Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
File:                     L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft (raw, json)
Hash identifier:          pNY66yxbWE3Tw4VTBJ3ArB7NgNVJqTjEvswZqdmw85c=
Subject key identifier:   4E:C4:0C:BD:0C:BC:01:20:27:4B:01:52:D4:55:82:E3:F8:96:A5:A8
Authority key identifier: 2F:C5:15:B7:1F:91:C6:E5:6A:14:AF:B4:EE:FD:95:06:1D:EC:49:D4
Certificate issuer:       /CN=2fc515b71f91c6e56a14afb4eefd95061dec49d4
Certificate serial:       019D98F48FE485B017F463562775B6594C36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
Manifest number:          12D6
Signing time:             Fri 17 Apr 2026 01:00:57 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:57 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:57 +0000
Files and hashes:         1: Fe56eCFw9GNdxYoh0CxUHKswnjM.roa (hash: FzvgcuW9uxmiyyUobhc0pF//vMfe4DZUVNz9/YMPy14=)
                          2: L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl (hash: VGZVaer0MJQ9vMENE7nl37RzpaYp0vTZv70NISArRPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:8f:e4:85:b0:17:f4:63:56:27:75:b6:59:4c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fc515b71f91c6e56a14afb4eefd95061dec49d4
        Validity
            Not Before: Apr 17 01:00:57 2026 GMT
            Not After : Apr 18 01:00:57 2026 GMT
        Subject: CN=4ec40cbd0cbc0120274b0152d45582e3f896a5a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:27:b1:6b:29:45:28:10:ea:7a:c3:c2:af:63:
                    06:fc:0e:39:9a:8d:5e:b9:46:74:e6:2b:9c:a2:95:
                    96:43:02:07:0f:5c:e9:4a:bc:3f:02:34:49:7f:a2:
                    a1:ea:d7:6e:f4:91:3c:4f:39:b9:3e:2c:f1:df:15:
                    8b:04:a5:fb:3c:63:01:d3:8e:6e:f6:e1:c0:4d:59:
                    15:46:d5:8c:54:05:55:98:8c:ab:d4:33:47:49:4d:
                    30:a2:50:e4:ff:d1:af:d3:bb:93:70:d8:7f:c6:24:
                    c0:05:d6:5d:63:eb:14:b8:c9:55:b8:96:ae:e5:78:
                    63:25:d0:a8:0d:c0:1a:13:ba:e1:c5:30:e6:e4:e5:
                    5f:85:80:c2:01:2e:ea:b2:14:d2:97:8a:e1:b2:cf:
                    0c:e8:c0:8f:39:36:ee:8d:db:7e:b5:38:fc:81:01:
                    5b:f8:66:2b:a3:91:61:26:fe:70:63:27:62:bd:3d:
                    14:fe:c2:60:52:b8:da:12:0b:f7:b8:2e:f8:72:e0:
                    30:43:03:7b:e5:a3:5f:7b:af:20:91:71:f8:10:95:
                    f9:7e:51:c1:10:7b:1a:db:a8:1b:91:b1:bf:d7:26:
                    53:84:c7:af:20:62:db:b0:60:12:af:3a:fb:9d:f8:
                    40:f8:f9:a4:93:f3:c5:23:9e:1f:48:f7:87:8b:64:
                    da:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C4:0C:BD:0C:BC:01:20:27:4B:01:52:D4:55:82:E3:F8:96:A5:A8
            X509v3 Authority Key Identifier:
                keyid:2F:C5:15:B7:1F:91:C6:E5:6A:14:AF:B4:EE:FD:95:06:1D:EC:49:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:85:6c:b0:5d:97:8c:89:2a:44:70:18:4d:c0:c6:26:6f:22:
         f4:f5:0d:d5:21:5b:2a:4f:24:9c:83:39:bc:95:a3:46:cd:19:
         af:62:e7:48:16:6e:4b:d3:1c:fe:35:f1:07:47:61:0a:7c:ae:
         55:36:99:25:ed:5c:6e:dd:12:d9:69:5f:34:6b:ac:13:16:c8:
         5d:7b:44:6e:f8:c4:66:da:84:b1:b5:a8:e8:64:25:57:e7:66:
         dc:d0:34:5a:9a:89:48:3f:4b:5c:16:a4:7d:e6:b6:fc:de:36:
         44:c9:f6:71:bf:bb:56:56:de:ea:59:1d:87:60:01:1a:0d:1a:
         9e:49:c4:54:8b:e1:15:31:29:df:18:13:ce:18:4b:84:dc:01:
         39:50:cf:9e:3a:22:93:d3:79:e5:77:ef:9b:e0:d0:54:fe:d3:
         a7:3e:d4:41:47:83:3d:7b:f3:ac:b9:7a:4b:a9:3b:e9:00:6f:
         b3:b2:2d:62:72:7b:a1:cf:0b:f5:31:d8:2d:1f:8f:3a:05:99:
         38:bf:d0:22:d0:d7:10:e5:42:db:6c:cd:d8:fb:bc:f7:aa:18:
         19:98:af:08:6f:bd:d4:ff:59:e8:58:c8:55:d6:ee:49:09:45:
         df:0f:2a:cd:08:66:3b:74:b9:40:e6:e3:35:17:0e:61:09:a7:
         14:ca:aa:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9I/khbAX9GNWJ3W2WUw2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYzUxNWI3MWY5MWM2ZTU2YTE0YWZiNGVlZmQ5NTA2MWRl
YzQ5ZDQwHhcNMjYwNDE3MDEwMDU3WhcNMjYwNDE4MDEwMDU3WjAzMTEwLwYDVQQD
Eyg0ZWM0MGNiZDBjYmMwMTIwMjc0YjAxNTJkNDU1ODJlM2Y4OTZhNWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCexaylFKBDqesPCr2MG/A45mo1e
uUZ05iucopWWQwIHD1zpSrw/AjRJf6Kh6tdu9JE8Tzm5Pizx3xWLBKX7PGMB045u
9uHATVkVRtWMVAVVmIyr1DNHSU0wolDk/9Gv07uTcNh/xiTABdZdY+sUuMlVuJau
5XhjJdCoDcAaE7rhxTDm5OVfhYDCAS7qshTSl4rhss8M6MCPOTbujdt+tTj8gQFb
+GYro5FhJv5wYydivT0U/sJgUrjaEgv3uC74cuAwQwN75aNfe68gkXH4EJX5flHB
EHsa26gbkbG/1yZThMevIGLbsGASrzr7nfhA+Pmkk/PFI54fSPeHi2TaJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7EDL0MvAEgJ0sBUtRVguP4lqWoMB8GA1UdIwQY
MBaAFC/FFbcfkcblahSvtO79lQYd7EnUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDhVVnR4LVJ4dVZxRkstMDd2MlZCaDNzU2RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zOGYwMTYtZjgyMS00YzNlLWIzOTEt
ZTIwMzczNTI3MjVhLzEvTDhVVnR4LVJ4dVZxRkstMDd2MlZCaDNzU2RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8zOGYwMTYtZjgyMS00YzNlLWIzOTEtZTIwMzczNTI3MjVh
LzEvTDhVVnR4LVJ4dVZxRkstMDd2MlZCaDNzU2RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjIVssF2X
jIkqRHAYTcDGJm8i9PUN1SFbKk8knIM5vJWjRs0Zr2LnSBZuS9Mc/jXxB0dhCnyu
VTaZJe1cbt0S2WlfNGusExbIXXtEbvjEZtqEsbWo6GQlV+dm3NA0WpqJSD9LXBak
fea2/N42RMn2cb+7Vlbe6lkdh2ABGg0anknEVIvhFTEp3xgTzhhLhNwBOVDPnjoi
k9N55Xfvm+DQVP7Tpz7UQUeDPXvzrLl6S6k76QBvs7ItYnJ7oc8L9THYLR+POgWZ
OL/QItDXEOVC22zN2Pu896oYGZivCG+91P9Z6FjIVdbuSQlF3w8qzQhmO3S5QObj
NRcOYQmnFMqqtA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:41:21 2026 by rpki-client