Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.mft
File:                     TuwmeuLxv5Xm16FCCA5d96MTlJI.mft (raw, json)
Hash identifier:          rlVIS0G20psDJkfYcpJe7djnXOJkzkADI7RHBQBdsck=
Subject key identifier:   FE:9E:EA:DA:0E:C7:4F:6C:02:8A:8E:1E:E6:26:EE:D4:AD:24:7D:A7
Authority key identifier: 4E:EC:26:7A:E2:F1:BF:95:E6:D7:A1:42:08:0E:5D:F7:A3:13:94:92
Certificate issuer:       /CN=4eec267ae2f1bf95e6d7a142080e5df7a3139492
Certificate serial:       019D99623C95E76A9CAF3DE4C51DA5E71175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TuwmeuLxv5Xm16FCCA5d96MTlJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.mft
Manifest number:          0DA4
Signing time:             Fri 17 Apr 2026 03:00:45 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:45 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:45 +0000
Files and hashes:         1: TuwmeuLxv5Xm16FCCA5d96MTlJI.crl (hash: nzNLHMGboPCuB4zXKe4cdg2jlTWU4uEeW3h+2I14g0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TuwmeuLxv5Xm16FCCA5d96MTlJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:3c:95:e7:6a:9c:af:3d:e4:c5:1d:a5:e7:11:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eec267ae2f1bf95e6d7a142080e5df7a3139492
        Validity
            Not Before: Apr 17 03:00:45 2026 GMT
            Not After : Apr 18 03:00:45 2026 GMT
        Subject: CN=fe9eeada0ec74f6c028a8e1ee626eed4ad247da7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ef:37:40:c2:ee:59:e1:73:5c:bf:9a:cf:6e:
                    b3:43:ac:4b:ac:64:39:e9:76:1d:cd:b5:96:ee:eb:
                    6b:27:bc:35:c7:34:37:dd:fa:83:19:5c:cf:e3:f5:
                    5b:d3:f3:fd:cd:e5:53:78:dc:7c:75:68:f7:75:dd:
                    17:36:77:e5:2f:69:e0:69:f5:a5:f3:98:d8:b3:e5:
                    aa:bf:0d:a9:e9:04:88:15:5b:48:eb:f6:76:77:be:
                    a0:fe:61:e4:2e:28:7c:fe:65:be:00:4c:d6:56:f4:
                    60:a0:28:05:e6:4d:2e:49:c2:cd:81:b1:35:68:83:
                    4d:96:35:e8:3e:86:58:37:6e:83:80:2f:47:c9:80:
                    6f:91:fb:30:75:da:08:b5:d3:3d:ae:55:84:ad:48:
                    17:8c:c8:53:ce:2d:a2:d9:03:78:8e:44:96:3a:7e:
                    d7:92:a4:25:66:9b:aa:c7:94:1c:96:66:97:41:bb:
                    c2:ee:f5:27:bd:8b:c7:aa:00:2e:a8:88:2e:9d:31:
                    54:45:05:44:cd:fc:f7:77:87:98:c0:e8:48:e6:09:
                    4e:1b:f9:5b:c4:2c:9a:19:5d:03:73:a2:fc:ad:30:
                    60:20:57:f3:45:56:8f:03:4e:3d:0d:06:0e:36:2b:
                    31:53:36:6d:96:a3:11:74:e6:aa:0d:b5:01:dc:07:
                    e8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9E:EA:DA:0E:C7:4F:6C:02:8A:8E:1E:E6:26:EE:D4:AD:24:7D:A7
            X509v3 Authority Key Identifier:
