Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
File:                     cGdFrZI1PaioDLLg0inWjC71PbI.mft (raw, json)
Hash identifier:          QZVUCxhECQIM6k4c6hDSX1x2gqXwHCzeCiAUnX2hj5U=
Subject key identifier:   15:B4:6C:84:2A:5F:04:89:46:94:04:62:B7:09:10:D0:E5:33:9B:79
Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
Certificate issuer:       /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Certificate serial:       019D992B1EB48455CC72DB2D476C4F513CA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
Manifest number:          0317
Signing time:             Fri 17 Apr 2026 02:00:33 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:33 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:33 +0000
Files and hashes:         1: DAwWe5rLh-aQBzylMgXPEafT094.roa (hash: ddaH0Ll0Vx1InrKWW5z1h6HGqMMp7orTZW95H1Bjof4=)
                          2: DtrKUjuwAR9N9lv5bAs2nJDm_vk.roa (hash: IKTadbiUFg9tzOWRHQMu+tnQ83zzuuvO8UT29QQwFPo=)
                          3: FaeUz3uKy-mLZtaPCWtQSmRkAfs.roa (hash: GGkJmAABe4TcLrNWBtfMtwloTnLFtsdf5JSihhg5Xfs=)
                          4: cGdFrZI1PaioDLLg0inWjC71PbI.crl (hash: Lade9+myZfiy0X4/f7ZOJJz1S6GrwExhOZlcG3lcmzI=)
                          5: wjzuvsYsPDDKpMgBwHTQ9poihCY.roa (hash: l4MikOI2hGh4JANCfkUoAdXltlywTvqDvN7gXfHekr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:1e:b4:84:55:cc:72:db:2d:47:6c:4f:51:3c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
        Validity
            Not Before: Apr 17 02:00:33 2026 GMT
            Not After : Apr 18 02:00:33 2026 GMT
        Subject: CN=15b46c842a5f048946940462b70910d0e5339b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a2:37:d3:c2:ef:69:8a:62:31:30:85:42:f6:
                    c3:0e:9a:c9:05:09:03:42:66:d9:da:84:87:36:02:
                    4c:15:d9:9f:15:27:68:69:02:7c:a9:54:b0:6f:33:
                    6c:b7:12:ec:4e:ea:d7:e8:e8:71:31:3a:f7:a5:26:
                    79:5d:3b:4a:be:f4:e2:0b:72:b4:93:06:20:20:4c:
                    f5:2e:d3:01:10:2a:c4:ee:3c:9c:f9:61:b4:79:e5:
                    74:ef:9d:31:80:2a:c6:9a:7c:8b:7c:6d:5e:07:f5:
                    47:65:a8:8a:48:f3:51:c0:5e:0d:c8:7f:f8:65:2a:
                    e4:0b:f6:b2:6b:dc:48:23:6f:7b:dc:51:10:c8:a3:
                    e5:5b:21:4f:51:3b:cf:1c:72:e5:9a:ec:05:38:68:
                    07:51:d2:e9:7b:fa:65:b3:ef:24:7b:32:df:95:03:
                    b2:53:5c:e8:88:29:82:d9:9b:e2:a2:9a:d3:e0:ab:
                    d9:8c:d8:bd:c7:b1:3b:7a:81:f2:f3:d9:c3:7b:0e:
                    22:8d:26:e4:ce:5a:a6:92:9a:18:74:87:4a:49:58:
                    7b:ea:44:3f:5d:f6:c8:8f:79:2a:20:95:79:10:b2:
                    be:b9:c4:b5:ed:59:ed:6a:04:96:60:15:85:ed:56:
                    13:39:8d:c7:65:f4:30:ad:ee:b9:6e:ac:ad:db:5b:
                    f7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B4:6C:84:2A:5F:04:89:46:94:04:62:B7:09:10:D0:E5:33:9B:79
            X509v3 Authority Key Identifier:
                keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b5:b1:20:70:01:84:8f:d5:c8:19:15:08:39:10:24:51:8e:
         fa:30:e6:27:90:d0:b5:4e:1e:fc:b6:df:1d:f7:dc:e2:57:bf:
         c5:ef:85:b3:7f:5e:32:0d:79:55:14:93:1c:ae:da:cd:ab:6a:
         63:ce:9e:ee:0c:88:bc:53:8c:8a:75:29:93:67:46:b6:c4:6f:
         e8:06:fc:b8:66:57:3f:68:fd:e6:10:3a:04:a1:c0:5a:ee:c9:
         1d:44:52:64:ca:a0:df:c0:73:a8:65:f6:80:e2:58:44:bd:60:
         57:bb:5b:34:2f:fc:14:37:3f:2c:fb:15:dc:73:b9:85:af:5f:
         9a:f2:95:e5:ba:f5:0a:98:fa:7b:a2:cc:4e:87:6e:02:0d:b9:
         03:ca:22:28:49:45:74:d1:5f:f9:f0:27:e4:cc:12:d0:8e:5d:
         88:a4:7c:28:d7:90:ba:12:1e:ac:98:f4:52:7a:1b:02:28:d8:
         2d:a7:fc:95:ec:6b:bf:c6:49:5d:52:04:f3:58:db:a1:cb:a9:
         43:14:06:c7:47:aa:fd:db:37:9b:16:0b:a0:d9:c7:35:39:30:
         9b:9f:6d:8d:19:e9:ad:79:fa:74:17:dd:58:26:26:36:60:03:
         fa:a8:82:ba:31:ab:d4:94:4b:c7:00:8b:ef:08:4f:96:ae:27:
         67:01:4b:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKx60hFXMctstR2xPUTyjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNjc0NWFkOTIzNTNkYThhODBjYjJlMGQyMjlkNjhjMmVm
NTNkYjIwHhcNMjYwNDE3MDIwMDMzWhcNMjYwNDE4MDIwMDMzWjAzMTEwLwYDVQQD
EygxNWI0NmM4NDJhNWYwNDg5NDY5NDA0NjJiNzA5MTBkMGU1MzM5Yjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6I308LvaYpiMTCFQvbDDprJBQkD
QmbZ2oSHNgJMFdmfFSdoaQJ8qVSwbzNstxLsTurX6OhxMTr3pSZ5XTtKvvTiC3K0
kwYgIEz1LtMBECrE7jyc+WG0eeV0750xgCrGmnyLfG1eB/VHZaiKSPNRwF4NyH/4
ZSrkC/aya9xII2973FEQyKPlWyFPUTvPHHLlmuwFOGgHUdLpe/pls+8kezLflQOy
U1zoiCmC2ZvioprT4KvZjNi9x7E7eoHy89nDew4ijSbkzlqmkpoYdIdKSVh76kQ/
XfbIj3kqIJV5ELK+ucS17VntagSWYBWF7VYTOY3HZfQwre65bqyt21v3sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBW0bIQqXwSJRpQEYrcJENDlM5t5MB8GA1UdIwQY
MBaAFHBnRa2SNT2oqAyy4NIp1owu9T2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTkt
ZTIxNzYzYzY3MmZhLzEvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTktZTIxNzYzYzY3MmZh
LzEvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7WxIHAB
hI/VyBkVCDkQJFGO+jDmJ5DQtU4e/LbfHffc4le/xe+Fs39eMg15VRSTHK7azatq
Y86e7gyIvFOMinUpk2dGtsRv6Ab8uGZXP2j95hA6BKHAWu7JHURSZMqg38BzqGX2
gOJYRL1gV7tbNC/8FDc/LPsV3HO5ha9fmvKV5br1Cpj6e6LMToduAg25A8oiKElF
dNFf+fAn5MwS0I5diKR8KNeQuhIerJj0UnobAijYLaf8lexrv8ZJXVIE81jbocup
QxQGx0eq/ds3mxYLoNnHNTkwm59tjRnprXn6dBfdWCYmNmAD+qiCujGr1JRLxwCL
7whPlq4nZwFLrw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:52:00 2026 by rpki-client