Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
File:                     dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft (raw, json)
Hash identifier:          e7QHFUr04W10AbM1jcPDwU+trYfkM7WOkdgceU3vMgA=
Subject key identifier:   1C:6D:92:E3:2B:D3:EA:55:65:1D:72:3A:C7:F7:1D:41:29:CC:39:4F
Authority key identifier: 75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
Certificate issuer:       /CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Certificate serial:       019D97E1BDBAC60028429E613BD6136418DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
Manifest number:          0CEA
Signing time:             Thu 16 Apr 2026 20:00:46 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:46 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:46 +0000
Files and hashes:         1: cLTBY0x98iSs-6Cq3vbECPm_74w.asa (hash: 8w6sqSdlGvX1lbVCngXKKl24zTm7KhQKQzRK40Ycchc=)
                          2: dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl (hash: OP7uVXGu+KsPR6Nz+C0cIQ67m7jhF9Cx0ZDmrfET5Wo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:bd:ba:c6:00:28:42:9e:61:3b:d6:13:64:18:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
        Validity
            Not Before: Apr 16 20:00:46 2026 GMT
            Not After : Apr 17 20:00:46 2026 GMT
        Subject: CN=1c6d92e32bd3ea55651d723ac7f71d4129cc394f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:28:13:da:bd:24:46:bf:a8:ac:b8:45:c1:d0:
                    68:b0:9e:d9:70:05:59:30:42:25:2d:b7:cd:d9:21:
                    d2:ce:44:80:a2:54:a6:3a:75:a9:30:d1:e1:2c:15:
                    ab:03:3a:36:73:89:1f:e1:5c:43:76:91:fa:18:46:
                    88:65:dc:ff:c5:ac:b8:e4:cf:8d:33:3a:0a:38:78:
                    6b:32:ca:8b:98:10:ff:40:02:41:47:83:47:29:67:
                    19:00:1c:28:66:1e:cd:c5:f1:41:53:5f:a5:e6:ed:
                    8e:44:71:55:fc:6e:b0:4b:80:5d:b7:54:d4:82:5e:
                    d3:4d:ca:9e:cf:d1:f4:70:63:9a:6c:e1:75:b3:ae:
                    e9:06:22:6f:90:b6:37:e7:06:d7:af:c0:e0:bf:64:
                    de:9c:08:52:8d:12:ce:e2:4c:1a:f8:3d:26:c1:67:
                    59:1b:97:b1:42:36:04:1b:83:6c:43:7f:62:7d:1d:
                    1b:27:fa:0a:8e:8a:5b:e3:ec:e9:98:ee:db:07:43:
                    cb:bd:59:0e:5e:ed:a7:c4:cc:10:e7:a3:75:9e:73:
                    37:9d:e9:82:59:b7:1d:84:64:ef:4a:b0:b6:3d:e1:
                    09:9d:ea:56:7c:1b:c9:cd:e0:01:46:ab:39:95:19:
                    41:15:f5:62:f6:5f:53:41:4e:d7:ff:c2:78:d2:f0:
                    5e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6D:92:E3:2B:D3:EA:55:65:1D:72:3A:C7:F7:1D:41:29:CC:39:4F
