Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
File:                     aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft (raw, json)
Hash identifier:          1Cp4lbKhQDsQLrLlcvYTQYoKsoimXanmN4G6vMmu5Is=
Subject key identifier:   D5:D3:6D:F6:79:B6:3F:42:91:B2:03:4B:FF:E0:29:93:9F:E8:98:DF
Authority key identifier: 69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B
Certificate issuer:       /CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
Certificate serial:       019D9B19856D26308F202B3AF5244096B84D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
Manifest number:          03AF
Signing time:             Fri 17 Apr 2026 11:00:34 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:34 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:34 +0000
Files and hashes:         1: 9JzTDncsepWBIyeXDgZbgzh-hNA.roa (hash: EEJ8BD1UQFBZFgZQFrtwhkvF1euS2AFglnhzeTI1Kl4=)
                          2: CBsDO18mnRAZhs0rFe-oIGwGZeQ.roa (hash: v+64R9Yuvs5nMKSViq5julUttSHyjyUAvPmFlDm28JY=)
                          3: Q-ZhLXGU3V7WMJf_F4jA-hfVPCo.roa (hash: Ad4i58VjKhwdfxFqTtK2L0c60TXelJ6/sX2iLUaz7Lc=)
                          4: aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl (hash: sysEwvVod+aoBLgtJqWwUtN8T9jWhe3WKb+8pHB33xc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:85:6d:26:30:8f:20:2b:3a:f5:24:40:96:b8:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
        Validity
            Not Before: Apr 17 11:00:34 2026 GMT
            Not After : Apr 18 11:00:34 2026 GMT
        Subject: CN=d5d36df679b63f4291b2034bffe029939fe898df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d2:15:7c:bd:a3:f2:4a:3a:65:99:19:89:77:
                    4d:c7:9d:95:67:20:e5:2a:43:95:e2:97:72:da:b7:
                    07:1a:db:cd:99:4c:8a:12:2e:ae:75:7c:bb:fd:e0:
                    4a:89:b3:0b:40:81:f3:2f:6c:dc:d7:39:48:e0:c6:
                    9c:46:d7:1b:a3:39:8e:95:cd:cf:af:55:1d:ec:db:
                    f3:1e:82:7e:1c:94:0e:ef:3d:53:aa:f2:c0:9a:63:
                    c0:a7:f1:8d:53:1a:90:42:35:1e:1f:f7:c9:0b:3f:
                    a8:54:e5:33:82:5d:e9:b8:04:bb:13:e6:2c:58:52:
                    b6:2e:98:77:48:7f:62:54:ff:40:76:c7:86:48:48:
                    5f:78:80:7d:84:a1:94:2c:96:15:1a:ec:50:7d:63:
                    fe:7c:8f:ee:be:63:62:dd:18:48:1f:1e:c8:6e:82:
                    a4:64:69:07:37:6b:8d:68:6b:c3:97:b2:00:54:9c:
                    50:c7:e9:eb:cf:70:52:7a:b2:74:82:32:80:ab:c5:
                    75:20:54:21:cb:01:6c:53:81:f9:86:f2:d3:fc:bf:
                    c4:05:02:1f:fb:e0:54:9d:12:09:2f:28:5f:45:55:
                    f7:11:89:b5:b1:6a:08:10:c4:c9:f1:4c:c3:40:c4:
