ab2268c577a19e08f87698ecb9eab51a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:16:2d:8b:c1:c4:d7:6e:e3:1a:5d:3f:7e:98:
                    04:87:10:78:67:4d:29:ab:39:04:87:6f:00:18:22:
                    16:58:a7:10:58:1b:a4:c9:23:37:61:bd:d7:1b:0b:
                    51:76:6d:8f:58:93:2f:40:68:a1:fc:54:f5:79:3a:
                    51:61:04:69:fb:6e:62:81:3c:87:0a:4f:e4:41:d4:
                    42:10:cf:f8:53:ac:0e:21:ad:68:fe:bb:fe:ac:94:
                    0a:d2:1b:16:ad:ef:f5:fc:91:55:c6:92:4c:8b:e4:
                    0a:12:d0:ab:11:c8:04:c5:53:60:28:19:02:7c:3f:
                    87:44:9d:a3:73:67:f8:70:38:0a:41:7a:57:a2:0f:
                    11:69:40:b6:58:da:ad:ef:92:da:b4:86:86:d8:7e:
                    ac:c1:52:9a:dd:fb:d3:1b:b7:68:88:59:ae:c1:78:
                    a0:62:35:99:36:51:6a:e6:0f:d4:1e:b0:b0:48:57:
                    ba:1e:c7:33:c0:57:77:da:c9:e2:6f:22:85:29:73:
                    1d:2b:52:b4:f0:e2:f1:10:f3:59:71:6f:4f:57:e7:
                    50:98:97:9d:ee:e4:e8:88:71:9a:04:9f:c2:93:4e:
                    10:4e:79:be:30:07:ed:fc:04:c6:a9:37:f9:80:fc:
                    9b:25:ee:1c:d5:d4:e4:94:d0:b5:d4:85:ba:53:52:
                    6b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5F:B1:AB:22:68:C5:77:A1:9E:08:F8:76:98:EC:B9:EA:B5:1A:5A
            X509v3 Authority Key Identifier:
                keyid:02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:3e:9d:53:1c:23:3c:14:3d:9f:a5:f9:88:e6:0b:7a:cb:44:
         90:c0:cd:71:1b:64:9e:68:44:20:2b:fc:01:bd:b0:36:89:e9:
         1b:6a:fb:68:cf:a1:84:16:31:de:c9:03:3b:44:73:0d:4d:d7:
         31:37:ce:ae:37:5c:29:00:f8:07:e6:4e:4c:b8:59:5f:47:e4:
         ba:90:fa:68:b4:c3:13:b3:d4:44:07:e1:6c:38:96:b0:75:b9:
         21:cb:a6:0d:fd:d6:83:79:07:db:da:9a:5c:1d:cb:7c:8d:7c:
         6e:76:be:66:53:3f:a4:d4:18:ac:f0:bc:88:66:d4:88:b7:c1:
         cc:48:c0:bc:ba:be:fc:70:7c:45:2c:96:a7:66:9a:a4:20:21:
         a8:a2:ab:f7:30:d7:ad:a3:1b:4b:45:a2:fd:63:a6:ab:b3:69:
         12:7f:a8:aa:1b:4b:f7:d6:5b:4d:99:07:e8:44:4e:5b:50:2f:
         3e:34:14:31:bc:95:6f:b7:a4:ab:f5:ac:f0:83:db:81:a8:cf:
         52:08:f3:40:f5:a4:e9:55:b3:f9:94:26:3c:9d:93:61:30:70:
         a9:b1:c2:b5:ea:db:06:20:43:14:c1:6e:b5:89:fc:36:36:f6:
         31:d8:72:da:2a:d9:fd:47:7b:a3:a5:1b:c9:c9:f0:c9:23:f9:
         10:e1:8a:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmXyewiqXwzH7tTsfTUfeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzM3MjEwZWQ4YTU2Y2UwZWRkNDU3NGJmNzM2YjYzMjQ1
ZTU4MjMwHhcNMjYwNDE3MDQwMTA2WhcNMjYwNDE4MDQwMTA2WjAzMTEwLwYDVQQD
Eyg1YTVmYjFhYjIyNjhjNTc3YTE5ZTA4Zjg3Njk4ZWNiOWVhYjUxYTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxYti8HE127jGl0/fpgEhxB4Z00p
qzkEh28AGCIWWKcQWBukySM3Yb3XGwtRdm2PWJMvQGih/FT1eTpRYQRp+25igTyH
Ck/kQdRCEM/4U6wOIa1o/rv+rJQK0hsWre/1/JFVxpJMi+QKEtCrEcgExVNgKBkC
fD+HRJ2jc2f4cDgKQXpXog8RaUC2WNqt75LatIaG2H6swVKa3fvTG7doiFmuwXig
YjWZNlFq5g/UHrCwSFe6HsczwFd32snibyKFKXMdK1K08OLxEPNZcW9PV+dQmJed
7uToiHGaBJ/Ck04QTnm+MAft/ATGqTf5gPybJe4c1dTklNC11IW6U1JrkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpfsasiaMV3oZ4I+HaY7LnqtRpaMB8GA1UdIwQY
MBaAFALDchDtilbODt1FdL9za2MkXlgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNOeUVPMktWczRPM1VWMHYzTnJZeVJlV0NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8zNzIwNzktODkwMS00NTI2LThkNWEt
YzFmMGVhZWVkOGNlLzEvQXNOeUVPMktWczRPM1VWMHYzTnJZeVJlV0NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8zNzIwNzktODkwMS00NTI2LThkNWEtYzFmMGVhZWVkOGNl
LzEvQXNOeUVPMktWczRPM1VWMHYzTnJZeVJlV0NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnz6dUxwj
PBQ9n6X5iOYLestEkMDNcRtknmhEICv8Ab2wNonpG2r7aM+hhBYx3skDO0RzDU3X
MTfOrjdcKQD4B+ZOTLhZX0fkupD6aLTDE7PURAfhbDiWsHW5IcumDf3Wg3kH29qa
XB3LfI18bna+ZlM/pNQYrPC8iGbUiLfBzEjAvLq+/HB8RSyWp2aapCAhqKKr9zDX
raMbS0Wi/WOmq7NpEn+oqhtL99ZbTZkH6EROW1AvPjQUMbyVb7ekq/Ws8IPbgajP
UgjzQPWk6VWz+ZQmPJ2TYTBwqbHCterbBiBDFMFutYn8Njb2Mdhy2irZ/Ud7o6Ub
ycnwySP5EOGKZA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:48 2026 by rpki-client