Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
File:                     7bBKlDMydoAXJm9OX1bABtmOu7Q.mft (raw, json)
Hash identifier:          fqR8+LZmQCOP5dk00O5VnQw9+u+NTNC4CL+GSptxwwY=
Subject key identifier:   41:3F:70:BA:89:11:F7:2C:2D:B8:B2:7E:92:A2:82:EC:19:F3:86:30
Authority key identifier: ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
Certificate issuer:       /CN=edb04a943332768017266f4e5f56c006d98ebbb4
Certificate serial:       019DA3AEC2A6BB52A219256B5D818F132C1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
Manifest number:          0EA4
Signing time:             Sun 19 Apr 2026 03:00:32 +0000
Manifest this update:     Sun 19 Apr 2026 03:00:32 +0000
Manifest next update:     Mon 20 Apr 2026 03:00:32 +0000
Files and hashes:         1: 7bBKlDMydoAXJm9OX1bABtmOu7Q.crl (hash: lBRWL1bG1eB115mWpe4BQnI2gVVgxvH2coR8yl4JDAo=)
                          2: IUQL4amfQO9d-_mgLtZ7DQFH5lY.roa (hash: IsUWoVhHWQJZPcVz+Jmd+g0d0TZ9a4iovWnR9SxBaAE=)
                          3: TzXS_x8rKVrlwoD9v8BqI47TEeo.roa (hash: rfp9dhL99iZjM0D0pF2I+WlGwD2HUU0+KsiqjFKP2sQ=)
                          4: yL6M7fiRcsCEJ9f3V81bkWsxt2k.roa (hash: hMXJaJNre81zhT3gUCMgF7Syv2XmMikjjKFj903XrQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:ae:c2:a6:bb:52:a2:19:25:6b:5d:81:8f:13:2c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb04a943332768017266f4e5f56c006d98ebbb4
        Validity
            Not Before: Apr 19 03:00:32 2026 GMT
            Not After : Apr 20 03:00:32 2026 GMT
        Subject: CN=413f70ba8911f72c2db8b27e92a282ec19f38630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:29:4f:1c:3f:30:c7:b5:f2:6d:04:a5:b9:09:
                    1c:f3:23:4c:4f:6a:ab:f7:84:37:d8:d9:d9:f1:0d:
                    1c:52:d4:9e:8c:57:13:f2:34:e1:08:4c:bb:3f:52:
                    4b:73:7a:51:94:6b:8c:e1:58:38:e5:f0:ff:93:51:
                    07:b3:25:9f:cd:a5:58:82:8b:a1:51:1e:96:7f:a0:
                    68:8d:64:ac:bf:ae:ea:64:04:73:49:f5:f7:4b:20:
                    43:f1:7a:e5:ce:53:67:3e:20:99:f3:01:b2:c7:d9:
                    c2:16:f6:01:0d:dd:70:47:f3:86:2b:e7:0f:ad:be:
                    dd:55:b8:24:f7:2d:9a:d7:5e:ab:a9:b9:7b:ab:9e:
                    63:a6:21:e5:9e:1d:8e:f7:0e:6e:20:65:be:7d:79:
                    90:4e:c0:54:42:7c:27:27:95:8b:3d:70:9b:3f:70:
                    2a:da:4a:4d:63:70:09:cf:21:b1:09:9a:bc:3c:4b:
                    dc:5a:8f:98:1d:91:7a:e6:ac:12:d0:88:56:df:17:
                    3b:26:22:bb:c2:14:af:d5:9b:6a:e2:65:a1:95:9a:
                    e6:70:10:49:c5:2f:87:c2:17:3e:6c:4f:57:6e:d6:
                    fb:ab:fe:f4:13:df:72:90:52:1c:a8:79:39:51:65:
                    51:2f:86:65:37:c2:5f:9a:a4:ec:79:ca:36:e5:97:
                    4c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3F:70:BA:89:11:F7:2C:2D:B8:B2:7E:92:A2:82:EC:19:F3:86:30
            X509v3 Authority Key Identifier:
                keyid:ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a5:3a:d7:d1:fe:cf:3f:ba:be:17:51:90:6b:fe:1e:9a:8c:
         61:19:66:41:38:8d:10:5b:6f:7d:7c:5c:1a:36:d8:fc:ee:52:
         e7:67:a1:9a:ef:04:10:95:38:a4:52:41:3a:f8:ea:f5:7c:68:
         13:c5:1a:dd:3a:3c:6b:de:3a:92:ca:e5:9e:b2:9b:a5:59:a2:
         c4:99:1a:21:46:22:e7:96:78:47:78:45:21:f6:ed:36:c1:1e:
         7b:d9:52:d3:b7:56:e7:6f:80:8f:ce:89:12:26:75:c9:27:81:
         62:c6:6e:d1:6b:48:21:92:68:03:45:3c:bf:9d:3d:32:ce:bc:
         3b:10:5a:a1:0f:11:3f:45:1d:66:72:a1:f8:f6:b1:99:ad:3a:
         bb:d9:70:cc:68:68:e3:42:2a:13:52:94:ae:48:69:4e:7a:6f:
         d8:24:9c:40:a6:c2:c5:3a:65:d0:61:01:ba:65:bd:48:65:52:
         fb:96:ce:c0:1f:2d:7a:9a:49:67:60:a2:bf:db:93:4b:fd:98:
         e7:54:6b:c4:db:2e:7f:f6:75:7e:c5:bf:ec:ce:83:88:f0:91:
         75:ee:8f:99:8a:30:09:fe:6a:3a:c9:2a:7e:05:eb:70:51:f8:
         5e:d2:8d:c4:be:a0:05:8d:06:0d:91:02:8e:35:b6:85:9c:7a:
         b9:df:36:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jrsKmu1KiGSVrXYGPEywdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYjA0YTk0MzMzMjc2ODAxNzI2NmY0ZTVmNTZjMDA2ZDk4
ZWJiYjQwHhcNMjYwNDE5MDMwMDMyWhcNMjYwNDIwMDMwMDMyWjAzMTEwLwYDVQQD
Eyg0MTNmNzBiYTg5MTFmNzJjMmRiOGIyN2U5MmEyODJlYzE5ZjM4NjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtylPHD8wx7XybQSluQkc8yNMT2qr
94Q32NnZ8Q0cUtSejFcT8jThCEy7P1JLc3pRlGuM4Vg45fD/k1EHsyWfzaVYgouh
UR6Wf6BojWSsv67qZARzSfX3SyBD8XrlzlNnPiCZ8wGyx9nCFvYBDd1wR/OGK+cP
rb7dVbgk9y2a116rqbl7q55jpiHlnh2O9w5uIGW+fXmQTsBUQnwnJ5WLPXCbP3Aq
2kpNY3AJzyGxCZq8PEvcWo+YHZF65qwS0IhW3xc7JiK7whSv1Ztq4mWhlZrmcBBJ
xS+Hwhc+bE9Xbtb7q/70E99ykFIcqHk5UWVRL4ZlN8JfmqTseco25ZdMNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEE/cLqJEfcsLbiyfpKiguwZ84YwMB8GA1UdIwQY
MBaAFO2wSpQzMnaAFyZvTl9WwAbZjru0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81MGE0YzQtOTFkMS00MzExLWI2N2It
ZTQ1ZmE2NGQ0ZDJkLzEvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81MGE0YzQtOTFkMS00MzExLWI2N2ItZTQ1ZmE2NGQ0ZDJk
LzEvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqU619H+
zz+6vhdRkGv+HpqMYRlmQTiNEFtvfXxcGjbY/O5S52ehmu8EEJU4pFJBOvjq9Xxo
E8Ua3To8a946ksrlnrKbpVmixJkaIUYi55Z4R3hFIfbtNsEee9lS07dW52+Aj86J
EiZ1ySeBYsZu0WtIIZJoA0U8v509Ms68OxBaoQ8RP0UdZnKh+Paxma06u9lwzGho
40IqE1KUrkhpTnpv2CScQKbCxTpl0GEBumW9SGVS+5bOwB8teppJZ2Civ9uTS/2Y
51RrxNsuf/Z1fsW/7M6DiPCRde6PmYowCf5qOskqfgXrcFH4XtKNxL6gBY0GDZEC
jjW2hZx6ud82sA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:14:32 2026 by rpki-client