Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
File:                     eD8ukq1ZxwyM3CiygCniKXBcbJE.mft (raw, json)
Hash identifier:          2SyjU71hG71ypDWPCtVQViC1knYY76HloSjQA729Cd0=
Subject key identifier:   2F:AB:C5:6F:06:FB:0A:D1:20:51:C3:9A:70:22:3A:A8:B7:17:9C:42
Authority key identifier: 78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
Certificate issuer:       /CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Certificate serial:       019D9AABAED9C77FB9115C6E641DBA446777
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
Manifest number:          0DB3
Signing time:             Fri 17 Apr 2026 09:00:35 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:35 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:35 +0000
Files and hashes:         1: cqkPcUlhylPWROpeUvaKpM1IHzI.roa (hash: Vj/WfOnXkP6T4SuWUuZJIwljoQd2+9R6QoAl56Tye4o=)
                          2: eD8ukq1ZxwyM3CiygCniKXBcbJE.crl (hash: LBQrNrmJM4upo6lQ+9TB8hrtOp1R1GvVT7N+JlfVt+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:ae:d9:c7:7f:b9:11:5c:6e:64:1d:ba:44:67:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
        Validity
            Not Before: Apr 17 09:00:35 2026 GMT
            Not After : Apr 18 09:00:35 2026 GMT
        Subject: CN=2fabc56f06fb0ad12051c39a70223aa8b7179c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5d:92:b6:8c:c8:18:88:0d:ea:d4:e0:ff:40:
                    e2:35:c0:a8:c9:68:1f:39:fd:2a:19:75:24:82:cc:
                    a8:e9:d3:a3:ad:07:5b:71:44:59:42:f4:54:89:bd:
                    89:26:f9:7b:e0:69:f3:c5:52:69:aa:16:f3:ad:af:
                    63:62:2d:ea:5d:4c:42:f9:1a:b8:7b:80:28:3c:e9:
                    57:cf:fa:43:e2:17:01:dc:1b:d0:f5:dc:8d:ff:45:
                    8f:38:9f:54:ad:ab:75:93:b1:d5:85:e6:ff:db:1e:
                    15:05:9e:01:2b:23:d0:08:fc:77:cd:af:86:e1:33:
                    20:2b:5b:39:71:20:35:4f:47:33:83:be:6d:c2:f2:
                    75:84:73:52:6c:f0:7d:53:59:8e:d2:07:0e:0c:a2:
                    bc:49:c0:fe:58:03:13:cc:0c:ea:a4:d6:aa:80:b1:
                    d1:36:7e:65:8f:70:ef:4b:d1:55:35:e5:5b:d7:b1:
                    c6:d0:03:e6:4d:79:f6:5d:14:ae:d4:a2:41:d1:52:
                    d5:e8:ce:28:ea:23:e8:26:f9:6d:be:6f:0a:c4:d0:
                    42:88:97:65:78:88:10:8e:24:48:07:69:56:74:d4:
                    db:b5:ec:e8:90:67:d4:f1:fd:a7:9e:ee:04:ea:95:
                    51:c4:ac:45:23:f4:ae:a8:07:0a:4c:91:7e:06:7f:
                    24:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:AB:C5:6F:06:FB:0A:D1:20:51:C3:9A:70:22:3A:A8:B7:17:9C:42
            X509v3 Authority Key Identifier:
