Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
File:                     CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft (raw, json)
Hash identifier:          GZqRtsp0MP4Mr590bGFhNZLYIWZ2lC4KaVkOw0REDj0=
Subject key identifier:   0F:CC:80:19:85:FD:C0:94:F3:7F:02:ED:9E:72:0D:3C:BF:16:07:8E
Authority key identifier: 08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21
Certificate issuer:       /CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521
Certificate serial:       019D9CD19A6DB725E6BFB2AE8E0259631BA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
Manifest number:          E1
Signing time:             Fri 17 Apr 2026 19:01:15 +0000
Manifest this update:     Fri 17 Apr 2026 19:01:15 +0000
Manifest next update:     Sat 18 Apr 2026 19:01:15 +0000
Files and hashes:         1: CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl (hash: p3WG6/yWF6Lh+TL+Ww3dVIfBWdeAvRAwKBpI+ZIUPUU=)
                          2: SE7WHQ_t5xTvIw5RVXqHMUCzyhw.asa (hash: IGvw1+pEk3vTnCru3aJqTEvcp914nnvX2nmQCu0ykb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:d1:9a:6d:b7:25:e6:bf:b2:ae:8e:02:59:63:1b:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521
        Validity
            Not Before: Apr 17 19:01:15 2026 GMT
            Not After : Apr 18 19:01:15 2026 GMT
        Subject: CN=0fcc801985fdc094f37f02ed9e720d3cbf16078e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a3:e0:df:e0:91:f9:91:ae:35:cf:51:ca:df:
                    d6:1f:65:5a:30:8a:2b:65:4a:87:31:0e:1b:75:aa:
                    9d:51:fc:88:69:37:cf:96:92:6f:d7:c2:9f:f2:a7:
                    e5:0e:09:d3:23:08:81:a4:30:ed:30:5b:24:62:8e:
                    cf:83:aa:b3:5a:d1:98:70:30:b3:cf:18:ae:c4:ba:
                    71:13:80:4e:b9:56:c1:3f:63:da:39:02:1a:76:b5:
                    bb:67:1d:ae:41:bd:c9:67:7e:14:8b:7d:cc:60:2c:
                    7e:7b:cc:63:76:30:80:56:fa:0c:82:f2:12:e0:35:
                    12:9c:59:2e:47:f8:c2:65:2e:47:2c:11:8b:18:b8:
                    ce:5b:60:3d:2e:89:5c:20:5c:52:79:3a:a2:57:db:
                    07:f6:69:d4:27:eb:db:1e:56:39:b3:be:c2:4c:ce:
                    ec:13:75:31:8b:ad:dc:72:82:03:e1:f8:c9:c1:90:
                    35:db:ea:c3:fd:30:89:3b:59:a1:ed:f9:eb:2f:85:
                    4c:04:d4:df:c0:2e:30:6e:39:d2:b7:73:43:af:10:
                    d2:53:03:39:b3:47:8d:eb:f9:1b:f8:e5:59:12:ac:
                    18:9f:91:65:61:9f:e3:57:41:e1:35:e0:3f:66:c1:
                    e7:03:56:ba:c8:da:25:82:60:35:a8:cf:cb:55:9b:
                    4f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CC:80:19:85:FD:C0:94:F3:7F:02:ED:9E:72:0D:3C:BF:16:07:8E
