Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
File:                     s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft (raw, json)
Hash identifier:          Cd6C99j90JLUlTG0NnUX0JF++dpZ02QlshaJDLBkPdk=
Subject key identifier:   57:4C:AA:73:E7:A9:2C:DA:56:3C:C8:75:89:06:BF:B5:DB:81:41:FD
Authority key identifier: B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
Certificate issuer:       /CN=b3e064e17335fdeb83a09862a735a6e97762d973
Certificate serial:       019D9A74DE49EDFCBB08FAF4EBD6403043EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
Manifest number:          142F
Signing time:             Fri 17 Apr 2026 08:00:43 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:43 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:43 +0000
Files and hashes:         1: VjVnMCIpJllowS-mUdPKmibH_s4.roa (hash: RkAjCgTxoEP9Ub/dSw/Wwxp7BKhfppLg+6NL3UVv1Zg=)
                          2: s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl (hash: bv04zDFDmJWGaJ/N/9vtrr7EJuVsgATcvoE62veO/gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:de:49:ed:fc:bb:08:fa:f4:eb:d6:40:30:43:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3e064e17335fdeb83a09862a735a6e97762d973
        Validity
            Not Before: Apr 17 08:00:43 2026 GMT
            Not After : Apr 18 08:00:43 2026 GMT
        Subject: CN=574caa73e7a92cda563cc8758906bfb5db8141fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8b:68:e7:0e:fa:48:54:40:06:b7:ea:1f:2c:
                    88:8f:4f:1b:4e:42:3c:44:92:f5:38:24:9b:fa:af:
                    58:47:04:45:6c:29:07:70:b5:6b:28:24:33:7a:5d:
                    16:3d:52:47:88:eb:66:68:7b:af:df:00:dc:33:8d:
                    a4:1c:4b:bc:9a:3a:0a:d5:12:24:6d:7c:3a:56:27:
                    b2:55:3f:dc:ed:7e:b1:5c:b1:07:62:d1:67:2c:c2:
                    6e:e7:8f:0e:65:8e:f1:73:ff:f1:3a:1f:78:40:80:
                    1a:de:82:dc:5f:e5:65:89:fc:28:63:22:13:e3:68:
                    68:f7:ca:fa:43:6e:ec:96:b6:89:b9:55:f8:5b:ee:
                    36:72:40:63:2c:3e:86:ca:1b:c2:c7:01:a6:8d:d9:
                    17:1d:ae:c2:44:a2:72:b1:7b:0f:cc:d0:1e:cb:89:
                    a5:77:3f:b6:d5:72:78:d5:2c:f1:17:06:82:5f:e7:
                    9a:3d:78:5d:86:eb:62:e8:44:af:c3:40:85:64:6c:
                    9e:4a:d6:21:be:9c:ab:ab:77:eb:12:f7:58:06:63:
                    a1:6f:d6:3a:a7:bc:2d:c4:f3:67:e1:05:9f:e2:31:
                    0c:36:e7:2d:4e:c1:fe:95:a3:95:7e:12:b1:d9:61:
                    e6:8b:78:88:0e:ff:f7:a6:d3:b5:3c:12:c6:7b:8f:
                    72:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4C:AA:73:E7:A9:2C:DA:56:3C:C8:75:89:06:BF:B5:DB:81:41:FD
