Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
File:                     riXqr5GhZiyW---d5MX6Hh0IdJc.mft (raw, json)
Hash identifier:          CsIGear7Aj33YGb13IvUdrq7Ov1KEjNRyIX+49w7PQI=
Subject key identifier:   A4:0E:1A:DA:DF:0C:E0:CE:AD:47:8A:B8:A7:1A:2B:71:A7:9F:8A:54
Authority key identifier: AE:25:EA:AF:91:A1:66:2C:96:FB:EF:9D:E4:C5:FA:1E:1D:08:74:97
Certificate issuer:       /CN=ae25eaaf91a1662c96fbef9de4c5fa1e1d087497
Certificate serial:       019DA379258EDF348D28B8E6D989B6C62028
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
Manifest number:          B7
Signing time:             Sun 19 Apr 2026 02:01:58 +0000
Manifest this update:     Sun 19 Apr 2026 02:01:58 +0000
Manifest next update:     Mon 20 Apr 2026 02:01:58 +0000
Files and hashes:         1: IGeQzavDepXPW2JRBodeIJKbJT0.roa (hash: R+Y0Kt5axtO1z9YPtGYoVxdWFhFirYa/xiVOmRUUMuY=)
                          2: qaTAqrI1fUHmVwthqrZ_p4zXwY0.roa (hash: HUrv9uurkx2++8ILE32eKLmOAxI79xmY3LBCL4R3hHA=)
                          3: riXqr5GhZiyW---d5MX6Hh0IdJc.crl (hash: l7rtWzrKYfi75pdKGJpQjk/tOfzN3QhIPY+4ut1Xfm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:79:25:8e:df:34:8d:28:b8:e6:d9:89:b6:c6:20:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae25eaaf91a1662c96fbef9de4c5fa1e1d087497
        Validity
            Not Before: Apr 19 02:01:58 2026 GMT
            Not After : Apr 20 02:01:58 2026 GMT
        Subject: CN=a40e1adadf0ce0cead478ab8a71a2b71a79f8a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:87:19:36:06:0b:7a:98:5e:38:20:99:0c:
                    71:3a:bd:69:c3:8e:f1:34:eb:51:4f:91:b4:cb:df:
                    8d:da:c2:8f:72:31:ca:ae:ee:af:75:58:fd:8c:74:
                    1e:b3:2a:0e:f8:57:60:01:c0:18:ad:9a:a3:54:17:
                    fd:91:93:fa:01:18:70:a3:0b:88:3c:4e:4b:c3:26:
                    19:9d:5a:db:ba:26:19:41:af:ea:fb:cb:4b:ca:8b:
                    22:d5:72:92:ac:e1:c1:09:f4:af:68:9c:47:bd:0d:
                    a1:f8:9c:1c:b4:b3:71:8c:68:34:ce:88:b4:2b:98:
                    25:f2:c7:95:9c:d5:50:34:a1:a1:21:c3:8c:26:8c:
                    94:a6:86:48:f2:cc:dd:58:72:69:2c:c4:8d:a0:ee:
                    6b:a9:82:23:73:3b:45:73:2e:95:54:a7:fc:4b:0a:
                    9c:a0:27:4f:cb:b7:a6:2b:9a:ea:b0:3d:6e:db:29:
                    ca:7d:aa:6b:fc:d9:ef:fd:57:2d:d9:43:c0:c4:ec:
                    a2:81:96:aa:a4:cb:2b:f2:73:1a:94:66:53:37:4f:
                    41:e2:32:6a:1e:ba:2b:15:bb:dc:ee:16:6a:04:11:
                    7c:61:b5:95:7a:38:ee:a8:c4:f8:25:40:64:19:62:
                    d4:75:c0:df:d9:32:5f:e6:50:f8:8d:ad:45:5f:dc:
                    f7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0E:1A:DA:DF:0C:E0:CE:AD:47:8A:B8:A7:1A:2B:71:A7:9F:8A:54
