Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
File:                     F1ogYIrOEedRHIZpVgY2cwqeKr8.mft (raw, json)
Hash identifier:          qBBT0I+sruu5CLfsLx0O5J3XDLFsJ4K0/U2WWVZRngk=
Subject key identifier:   42:8F:89:3E:65:5A:D8:27:3F:AC:EA:5F:F2:4C:9D:CC:E2:A7:30:F4
Authority key identifier: 17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF
Certificate issuer:       /CN=175a20608ace11e7511c8669560636730a9e2abf
Certificate serial:       019D9B512B48CC7771B9B95980383F28FD8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
Manifest number:          077E
Signing time:             Fri 17 Apr 2026 12:01:21 +0000
Manifest this update:     Fri 17 Apr 2026 12:01:21 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:21 +0000
Files and hashes:         1: F1ogYIrOEedRHIZpVgY2cwqeKr8.crl (hash: PU7ilhNAvzDj66uWGwbygCXZH4O0ORcsVUv29rmXmqw=)
                          2: Q7opPXEWfOIWXtGcMaVf2gDlyIw.roa (hash: CTgenKosJdcAbaZ5ZvRKAeILm3aXtuh6bQlnuyIpyNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:51:2b:48:cc:77:71:b9:b9:59:80:38:3f:28:fd:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175a20608ace11e7511c8669560636730a9e2abf
        Validity
            Not Before: Apr 17 12:01:21 2026 GMT
            Not After : Apr 18 12:01:21 2026 GMT
        Subject: CN=428f893e655ad8273facea5ff24c9dcce2a730f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7f:56:2b:9c:15:3d:13:15:9a:80:7c:3d:55:
                    e6:fd:d6:ec:c4:86:d5:e5:54:f2:b1:ed:e8:65:07:
                    0c:1a:42:5e:19:0c:e8:80:a5:08:24:ca:e0:e5:ea:
                    ed:cb:c9:9f:fd:79:a3:9b:12:a8:d7:67:2c:32:37:
                    ef:31:36:0f:e7:4f:a5:bd:c9:eb:19:b2:a0:2b:50:
                    32:af:8c:f3:c3:9a:23:dd:e5:41:5a:b6:c1:74:2d:
                    28:b4:a0:1f:bd:94:11:04:12:80:7d:55:d4:4a:85:
                    41:9f:95:4d:0a:c7:b6:d0:75:6b:6b:9e:dd:50:8a:
                    5c:4e:87:75:55:6e:a4:fb:91:79:f6:a0:cc:30:2e:
                    29:d1:31:76:15:4e:12:09:80:de:15:13:42:86:cc:
                    bf:c7:5d:91:54:35:e7:5e:8e:a3:bb:11:67:9a:7d:
                    75:13:63:8e:de:90:68:6d:76:ab:93:9d:15:97:a5:
                    8c:af:6f:26:81:f7:f3:b1:28:ca:fa:64:40:8f:45:
                    3a:4c:35:9c:aa:33:b5:5f:9a:78:fb:2b:16:88:75:
                    28:02:ae:ff:44:76:18:37:2b:37:26:99:06:b7:16:
                    2c:54:98:3c:e2:f1:37:3e:1b:a4:d9:03:92:64:7a:
                    be:df:e5:20:07:b5:96:2c:d2:8d:75:fb:7f:73:7a:
                    c6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8F:89:3E:65:5A:D8:27:3F:AC:EA:5F:F2:4C:9D:CC:E2:A7:30:F4
            X509v3 Authority Key Identifier:
