Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
File:                     m2t7PqYO-0pXmk9eI36nqI07wHg.mft (raw, json)
Hash identifier:          F6LqvU33Y2JEtB8TOnY7Qjs0MAsklOuaweV4tw+s5Y4=
Subject key identifier:   F9:2D:1B:0E:C8:1B:1A:39:A8:61:16:C5:C0:BB:9C:39:99:B7:A3:8D
Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Certificate issuer:       /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Certificate serial:       019DA3AEF28D6A395E499914A2891A7C14C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
Manifest number:          0EAB
Signing time:             Sun 19 Apr 2026 03:00:44 +0000
Manifest this update:     Sun 19 Apr 2026 03:00:44 +0000
Manifest next update:     Mon 20 Apr 2026 03:00:44 +0000
Files and hashes:         1: 4PMv8_ymAb6gmQxdDs7h5SW_fe4.roa (hash: k8WIMVFcRpJlyoFhqw0jvwfZZEEvQUGCcnVD6bn529U=)
                          2: JlsqZ6riHbHZDT1nfft-TTbSWJw.roa (hash: kmDoBIgAR0ST5nz2Xe1yvElvTFNkMoNTPUVA43pptOA=)
                          3: PGilyYWIAdJXl1Z4a7mDUWcc6hY.roa (hash: OyU3lX3y+vevyB1v8G/5Shvc1n4shWouA9CyTHgNWTA=)
                          4: m2t7PqYO-0pXmk9eI36nqI07wHg.crl (hash: 3Ytc6MGJVNFBCMIR8mMmTMR97DrbWJpUfdHSTQ8kuQs=)
                          5: oca5XIEdccD_mFy30LwMDBppQlc.roa (hash: oOccAqwZohR6NOKyRdyvweUbqEHR+Ucd2tYEtvhmMDk=)
                          6: v6fpbc3f88fzRgqHWXPj9c1L4JU.roa (hash: r6mtMFirgqkFt30+Dwt74KwfgRsel57h9zfbWTjXGm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:ae:f2:8d:6a:39:5e:49:99:14:a2:89:1a:7c:14:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
        Validity
            Not Before: Apr 19 03:00:44 2026 GMT
            Not After : Apr 20 03:00:44 2026 GMT
        Subject: CN=f92d1b0ec81b1a39a86116c5c0bb9c3999b7a38d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:93:64:bb:9c:3b:3b:64:a3:93:4c:d9:4d:bd:
                    73:a1:22:cd:73:f8:e9:7e:8a:91:c1:30:ec:4d:b8:
                    83:a7:a6:d1:6c:a7:42:66:18:78:f2:25:b1:4c:51:
                    eb:4b:da:dc:dd:9e:2b:65:7e:b1:a1:55:67:0e:39:
                    6f:ee:cb:3b:7e:4a:03:34:b2:39:ce:84:f0:77:5b:
                    57:ee:ca:c8:06:a4:e4:6a:f1:c8:2f:94:48:82:9b:
                    7d:c3:26:47:25:f8:37:a7:10:61:eb:9f:55:38:d7:
                    72:9f:d0:e3:2d:08:2a:26:cd:3f:9e:fc:f1:30:dc:
                    01:c7:a9:00:f5:5c:e8:6b:e5:cb:c9:e4:3d:88:82:
                    9e:42:af:0e:95:f0:1f:13:bd:f5:f6:b6:c7:33:4c:
                    4e:ae:9e:b1:b1:3e:08:a2:39:7f:2a:c1:d2:c2:09:
                    d3:57:48:8a:39:91:75:37:68:2c:62:fa:8d:5f:50:
                    ab:d8:d3:52:43:47:77:86:ca:b0:25:d4:c7:b8:86:
                    a2:46:08:d4:3a:0f:6c:c2:42:99:d5:99:fa:26:2b:
                    44:d5:20:18:01:53:22:b2:60:5f:6e:96:99:30:14:
                    c9:88:27:aa:b6:15:0b:3e:da:5b:0b:f8:21:3e:dc:
                    34:3f:8a:23:09:2f:89:28:9a:bd:30:80:d6:de:e1:
                    8b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2D:1B:0E:C8:1B:1A:39:A8:61:16:C5:C0:BB:9C:39:99:B7:A3:8D
            X509v3 Authority Key Identifier:
                keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b6:28:2b:1c:3d:03:ed:cf:09:35:ec:97:a0:4c:ac:4a:d0:
         58:ea:55:96:1e:b5:44:2a:69:7c:bd:30:b7:af:45:89:1d:1c:
         1f:a7:67:ee:28:ac:66:6c:9e:9c:dc:9e:13:85:20:c5:a5:3b:
         fb:76:f9:1e:b2:ab:ad:cb:75:d6:f2:b1:e4:8d:3c:1d:f6:89:
         d0:b3:e8:3a:61:86:ee:3c:f5:23:50:95:e3:70:7b:3c:b4:df:
         33:0a:d8:a5:56:a2:91:52:4c:af:aa:37:64:f1:3e:05:87:d9:
         da:fa:34:b4:8f:53:f7:c0:bc:4a:96:c9:d7:25:55:a9:65:9e:
         3d:5b:4a:2a:6e:2b:7a:6c:6e:37:2a:99:12:bb:96:67:25:a0:
         a7:ad:6a:eb:5a:c9:ac:e1:cb:cf:10:02:e8:a5:f5:f0:a1:28:
         cc:de:9c:2e:31:d7:3c:4d:17:9c:59:f2:6a:39:df:ea:fa:73:
         34:7c:05:37:51:c7:93:fc:c7:fd:3b:7e:8f:1b:90:42:07:e3:
         8d:3a:b1:8a:49:87:5d:09:e2:ff:1b:a6:52:c6:9f:6c:aa:fd:
         75:99:76:cf:5a:4f:63:36:26:71:8a:84:0e:ef:17:c4:50:34:
         14:e5:10:41:d5:d1:06:a8:91:1c:55:b0:bf:71:c8:7b:89:4e:
         ad:cf:b2:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jrvKNajleSZkUookafBTJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNmI3YjNlYTYwZWZiNGE1NzlhNGY1ZTIzN2VhN2E4OGQz
YmMwNzgwHhcNMjYwNDE5MDMwMDQ0WhcNMjYwNDIwMDMwMDQ0WjAzMTEwLwYDVQQD
EyhmOTJkMWIwZWM4MWIxYTM5YTg2MTE2YzVjMGJiOWMzOTk5YjdhMzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZNku5w7O2Sjk0zZTb1zoSLNc/jp
foqRwTDsTbiDp6bRbKdCZhh48iWxTFHrS9rc3Z4rZX6xoVVnDjlv7ss7fkoDNLI5
zoTwd1tX7srIBqTkavHIL5RIgpt9wyZHJfg3pxBh659VONdyn9DjLQgqJs0/nvzx
MNwBx6kA9Vzoa+XLyeQ9iIKeQq8OlfAfE7319rbHM0xOrp6xsT4Iojl/KsHSwgnT
V0iKOZF1N2gsYvqNX1Cr2NNSQ0d3hsqwJdTHuIaiRgjUOg9swkKZ1Zn6JitE1SAY
AVMismBfbpaZMBTJiCeqthULPtpbC/ghPtw0P4ojCS+JKJq9MIDW3uGLMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPktGw7IGxo5qGEWxcC7nDmZt6ONMB8GA1UdIwQY
MBaAFJtrez6mDvtKV5pPXiN+p6iNO8B4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lMjdkNzEtZWZiYy00N2VmLTk4NDAt
ZTc0ZDhkMWQ0ZTAyLzEvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9lMjdkNzEtZWZiYy00N2VmLTk4NDAtZTc0ZDhkMWQ0ZTAy
LzEvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLYoKxw9
A+3PCTXsl6BMrErQWOpVlh61RCppfL0wt69FiR0cH6dn7iisZmyenNyeE4UgxaU7
+3b5HrKrrct11vKx5I08HfaJ0LPoOmGG7jz1I1CV43B7PLTfMwrYpVaikVJMr6o3
ZPE+BYfZ2vo0tI9T98C8SpbJ1yVVqWWePVtKKm4remxuNyqZEruWZyWgp61q61rJ
rOHLzxAC6KX18KEozN6cLjHXPE0XnFnyajnf6vpzNHwFN1HHk/zH/Tt+jxuQQgfj
jTqxikmHXQni/xumUsafbKr9dZl2z1pPYzYmcYqEDu8XxFA0FOUQQdXRBqiRHFWw
v3HIe4lOrc+y/w==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:51:20 2026 by rpki-client