            X509v3 Authority Key Identifier:
                keyid:08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:cf:76:c8:c3:9f:91:f5:0c:36:81:7b:65:28:5f:bf:54:6b:
         ad:65:55:dc:07:36:b9:88:25:ec:01:0e:e5:ad:06:5f:0f:9a:
         7f:79:0b:2c:b3:ad:e4:68:15:58:4a:99:4b:62:15:c1:81:37:
         ad:db:79:6e:a7:5e:b9:72:e2:5e:a7:4d:24:2b:b5:8a:11:09:
         49:e6:a1:ca:84:c9:b2:c4:fd:b4:a9:3e:71:48:a4:0e:c5:20:
         9a:ff:c5:f7:03:f7:ae:0f:12:61:e7:55:2c:1f:2e:1d:45:72:
         99:b9:37:d1:da:56:dc:22:72:ca:83:e8:25:20:2b:7d:33:2a:
         45:9c:66:c5:a8:8a:8f:62:d6:a6:2d:1b:97:ca:52:0e:41:e8:
         77:29:31:fd:9d:72:77:a4:6d:b0:ce:ad:ab:96:b0:92:02:42:
         c8:0a:82:1c:e0:da:1e:4a:9b:98:52:1a:62:3a:af:f3:22:f0:
         69:de:f7:98:44:78:ba:05:d1:71:41:ce:bd:a6:fe:c8:90:3f:
         22:f6:d8:70:2e:32:88:47:fa:f2:c8:64:9e:0d:3f:16:d4:d1:
         c4:7b:a7:d8:2d:17:91:23:8d:0a:da:62:1c:08:f2:77:41:98:
         f6:9e:4c:eb:4e:c3:a1:61:10:34:bd:b8:0e:03:85:d3:95:10:
         84:7a:06:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2c0ZpttyXmv7KujgJZYxumMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OWI0ZDZmN2EwYTMzYjAxODA0MTFlZDc0Zjg3YTdjZmVk
OTY1MjEwHhcNMjYwNDE3MTkwMTE1WhcNMjYwNDE4MTkwMTE1WjAzMTEwLwYDVQQD
EygwZmNjODAxOTg1ZmRjMDk0ZjM3ZjAyZWQ5ZTcyMGQzY2JmMTYwNzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqPg3+CR+ZGuNc9Ryt/WH2VaMIor
ZUqHMQ4bdaqdUfyIaTfPlpJv18Kf8qflDgnTIwiBpDDtMFskYo7Pg6qzWtGYcDCz
zxiuxLpxE4BOuVbBP2PaOQIadrW7Zx2uQb3JZ34Ui33MYCx+e8xjdjCAVvoMgvIS
4DUSnFkuR/jCZS5HLBGLGLjOW2A9LolcIFxSeTqiV9sH9mnUJ+vbHlY5s77CTM7s
E3Uxi63ccoID4fjJwZA12+rD/TCJO1mh7fnrL4VMBNTfwC4wbjnSt3NDrxDSUwM5
s0eN6/kb+OVZEqwYn5FlYZ/jV0HhNeA/ZsHnA1a6yNolgmA1qM/LVZtP4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/MgBmF/cCU838C7Z5yDTy/FgeOMB8GA1UdIwQY
MBaAFAibTW96CjOwGAQR7XT4enz+2WUhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0p0TmIzb0tNN0FZQkJIdGRQaDZmUDdaWlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wOTcwMzQtMDk1My00YWI2LTkxYzIt
YzUwMDlhYjFmZGFmLzEvQ0p0TmIzb0tNN0FZQkJIdGRQaDZmUDdaWlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wOTcwMzQtMDk1My00YWI2LTkxYzItYzUwMDlhYjFmZGFm
LzEvQ0p0TmIzb0tNN0FZQkJIdGRQaDZmUDdaWlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAks92yMOf
kfUMNoF7ZShfv1RrrWVV3Ac2uYgl7AEO5a0GXw+af3kLLLOt5GgVWEqZS2IVwYE3
rdt5bqdeuXLiXqdNJCu1ihEJSeahyoTJssT9tKk+cUikDsUgmv/F9wP3rg8SYedV
LB8uHUVymbk30dpW3CJyyoPoJSArfTMqRZxmxaiKj2LWpi0bl8pSDkHodykx/Z1y
d6RtsM6tq5awkgJCyAqCHODaHkqbmFIaYjqv8yLwad73mER4ugXRcUHOvab+yJA/
IvbYcC4yiEf68shkng0/FtTRxHun2C0XkSONCtpiHAjyd0GY9p5M607DoWEQNL24
DgOF05UQhHoGfA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:02:46 2026 by rpki-client