                keyid:4E:EC:26:7A:E2:F1:BF:95:E6:D7:A1:42:08:0E:5D:F7:A3:13:94:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuwmeuLxv5Xm16FCCA5d96MTlJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:af:01:97:55:a5:ae:6e:ec:85:64:02:c3:ed:40:d3:69:b8:
         cf:03:97:4c:66:b3:be:2f:17:3a:5f:67:84:e8:d2:ee:08:58:
         11:d4:cb:90:6a:b6:a3:5a:21:49:62:6d:49:57:97:ad:5a:13:
         3f:fe:3e:f0:b2:88:d3:84:be:03:ff:28:c3:18:c2:6e:0f:3d:
         6e:04:d2:ce:05:9b:dc:0c:ed:51:b1:d7:16:fa:0a:f0:53:1d:
         f5:93:69:2d:a2:64:5c:78:f5:f7:06:84:5c:a5:35:69:28:56:
         c0:3c:26:01:bb:3b:cc:ae:c0:86:a0:b0:74:12:09:77:b8:7e:
         11:9a:a4:38:7e:b0:1b:32:f7:b9:38:b3:38:4a:ed:1a:d1:9c:
         e9:b9:b3:76:d2:d6:cf:21:d5:d1:06:68:7d:f7:ab:36:a3:6b:
         51:b5:de:d9:f8:68:b2:f6:e3:67:a9:a3:17:53:a2:ee:ae:8a:
         4e:88:dc:53:c2:37:1c:de:b4:bf:34:96:8a:8f:c9:65:29:97:
         6c:e3:b0:08:9e:a7:08:8e:43:c2:f5:ea:eb:2c:f6:99:65:54:
         3f:14:0c:b8:38:cc:49:56:3f:64:19:ec:f0:3e:12:95:f0:14:
         88:0c:5b:29:0a:2c:11:7b:92:8b:ee:b5:f0:44:96:9d:56:77:
         31:e4:94:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYjyV52qcrz3kxR2l5xF1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZWMyNjdhZTJmMWJmOTVlNmQ3YTE0MjA4MGU1ZGY3YTMx
Mzk0OTIwHhcNMjYwNDE3MDMwMDQ1WhcNMjYwNDE4MDMwMDQ1WjAzMTEwLwYDVQQD
EyhmZTllZWFkYTBlYzc0ZjZjMDI4YThlMWVlNjI2ZWVkNGFkMjQ3ZGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5O83QMLuWeFzXL+az26zQ6xLrGQ5
6XYdzbWW7utrJ7w1xzQ33fqDGVzP4/Vb0/P9zeVTeNx8dWj3dd0XNnflL2ngafWl
85jYs+Wqvw2p6QSIFVtI6/Z2d76g/mHkLih8/mW+AEzWVvRgoCgF5k0uScLNgbE1
aINNljXoPoZYN26DgC9HyYBvkfswddoItdM9rlWErUgXjMhTzi2i2QN4jkSWOn7X
kqQlZpuqx5QclmaXQbvC7vUnvYvHqgAuqIgunTFURQVEzfz3d4eYwOhI5glOG/lb
xCyaGV0Dc6L8rTBgIFfzRVaPA049DQYONisxUzZtlqMRdOaqDbUB3AfoNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6e6toOx09sAoqOHuYm7tStJH2nMB8GA1UdIwQY
MBaAFE7sJnri8b+V5tehQggOXfejE5SSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHV3bWV1THh2NVhtMTZGQ0NBNWQ5Nk1UbEpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS82OGI0NjQtMjQ2MC00ZTUzLWFkZTMt
NmI5NmM4MzYxMjY1LzEvVHV3bWV1THh2NVhtMTZGQ0NBNWQ5Nk1UbEpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS82OGI0NjQtMjQ2MC00ZTUzLWFkZTMtNmI5NmM4MzYxMjY1
LzEvVHV3bWV1THh2NVhtMTZGQ0NBNWQ5Nk1UbEpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZK8Bl1Wl
rm7shWQCw+1A02m4zwOXTGazvi8XOl9nhOjS7ghYEdTLkGq2o1ohSWJtSVeXrVoT
P/4+8LKI04S+A/8owxjCbg89bgTSzgWb3AztUbHXFvoK8FMd9ZNpLaJkXHj19waE
XKU1aShWwDwmAbs7zK7AhqCwdBIJd7h+EZqkOH6wGzL3uTizOErtGtGc6bmzdtLW
zyHV0QZofferNqNrUbXe2fhosvbjZ6mjF1Oi7q6KTojcU8I3HN60vzSWio/JZSmX
bOOwCJ6nCI5DwvXq6yz2mWVUPxQMuDjMSVY/ZBns8D4SlfAUiAxbKQosEXuSi+61
8ESWnVZ3MeSURQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:20 2026 by rpki-client