Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
File:                     AWRUygmetS5VVg9dCeh-cxYa5zg.mft (raw, json)
Hash identifier:          Y7UgfiflgNHm2lyzPTrLdxlvG4z0eENUcl7lpqHfbIg=
Subject key identifier:   92:AD:26:B1:7F:9E:7A:04:BC:8A:A0:C6:24:B7:05:7E:87:EB:BC:E8
Authority key identifier: 01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
Certificate issuer:       /CN=016454ca099eb52e55560f5d09e87e73161ae738
Certificate serial:       019D9AABD79B8FF5AD58305E17760D581147
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
Manifest number:          0BE0
Signing time:             Fri 17 Apr 2026 09:00:46 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:46 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:46 +0000
Files and hashes:         1: AWRUygmetS5VVg9dCeh-cxYa5zg.crl (hash: ncQzqlWeYxfVRQ9lePPnN7Kv1bKK6D2P8OcRYYB1uig=)
                          2: K6q6EsM1CavuOYyARfp1XcUUEVQ.roa (hash: Xi5EDv6jv4B5PT+szJmGPSgtZ1Lgdt1o2yppeSgzgSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:d7:9b:8f:f5:ad:58:30:5e:17:76:0d:58:11:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016454ca099eb52e55560f5d09e87e73161ae738
        Validity
            Not Before: Apr 17 09:00:46 2026 GMT
            Not After : Apr 18 09:00:46 2026 GMT
        Subject: CN=92ad26b17f9e7a04bc8aa0c624b7057e87ebbce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:df:d4:b1:cd:16:70:10:c1:d3:ce:78:52:95:
                    cc:c4:73:c9:05:0b:07:78:e4:f6:90:94:a7:48:54:
                    f8:fd:01:2b:79:01:d3:6a:ff:34:b3:31:da:de:a5:
                    88:e7:30:8d:a4:76:c1:93:42:ff:28:fc:ae:fc:a4:
                    8d:13:94:4a:c9:0f:49:57:58:99:94:c8:19:41:3c:
                    cd:a3:93:43:7f:74:db:bc:29:c0:34:fc:19:65:83:
                    30:6a:c8:a1:e7:45:87:a6:ec:27:64:ea:1f:32:60:
                    d2:94:fc:5a:1c:04:8b:6a:5d:fc:29:39:78:8d:c7:
                    d0:7d:2e:b1:d7:65:5f:72:e3:86:dc:b1:96:c1:0b:
                    72:6f:de:a2:b1:3b:a4:cd:b5:52:ae:aa:be:86:e0:
                    72:28:b0:c4:79:01:a9:99:5a:6b:0c:13:fa:8d:e8:
                    47:2d:d9:93:71:ab:af:90:d1:89:a7:08:10:fc:d9:
                    10:f8:24:87:80:e4:5b:56:37:7a:52:bb:e3:ed:86:
                    8c:40:b9:47:26:10:82:35:66:e7:63:9c:f8:da:2f:
                    cb:d7:2e:c7:24:f8:19:83:08:0e:2e:d7:43:35:92:
                    70:2e:47:49:65:10:cd:98:1b:87:8c:e1:24:d6:ea:
                    fd:b9:57:a3:9a:ad:6a:80:c7:bf:c0:0a:b4:3b:c0:
                    67:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AD:26:B1:7F:9E:7A:04:BC:8A:A0:C6:24:B7:05:7E:87:EB:BC:E8