                keyid:78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:5b:7e:3f:bc:83:64:17:c9:23:68:cc:e7:80:98:56:9e:58:
         60:f2:2e:71:d4:bf:1b:77:0f:6e:47:d9:7b:52:07:52:45:e6:
         ed:bd:b6:a3:29:3b:c6:31:4a:b8:46:59:eb:a7:90:2c:4a:31:
         57:cb:0d:46:cd:47:96:53:6e:fc:ec:13:e0:95:02:d0:b5:cd:
         db:f3:a7:8f:8d:aa:03:58:a8:ed:a4:58:50:92:c5:98:03:5d:
         0b:4e:f0:cd:97:2f:a7:e6:9e:32:08:53:ab:a8:6b:b3:52:83:
         df:e4:cc:41:36:df:b0:93:20:27:78:65:28:75:e2:ab:06:c7:
         31:ad:bc:19:bb:70:3c:fe:b3:68:c0:bd:12:75:0f:57:38:fa:
         9b:0d:96:9f:89:c8:49:67:b8:4f:83:34:ed:03:b0:e8:7e:76:
         48:db:e8:4c:02:f7:5b:be:9f:3f:0a:49:4b:cd:1b:95:9d:97:
         c9:83:e1:23:db:de:d6:92:a7:fe:d7:f0:0a:d2:1b:72:24:c9:
         21:15:3f:40:ae:6c:83:7f:73:ed:a4:80:16:0d:c4:e4:e4:b3:
         c8:af:74:c4:16:2d:99:e7:d3:de:70:f8:19:06:88:d7:c6:a2:
         41:77:12:9f:c6:6a:5f:8c:75:13:3d:0d:db:fa:32:85:77:48:
         bf:c5:63:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq67Zx3+5EVxuZB26RGd3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4M2YyZTkyYWQ1OWM3MGM4Y2RjMjhiMjgwMjllMjI5NzA1
YzZjOTEwHhcNMjYwNDE3MDkwMDM1WhcNMjYwNDE4MDkwMDM1WjAzMTEwLwYDVQQD
EygyZmFiYzU2ZjA2ZmIwYWQxMjA1MWMzOWE3MDIyM2FhOGI3MTc5YzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl2StozIGIgN6tTg/0DiNcCoyWgf
Of0qGXUkgsyo6dOjrQdbcURZQvRUib2JJvl74GnzxVJpqhbzra9jYi3qXUxC+Rq4
e4AoPOlXz/pD4hcB3BvQ9dyN/0WPOJ9Urat1k7HVheb/2x4VBZ4BKyPQCPx3za+G
4TMgK1s5cSA1T0czg75twvJ1hHNSbPB9U1mO0gcODKK8ScD+WAMTzAzqpNaqgLHR
Nn5lj3DvS9FVNeVb17HG0APmTXn2XRSu1KJB0VLV6M4o6iPoJvltvm8KxNBCiJdl
eIgQjiRIB2lWdNTbtezokGfU8f2nnu4E6pVRxKxFI/SuqAcKTJF+Bn8k1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+rxW8G+wrRIFHDmnAiOqi3F5xCMB8GA1UdIwQY
MBaAFHg/LpKtWccMjNwosoAp4ilwXGyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUQ4dWtxMVp4d3lNM0NpeWdDbmlLWEJjYkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81N2I0MTQtNTA5MS00NjU3LWE5YjQt
ZTlhZjU2NmYyYzE0LzEvZUQ4dWtxMVp4d3lNM0NpeWdDbmlLWEJjYkpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81N2I0MTQtNTA5MS00NjU3LWE5YjQtZTlhZjU2NmYyYzE0
LzEvZUQ4dWtxMVp4d3lNM0NpeWdDbmlLWEJjYkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFt+P7yD
ZBfJI2jM54CYVp5YYPIucdS/G3cPbkfZe1IHUkXm7b22oyk7xjFKuEZZ66eQLEox
V8sNRs1HllNu/OwT4JUC0LXN2/Onj42qA1io7aRYUJLFmANdC07wzZcvp+aeMghT
q6hrs1KD3+TMQTbfsJMgJ3hlKHXiqwbHMa28GbtwPP6zaMC9EnUPVzj6mw2Wn4nI
SWe4T4M07QOw6H52SNvoTAL3W76fPwpJS80blZ2XyYPhI9ve1pKn/tfwCtIbciTJ
IRU/QK5sg39z7aSAFg3E5OSzyK90xBYtmefT3nD4GQaI18aiQXcSn8ZqX4x1Ez0N
2/oyhXdIv8Vjgg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:40:07 2026 by rpki-client