Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
File:                     pmnxwhNwxE39EOKvaIyMTg6hKVU.mft (raw, json)
Hash identifier:          8k30ehJoT2jZYm1O5PR/j80tjVGhrw4FQ7h7/Mj1FH4=
Subject key identifier:   BB:E5:08:7E:42:C0:2E:85:01:4D:32:B5:4B:3B:80:73:2F:41:47:03
Authority key identifier: A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55
Certificate issuer:       /CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955
Certificate serial:       019D9B195F0D43E3F3B903E16E284C33F05F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
Manifest number:          110B
Signing time:             Fri 17 Apr 2026 11:00:24 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:24 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:24 +0000
Files and hashes:         1: pmnxwhNwxE39EOKvaIyMTg6hKVU.crl (hash: /Lw2sczUj2cSw7mEHYYN5n91RoE+zDsCnu18sAO9O38=)
                          2: xHv2_HdEJG5Cfvg9tYmqVThQtwc.roa (hash: Nxypi5IV+neWqZvzXksjBejqnOVHDrNcZpixogm0gqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:5f:0d:43:e3:f3:b9:03:e1:6e:28:4c:33:f0:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955
        Validity
            Not Before: Apr 17 11:00:24 2026 GMT
            Not After : Apr 18 11:00:24 2026 GMT
        Subject: CN=bbe5087e42c02e85014d32b54b3b80732f414703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b8:36:40:49:92:73:88:9d:6c:c1:13:07:b4:
                    96:a4:b0:89:aa:14:a0:ca:be:f5:c7:2b:18:84:46:
                    73:0f:7d:59:82:bd:d9:7a:91:67:64:88:de:a0:73:
                    f1:6b:ce:47:81:01:3f:c4:49:c8:14:81:43:30:c7:
                    cc:b2:81:a4:32:94:e6:07:f4:e9:10:16:bd:54:45:
                    33:98:73:db:55:2b:12:19:2b:fe:59:82:8e:90:37:
                    50:9f:64:8c:11:1e:54:af:d3:6c:fc:79:a4:51:22:
                    4f:c9:d8:eb:51:fe:b6:1a:1e:04:c1:31:ba:30:91:
                    e4:d8:8d:6b:4c:87:98:3f:5e:a5:a3:6e:81:90:09:
                    60:7a:a9:5a:fa:6d:b1:22:d6:7e:db:f9:fd:db:fd:
                    00:da:45:94:40:01:b3:04:72:1e:ce:6c:5e:44:44:
                    43:d0:dd:63:a5:8b:ef:f2:74:05:6e:8e:5c:f5:b1:
                    7d:93:03:a2:1d:1d:a8:37:68:81:e3:57:10:b4:15:
                    60:30:80:d0:6e:83:6c:d8:4c:5a:a3:21:44:1b:f5:
                    af:25:17:b1:bc:93:15:d0:0a:fb:5d:34:ba:63:1e:
                    89:22:ef:d0:3c:75:97:22:33:da:ae:8c:c9:60:c6:
                    2c:92:21:9a:47:5e:df:5f:c1:25:b6:7d:06:b7:62:
                    f1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E5:08:7E:42:C0:2E:85:01:4D:32:B5:4B:3B:80:73:2F:41:47:03
            X509v3 Authority Key Identifier:
                keyid:A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:97:19:4a:e4:80:56:94:7b:5e:10:2f:db:86:67:15:b3:14:
         de:43:aa:4e:85:c1:5a:00:9b:f7:b7:d0:a4:88:28:2d:c2:bd:
         7c:ac:f1:72:0d:9a:bc:fb:c6:c9:d5:5a:7f:c3:84:8a:31:a8:
         e6:56:12:4e:39:a8:e2:34:fa:2f:23:4e:a7:b8:53:a1:96:ca:
         89:67:b6:2d:03:1d:7a:1a:7d:dd:f6:5b:ad:ab:34:d5:4f:db:
         6d:34:87:14:35:0b:5d:12:6b:89:8b:d8:79:33:6a:8a:6c:3a:
         80:21:02:b2:02:38:fd:1c:8c:47:42:86:79:9c:54:82:65:77:
         a5:da:8c:92:7a:d2:ae:89:52:3a:44:82:92:e2:2d:52:0a:a9:
         1d:9e:ce:1d:3c:7f:95:42:3e:62:58:0f:bc:a2:18:6c:48:45:
         81:73:cc:ba:7a:6e:e9:cf:cd:eb:bc:b5:67:32:28:d2:f2:2f:
         b5:0e:f8:c8:d7:06:16:98:23:68:9e:3e:37:88:bb:13:cb:45:
         54:d2:89:73:58:b9:3b:f1:60:b6:4b:08:31:44:09:68:43:89:
         dc:4a:0e:8d:20:25:79:da:e5:3a:28:73:c3:66:c4:63:41:f3:
         77:d0:20:d5:5a:4e:5c:43:42:b4:b9:e7:21:9e:bf:80:a2:cc:
         f1:9f:62:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGV8NQ+PzuQPhbihMM/BfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NjlmMWMyMTM3MGM0NGRmZDEwZTJhZjY4OGM4YzRlMGVh
MTI5NTUwHhcNMjYwNDE3MTEwMDI0WhcNMjYwNDE4MTEwMDI0WjAzMTEwLwYDVQQD
EyhiYmU1MDg3ZTQyYzAyZTg1MDE0ZDMyYjU0YjNiODA3MzJmNDE0NzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLg2QEmSc4idbMETB7SWpLCJqhSg
yr71xysYhEZzD31Zgr3ZepFnZIjeoHPxa85HgQE/xEnIFIFDMMfMsoGkMpTmB/Tp
EBa9VEUzmHPbVSsSGSv+WYKOkDdQn2SMER5Ur9Ns/HmkUSJPydjrUf62Gh4EwTG6
MJHk2I1rTIeYP16lo26BkAlgeqla+m2xItZ+2/n92/0A2kWUQAGzBHIezmxeRERD
0N1jpYvv8nQFbo5c9bF9kwOiHR2oN2iB41cQtBVgMIDQboNs2ExaoyFEG/WvJRex
vJMV0Ar7XTS6Yx6JIu/QPHWXIjParozJYMYskiGaR17fX8Eltn0Gt2LxoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvlCH5CwC6FAU0ytUs7gHMvQUcDMB8GA1UdIwQY
MBaAFKZp8cITcMRN/RDir2iMjE4OoSlVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG1ueHdoTnd4RTM5RU9LdmFJeU1UZzZoS1ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lN2I0MGMtNDE0Yi00NzNhLWI4Yzct
YjdiMTQ4MTYyNWIxLzEvcG1ueHdoTnd4RTM5RU9LdmFJeU1UZzZoS1ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lN2I0MGMtNDE0Yi00NzNhLWI4YzctYjdiMTQ4MTYyNWIx
LzEvcG1ueHdoTnd4RTM5RU9LdmFJeU1UZzZoS1ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZcZSuSA
VpR7XhAv24ZnFbMU3kOqToXBWgCb97fQpIgoLcK9fKzxcg2avPvGydVaf8OEijGo
5lYSTjmo4jT6LyNOp7hToZbKiWe2LQMdehp93fZbras01U/bbTSHFDULXRJriYvY
eTNqimw6gCECsgI4/RyMR0KGeZxUgmV3pdqMknrSrolSOkSCkuItUgqpHZ7OHTx/
lUI+YlgPvKIYbEhFgXPMunpu6c/N67y1ZzIo0vIvtQ74yNcGFpgjaJ4+N4i7E8tF
VNKJc1i5O/FgtksIMUQJaEOJ3EoOjSAledrlOihzw2bEY0Hzd9Ag1VpOXENCtLnn
IZ6/gKLM8Z9ivw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:10:14 2026 by rpki-client