Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
File:                     XwjcECGKxtt5QwrnxEUVWQQX1gU.mft (raw, json)
Hash identifier:          WNUKv/AxKIMkxfFcuQvaRmICFBVHbKjop8HNwz5+nNk=
Subject key identifier:   78:C9:82:4A:D2:03:CF:D9:ED:EE:CD:9D:64:69:6C:66:FF:F9:50:50
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Certificate issuer:       /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial:       019D9BBE8BA1462FE6AD1AEB50616AF1312F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
Manifest number:          07A3
Signing time:             Fri 17 Apr 2026 14:00:49 +0000
Manifest this update:     Fri 17 Apr 2026 14:00:49 +0000
Manifest next update:     Sat 18 Apr 2026 14:00:49 +0000
Files and hashes:         1: XwjcECGKxtt5QwrnxEUVWQQX1gU.crl (hash: WKWwtINe94kPzJzEg5/LdOCzsD02rOcGgzp8MNdLbEQ=)
                          2: ZrOcAdpcSsRROyYE23OBjWG5yVQ.roa (hash: 3TzGgdPPeRvq5m4XrgUnNCdTHF2ADSRfiiLFr+IcrFs=)
                          3: e5Gl5Joy_TfTtgIDa-b4kbpMbIk.roa (hash: hOVgr+6lYpOL/o328s3O436QYBTqR+tWUhnoy8x9gK8=)
                          4: kiz7IlKh-UDi6rS-liSvr-XLZj0.roa (hash: fYE3W6s3a7j6dTVOVi+YslQybRuhNmifh/ujnuOCMOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:8b:a1:46:2f:e6:ad:1a:eb:50:61:6a:f1:31:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
        Validity
            Not Before: Apr 17 14:00:49 2026 GMT
            Not After : Apr 18 14:00:49 2026 GMT
        Subject: CN=78c9824ad203cfd9edeecd9d64696c66fff95050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b1:d8:a2:8c:07:ac:f6:d1:8c:e3:64:c8:a6:
                    9c:f0:b9:45:fc:c2:7a:9a:cd:b8:ec:de:0e:90:df:
                    e3:95:f2:35:7f:4a:8a:a8:90:13:30:d9:1b:e5:5f:
                    ed:1d:85:97:49:d4:f0:20:63:88:4b:e8:0a:29:5f:
                    3a:1f:e7:74:bd:b0:e7:ff:fa:88:34:c9:b0:81:1c:
                    91:8a:ac:00:96:d5:b6:2d:2a:2b:f8:12:95:c1:4a:
                    09:b5:c1:67:13:70:1e:3c:bb:41:2a:96:7f:a1:b3:
                    ed:27:65:1d:5e:33:04:a4:f9:01:30:e3:7c:62:bf:
                    ee:cb:f2:a0:ad:1d:48:68:f7:a7:b8:b4:4f:ec:51:
                    03:5d:bc:6b:14:7c:d7:ba:dc:13:2c:c7:21:0e:5a:
                    0a:db:34:62:c8:1d:4b:13:f0:5f:be:5b:bf:a5:16:
                    42:b1:f9:76:cd:18:78:78:f5:6a:6d:9a:42:71:6b:
                    7c:08:b4:4c:cd:ac:bc:c1:e6:3b:40:d0:3f:fd:95:
                    28:75:b4:35:3f:fa:f2:95:ae:74:30:0b:06:c1:ba:
                    1d:c7:6a:51:0a:03:8e:d2:18:be:4b:de:0d:dd:32:
                    c9:4b:1e:6c:5c:81:44:b5:02:11:8b:42:1d:9c:31:
                    52:c2:bc:d3:60:52:58:cb:3b:63:01:a3:81:00:07:
