Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
File:                     4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft (raw, json)
Hash identifier:          8yW781m6/jT9aRMyeGM5b3gzks+fWur3LeVhyEp5u3w=
Subject key identifier:   B0:BB:BE:65:14:10:4F:91:AD:A0:DB:8B:60:1D:63:3C:4D:E0:8F:EA
Authority key identifier: E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E
Certificate issuer:       /CN=e0405884dac59da1e5d585193e065681f9d6615e
Certificate serial:       019D9A3EB8810A8F2AF83D26F5804CAE4FBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
Manifest number:          0726
Signing time:             Fri 17 Apr 2026 07:01:34 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:34 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:34 +0000
Files and hashes:         1: 4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl (hash: ltdWGlI5X9uYnXsyMTJPNt23QdyDpkFzRuqZ64+f+EM=)
                          2: widqsiuwPxfEW8bWQB1tkfB48s4.roa (hash: 0gWr/NZK7bJ0qmV7EdmyhABMtqf0GTQXbYmyzeQSrko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:b8:81:0a:8f:2a:f8:3d:26:f5:80:4c:ae:4f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0405884dac59da1e5d585193e065681f9d6615e
        Validity
            Not Before: Apr 17 07:01:34 2026 GMT
            Not After : Apr 18 07:01:34 2026 GMT
        Subject: CN=b0bbbe6514104f91ada0db8b601d633c4de08fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d0:da:49:92:a1:32:9f:9c:bc:ef:51:e8:a8:
                    c4:79:e7:5d:d8:9a:ad:2d:2c:13:67:13:4a:46:6b:
                    e4:14:6e:d6:ea:d5:2b:61:28:a9:f9:74:6a:26:65:
                    0f:7d:b9:fc:43:e0:77:c3:3f:95:bc:7e:43:85:73:
                    b7:5b:ef:78:32:c4:4a:e4:af:8f:08:0c:b4:53:f4:
                    d8:e5:06:15:9a:02:58:78:29:00:06:57:b8:98:c7:
                    4e:6b:04:dc:b2:83:3e:cc:a0:9c:72:78:15:a3:40:
                    2d:d2:10:31:9d:39:21:25:a5:0f:2e:6c:7e:eb:24:
                    6d:88:ce:ab:43:1d:c1:ac:cc:eb:d0:a4:60:43:96:
                    6b:49:1e:67:bf:13:5d:e8:94:29:8d:76:8a:9d:98:
                    75:d3:3e:90:4c:92:e0:78:b7:c3:5b:96:aa:63:1a:
                    45:c4:05:24:34:b3:db:46:17:2f:53:c6:7e:1b:af:
                    39:5f:8d:0c:6c:4f:79:cb:35:84:ee:d0:6c:93:80:
                    c1:fe:38:e8:9d:b1:85:bf:b3:ff:bc:24:7d:77:26:
                    5a:f6:cd:cd:40:fa:a9:d4:8e:7b:a9:3d:99:cb:c9:
                    27:7f:aa:8b:12:42:ef:25:9c:96:68:87:91:61:1a:
                    c1:71:72:8f:01:6d:ad:9d:fd:22:28:d8:23:e1:3c:
                    ad:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BB:BE:65:14:10:4F:91:AD:A0:DB:8B:60:1D:63:3C:4D:E0:8F:EA
