Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft
File:                     Vz035lyCKPeT9IuOmiDxLC-AuIM.mft (raw, json)
Hash identifier:          /LHj3LSX454eRuLzcIwkc3sQQsQO74DgK9KrDKqHAsU=
Subject key identifier:   F5:A1:48:BA:70:DA:29:23:B0:1E:A2:68:05:59:98:11:EA:C9:74:E6
Authority key identifier: 57:3D:37:E6:5C:82:28:F7:93:F4:8B:8E:9A:20:F1:2C:2F:80:B8:83
Certificate issuer:       /CN=573d37e65c8228f793f48b8e9a20f12c2f80b883
Certificate serial:       019D9962719B32C8A3566404222562076913
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft
Manifest number:          0635
Signing time:             Fri 17 Apr 2026 03:00:58 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:58 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:58 +0000
Files and hashes:         1: Vz035lyCKPeT9IuOmiDxLC-AuIM.crl (hash: YsQxCn8paw2aBaez/AHKulYblsuF9Wf0vqD7WYdEPEg=)
                          2: WKMGTZqxrFLfgBCZ6QDmgOznr-M.roa (hash: ASMesKu+MNoEbQ+bQElbFSCL0GnFYhup+rYh0oKim+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:71:9b:32:c8:a3:56:64:04:22:25:62:07:69:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573d37e65c8228f793f48b8e9a20f12c2f80b883
        Validity
            Not Before: Apr 17 03:00:58 2026 GMT
            Not After : Apr 18 03:00:58 2026 GMT
        Subject: CN=f5a148ba70da2923b01ea26805599811eac974e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5a:f2:96:b6:52:ca:02:ac:0c:4d:6b:8a:bf:
                    65:0b:52:0b:cb:2b:0f:cd:1f:62:eb:e1:dd:8a:9a:
                    60:6e:1c:c2:96:6a:68:34:72:e4:b3:2c:28:dd:43:
                    f0:60:0f:28:0e:38:4a:27:44:c4:e0:5d:a4:41:26:
                    c1:12:ea:a9:b0:18:e8:3d:cf:b5:60:c6:43:47:2d:
                    b7:b3:ca:99:ed:53:30:0b:b4:e2:79:47:e1:25:99:
                    1a:d6:ef:f1:a9:20:7e:76:3a:80:01:0c:00:46:1e:
                    fc:41:8d:1e:5a:2e:1e:2a:5b:57:05:0f:9f:7f:72:
                    ff:ed:bb:1d:af:4d:f8:5b:90:0a:8a:1b:a0:9c:b2:
                    48:37:12:45:88:e4:16:98:45:84:7b:e4:34:ad:84:
                    ee:c1:c7:22:66:2a:cb:f1:ca:9b:ae:fc:38:cb:69:
                    af:3a:ae:be:88:73:1c:b4:29:41:50:ee:7e:6c:09:
                    27:b8:04:39:1b:86:1c:25:f1:fb:0f:7e:75:97:36:
                    94:04:b4:ad:11:a4:c9:4e:58:89:3a:cb:67:d4:57:
                    9c:d0:65:17:0a:e9:b5:46:83:04:3a:c6:85:21:e2:
                    d0:fb:a2:40:4f:73:77:7c:d8:79:9d:5f:2c:94:79:
                    b6:d6:d1:69:eb:a6:f1:52:02:c8:3f:97:a2:eb:a5:
                    94:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A1:48:BA:70:DA:29:23:B0:1E:A2:68:05:59:98:11:EA:C9:74:E6
            X509v3 Authority Key Identifier:
                keyid:57:3D:37:E6:5C:82:28:F7:93:F4:8B:8E:9A:20:F1:2C:2F:80:B8:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:76:0a:43:04:32:f3:46:6c:c1:42:97:41:84:8d:be:61:7f:
         e7:3d:3c:36:e8:3a:48:0f:ad:08:ad:3a:c4:30:47:a5:87:b1:
         13:27:b6:7c:8f:4b:1a:37:83:81:8d:58:8b:16:34:6a:ee:11:
         9f:6a:0c:e5:98:67:f8:86:c7:a6:ce:6f:ac:d9:aa:09:e1:e3:
         dc:18:eb:8e:56:7d:27:19:2f:d4:37:7c:ef:cb:80:36:a1:fd:
         da:18:41:0b:17:33:dd:9f:b0:78:03:d2:2c:21:79:41:37:8c:
         1b:09:cf:5b:c5:2d:63:84:0a:6d:06:19:54:93:d1:b3:70:b1:
         38:cc:be:db:10:1e:5a:f7:60:65:a5:5f:46:68:9c:ac:3c:40:
         48:15:85:7e:eb:e4:03:76:d2:b5:78:22:10:5a:ce:b7:28:69:
         3e:4b:aa:d2:2c:62:31:81:46:1b:fa:e0:c1:b4:ef:0d:ee:d7:
         c5:6e:3c:f1:4e:83:e3:c9:74:83:6d:43:6c:03:00:ca:e3:78:
         ab:b7:13:b3:2a:7f:4c:c0:c0:54:4d:41:d8:c7:e2:49:32:1a:
         ae:31:76:eb:dd:4e:89:2b:08:53:f3:94:8f:f2:ec:43:c1:a6:
         ff:e9:54:81:64:d6:ae:2b:c9:de:cf:5b:04:b1:5e:6f:0a:3e:
         c3:9a:d3:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYnGbMsijVmQEIiViB2kTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3M2QzN2U2NWM4MjI4Zjc5M2Y0OGI4ZTlhMjBmMTJjMmY4
MGI4ODMwHhcNMjYwNDE3MDMwMDU4WhcNMjYwNDE4MDMwMDU4WjAzMTEwLwYDVQQD
EyhmNWExNDhiYTcwZGEyOTIzYjAxZWEyNjgwNTU5OTgxMWVhYzk3NGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolrylrZSygKsDE1rir9lC1ILyysP
zR9i6+HdippgbhzClmpoNHLksywo3UPwYA8oDjhKJ0TE4F2kQSbBEuqpsBjoPc+1
YMZDRy23s8qZ7VMwC7TieUfhJZka1u/xqSB+djqAAQwARh78QY0eWi4eKltXBQ+f
f3L/7bsdr034W5AKihugnLJINxJFiOQWmEWEe+Q0rYTuwcciZirL8cqbrvw4y2mv
Oq6+iHMctClBUO5+bAknuAQ5G4YcJfH7D351lzaUBLStEaTJTliJOstn1Fec0GUX
Cum1RoMEOsaFIeLQ+6JAT3N3fNh5nV8slHm21tFp66bxUgLIP5ei66WUyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWhSLpw2ikjsB6iaAVZmBHqyXTmMB8GA1UdIwQY
MBaAFFc9N+Zcgij3k/SLjpog8SwvgLiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnowMzVseUNLUGVUOUl1T21pRHhMQy1BdUlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83Y2Q1YjgtOGRmNi00Yzk5LWE2MjMt
ODRjZDIxZmZiOTFiLzEvVnowMzVseUNLUGVUOUl1T21pRHhMQy1BdUlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83Y2Q1YjgtOGRmNi00Yzk5LWE2MjMtODRjZDIxZmZiOTFi
LzEvVnowMzVseUNLUGVUOUl1T21pRHhMQy1BdUlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA23YKQwQy
80ZswUKXQYSNvmF/5z08Nug6SA+tCK06xDBHpYexEye2fI9LGjeDgY1YixY0au4R
n2oM5Zhn+IbHps5vrNmqCeHj3BjrjlZ9Jxkv1Dd878uANqH92hhBCxcz3Z+weAPS
LCF5QTeMGwnPW8UtY4QKbQYZVJPRs3CxOMy+2xAeWvdgZaVfRmicrDxASBWFfuvk
A3bStXgiEFrOtyhpPkuq0ixiMYFGG/rgwbTvDe7XxW488U6D48l0g21DbAMAyuN4
q7cTsyp/TMDAVE1B2MfiSTIarjF2691OiSsIU/OUj/LsQ8Gm/+lUgWTWrivJ3s9b
BLFebwo+w5rTLw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:17:41 2026 by rpki-client