Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
File:                     U0OOy3Xh1es-gP26waaw-vg_c-E.mft (raw, json)
Hash identifier:          QfyPg2gHPRICDOcAG5gf7vvF7RKejneU8cKcaYfujSU=
Subject key identifier:   6C:48:9B:EF:2B:48:84:49:53:AB:D1:DB:B0:C4:B4:49:AA:5B:36:DF
Authority key identifier: 53:43:8E:CB:75:E1:D5:EB:3E:80:FD:BA:C1:A6:B0:FA:F8:3F:73:E1
Certificate issuer:       /CN=53438ecb75e1d5eb3e80fdbac1a6b0faf83f73e1
Certificate serial:       019D9B87B118CABC585F4F498E26C3F386BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
Manifest number:          C7
Signing time:             Fri 17 Apr 2026 13:00:54 +0000
Manifest this update:     Fri 17 Apr 2026 13:00:54 +0000
Manifest next update:     Sat 18 Apr 2026 13:00:54 +0000
Files and hashes:         1: U0OOy3Xh1es-gP26waaw-vg_c-E.crl (hash: 2U+5iG0I5QqE+RHbN+si+sP0yHbaEMz1yOaTY+CD0Ro=)
                          2: WosD3hO75NeEA5i1pYu4jjBvKZk.roa (hash: OY0wCbzw4br81Lxlh7tGimlRcQLzd5IIOnNVOlypPYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:b1:18:ca:bc:58:5f:4f:49:8e:26:c3:f3:86:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53438ecb75e1d5eb3e80fdbac1a6b0faf83f73e1
        Validity
            Not Before: Apr 17 13:00:54 2026 GMT
            Not After : Apr 18 13:00:54 2026 GMT
        Subject: CN=6c489bef2b48844953abd1dbb0c4b449aa5b36df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:13:9a:e5:11:7d:99:c3:84:e3:a8:78:b3:33:
                    1e:1f:d4:b7:56:ff:0e:d3:80:ac:e1:d5:b8:ca:c4:
                    29:3d:45:92:86:b7:68:fd:a8:38:8c:24:dd:de:ec:
                    54:cc:7b:73:20:81:fa:63:84:1c:e8:50:02:9e:48:
                    07:38:04:f9:c4:1e:40:7f:3b:19:8c:9e:7a:6b:e1:
                    6d:25:d2:5e:0a:f9:49:1e:f6:ef:39:97:04:e4:bb:
                    72:54:04:cc:bf:4d:83:e3:23:67:92:8b:bb:e5:4b:
                    09:83:ba:5f:60:b7:95:30:ca:8a:4e:06:7c:c0:cd:
                    29:67:44:87:b7:82:77:19:44:47:24:e0:94:a0:31:
                    08:40:23:81:d6:67:e3:d5:68:01:d9:9e:f8:bf:f3:
                    e2:16:e0:eb:3f:10:f6:b8:07:78:7b:43:4d:3c:0c:
                    c7:32:c4:d2:f1:83:7e:31:4d:94:ee:d8:6e:67:a8:
                    ec:ca:60:3b:29:1d:d5:4f:bb:88:9f:6b:8b:49:e7:
                    1b:b9:df:7f:d3:d5:50:99:ae:b8:07:02:05:0d:d2:
                    ca:26:bd:fe:4d:4b:25:c5:25:07:92:e3:f5:94:43:
                    b8:28:b7:35:62:86:54:70:cb:9a:d8:00:cc:8d:c4:
                    28:82:9b:87:ee:03:a5:d6:dd:7f:26:ca:fe:62:23:
                    1a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:48:9B:EF:2B:48:84:49:53:AB:D1:DB:B0:C4:B4:49:AA:5B:36:DF
            X509v3 Authority Key Identifier:
