Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
File:                     X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft (raw, json)
Hash identifier:          rAYjUw/SQ3k3Uan4CL9kchd8R22K6Y/Qf4yFrUv7x9s=
Subject key identifier:   5B:67:D3:80:28:08:99:C1:DD:2E:79:93:46:D0:27:DF:73:2A:87:10
Authority key identifier: 5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67
Certificate issuer:       /CN=5fdd1e8c2394d18e876c2d57016e7ed89805a667
Certificate serial:       019D992B25BAED4F2E985456F3139F3424EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
Manifest number:          1081
Signing time:             Fri 17 Apr 2026 02:00:34 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:34 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:34 +0000
Files and hashes:         1: FHIyxMNqXpJ39wGwkA-4nrLvTkc.roa (hash: ly+kVhxO/3fVLln2oSG/sFbuci0ZnP8XN3ql69hgFNU=)
                          2: X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl (hash: WwhDlAyrVij/gb2BnV0GXMOSjQMYg1y9h2ucr0xmKcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:25:ba:ed:4f:2e:98:54:56:f3:13:9f:34:24:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fdd1e8c2394d18e876c2d57016e7ed89805a667
        Validity
            Not Before: Apr 17 02:00:34 2026 GMT
            Not After : Apr 18 02:00:34 2026 GMT
        Subject: CN=5b67d380280899c1dd2e799346d027df732a8710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:52:90:90:4a:c8:64:7c:41:48:32:41:08:d4:
                    65:a3:a8:c4:88:19:88:b0:c5:f6:1f:d2:bc:6a:9d:
                    04:57:13:9b:53:76:30:e6:d0:2e:bb:f3:bf:47:90:
                    2a:20:09:16:de:00:59:3a:9b:28:40:0d:fc:33:cc:
                    ee:dd:c6:8a:a9:a5:3e:b6:95:dd:7e:85:70:62:79:
                    d9:54:fa:2c:3e:c4:09:90:e5:4e:32:c3:3d:ce:db:
                    69:4f:a3:96:9f:44:45:90:7e:60:38:5b:6a:1c:10:
                    42:c0:45:76:f4:28:ca:d2:68:f0:90:9a:35:71:15:
                    c6:84:84:dd:53:42:a7:13:ef:e5:89:bd:b5:ae:87:
                    4b:cb:f9:9c:c2:d5:9b:6d:37:4b:3d:b6:de:59:73:
                    e8:81:c8:8a:c6:17:3a:fd:ec:5f:05:ef:33:22:19:
                    34:dd:60:9a:40:6f:f3:18:24:f8:fc:f9:86:2b:a0:
                    bc:d4:f1:e9:48:62:2f:a1:f3:03:6e:f3:e9:ce:f7:
                    b2:81:9a:09:44:bc:c3:a1:68:a4:54:40:bf:20:ca:
                    86:6a:9d:69:1a:de:07:f8:5f:fd:d3:64:92:31:3c:
                    80:d3:8e:32:b9:21:00:04:ef:9c:6f:e8:b4:ea:99:
                    60:7a:10:4e:1d:08:46:d4:04:f4:e2:95:ca:c3:0e:
                    ec:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:67:D3:80:28:08:99:C1:DD:2E:79:93:46:D0:27:DF:73:2A:87:10