            X509v3 Authority Key Identifier:
                keyid:AE:25:EA:AF:91:A1:66:2C:96:FB:EF:9D:E4:C5:FA:1E:1D:08:74:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:1c:b6:0e:71:6f:2d:88:fd:84:52:ed:57:37:e2:38:10:99:
         64:1e:c8:ec:fd:35:32:83:3a:b3:c5:37:d8:31:02:44:e2:01:
         20:54:cf:16:dd:d4:f1:50:44:4c:2e:d5:76:8b:be:c2:5f:67:
         df:2c:74:95:95:80:90:12:74:dd:1a:89:c2:43:8c:17:60:54:
         e9:51:51:7d:7f:1b:c2:c0:69:ac:82:93:b4:38:e2:fc:7e:fc:
         85:1c:7b:a0:bc:ae:ab:de:17:d1:af:24:b5:a8:1e:91:21:ab:
         d7:51:b3:c3:c9:d6:cc:73:6d:5e:ea:25:58:2c:8d:19:e2:a8:
         36:e7:cd:f5:3d:eb:f1:24:99:86:82:31:3d:2d:68:ad:71:c0:
         12:7e:2c:c6:24:a9:7a:94:17:59:4b:35:f0:c8:10:5b:23:37:
         f0:c0:7b:45:06:bb:1b:e5:32:db:62:b0:10:67:7e:b7:32:e4:
         ba:55:eb:2c:a5:6e:02:ea:c7:a4:40:83:3d:aa:b7:bd:9a:8b:
         83:eb:eb:c2:b2:93:ae:d0:da:e2:24:66:fb:ab:38:b5:7c:20:
         58:84:1d:7b:b9:fa:7d:6b:bd:cc:31:e6:13:dc:8e:51:96:c7:
         42:79:94:b2:db:e0:18:c3:d6:96:c9:bc:ee:42:88:19:cf:9e:
         fa:4f:aa:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeSWO3zSNKLjm2Ym2xiAoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMjVlYWFmOTFhMTY2MmM5NmZiZWY5ZGU0YzVmYTFlMWQw
ODc0OTcwHhcNMjYwNDE5MDIwMTU4WhcNMjYwNDIwMDIwMTU4WjAzMTEwLwYDVQQD
EyhhNDBlMWFkYWRmMGNlMGNlYWQ0NzhhYjhhNzFhMmI3MWE3OWY4YTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0SHGTYGC3qYXjggmQxxOr1pw47x
NOtRT5G0y9+N2sKPcjHKru6vdVj9jHQesyoO+FdgAcAYrZqjVBf9kZP6ARhwowuI
PE5LwyYZnVrbuiYZQa/q+8tLyosi1XKSrOHBCfSvaJxHvQ2h+JwctLNxjGg0zoi0
K5gl8seVnNVQNKGhIcOMJoyUpoZI8szdWHJpLMSNoO5rqYIjcztFcy6VVKf8Swqc
oCdPy7emK5rqsD1u2ynKfapr/Nnv/Vct2UPAxOyigZaqpMsr8nMalGZTN09B4jJq
HrorFbvc7hZqBBF8YbWVejjuqMT4JUBkGWLUdcDf2TJf5lD4ja1FX9z3awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQOGtrfDODOrUeKuKcaK3Gnn4pUMB8GA1UdIwQY
MBaAFK4l6q+RoWYslvvvneTF+h4dCHSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmlYcXI1R2haaXlXLS0tZDVNWDZIaDBJZEpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC84NTNiMzgtZWU0Ny00MDRjLWEzOTkt
Y2MxYTdjY2FiNzAyLzEvcmlYcXI1R2haaXlXLS0tZDVNWDZIaDBJZEpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC84NTNiMzgtZWU0Ny00MDRjLWEzOTktY2MxYTdjY2FiNzAy
LzEvcmlYcXI1R2haaXlXLS0tZDVNWDZIaDBJZEpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRy2DnFv
LYj9hFLtVzfiOBCZZB7I7P01MoM6s8U32DECROIBIFTPFt3U8VBETC7Vdou+wl9n
3yx0lZWAkBJ03RqJwkOMF2BU6VFRfX8bwsBprIKTtDji/H78hRx7oLyuq94X0a8k
tagekSGr11Gzw8nWzHNtXuolWCyNGeKoNufN9T3r8SSZhoIxPS1orXHAEn4sxiSp
epQXWUs18MgQWyM38MB7RQa7G+Uy22KwEGd+tzLkulXrLKVuAurHpECDPaq3vZqL
g+vrwrKTrtDa4iRm+6s4tXwgWIQde7n6fWu9zDHmE9yOUZbHQnmUstvgGMPWlsm8
7kKIGc+e+k+qKw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:53:12 2026 by rpki-client