            X509v3 Authority Key Identifier:
                keyid:B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:2d:77:2e:7b:77:7f:65:97:1b:61:c5:6a:89:3a:e6:b3:99:
         05:1a:f8:82:15:20:e6:c4:59:e8:b7:7c:85:df:fb:7f:79:53:
         fc:a6:d7:77:78:e1:f1:32:90:08:36:75:25:8e:0a:d0:ac:6b:
         f6:27:13:c7:25:55:cf:2c:b2:a7:81:58:ab:10:6b:d8:6f:fc:
         bd:08:1f:5f:72:d0:41:bd:5a:5b:f4:63:45:6d:1d:87:a7:a9:
         80:8a:b4:5d:bb:9a:5d:c9:02:40:5f:2f:69:c2:e1:3d:89:52:
         b2:e1:50:a2:c7:bc:b3:02:70:09:52:f5:70:7a:81:c8:0b:b4:
         d9:e5:d7:a5:78:1c:15:5a:6c:12:86:c4:25:26:5d:01:4c:06:
         89:17:38:0d:b1:da:39:0a:5d:f5:d7:98:32:6c:bf:39:16:2c:
         c6:bc:0a:4b:2d:59:d2:f5:df:fb:53:4b:d7:3f:23:07:c4:3d:
         86:4b:39:c8:40:ad:6e:81:b2:59:05:ee:ea:2f:12:af:26:19:
         06:be:e0:a2:6d:72:43:53:e0:51:32:60:de:66:ac:11:48:c7:
         ea:86:d9:95:0f:c2:a5:3f:f4:c3:2b:7b:20:f0:17:f2:73:9a:
         f5:55:7f:21:f6:7b:5e:5f:df:cc:bb:41:f8:7a:ee:b9:b5:8d:
         6b:2e:73:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adN5J7fy7CPr069ZAMEPqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZTA2NGUxNzMzNWZkZWI4M2EwOTg2MmE3MzVhNmU5Nzc2
MmQ5NzMwHhcNMjYwNDE3MDgwMDQzWhcNMjYwNDE4MDgwMDQzWjAzMTEwLwYDVQQD
Eyg1NzRjYWE3M2U3YTkyY2RhNTYzY2M4NzU4OTA2YmZiNWRiODE0MWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4to5w76SFRABrfqHyyIj08bTkI8
RJL1OCSb+q9YRwRFbCkHcLVrKCQzel0WPVJHiOtmaHuv3wDcM42kHEu8mjoK1RIk
bXw6VieyVT/c7X6xXLEHYtFnLMJu548OZY7xc//xOh94QIAa3oLcX+VlifwoYyIT
42ho98r6Q27slraJuVX4W+42ckBjLD6GyhvCxwGmjdkXHa7CRKJysXsPzNAey4ml
dz+21XJ41SzxFwaCX+eaPXhdhuti6ESvw0CFZGyeStYhvpyrq3frEvdYBmOhb9Y6
p7wtxPNn4QWf4jEMNuctTsH+laOVfhKx2WHmi3iIDv/3ptO1PBLGe49yLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdMqnPnqSzaVjzIdYkGv7XbgUH9MB8GA1UdIwQY
MBaAFLPgZOFzNf3rg6CYYqc1pul3YtlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcy1CazRYTTFfZXVEb0poaXB6V202WGRpMlhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yMTk0NDktZjI0My00NmUzLWJiYTct
MWQ1NTEzYmZmNGQ2LzEvcy1CazRYTTFfZXVEb0poaXB6V202WGRpMlhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yMTk0NDktZjI0My00NmUzLWJiYTctMWQ1NTEzYmZmNGQ2
LzEvcy1CazRYTTFfZXVEb0poaXB6V202WGRpMlhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANS13Lnt3
f2WXG2HFaok65rOZBRr4ghUg5sRZ6Ld8hd/7f3lT/KbXd3jh8TKQCDZ1JY4K0Kxr
9icTxyVVzyyyp4FYqxBr2G/8vQgfX3LQQb1aW/RjRW0dh6epgIq0XbuaXckCQF8v
acLhPYlSsuFQose8swJwCVL1cHqByAu02eXXpXgcFVpsEobEJSZdAUwGiRc4DbHa
OQpd9deYMmy/ORYsxrwKSy1Z0vXf+1NL1z8jB8Q9hks5yECtboGyWQXu6i8SryYZ
Br7gom1yQ1PgUTJg3masEUjH6obZlQ/CpT/0wyt7IPAX8nOa9VV/IfZ7Xl/fzLtB
+HruubWNay5zDg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:06:52 2026 by rpki-client