            X509v3 Authority Key Identifier:
                keyid:5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:53:04:84:d7:b4:64:71:99:be:e3:8e:d6:43:9f:78:80:42:
         ab:c5:05:da:6a:2d:61:3e:23:b8:ac:82:95:bc:90:a8:6f:7c:
         81:a1:90:e3:5f:f3:5e:c6:68:54:0b:87:84:90:c8:f0:2f:28:
         c2:ef:e8:30:3d:47:bb:f4:9e:ba:ea:0c:51:90:a2:28:e7:8f:
         ec:c2:a8:be:74:2a:b8:47:7b:05:f7:1b:b2:48:bb:0b:25:70:
         b9:ae:e1:3b:80:98:87:3c:1d:52:f9:3c:43:45:bb:bf:2e:e1:
         9e:65:45:fe:bb:8b:a0:76:fd:da:59:06:64:3b:b3:19:ed:1f:
         3b:d4:ea:b5:07:f8:51:05:ac:1c:51:95:64:d2:6b:5c:85:a3:
         83:73:f6:02:43:84:af:1e:b5:96:0f:fa:a0:ba:2e:04:e8:59:
         d8:cd:aa:25:6d:1e:3f:8e:52:c5:cd:56:b3:eb:36:fb:d9:e6:
         7e:5f:44:dd:c5:c7:14:4d:5a:66:7c:6a:00:54:c9:3a:da:ab:
         f9:b6:b6:75:cf:fc:c1:15:cf:0a:9f:d1:e3:b9:10:1a:85:dd:
         a4:ec:e1:a9:97:39:64:77:fe:8e:9e:a5:29:ae:63:2b:9e:86:
         b4:d1:a4:87:a1:03:05:20:6a:9d:e9:6e:d3:77:81:05:46:71:
         46:10:cb:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKyW67U8umFRW8xOfNCTqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZGQxZThjMjM5NGQxOGU4NzZjMmQ1NzAxNmU3ZWQ4OTgw
NWE2NjcwHhcNMjYwNDE3MDIwMDM0WhcNMjYwNDE4MDIwMDM0WjAzMTEwLwYDVQQD
Eyg1YjY3ZDM4MDI4MDg5OWMxZGQyZTc5OTM0NmQwMjdkZjczMmE4NzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVKQkErIZHxBSDJBCNRlo6jEiBmI
sMX2H9K8ap0EVxObU3Yw5tAuu/O/R5AqIAkW3gBZOpsoQA38M8zu3caKqaU+tpXd
foVwYnnZVPosPsQJkOVOMsM9zttpT6OWn0RFkH5gOFtqHBBCwEV29CjK0mjwkJo1
cRXGhITdU0KnE+/lib21rodLy/mcwtWbbTdLPbbeWXPogciKxhc6/exfBe8zIhk0
3WCaQG/zGCT4/PmGK6C81PHpSGIvofMDbvPpzveygZoJRLzDoWikVEC/IMqGap1p
Gt4H+F/902SSMTyA044yuSEABO+cb+i06plgehBOHQhG1AT04pXKww7sHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtn04AoCJnB3S55k0bQJ99zKocQMB8GA1UdIwQY
MBaAFF/dHowjlNGOh2wtVwFuftiYBaZnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDkwZWpDT1UwWTZIYkMxWEFXNS0ySmdGcG1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9hNmQ0MmMtY2ZkNy00ZWQ1LTlmODMt
NWFlOTNlYzhmYjExLzEvWDkwZWpDT1UwWTZIYkMxWEFXNS0ySmdGcG1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9hNmQ0MmMtY2ZkNy00ZWQ1LTlmODMtNWFlOTNlYzhmYjEx
LzEvWDkwZWpDT1UwWTZIYkMxWEFXNS0ySmdGcG1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL1MEhNe0
ZHGZvuOO1kOfeIBCq8UF2motYT4juKyClbyQqG98gaGQ41/zXsZoVAuHhJDI8C8o
wu/oMD1Hu/SeuuoMUZCiKOeP7MKovnQquEd7Bfcbski7CyVwua7hO4CYhzwdUvk8
Q0W7vy7hnmVF/ruLoHb92lkGZDuzGe0fO9TqtQf4UQWsHFGVZNJrXIWjg3P2AkOE
rx61lg/6oLouBOhZ2M2qJW0eP45Sxc1Ws+s2+9nmfl9E3cXHFE1aZnxqAFTJOtqr
+ba2dc/8wRXPCp/R47kQGoXdpOzhqZc5ZHf+jp6lKa5jK56GtNGkh6EDBSBqnelu
03eBBUZxRhDLAw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:33 2026 by rpki-client