                    1b:63:8b:1d:12:b6:14:83:cb:4c:09:37:fa:e3:f8:
                    d3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D3:6D:F6:79:B6:3F:42:91:B2:03:4B:FF:E0:29:93:9F:E8:98:DF
            X509v3 Authority Key Identifier:
                keyid:69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f7:22:10:2d:76:18:72:7b:1f:20:d1:65:89:01:11:25:f6:
         7b:0b:1d:de:e1:5d:4a:19:9a:0a:b1:84:ff:00:79:93:4b:54:
         f0:25:db:21:06:86:2b:d5:b0:a6:f1:d1:8d:6c:0e:0f:5b:45:
         d8:0d:5d:35:54:29:19:fc:a1:28:d2:f6:9d:0b:c3:50:0f:12:
         43:86:c3:91:1a:55:a3:f8:6e:7b:cc:50:c1:f4:e9:ff:31:31:
         d0:c6:f2:cc:bf:63:75:10:ff:74:3d:c3:1c:72:2b:dd:0c:e9:
         d5:3c:ad:95:34:51:c9:a4:fc:34:d6:af:35:69:ec:02:64:6e:
         cf:69:e2:7b:af:fd:4c:2a:27:94:71:e7:cd:fb:5f:7f:3f:24:
         e5:5e:f5:7b:3f:dd:9c:29:b1:91:a1:38:cf:d8:b3:f8:a3:e1:
         50:cb:89:3a:bd:45:1f:ae:fc:a6:a4:5c:9e:11:97:8b:35:f9:
         fd:ad:05:c4:30:bf:11:ff:85:ad:64:cf:42:89:06:e0:e4:97:
         cc:a6:56:23:8a:07:6e:55:0d:e9:4c:f8:a0:22:f4:c4:87:f6:
         c9:30:3e:85:d1:b9:4f:e4:dc:31:a4:4b:f1:5b:7e:5e:bc:9b:
         e0:5d:9b:fb:1c:35:5e:62:f0:ca:9d:54:4d:44:9e:db:95:52:
         e0:2b:26:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGYVtJjCPICs69SRAlrhNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MmNmODU3MjM0NGMwYTY3NGE2N2QwZjRiNTFmMTg2ZThh
NzFjNGIwHhcNMjYwNDE3MTEwMDM0WhcNMjYwNDE4MTEwMDM0WjAzMTEwLwYDVQQD
EyhkNWQzNmRmNjc5YjYzZjQyOTFiMjAzNGJmZmUwMjk5MzlmZTg5OGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdIVfL2j8ko6ZZkZiXdNx52VZyDl
KkOV4pdy2rcHGtvNmUyKEi6udXy7/eBKibMLQIHzL2zc1zlI4MacRtcbozmOlc3P
r1Ud7NvzHoJ+HJQO7z1TqvLAmmPAp/GNUxqQQjUeH/fJCz+oVOUzgl3puAS7E+Ys
WFK2Lph3SH9iVP9AdseGSEhfeIB9hKGULJYVGuxQfWP+fI/uvmNi3RhIHx7IboKk
ZGkHN2uNaGvDl7IAVJxQx+nrz3BSerJ0gjKAq8V1IFQhywFsU4H5hvLT/L/EBQIf
++BUnRIJLyhfRVX3EYm1sWoIEMTJ8UzDQMQbY4sdErYUg8tMCTf64/jT0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXTbfZ5tj9CkbIDS//gKZOf6JjfMB8GA1UdIwQY
MBaAFGks+FcjRMCmdKZ9D0tR8YbopxxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wNTRiNTAtYTdiMS00NmYzLTlkMTgt
YWYzOWJiMDMwOTdmLzEvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wNTRiNTAtYTdiMS00NmYzLTlkMTgtYWYzOWJiMDMwOTdm
LzEvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvciEC12
GHJ7HyDRZYkBESX2ewsd3uFdShmaCrGE/wB5k0tU8CXbIQaGK9WwpvHRjWwOD1tF
2A1dNVQpGfyhKNL2nQvDUA8SQ4bDkRpVo/hue8xQwfTp/zEx0MbyzL9jdRD/dD3D
HHIr3Qzp1TytlTRRyaT8NNavNWnsAmRuz2nie6/9TConlHHnzftffz8k5V71ez/d
nCmxkaE4z9iz+KPhUMuJOr1FH678pqRcnhGXizX5/a0FxDC/Ef+FrWTPQokG4OSX
zKZWI4oHblUN6Uz4oCL0xIf2yTA+hdG5T+TcMaRL8Vt+Xryb4F2b+xw1XmLwyp1U
TUSe25VS4CsmNA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:49:20 2026 by rpki-client