Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
File:                     7WtTyjBwQ0J-9OrInHfBuhP28C4.mft (raw, json)
Hash identifier:          PCYxyLu+Y2676tbFW+jMNlV91vKEeYwOM1e+yimUdZc=
Subject key identifier:   F0:F8:3B:56:45:7A:35:D3:43:67:E7:61:0C:5D:C8:66:8E:F7:23:71
Authority key identifier: ED:6B:53:CA:30:70:43:42:7E:F4:EA:C8:9C:77:C1:BA:13:F6:F0:2E
Certificate issuer:       /CN=ed6b53ca307043427ef4eac89c77c1ba13f6f02e
Certificate serial:       019D99CFCAEAC7464AA11C887F1DB6A87DE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
Manifest number:          0EB6
Signing time:             Fri 17 Apr 2026 05:00:25 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:25 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:25 +0000
Files and hashes:         1: 7WtTyjBwQ0J-9OrInHfBuhP28C4.crl (hash: P2vmzhbb7t5Hn1pHsZGmscgt/sFqkiUorEjyqym4ZUM=)
                          2: I3HAZf8rku9CbsUBC3F9P-EBYlg.roa (hash: Eycp5thHHdJu+vFCPvEGzpeSVr3x+pRAbitu/74D2KM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:cf:ca:ea:c7:46:4a:a1:1c:88:7f:1d:b6:a8:7d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6b53ca307043427ef4eac89c77c1ba13f6f02e
        Validity
            Not Before: Apr 17 05:00:25 2026 GMT
            Not After : Apr 18 05:00:25 2026 GMT
        Subject: CN=f0f83b56457a35d34367e7610c5dc8668ef72371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cc:07:cf:72:8e:c5:6d:31:d1:b6:df:54:de:
                    1e:75:c5:5a:52:28:9f:60:b8:4b:c9:d4:b6:8f:c5:
                    cd:cb:7d:94:19:c4:1e:09:16:cd:42:7a:7d:5f:7a:
                    92:6a:10:32:fe:35:e2:53:3d:4b:f4:33:2e:46:e9:
                    a3:9b:61:2c:3c:b2:af:f7:ee:7c:5e:0c:2b:ce:a1:
                    9c:7c:2c:76:0c:a3:b5:1b:eb:82:ea:93:d2:db:8c:
                    7c:5b:cd:88:ec:fc:f3:4e:be:13:72:1e:ca:80:c7:
                    12:22:60:87:12:40:ed:56:1b:93:bc:a2:4c:94:99:
                    79:65:21:58:05:3f:a1:2a:62:9f:1c:8b:d3:bf:ac:
                    2c:c8:9d:03:9b:0b:0b:32:32:56:5a:ef:2e:c2:b4:
                    45:9e:b9:11:0f:ba:4a:1f:9f:f2:23:15:ed:60:ac:
                    a6:55:56:c4:cd:4c:76:b1:59:7a:d6:f4:03:18:59:
                    be:6f:b3:af:6d:18:92:62:9c:1c:81:38:ea:50:34:
                    ca:64:ff:9f:43:ff:65:34:f3:37:3b:99:e5:0a:b2:
                    f3:af:66:e4:23:21:04:57:eb:1c:27:31:0b:98:3d:
                    44:5b:5a:37:bb:a4:7e:e2:95:b3:e9:79:94:48:23:
                    f7:fc:3b:fe:39:df:68:f1:84:f8:90:ad:c4:98:08:
                    cd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F8:3B:56:45:7A:35:D3:43:67:E7:61:0C:5D:C8:66:8E:F7:23:71
            X509v3 Authority Key Identifier:
                keyid:ED:6B:53:CA:30:70:43:42:7E:F4:EA:C8:9C:77:C1:BA:13:F6:F0:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:23:e5:2e:e2:31:75:14:f5:16:df:65:bd:c9:db:52:37:29:
         83:9f:55:d8:2b:f3:55:d5:f2:48:5f:f0:b1:e4:43:72:d8:a9:
         85:45:7f:7f:a4:af:d2:20:b6:c8:4f:d3:46:eb:52:5d:b4:d8:
         c9:b3:f0:65:b7:fd:6c:1a:ce:80:31:c1:71:a3:28:54:a4:a4:
         7e:6f:cf:28:9c:db:ce:07:46:95:b4:a4:04:9c:d0:a7:3f:04:
         1d:65:eb:c4:84:71:4d:9d:30:e9:7a:44:ea:ef:fb:ac:5a:d0:
         ac:23:e5:42:8b:b1:01:99:b6:79:d5:01:e0:79:15:d4:4a:f2:
         e8:8f:4a:ab:42:43:0d:7d:84:4d:54:fc:de:c2:99:14:ae:8b:
         59:72:ae:f4:c1:23:9b:ef:a9:2a:ed:ae:d0:50:19:b8:3b:df:
         ea:23:a1:df:cd:e5:1b:32:54:69:99:80:7b:8f:28:61:56:91:
         1a:da:44:33:1f:e8:81:22:ba:7e:6d:bf:a7:ee:2f:74:d2:3b:
         41:25:32:c9:3a:d9:86:6e:77:21:9c:96:d6:03:9e:ad:a5:f9:
         46:2c:94:0e:5e:22:96:a5:2e:77:8c:a3:19:f6:7e:a7:0a:2a:
         e3:c8:a2:88:87:e8:18:2b:68:07:24:a1:c1:34:2e:a1:3e:b9:
         21:7e:8d:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Zz8rqx0ZKoRyIfx22qH3lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNmI1M2NhMzA3MDQzNDI3ZWY0ZWFjODljNzdjMWJhMTNm
NmYwMmUwHhcNMjYwNDE3MDUwMDI1WhcNMjYwNDE4MDUwMDI1WjAzMTEwLwYDVQQD
EyhmMGY4M2I1NjQ1N2EzNWQzNDM2N2U3NjEwYzVkYzg2NjhlZjcyMzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscwHz3KOxW0x0bbfVN4edcVaUiif
YLhLydS2j8XNy32UGcQeCRbNQnp9X3qSahAy/jXiUz1L9DMuRumjm2EsPLKv9+58
XgwrzqGcfCx2DKO1G+uC6pPS24x8W82I7PzzTr4Tch7KgMcSImCHEkDtVhuTvKJM
lJl5ZSFYBT+hKmKfHIvTv6wsyJ0DmwsLMjJWWu8uwrRFnrkRD7pKH5/yIxXtYKym
VVbEzUx2sVl61vQDGFm+b7OvbRiSYpwcgTjqUDTKZP+fQ/9lNPM3O5nlCrLzr2bk
IyEEV+scJzELmD1EW1o3u6R+4pWz6XmUSCP3/Dv+Od9o8YT4kK3EmAjNNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPD4O1ZFejXTQ2fnYQxdyGaO9yNxMB8GA1UdIwQY
MBaAFO1rU8owcENCfvTqyJx3wboT9vAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1d0VHlqQndRMEotOU9ySW5IZkJ1aFAyOEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hMjhkZGUtOGVkNi00ZDNkLTliYTAt
NmQ2MTVmM2UxNGY1LzEvN1d0VHlqQndRMEotOU9ySW5IZkJ1aFAyOEM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9hMjhkZGUtOGVkNi00ZDNkLTliYTAtNmQ2MTVmM2UxNGY1
LzEvN1d0VHlqQndRMEotOU9ySW5IZkJ1aFAyOEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACCPlLuIx
dRT1Ft9lvcnbUjcpg59V2CvzVdXySF/wseRDctiphUV/f6Sv0iC2yE/TRutSXbTY
ybPwZbf9bBrOgDHBcaMoVKSkfm/PKJzbzgdGlbSkBJzQpz8EHWXrxIRxTZ0w6XpE
6u/7rFrQrCPlQouxAZm2edUB4HkV1Ery6I9Kq0JDDX2ETVT83sKZFK6LWXKu9MEj
m++pKu2u0FAZuDvf6iOh383lGzJUaZmAe48oYVaRGtpEMx/ogSK6fm2/p+4vdNI7
QSUyyTrZhm53IZyW1gOeraX5RiyUDl4ilqUud4yjGfZ+pwoq48iiiIfoGCtoBySh
wTQuoT65IX6N6Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:52 2026 by rpki-client