                    38:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C9:82:4A:D2:03:CF:D9:ED:EE:CD:9D:64:69:6C:66:FF:F9:50:50
            X509v3 Authority Key Identifier:
                keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:80:95:15:34:c8:0f:46:2b:f4:53:14:96:be:89:9f:9b:f2:
         84:fa:83:11:e0:3f:02:5b:c3:e6:e0:ef:ab:e6:c8:d9:a2:92:
         29:85:ce:87:55:8e:82:6a:61:eb:d6:24:87:71:07:7f:8b:c2:
         40:cf:cd:00:e6:0c:65:76:4f:45:61:c5:75:9d:22:60:9f:0d:
         86:8d:f4:ea:c3:3d:24:48:5a:3e:6b:3d:25:f3:83:6d:e3:77:
         0c:9a:36:77:9b:9d:8f:b7:80:e8:27:2d:41:01:f5:81:02:cc:
         86:05:42:c7:2e:6d:7e:21:cc:75:df:97:bd:52:e8:4c:66:75:
         59:2a:90:eb:e6:b9:5d:6b:e8:4e:68:89:27:e1:22:13:e2:ed:
         ed:45:1c:85:86:60:ba:87:e2:fa:86:01:f8:11:74:b5:14:e6:
         1c:a4:c7:83:21:fe:08:84:a7:50:e8:49:a2:a2:aa:0f:16:cb:
         c6:3a:6c:af:3d:86:de:6c:44:3d:b3:31:99:e3:03:db:19:54:
         8d:ca:5c:03:d2:41:2e:dc:16:07:85:f5:c6:81:3e:63:89:f5:
         f8:30:cb:79:8c:42:06:8e:8a:4f:12:09:af:2b:c5:30:39:8b:
         9a:84:a8:70:e8:6d:b3:b9:93:cc:9f:7c:41:fe:f4:eb:94:a0:
         f8:46:a9:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvouhRi/mrRrrUGFq8TEvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMDhkYzEwMjE4YWM2ZGI3OTQzMGFlN2M0NDUxNTU5MDQx
N2Q2MDUwHhcNMjYwNDE3MTQwMDQ5WhcNMjYwNDE4MTQwMDQ5WjAzMTEwLwYDVQQD
Eyg3OGM5ODI0YWQyMDNjZmQ5ZWRlZWNkOWQ2NDY5NmM2NmZmZjk1MDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LHYoowHrPbRjONkyKac8LlF/MJ6
ms247N4OkN/jlfI1f0qKqJATMNkb5V/tHYWXSdTwIGOIS+gKKV86H+d0vbDn//qI
NMmwgRyRiqwAltW2LSor+BKVwUoJtcFnE3AePLtBKpZ/obPtJ2UdXjMEpPkBMON8
Yr/uy/KgrR1IaPenuLRP7FEDXbxrFHzXutwTLMchDloK2zRiyB1LE/Bfvlu/pRZC
sfl2zRh4ePVqbZpCcWt8CLRMzay8weY7QNA//ZUodbQ1P/ryla50MAsGwbodx2pR
CgOO0hi+S94N3TLJSx5sXIFEtQIRi0IdnDFSwrzTYFJYyztjAaOBAAc4tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjJgkrSA8/Z7e7NnWRpbGb/+VBQMB8GA1UdIwQY
MBaAFF8I3BAhisbbeUMK58RFFVkEF9YFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9kODE3NDUtNjU4ZC00YTc0LTkyZjct
NWQzYTQyMWEwZjEwLzEvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9kODE3NDUtNjU4ZC00YTc0LTkyZjctNWQzYTQyMWEwZjEw
LzEvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4CVFTTI
D0Yr9FMUlr6Jn5vyhPqDEeA/AlvD5uDvq+bI2aKSKYXOh1WOgmph69Ykh3EHf4vC
QM/NAOYMZXZPRWHFdZ0iYJ8Nho306sM9JEhaPms9JfODbeN3DJo2d5udj7eA6Cct
QQH1gQLMhgVCxy5tfiHMdd+XvVLoTGZ1WSqQ6+a5XWvoTmiJJ+EiE+Lt7UUchYZg
uofi+oYB+BF0tRTmHKTHgyH+CISnUOhJoqKqDxbLxjpsrz2G3mxEPbMxmeMD2xlU
jcpcA9JBLtwWB4X1xoE+Y4n1+DDLeYxCBo6KTxIJryvFMDmLmoSocOhts7mTzJ98
Qf7065Sg+EapTg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:40:15 2026 by rpki-client