Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
File:                     7rtMC0r2FchaPNze1LfrtmYxG0g.mft (raw, json)
Hash identifier:          Ik0XzIwORwi4KAWzrNCW6aKlgzNeddL3kHxs5MPm7+M=
Subject key identifier:   9C:FD:A0:8C:21:CC:9E:54:03:AF:82:C6:B5:82:1D:E0:57:B0:9A:4F
Authority key identifier: EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48
Certificate issuer:       /CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
Certificate serial:       019DA41CAAD99185E2DBB2AD48223959CA50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
Manifest number:          185B
Signing time:             Sun 19 Apr 2026 05:00:35 +0000
Manifest this update:     Sun 19 Apr 2026 05:00:35 +0000
Manifest next update:     Mon 20 Apr 2026 05:00:35 +0000
Files and hashes:         1: 7rtMC0r2FchaPNze1LfrtmYxG0g.crl (hash: zneDWHCjgpg9+vNlHMWQ5FHKagvCYVMG2pMJnQs+/ko=)
                          2: guibBNdYNmYjs3BhZ4d37Us7C4k.roa (hash: ERVCfgK3qCQAc++yH8oVuuxPI5EAT0LJxo2iXgCuAbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:1c:aa:d9:91:85:e2:db:b2:ad:48:22:39:59:ca:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
        Validity
            Not Before: Apr 19 05:00:35 2026 GMT
            Not After : Apr 20 05:00:35 2026 GMT
        Subject: CN=9cfda08c21cc9e5403af82c6b5821de057b09a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9c:b7:c8:7d:41:30:36:e1:9d:3d:c1:f4:fe:
                    2e:7c:5c:55:8b:aa:55:7f:d9:90:1a:76:8f:a6:7a:
                    33:9e:01:7c:f2:52:21:4b:8f:77:d7:36:22:93:29:
                    6b:53:eb:a4:2c:2e:a5:b1:33:55:33:f3:47:d2:5c:
                    86:34:60:6a:d0:05:36:c6:3e:6e:9a:51:08:f9:a9:
                    c6:b1:f7:24:bc:22:86:a9:ba:8e:fc:57:62:bc:9b:
                    50:e0:33:d0:70:fd:7d:4e:00:fc:70:38:3e:3e:7d:
                    f6:54:96:6f:94:0c:c6:eb:89:e1:aa:09:ab:94:90:
                    da:30:b1:12:09:7d:01:e5:c7:d8:95:ac:15:ae:90:
                    42:2d:6b:ce:5f:72:c5:6e:7e:7b:03:ee:dd:ab:0f:
                    73:81:50:59:11:cb:bb:b7:36:6a:1f:82:28:21:f3:
                    33:b5:89:a3:85:c9:15:4c:29:86:ba:db:f6:95:5e:
                    4b:ef:47:2c:fa:fa:d8:6a:c6:71:c7:fb:f7:2a:87:
                    62:b6:ee:b0:11:00:c9:cc:78:ac:2d:73:6b:3c:c3:
                    9f:5b:20:09:d3:57:72:be:c2:c2:2f:d3:a8:43:27:
                    79:b4:9e:34:9b:74:69:32:73:fe:7e:87:43:c9:45:
                    67:69:f0:dc:c1:cd:e0:70:d9:2a:4b:74:c3:2b:84:
                    e1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:FD:A0:8C:21:CC:9E:54:03:AF:82:C6:B5:82:1D:E0:57:B0:9A:4F
            X509v3 Authority Key Identifier:
                keyid:EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:3d:0d:22:ab:2c:15:87:df:45:d8:3a:cc:00:30:5b:7e:66:
         c4:fa:f8:63:be:88:37:6a:57:0a:2b:39:e7:89:52:36:b8:75:
         0c:f1:75:bc:17:17:9b:a4:87:3c:33:5c:2c:81:c6:7c:85:bb:
         b3:62:c5:a2:d9:25:f1:0a:c3:32:26:70:6c:99:b0:de:d3:38:
         f3:fe:a8:30:3f:70:c5:3a:12:fe:65:7f:b4:9c:06:cb:f9:05:
         7f:f4:4e:9d:7a:3d:bf:d8:3b:7b:f7:93:d7:ff:09:25:bc:32:
         3a:3f:a0:81:29:a4:64:2e:d7:d2:82:86:cf:25:1d:57:0b:d5:
         b0:8a:18:5b:c3:75:18:4c:c0:c7:76:f2:67:46:14:99:6a:c2:
         8f:07:0b:57:21:f9:87:a5:38:ea:73:90:67:45:cd:18:70:0f:
         c1:f3:d5:f0:81:90:3d:96:6f:bb:b3:c6:3d:18:b2:00:f6:a7:
         77:dc:6d:9f:91:f9:98:dc:75:a9:ce:ad:80:6f:d8:6b:fb:05:
         ae:40:9b:7d:23:d8:d1:ac:02:c1:01:f1:88:38:13:b9:86:d7:
         29:a4:05:78:1f:61:7d:88:dd:1d:7d:c6:19:be:bd:2c:d9:19:
         5b:9f:87:16:c2:c3:69:02:40:59:73:42:26:67:6f:ab:e7:15:
         60:d7:ad:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kHKrZkYXi27KtSCI5WcpQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmI0YzBiNGFmNjE1Yzg1YTNjZGNkZWQ0YjdlYmI2NjYz
MTFiNDgwHhcNMjYwNDE5MDUwMDM1WhcNMjYwNDIwMDUwMDM1WjAzMTEwLwYDVQQD
Eyg5Y2ZkYTA4YzIxY2M5ZTU0MDNhZjgyYzZiNTgyMWRlMDU3YjA5YTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpy3yH1BMDbhnT3B9P4ufFxVi6pV
f9mQGnaPpnozngF88lIhS4931zYikylrU+ukLC6lsTNVM/NH0lyGNGBq0AU2xj5u
mlEI+anGsfckvCKGqbqO/FdivJtQ4DPQcP19TgD8cDg+Pn32VJZvlAzG64nhqgmr
lJDaMLESCX0B5cfYlawVrpBCLWvOX3LFbn57A+7dqw9zgVBZEcu7tzZqH4IoIfMz
tYmjhckVTCmGutv2lV5L70cs+vrYasZxx/v3Koditu6wEQDJzHisLXNrPMOfWyAJ
01dyvsLCL9OoQyd5tJ40m3RpMnP+fodDyUVnafDcwc3gcNkqS3TDK4Th9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJz9oIwhzJ5UA6+CxrWCHeBXsJpPMB8GA1UdIwQY
MBaAFO67TAtK9hXIWjzc3tS367ZmMRtIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J0TUMwcjJGY2hhUE56ZTFMZnJ0bVl4RzBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZDFiODQtYjhjNS00NzY2LTg4MmQt
MThlODRlNzQ3ZDIyLzEvN3J0TUMwcjJGY2hhUE56ZTFMZnJ0bVl4RzBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9lZDFiODQtYjhjNS00NzY2LTg4MmQtMThlODRlNzQ3ZDIy
LzEvN3J0TUMwcjJGY2hhUE56ZTFMZnJ0bVl4RzBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABj0NIqss
FYffRdg6zAAwW35mxPr4Y76IN2pXCis554lSNrh1DPF1vBcXm6SHPDNcLIHGfIW7
s2LFotkl8QrDMiZwbJmw3tM48/6oMD9wxToS/mV/tJwGy/kFf/ROnXo9v9g7e/eT
1/8JJbwyOj+ggSmkZC7X0oKGzyUdVwvVsIoYW8N1GEzAx3byZ0YUmWrCjwcLVyH5
h6U46nOQZ0XNGHAPwfPV8IGQPZZvu7PGPRiyAPand9xtn5H5mNx1qc6tgG/Ya/sF
rkCbfSPY0awCwQHxiDgTuYbXKaQFeB9hfYjdHX3GGb69LNkZW5+HFsLDaQJAWXNC
Jmdvq+cVYNet0Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:28 2026 by rpki-client