Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
File:                     5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft (raw, json)
Hash identifier:          hDwRaUWD/lLj51fGHWkd0rpsGfy5WQauvQCeolgL/mY=
Subject key identifier:   37:57:A0:F0:97:5C:41:0E:3C:9F:A1:B4:9B:7D:22:F3:25:B0:38:23
Authority key identifier: E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE
Certificate issuer:       /CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee
Certificate serial:       019DA30ACBE87443799BB8CB06E42EB73754
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
Manifest number:          08B4
Signing time:             Sun 19 Apr 2026 00:01:26 +0000
Manifest this update:     Sun 19 Apr 2026 00:01:26 +0000
Manifest next update:     Mon 20 Apr 2026 00:01:26 +0000
Files and hashes:         1: 5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl (hash: 4Eu52v96i5wRb49ta//etvkL8vnJoZzPXOUFYMwXNH4=)
                          2: FImc6744QQwEQQovKDqizeaFC7c.roa (hash: sUbtOcLGidbBgbl2zkqKhUn8p3q1zKed/eARiNS1qdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 00:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:0a:cb:e8:74:43:79:9b:b8:cb:06:e4:2e:b7:37:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee
        Validity
            Not Before: Apr 19 00:01:26 2026 GMT
            Not After : Apr 20 00:01:26 2026 GMT
        Subject: CN=3757a0f0975c410e3c9fa1b49b7d22f325b03823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:db:3f:d7:86:a0:0f:33:32:a9:73:b3:78:1d:
                    db:60:dd:dd:9a:0f:4b:9f:ea:2c:ba:d4:b5:5d:64:
                    6a:9b:a1:2b:59:04:7d:68:f5:36:22:1d:cd:06:1b:
                    64:e0:4c:91:d6:bc:3e:23:94:9f:2f:a7:60:bc:c5:
                    35:ef:b1:9e:a8:82:ca:05:76:dd:8c:39:1f:61:ea:
                    25:9a:2f:9a:e4:b6:d5:98:f2:d8:b1:3a:3c:f3:49:
                    14:06:a7:1e:25:f6:25:0e:2a:5d:84:f3:87:7b:24:
                    04:0d:47:a7:e1:1f:c3:91:b0:bc:b3:aa:80:80:c3:
                    97:98:b5:9d:ee:1f:97:35:8b:38:ee:93:1a:8c:ad:
                    7b:1d:d6:50:3b:96:1c:4c:00:7c:45:cb:b0:a7:13:
                    9d:ae:2d:6d:f0:3d:b3:aa:7e:d8:fd:c5:e4:78:eb:
                    11:7e:28:04:46:08:59:e1:d7:fc:15:52:42:7f:69:
                    e4:1e:41:0f:4e:ab:8e:e7:13:69:d8:b7:39:df:61:
                    e9:2c:f4:8d:4a:a4:ec:7b:9c:62:6a:56:71:b8:55:
                    ac:75:8f:3d:24:25:6d:ce:00:f0:48:b3:7c:c3:8f:
                    bc:c2:ba:c0:4d:26:ad:d6:bc:e3:76:3d:c4:a9:61:
                    e7:76:51:38:dc:94:08:70:03:56:d9:ee:39:67:7a:
                    a4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:57:A0:F0:97:5C:41:0E:3C:9F:A1:B4:9B:7D:22:F3:25:B0:38:23