            X509v3 Authority Key Identifier:
                keyid:01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:0d:20:0c:98:c5:1d:1e:8f:d8:1d:6c:40:75:e8:40:bd:31:
         84:e7:c9:3e:06:81:42:80:55:12:f8:5b:c4:69:93:b0:07:3a:
         e5:54:39:a2:b1:b9:ca:45:9c:63:ef:d2:89:e3:25:65:89:d2:
         e4:d8:da:91:a3:4f:11:3f:7d:7f:89:e0:6e:8e:74:20:66:73:
         2a:96:46:73:37:4f:b9:31:fd:b3:56:c0:e7:59:06:5f:aa:d5:
         df:72:03:80:c3:e2:ec:b2:e2:d3:f9:f6:a7:c4:c1:5c:f9:1f:
         fe:c4:15:82:97:ba:67:1b:6b:3f:54:4f:a9:f4:b4:c6:3f:e5:
         03:5d:ed:f6:d5:e8:ba:99:c9:14:01:6c:dd:02:72:27:98:53:
         7e:00:6c:a5:63:4a:0e:74:00:2a:4f:db:ae:ad:61:b4:ba:60:
         a4:ae:c2:67:98:88:1b:f0:03:67:0b:26:38:86:96:99:af:56:
         27:4b:83:e2:1e:75:d8:65:4c:a4:ab:6b:93:58:7f:aa:3c:cf:
         d1:2f:ba:7a:01:a0:09:b8:0d:6d:32:03:b3:84:d6:48:45:5f:
         08:0c:78:a0:11:aa:03:b7:7d:d7:bb:56:60:1b:7e:c7:56:1a:
         34:93:62:e4:d2:72:5a:87:91:52:c2:c0:03:04:d8:62:ee:05:
         af:be:c2:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq9ebj/WtWDBeF3YNWBFHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNjQ1NGNhMDk5ZWI1MmU1NTU2MGY1ZDA5ZTg3ZTczMTYx
YWU3MzgwHhcNMjYwNDE3MDkwMDQ2WhcNMjYwNDE4MDkwMDQ2WjAzMTEwLwYDVQQD
Eyg5MmFkMjZiMTdmOWU3YTA0YmM4YWEwYzYyNGI3MDU3ZTg3ZWJiY2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd/Usc0WcBDB0854UpXMxHPJBQsH
eOT2kJSnSFT4/QEreQHTav80szHa3qWI5zCNpHbBk0L/KPyu/KSNE5RKyQ9JV1iZ
lMgZQTzNo5NDf3TbvCnANPwZZYMwasih50WHpuwnZOofMmDSlPxaHASLal38KTl4
jcfQfS6x12VfcuOG3LGWwQtyb96isTukzbVSrqq+huByKLDEeQGpmVprDBP6jehH
LdmTcauvkNGJpwgQ/NkQ+CSHgORbVjd6Urvj7YaMQLlHJhCCNWbnY5z42i/L1y7H
JPgZgwgOLtdDNZJwLkdJZRDNmBuHjOEk1ur9uVejmq1qgMe/wAq0O8BnBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKtJrF/nnoEvIqgxiS3BX6H67zoMB8GA1UdIwQY
MBaAFAFkVMoJnrUuVVYPXQnofnMWGuc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mMjU1M2MtOWJkNi00OWFlLTliZWQt
MTU3NmM2ZjU4OWM5LzEvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mMjU1M2MtOWJkNi00OWFlLTliZWQtMTU3NmM2ZjU4OWM5
LzEvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAag0gDJjF
HR6P2B1sQHXoQL0xhOfJPgaBQoBVEvhbxGmTsAc65VQ5orG5ykWcY+/SieMlZYnS
5NjakaNPET99f4ngbo50IGZzKpZGczdPuTH9s1bA51kGX6rV33IDgMPi7LLi0/n2
p8TBXPkf/sQVgpe6ZxtrP1RPqfS0xj/lA13t9tXoupnJFAFs3QJyJ5hTfgBspWNK
DnQAKk/brq1htLpgpK7CZ5iIG/ADZwsmOIaWma9WJ0uD4h512GVMpKtrk1h/qjzP
0S+6egGgCbgNbTIDs4TWSEVfCAx4oBGqA7d917tWYBt+x1YaNJNi5NJyWoeRUsLA
AwTYYu4Fr77CmQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:43:51 2026 by rpki-client