                keyid:53:43:8E:CB:75:E1:D5:EB:3E:80:FD:BA:C1:A6:B0:FA:F8:3F:73:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:3c:da:0e:96:a5:dd:86:70:d2:c1:ca:2a:f1:07:1b:e0:52:
         b3:e0:c7:61:be:bb:86:a6:4f:95:96:2c:59:84:94:f0:bc:0d:
         8a:65:54:8d:2c:bb:a2:39:7e:35:5b:05:37:ef:1a:cb:1b:f4:
         0d:66:9c:f9:01:4c:6a:90:55:15:7c:54:80:8b:3b:5a:1a:38:
         3f:2c:f1:00:e1:73:35:b1:fb:fe:29:c1:75:7d:1b:d0:aa:df:
         84:7e:48:09:9e:ba:cf:24:ce:db:5d:45:3e:7a:40:72:33:04:
         a6:04:1a:a0:72:05:69:9e:47:29:23:2f:f3:ed:15:18:61:38:
         1d:8c:83:00:2a:ae:78:20:5e:d7:5b:75:7b:21:e4:74:33:0c:
         ef:9b:a0:9d:2b:d3:08:b2:74:82:93:43:e0:04:f6:f5:07:d4:
         43:34:2c:8f:7a:b4:09:3d:41:62:fe:aa:88:42:df:71:02:46:
         62:b4:b6:fc:83:1d:c2:7c:a3:48:3e:9b:8c:ea:eb:8b:16:f0:
         64:7b:c6:64:02:f7:20:e5:86:52:3b:b3:30:16:a4:6d:75:25:
         b9:bc:ae:c8:28:f6:71:71:23:7d:c3:69:62:5c:02:ca:d5:98:
         bb:9b:47:9d:81:68:b9:f9:48:5d:b9:b8:a1:7f:e8:fd:56:6a:
         72:61:40:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh7EYyrxYX09JjibD84a/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNDM4ZWNiNzVlMWQ1ZWIzZTgwZmRiYWMxYTZiMGZhZjgz
ZjczZTEwHhcNMjYwNDE3MTMwMDU0WhcNMjYwNDE4MTMwMDU0WjAzMTEwLwYDVQQD
Eyg2YzQ4OWJlZjJiNDg4NDQ5NTNhYmQxZGJiMGM0YjQ0OWFhNWIzNmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxOa5RF9mcOE46h4szMeH9S3Vv8O
04Cs4dW4ysQpPUWShrdo/ag4jCTd3uxUzHtzIIH6Y4Qc6FACnkgHOAT5xB5AfzsZ
jJ56a+FtJdJeCvlJHvbvOZcE5LtyVATMv02D4yNnkou75UsJg7pfYLeVMMqKTgZ8
wM0pZ0SHt4J3GURHJOCUoDEIQCOB1mfj1WgB2Z74v/PiFuDrPxD2uAd4e0NNPAzH
MsTS8YN+MU2U7thuZ6jsymA7KR3VT7uIn2uLSecbud9/09VQma64BwIFDdLKJr3+
TUslxSUHkuP1lEO4KLc1YoZUcMua2ADMjcQogpuH7gOl1t1/Jsr+YiMaHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxIm+8rSIRJU6vR27DEtEmqWzbfMB8GA1UdIwQY
MBaAFFNDjst14dXrPoD9usGmsPr4P3PhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTBPT3kzWGgxZXMtZ1AyNndhYXctdmdfYy1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hNzVkYTMtZDgxZS00YmJmLThjYzYt
NDk4NjhkN2NlOWExLzEvVTBPT3kzWGgxZXMtZ1AyNndhYXctdmdfYy1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9hNzVkYTMtZDgxZS00YmJmLThjYzYtNDk4NjhkN2NlOWEx
LzEvVTBPT3kzWGgxZXMtZ1AyNndhYXctdmdfYy1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjzaDpal
3YZw0sHKKvEHG+BSs+DHYb67hqZPlZYsWYSU8LwNimVUjSy7ojl+NVsFN+8ayxv0
DWac+QFMapBVFXxUgIs7Who4PyzxAOFzNbH7/inBdX0b0KrfhH5ICZ66zyTO211F
PnpAcjMEpgQaoHIFaZ5HKSMv8+0VGGE4HYyDACqueCBe11t1eyHkdDMM75ugnSvT
CLJ0gpND4AT29QfUQzQsj3q0CT1BYv6qiELfcQJGYrS2/IMdwnyjSD6bjOrrixbw
ZHvGZAL3IOWGUjuzMBakbXUlubyuyCj2cXEjfcNpYlwCytWYu5tHnYFouflIXbm4
oX/o/VZqcmFAjw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:16:57 2026 by rpki-client