            X509v3 Authority Key Identifier:
                keyid:75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:3f:bc:a4:08:9e:34:01:68:2c:9d:56:59:0e:8a:83:d8:e8:
         6f:94:cd:31:b1:4f:d7:fe:a3:98:81:a2:49:68:ba:df:7c:be:
         8a:b5:53:74:60:0b:9f:31:1c:a0:c2:19:d1:55:86:06:da:8f:
         84:61:02:a5:6e:97:f1:77:46:a8:81:44:28:66:b7:a5:60:59:
         a6:32:f6:b0:79:8f:6a:0e:9a:7a:24:2c:ba:be:1c:64:bf:42:
         85:10:9d:a6:f9:c0:1d:dc:7b:8e:7b:e8:0f:0a:ac:fe:e8:1d:
         fd:fb:aa:f9:ce:a6:0b:d5:bc:b9:9e:8f:be:79:c6:cb:b7:e8:
         47:5c:f8:df:eb:74:14:f0:6a:5e:44:f4:a3:3c:ae:cc:d0:6a:
         b2:9f:d9:c6:96:da:c5:87:2f:65:43:8f:50:b0:f7:6d:07:b8:
         66:58:63:e6:f7:0f:ff:3b:31:b3:a4:1d:56:95:4c:f8:f9:28:
         d8:af:4d:ac:7c:15:60:2f:1c:de:97:78:94:83:92:d8:27:e3:
         fd:37:9a:3d:ce:16:91:4f:6f:a1:a6:41:74:2b:07:46:45:50:
         87:7b:3a:6c:45:31:cf:68:96:c9:2e:9c:9d:0d:43:cd:f3:29:
         78:b9:40:7c:b1:33:a2:69:0c:3f:d5:06:f0:86:a3:64:c7:5b:
         ff:44:10:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4b26xgAoQp5hO9YTZBjbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1OWFhYTM2MTUwZWUxNTVjM2I1MWFkOWM3MDdmNmM0M2Jm
MmJlNjMwHhcNMjYwNDE2MjAwMDQ2WhcNMjYwNDE3MjAwMDQ2WjAzMTEwLwYDVQQD
EygxYzZkOTJlMzJiZDNlYTU1NjUxZDcyM2FjN2Y3MWQ0MTI5Y2MzOTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1igT2r0kRr+orLhFwdBosJ7ZcAVZ
MEIlLbfN2SHSzkSAolSmOnWpMNHhLBWrAzo2c4kf4VxDdpH6GEaIZdz/xay45M+N
MzoKOHhrMsqLmBD/QAJBR4NHKWcZABwoZh7NxfFBU1+l5u2ORHFV/G6wS4Bdt1TU
gl7TTcqez9H0cGOabOF1s67pBiJvkLY35wbXr8Dgv2TenAhSjRLO4kwa+D0mwWdZ
G5exQjYEG4NsQ39ifR0bJ/oKjopb4+zpmO7bB0PLvVkOXu2nxMwQ56N1nnM3nemC
WbcdhGTvSrC2PeEJnepWfBvJzeABRqs5lRlBFfVi9l9TQU7X/8J40vBeFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxtkuMr0+pVZR1yOsf3HUEpzDlPMB8GA1UdIwQY
MBaAFHWaqjYVDuFVw7Ua2ccH9sQ78r5jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFpxcU5oVU80VlhEdFJyWnh3ZjJ4RHZ5dm1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mMmFmZGYtZTNjYy00OTM5LWFlNGUt
NzNkMTBkNWI5ZmVjLzEvZFpxcU5oVU80VlhEdFJyWnh3ZjJ4RHZ5dm1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9mMmFmZGYtZTNjYy00OTM5LWFlNGUtNzNkMTBkNWI5ZmVj
LzEvZFpxcU5oVU80VlhEdFJyWnh3ZjJ4RHZ5dm1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATD+8pAie
NAFoLJ1WWQ6Kg9job5TNMbFP1/6jmIGiSWi633y+irVTdGALnzEcoMIZ0VWGBtqP
hGECpW6X8XdGqIFEKGa3pWBZpjL2sHmPag6aeiQsur4cZL9ChRCdpvnAHdx7jnvo
Dwqs/ugd/fuq+c6mC9W8uZ6PvnnGy7foR1z43+t0FPBqXkT0ozyuzNBqsp/Zxpba
xYcvZUOPULD3bQe4Zlhj5vcP/zsxs6QdVpVM+Pko2K9NrHwVYC8c3pd4lIOS2Cfj
/TeaPc4WkU9voaZBdCsHRkVQh3s6bEUxz2iWyS6cnQ1DzfMpeLlAfLEzomkMP9UG
8IajZMdb/0QQEg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:10:29 2026 by rpki-client