Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
File:                     E11E-QKeG110PPzlgR7-Xib4yGI.mft (raw, json)
Hash identifier:          Y2kYyjvRPD++n4BMKpu1AdaUO7OO4zCGcAV8jZsYAIY=
Subject key identifier:   C9:BF:A3:30:10:33:1D:2E:70:78:46:A4:03:5F:5D:82:3E:64:B6:02
Authority key identifier: 13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62
Certificate issuer:       /CN=135d44f9029e1b5d743cfce5811efe5e26f8c862
Certificate serial:       019D996203C50577283DA086C022BD3A10E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
Manifest number:          07FA
Signing time:             Fri 17 Apr 2026 03:00:30 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:30 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:30 +0000
Files and hashes:         1: E11E-QKeG110PPzlgR7-Xib4yGI.crl (hash: c4Q+mx/IbK2LCcW1arwIDyvXlGGoZumNlwB/+gPu8HU=)
                          2: G790ctvfB8H7olkvHbj2C62gXak.roa (hash: 719eZlvdoP18xjD6bNkykAF0yzH6SUelF8SSBbaOpiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:03:c5:05:77:28:3d:a0:86:c0:22:bd:3a:10:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135d44f9029e1b5d743cfce5811efe5e26f8c862
        Validity
            Not Before: Apr 17 03:00:30 2026 GMT
            Not After : Apr 18 03:00:30 2026 GMT
        Subject: CN=c9bfa33010331d2e707846a4035f5d823e64b602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:de:22:02:da:f6:b1:f4:8a:42:ea:b6:7c:97:
                    2a:a4:d8:2c:2a:e2:f8:8a:05:02:56:31:b6:08:4e:
                    fe:f1:98:a3:b4:39:4e:21:6e:31:1e:f2:8c:ba:6a:
                    ac:dc:96:b9:50:4e:24:bd:69:e6:3f:91:72:aa:98:
                    58:1b:de:9c:fe:cc:be:d7:0d:a7:c9:2c:c9:87:b9:
                    ff:b9:d2:bd:0b:53:a4:30:7c:9b:b8:9b:02:02:a0:
                    17:4b:94:05:6e:3c:92:21:47:0e:be:23:11:e4:77:
                    11:77:49:11:53:ca:b1:76:40:69:cf:3a:a5:75:02:
                    98:30:bf:56:d6:0a:78:97:b9:c3:2f:bc:b9:39:70:
                    69:48:90:6a:9d:ee:fe:64:9f:f8:e9:e8:fa:62:51:
                    9c:d0:1b:c8:6d:93:12:b2:47:6a:43:b4:e1:1d:7c:
                    ef:df:15:86:52:91:da:b1:61:f5:b1:6e:ae:81:92:
                    1c:a2:24:47:91:05:76:86:e3:bb:de:2d:c8:b9:b0:
                    c0:f5:5d:77:8c:0d:74:d8:3d:f0:25:47:fa:46:6f:
                    2f:4a:8f:9c:3b:94:fe:42:20:1d:90:19:bd:84:68:
                    2c:b1:5d:e0:0f:6d:d7:e6:5b:f8:9e:2c:7b:23:35:
                    fc:a5:b1:0d:8d:74:1e:c0:f3:22:81:28:97:62:36:
                    c1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BF:A3:30:10:33:1D:2E:70:78:46:A4:03:5F:5D:82:3E:64:B6:02
            X509v3 Authority Key Identifier:
                keyid:13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:e7:2e:82:8a:6c:de:8c:ff:c5:58:ca:ae:a7:a4:71:89:cc:
         fc:1a:71:94:25:37:c5:1a:39:5d:c2:cd:c8:ec:17:2c:5b:99:
         71:4a:ea:68:77:3c:57:10:b8:e5:4d:c1:41:1c:4f:09:b5:0c:
         51:9b:97:33:94:94:b5:63:80:ea:56:42:04:9e:cb:3f:98:20:
         6a:f9:4c:91:40:15:f6:fc:54:d8:ea:3d:86:63:f7:80:aa:47:
         78:97:2f:48:bf:4e:30:9e:66:b1:18:10:df:78:9f:1b:89:64:
         7b:9a:a9:97:65:2a:37:14:3c:51:89:b7:ec:05:c5:7d:c4:aa:
         b1:72:ff:1d:08:77:38:56:17:24:87:04:c0:ce:33:b6:d7:4b:
         f8:df:b1:d4:33:8d:a3:de:e5:54:cf:3e:99:21:e1:c3:9b:57:
         2d:9a:3a:dd:a9:85:71:f4:8d:e5:59:c9:4f:36:36:fa:5b:34:
         de:77:83:c0:63:4b:a1:04:78:bf:44:f2:6a:51:70:3d:97:5f:
         d2:a6:e2:73:6f:89:cf:58:8e:29:d9:b1:9e:55:71:e3:a9:77:
         62:b5:dd:eb:10:60:f2:2a:86:ba:99:76:2b:4d:9c:6e:9d:1a:
         15:fd:a8:1a:fa:fe:77:d0:5d:5e:b6:6a:5b:bd:27:0f:f7:3b:
         8d:6b:67:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYgPFBXcoPaCGwCK9OhDnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNWQ0NGY5MDI5ZTFiNWQ3NDNjZmNlNTgxMWVmZTVlMjZm
OGM4NjIwHhcNMjYwNDE3MDMwMDMwWhcNMjYwNDE4MDMwMDMwWjAzMTEwLwYDVQQD
EyhjOWJmYTMzMDEwMzMxZDJlNzA3ODQ2YTQwMzVmNWQ4MjNlNjRiNjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN4iAtr2sfSKQuq2fJcqpNgsKuL4
igUCVjG2CE7+8ZijtDlOIW4xHvKMumqs3Ja5UE4kvWnmP5FyqphYG96c/sy+1w2n
ySzJh7n/udK9C1OkMHybuJsCAqAXS5QFbjySIUcOviMR5HcRd0kRU8qxdkBpzzql
dQKYML9W1gp4l7nDL7y5OXBpSJBqne7+ZJ/46ej6YlGc0BvIbZMSskdqQ7ThHXzv
3xWGUpHasWH1sW6ugZIcoiRHkQV2huO73i3IubDA9V13jA102D3wJUf6Rm8vSo+c
O5T+QiAdkBm9hGgssV3gD23X5lv4nix7IzX8pbENjXQewPMigSiXYjbB+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMm/ozAQMx0ucHhGpANfXYI+ZLYCMB8GA1UdIwQY
MBaAFBNdRPkCnhtddDz85YEe/l4m+MhiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTExRS1RS2VHMTEwUFB6bGdSNy1YaWI0eUdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82N2E5ZmItYTg1Yi00MzFkLWFmYjUt
ZDBkMzNiMTY2OGE1LzEvRTExRS1RS2VHMTEwUFB6bGdSNy1YaWI0eUdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy82N2E5ZmItYTg1Yi00MzFkLWFmYjUtZDBkMzNiMTY2OGE1
LzEvRTExRS1RS2VHMTEwUFB6bGdSNy1YaWI0eUdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADecugops
3oz/xVjKrqekcYnM/BpxlCU3xRo5XcLNyOwXLFuZcUrqaHc8VxC45U3BQRxPCbUM
UZuXM5SUtWOA6lZCBJ7LP5ggavlMkUAV9vxU2Oo9hmP3gKpHeJcvSL9OMJ5msRgQ
33ifG4lke5qpl2UqNxQ8UYm37AXFfcSqsXL/HQh3OFYXJIcEwM4zttdL+N+x1DON
o97lVM8+mSHhw5tXLZo63amFcfSN5VnJTzY2+ls03neDwGNLoQR4v0TyalFwPZdf
0qbic2+Jz1iOKdmxnlVx46l3YrXd6xBg8iqGupl2K02cbp0aFf2oGvr+d9BdXrZq
W70nD/c7jWtntA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:27 2026 by rpki-client