            X509v3 Authority Key Identifier:
                keyid:E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:cc:33:7a:02:b4:a5:46:1d:72:86:fc:45:f1:47:e3:32:95:
         81:41:f3:89:92:43:7b:30:b6:d8:c4:da:76:e9:4b:0f:0d:00:
         00:aa:f0:76:0d:ed:67:87:67:f6:5b:be:d2:9e:94:01:13:6b:
         e2:f3:15:a6:ab:5f:5e:31:ef:b6:18:7b:b5:a5:62:59:4e:d6:
         c9:9d:2b:f0:fe:0b:6a:45:db:f7:80:bf:75:3b:11:3c:1c:dc:
         65:28:68:40:78:eb:18:6a:6d:7a:84:e3:05:17:b2:7b:ef:ea:
         c8:51:68:a0:3a:1e:fe:16:73:81:eb:de:c2:1a:bb:3e:95:44:
         f5:a9:60:53:6b:bb:a6:b2:60:0f:50:6a:5c:cf:5f:5c:12:dc:
         d1:3b:c5:c9:33:9e:99:71:c1:82:81:c3:3a:59:9f:8a:bb:94:
         53:53:78:d0:ef:c3:01:21:bb:c5:48:82:cb:a8:a0:d5:fb:c5:
         a4:62:e4:91:5e:a0:80:a3:28:a3:4c:6d:05:c1:3d:25:52:b3:
         de:1b:ab:fe:49:13:12:13:ac:fa:52:7c:1a:01:ae:c6:45:ea:
         e7:1c:d5:8d:0b:d3:89:18:ff:d5:d8:01:de:cb:0a:09:0b:1a:
         9a:8e:05:9c:90:b4:5f:19:37:c2:1c:39:cd:e3:6d:e7:00:9b:
         5a:df:21:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPriBCo8q+D0m9YBMrk+8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNDA1ODg0ZGFjNTlkYTFlNWQ1ODUxOTNlMDY1NjgxZjlk
NjYxNWUwHhcNMjYwNDE3MDcwMTM0WhcNMjYwNDE4MDcwMTM0WjAzMTEwLwYDVQQD
EyhiMGJiYmU2NTE0MTA0ZjkxYWRhMGRiOGI2MDFkNjMzYzRkZTA4ZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNDaSZKhMp+cvO9R6KjEeedd2Jqt
LSwTZxNKRmvkFG7W6tUrYSip+XRqJmUPfbn8Q+B3wz+VvH5DhXO3W+94MsRK5K+P
CAy0U/TY5QYVmgJYeCkABle4mMdOawTcsoM+zKCccngVo0At0hAxnTkhJaUPLmx+
6yRtiM6rQx3BrMzr0KRgQ5ZrSR5nvxNd6JQpjXaKnZh10z6QTJLgeLfDW5aqYxpF
xAUkNLPbRhcvU8Z+G685X40MbE95yzWE7tBsk4DB/jjonbGFv7P/vCR9dyZa9s3N
QPqp1I57qT2Zy8knf6qLEkLvJZyWaIeRYRrBcXKPAW2tnf0iKNgj4TytUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLC7vmUUEE+RraDbi2AdYzxN4I/qMB8GA1UdIwQY
MBaAFOBAWITaxZ2h5dWFGT4GVoH51mFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEVCWWhOckZuYUhsMVlVWlBnWldnZm5XWVY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82MzkzYmItN2Q1MS00ZjFjLTg4ZDMt
MWNmNzFkZjgyOGQ4LzEvNEVCWWhOckZuYUhsMVlVWlBnWldnZm5XWVY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS82MzkzYmItN2Q1MS00ZjFjLTg4ZDMtMWNmNzFkZjgyOGQ4
LzEvNEVCWWhOckZuYUhsMVlVWlBnWldnZm5XWVY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGswzegK0
pUYdcob8RfFH4zKVgUHziZJDezC22MTadulLDw0AAKrwdg3tZ4dn9lu+0p6UARNr
4vMVpqtfXjHvthh7taViWU7WyZ0r8P4LakXb94C/dTsRPBzcZShoQHjrGGpteoTj
BReye+/qyFFooDoe/hZzgevewhq7PpVE9algU2u7prJgD1BqXM9fXBLc0TvFyTOe
mXHBgoHDOlmfiruUU1N40O/DASG7xUiCy6ig1fvFpGLkkV6ggKMoo0xtBcE9JVKz
3hur/kkTEhOs+lJ8GgGuxkXq5xzVjQvTiRj/1dgB3ssKCQsamo4FnJC0Xxk3whw5
zeNt5wCbWt8hVw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:01:33 2026 by rpki-client