                keyid:17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:1d:6e:e0:a3:c6:41:88:ec:0f:58:5b:d7:aa:52:59:37:13:
         c9:34:ed:97:60:44:1f:0f:2a:a0:d6:68:fe:a8:2e:a5:17:4d:
         4e:e7:6b:c0:ed:15:42:4c:93:7c:28:c6:61:d1:3e:b6:fa:57:
         12:42:96:53:40:10:e9:dd:c8:f4:b1:7c:0b:1b:21:f5:9e:78:
         7e:b7:f3:75:5e:c4:bf:b6:4c:71:26:b1:a5:a7:75:e4:00:f8:
         52:49:bc:8b:5c:26:79:85:98:36:29:1f:51:47:2b:0a:6f:68:
         35:b8:40:a6:62:fd:70:93:76:2a:da:96:d9:2c:3f:ec:ca:55:
         c1:47:f9:5d:3b:26:11:e9:3c:50:b6:6d:55:e2:1a:5b:99:8a:
         85:71:b2:39:30:3a:e9:6f:15:04:3e:5b:11:1a:2d:5d:f5:e7:
         bb:8d:9a:9a:aa:49:2a:44:19:6a:41:d8:3d:95:81:21:4d:00:
         9b:56:46:31:76:4f:f0:95:dc:23:d4:65:f1:f6:63:2f:79:3a:
         60:89:46:1f:da:3f:9a:89:de:2b:a4:49:4c:8d:87:66:f4:17:
         59:e3:59:8a:2a:4d:8b:9e:67:ca:e4:9d:48:ba:3f:fa:50:01:
         8b:3e:e6:be:1f:63:59:c7:7b:68:59:40:5d:7f:40:40:26:45:
         9f:cb:b5:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUStIzHdxublZgDg/KP2PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NWEyMDYwOGFjZTExZTc1MTFjODY2OTU2MDYzNjczMGE5
ZTJhYmYwHhcNMjYwNDE3MTIwMTIxWhcNMjYwNDE4MTIwMTIxWjAzMTEwLwYDVQQD
Eyg0MjhmODkzZTY1NWFkODI3M2ZhY2VhNWZmMjRjOWRjY2UyYTczMGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr39WK5wVPRMVmoB8PVXm/dbsxIbV
5VTyse3oZQcMGkJeGQzogKUIJMrg5erty8mf/XmjmxKo12csMjfvMTYP50+lvcnr
GbKgK1Ayr4zzw5oj3eVBWrbBdC0otKAfvZQRBBKAfVXUSoVBn5VNCse20HVra57d
UIpcTod1VW6k+5F59qDMMC4p0TF2FU4SCYDeFRNChsy/x12RVDXnXo6juxFnmn11
E2OO3pBobXark50Vl6WMr28mgffzsSjK+mRAj0U6TDWcqjO1X5p4+ysWiHUoAq7/
RHYYNys3JpkGtxYsVJg84vE3Phuk2QOSZHq+3+UgB7WWLNKNdft/c3rGGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKPiT5lWtgnP6zqX/JMnczipzD0MB8GA1UdIwQY
MBaAFBdaIGCKzhHnURyGaVYGNnMKniq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFvZ1lJck9FZWRSSElacFZnWTJjd3FlS3I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy83ZTlhMTgtMDYyOS00MWViLWE2ODEt
YTYwNWNhZDU1MDg2LzEvRjFvZ1lJck9FZWRSSElacFZnWTJjd3FlS3I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy83ZTlhMTgtMDYyOS00MWViLWE2ODEtYTYwNWNhZDU1MDg2
LzEvRjFvZ1lJck9FZWRSSElacFZnWTJjd3FlS3I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcB1u4KPG
QYjsD1hb16pSWTcTyTTtl2BEHw8qoNZo/qgupRdNTudrwO0VQkyTfCjGYdE+tvpX
EkKWU0AQ6d3I9LF8Cxsh9Z54frfzdV7Ev7ZMcSaxpad15AD4Ukm8i1wmeYWYNikf
UUcrCm9oNbhApmL9cJN2KtqW2Sw/7MpVwUf5XTsmEek8ULZtVeIaW5mKhXGyOTA6
6W8VBD5bERotXfXnu42amqpJKkQZakHYPZWBIU0Am1ZGMXZP8JXcI9Rl8fZjL3k6
YIlGH9o/moneK6RJTI2HZvQXWeNZiipNi55nyuSdSLo/+lABiz7mvh9jWcd7aFlA
XX9AQCZFn8u1JQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:42:00 2026 by rpki-client