            X509v3 Authority Key Identifier:
                keyid:E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f6:58:f6:49:0c:98:6d:d6:81:d6:98:f1:5b:5c:09:e9:de:
         70:79:3b:cc:e6:da:0b:c6:a2:3d:78:28:f8:50:c3:77:9b:7c:
         5c:da:55:f1:da:bd:fb:77:b9:e9:6a:04:14:22:0f:d8:5f:1c:
         30:a1:24:44:b5:96:45:6f:89:60:de:e3:41:08:d3:41:12:49:
         86:f1:46:83:97:34:15:8e:f5:e3:c2:12:0d:46:d5:b4:80:8b:
         e5:5b:36:5b:0d:51:ec:6f:64:bc:68:04:1b:24:7f:54:56:b6:
         87:5c:57:94:a8:ac:36:3e:19:aa:8a:de:6d:14:af:48:e2:3c:
         16:64:31:21:26:1c:4d:82:22:b5:a8:d4:6f:b6:d6:77:b3:2d:
         7e:47:f8:eb:3d:97:e2:cb:10:29:b6:42:ab:b0:3b:c0:04:7b:
         a1:89:62:06:d5:72:34:b4:3b:62:db:aa:b2:d3:26:e0:89:4d:
         e1:95:91:11:9c:1d:25:e8:8a:42:36:64:13:e2:c4:66:e7:9f:
         d8:7f:e5:b1:3d:4e:c6:0d:80:bb:f2:8e:e5:82:90:4e:c3:9d:
         f0:ce:50:78:ca:65:70:6c:f0:c1:76:4c:ee:cf:97:2b:49:77:
         c5:bf:fc:45:15:af:7a:51:c6:29:af:c1:d6:7c:8d:05:4c:44:
         85:15:32:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jCsvodEN5m7jLBuQutzdUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NGFiODlkMzNiZDhhYTk0MzhhMWRkMGI0YzU5ZWRiZWIw
YzY0ZWUwHhcNMjYwNDE5MDAwMTI2WhcNMjYwNDIwMDAwMTI2WjAzMTEwLwYDVQQD
EygzNzU3YTBmMDk3NWM0MTBlM2M5ZmExYjQ5YjdkMjJmMzI1YjAzODIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA99s/14agDzMyqXOzeB3bYN3dmg9L
n+osutS1XWRqm6ErWQR9aPU2Ih3NBhtk4EyR1rw+I5SfL6dgvMU177GeqILKBXbd
jDkfYeolmi+a5LbVmPLYsTo880kUBqceJfYlDipdhPOHeyQEDUen4R/DkbC8s6qA
gMOXmLWd7h+XNYs47pMajK17HdZQO5YcTAB8RcuwpxOdri1t8D2zqn7Y/cXkeOsR
figERghZ4df8FVJCf2nkHkEPTquO5xNp2Lc532HpLPSNSqTse5xialZxuFWsdY89
JCVtzgDwSLN8w4+8wrrATSat1rzjdj3EqWHndlE43JQIcANW2e45Z3qkfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdXoPCXXEEOPJ+htJt9IvMlsDgjMB8GA1UdIwQY
MBaAFOVKuJ0zvYqpQ4od0LTFntvrDGTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVVxNG5UTzlpcWxEaWgzUXRNV2UyLXNNWk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jMzE2YjYtNzJlMy00YmNlLWJiZTIt
MWI0MzI4NzJiY2ZmLzEvNVVxNG5UTzlpcWxEaWgzUXRNV2UyLXNNWk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9jMzE2YjYtNzJlMy00YmNlLWJiZTItMWI0MzI4NzJiY2Zm
LzEvNVVxNG5UTzlpcWxEaWgzUXRNV2UyLXNNWk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafZY9kkM
mG3WgdaY8VtcCenecHk7zObaC8aiPXgo+FDDd5t8XNpV8dq9+3e56WoEFCIP2F8c
MKEkRLWWRW+JYN7jQQjTQRJJhvFGg5c0FY7148ISDUbVtICL5Vs2Ww1R7G9kvGgE
GyR/VFa2h1xXlKisNj4ZqorebRSvSOI8FmQxISYcTYIitajUb7bWd7Mtfkf46z2X
4ssQKbZCq7A7wAR7oYliBtVyNLQ7YtuqstMm4IlN4ZWREZwdJeiKQjZkE+LEZuef
2H/lsT1Oxg2Au/KO5YKQTsOd8M5QeMplcGzwwXZM7s+XK0l3xb/8RRWvelHGKa/B
1nyNBUxEhRUy8g==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:14:09 2026 by rpki-client