Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
File:                     n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft (raw, json)
Hash identifier:          RtDXjwcv9QTfe1z+278i/2DKShJsJTCqcCLu9Au5KTI=
Subject key identifier:   3B:94:92:BC:2B:20:E6:8D:96:9E:F3:B7:15:D9:89:CE:CC:56:E6:20
Authority key identifier: 9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
Certificate issuer:       /CN=9fb41d252f120acb140d0fc84334152114b6c826
Certificate serial:       019DA48B6115A1C20BA2C5F089E225846C57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
Manifest number:          03F0
Signing time:             Sun 19 Apr 2026 07:01:30 +0000
Manifest this update:     Sun 19 Apr 2026 07:01:30 +0000
Manifest next update:     Mon 20 Apr 2026 07:01:30 +0000
Files and hashes:         1: n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl (hash: pp/+9NqXKjrlkfnTgaIduzl030xjVHNC4GFmi61Asus=)
                          2: qDTCMJHmL38g7Q3yN-YIXsmnvn4.roa (hash: S3eC/w96DFQPDgFJUFEhb7780RHsrN7s0rIndTg2a1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:8b:61:15:a1:c2:0b:a2:c5:f0:89:e2:25:84:6c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb41d252f120acb140d0fc84334152114b6c826
        Validity
            Not Before: Apr 19 07:01:30 2026 GMT
            Not After : Apr 20 07:01:30 2026 GMT
        Subject: CN=3b9492bc2b20e68d969ef3b715d989cecc56e620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:41:d0:39:4f:1a:b7:c6:c0:c3:0d:98:42:02:
                    5f:70:07:fa:33:7d:23:13:25:df:ec:c2:fc:b1:7b:
                    26:1a:09:5a:30:23:a9:1e:cb:ff:fc:1b:af:2d:79:
                    a7:85:51:8a:4e:b1:c7:14:25:d4:a0:cf:e8:db:ce:
                    36:35:29:21:2f:d1:13:7a:9d:c0:7f:05:b4:45:6d:
                    a2:b1:28:2c:0e:f6:28:6d:4e:6c:21:11:17:64:65:
                    ac:3f:9c:8f:96:13:46:5d:36:37:ec:30:41:a5:bf:
                    5d:18:57:46:25:3d:b7:bd:b3:a2:65:b6:de:a6:59:
                    da:7e:a8:4c:63:48:bd:5e:58:60:47:34:98:ca:e6:
                    58:af:63:f9:e8:f5:41:5f:b3:03:63:18:85:d3:8a:
                    53:03:98:c1:e0:61:d9:5b:24:48:6a:8e:3e:48:ed:
                    14:df:e1:ad:dc:65:bf:33:18:b7:12:ec:1a:83:a8:
                    85:07:aa:d2:43:81:60:31:cb:65:aa:51:b4:c5:ee:
                    04:68:02:58:a0:21:c5:92:fa:d8:36:70:fc:1f:1b:
                    45:28:5f:01:10:db:c9:5a:75:c5:d2:2b:de:5b:b4:
                    97:f7:e9:4f:d4:8d:0b:e6:0b:99:7b:44:c1:b7:82:
                    b7:4d:57:42:84:e7:67:60:56:a9:4f:c2:f2:1c:ff:
                    d3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:94:92:BC:2B:20:E6:8D:96:9E:F3:B7:15:D9:89:CE:CC:56:E6:20
            X509v3 Authority Key Identifier:
                keyid:9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:26:93:95:b0:5d:d8:11:99:79:11:39:97:3c:8c:34:5e:1b:
         8f:24:29:6e:5b:fd:bd:96:b3:a5:2d:d7:84:ea:02:9e:24:6e:
         3d:d3:09:69:27:d1:d3:88:c6:7b:11:58:8d:62:42:5b:a8:1d:
         9c:16:96:f1:fa:07:44:60:c7:24:93:40:9f:fa:51:a1:ca:37:
         8d:c3:5f:06:f5:44:b1:a4:d3:2d:79:bb:0a:bf:0c:73:9e:54:
         7c:40:98:06:44:6c:2d:07:e1:17:54:70:5e:d8:8c:e1:dc:b0:
         eb:af:a9:67:10:86:94:b6:5a:18:88:60:76:04:aa:ae:42:e2:
         ca:0b:97:48:3f:fe:dd:be:ac:02:5d:43:5a:dc:53:ba:dc:f8:
         fe:7c:97:8a:32:1b:e7:45:5b:59:39:80:3f:76:95:0c:f1:1e:
         3b:0f:c8:d6:bb:5f:d5:3d:c7:11:49:5f:7a:fd:bb:32:ef:c2:
         36:52:8e:1f:88:e0:be:d6:ca:ea:46:7a:12:dd:73:47:c4:ae:
         d8:c8:b3:5e:86:c8:40:50:29:e1:72:12:96:9a:a5:8e:04:8e:
         73:c1:c3:23:e6:eb:4b:75:8a:d6:21:e2:ea:c8:e2:77:36:06:
         45:d1:5e:8b:e6:32:ae:4f:4c:87:99:37:be:04:89:64:af:ca:
         c3:03:7f:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ki2EVocILosXwieIlhGxXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYjQxZDI1MmYxMjBhY2IxNDBkMGZjODQzMzQxNTIxMTRi
NmM4MjYwHhcNMjYwNDE5MDcwMTMwWhcNMjYwNDIwMDcwMTMwWjAzMTEwLwYDVQQD
EygzYjk0OTJiYzJiMjBlNjhkOTY5ZWYzYjcxNWQ5ODljZWNjNTZlNjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEHQOU8at8bAww2YQgJfcAf6M30j
EyXf7ML8sXsmGglaMCOpHsv//BuvLXmnhVGKTrHHFCXUoM/o2842NSkhL9ETep3A
fwW0RW2isSgsDvYobU5sIREXZGWsP5yPlhNGXTY37DBBpb9dGFdGJT23vbOiZbbe
plnafqhMY0i9XlhgRzSYyuZYr2P56PVBX7MDYxiF04pTA5jB4GHZWyRIao4+SO0U
3+Gt3GW/Mxi3Euwag6iFB6rSQ4FgMctlqlG0xe4EaAJYoCHFkvrYNnD8HxtFKF8B
ENvJWnXF0iveW7SX9+lP1I0L5guZe0TBt4K3TVdChOdnYFapT8LyHP/TOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDuUkrwrIOaNlp7ztxXZic7MVuYgMB8GA1UdIwQY
MBaAFJ+0HSUvEgrLFA0PyEM0FSEUtsgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjdRZEpTOFNDc3NVRFFfSVF6UVZJUlMyeUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hMTgxMWItNjE3Zi00NjlmLWFjZGUt
NjNlMWMxMDRhOGRiLzEvbjdRZEpTOFNDc3NVRFFfSVF6UVZJUlMyeUNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9hMTgxMWItNjE3Zi00NjlmLWFjZGUtNjNlMWMxMDRhOGRi
LzEvbjdRZEpTOFNDc3NVRFFfSVF6UVZJUlMyeUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAByaTlbBd
2BGZeRE5lzyMNF4bjyQpblv9vZazpS3XhOoCniRuPdMJaSfR04jGexFYjWJCW6gd
nBaW8foHRGDHJJNAn/pRoco3jcNfBvVEsaTTLXm7Cr8Mc55UfECYBkRsLQfhF1Rw
XtiM4dyw66+pZxCGlLZaGIhgdgSqrkLiyguXSD/+3b6sAl1DWtxTutz4/nyXijIb
50VbWTmAP3aVDPEeOw/I1rtf1T3HEUlfev27Mu/CNlKOH4jgvtbK6kZ6Et1zR8Su
2MizXobIQFAp4XISlpqljgSOc8HDI+brS3WK1iHi6sjidzYGRdFei+Yyrk9Mh5k3
vgSJZK/KwwN/+w==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:27:48 2026 by rpki-client