Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft
File:                     EIOmQReWv3Jjh_elXPhLV8qJm-s.mft (raw, json)
Hash identifier:          ZidBksMs4m/NxlLERTvXAX3buHRAJ4PMgq5ybpaek5w=
Subject key identifier:   39:9B:85:07:49:67:BF:51:4B:3F:2E:78:86:4E:8D:F6:6D:22:87:21
Authority key identifier: 10:83:A6:41:17:96:BF:72:63:87:F7:A5:5C:F8:4B:57:CA:89:9B:EB
Certificate issuer:       /CN=1083a6411796bf726387f7a55cf84b57ca899beb
Certificate serial:       019D98BD3457E644AD636480D9661625584C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EIOmQReWv3Jjh_elXPhLV8qJm-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft
Manifest number:          0BE2
Signing time:             Fri 17 Apr 2026 00:00:29 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:29 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:29 +0000
Files and hashes:         1: EIOmQReWv3Jjh_elXPhLV8qJm-s.crl (hash: uNtD728T8aHkuS6ltSbzkPgRXqnAJ7sF2ngVvNkj6qU=)
                          2: KMV_MeO0hLhtZCjq1lqwJ3PvI5M.roa (hash: DLpQWgTnYXhTnfUhzszM/E2P2/bQ7PyHbo2We93BLHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EIOmQReWv3Jjh_elXPhLV8qJm-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:34:57:e6:44:ad:63:64:80:d9:66:16:25:58:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1083a6411796bf726387f7a55cf84b57ca899beb
        Validity
            Not Before: Apr 17 00:00:29 2026 GMT
            Not After : Apr 18 00:00:29 2026 GMT
        Subject: CN=399b85074967bf514b3f2e78864e8df66d228721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:17:0c:be:f2:4f:98:94:a4:d6:b1:57:44:76:
                    d0:40:54:81:e8:db:d0:17:7f:59:8b:9b:da:00:90:
                    4e:6b:b8:1c:fa:7b:09:99:a6:91:d3:96:c7:9b:f0:
                    2b:64:d6:e8:2c:10:2b:f1:77:41:c8:05:4d:0d:aa:
                    6f:00:6a:ae:1c:9d:1b:e9:4b:47:fb:1d:f1:b9:63:
                    6e:17:00:81:54:74:91:f3:9f:75:5c:19:df:fb:e2:
                    aa:95:87:23:2d:4c:b8:e6:44:4a:c3:11:2c:4e:ed:
                    fc:c2:25:84:cb:d6:bb:01:cd:49:bd:68:7c:97:d7:
                    08:40:5c:13:22:ee:19:50:31:ea:14:d6:e7:94:b2:
                    bc:f5:53:90:4c:fe:e9:f5:53:bc:47:22:a1:b8:fa:
                    9f:19:15:d2:62:84:d5:ee:69:9b:e0:cb:7a:2b:19:
                    18:34:ca:33:4a:d7:10:0e:97:fd:f1:95:ce:52:85:
                    ed:1b:0d:09:ad:6f:23:21:22:78:90:47:ab:a8:d7:
                    eb:13:d3:3a:c0:6a:c7:4e:75:67:75:0f:c1:50:9e:
                    e6:c7:ac:26:6e:df:6a:36:bb:1b:ac:5f:51:1c:20:
                    03:1c:2a:cb:8c:05:a4:21:3c:31:8c:cb:cf:e2:1c:
                    18:e7:c0:52:ae:3c:36:aa:e8:98:e0:61:aa:37:38:
                    da:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9B:85:07:49:67:BF:51:4B:3F:2E:78:86:4E:8D:F6:6D:22:87:21
            X509v3 Authority Key Identifier:
                keyid:10:83:A6:41:17:96:BF:72:63:87:F7:A5:5C:F8:4B:57:CA:89:9B:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIOmQReWv3Jjh_elXPhLV8qJm-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:bc:97:1d:a2:24:ef:d0:bf:6c:47:64:1f:cd:c1:02:5c:37:
         28:d0:76:ea:55:f0:3a:d2:33:59:b8:b7:19:3c:46:5b:57:2f:
         25:a2:82:6b:76:0c:20:02:27:fe:0a:7c:ec:87:14:47:fb:de:
         95:64:fa:a8:26:ec:fc:c1:a9:94:6f:eb:12:f5:72:aa:a0:6c:
         21:4c:49:64:55:0b:dc:69:b9:7e:b9:a9:d1:df:75:47:5e:00:
         73:2b:88:ef:2b:ca:b8:81:20:7e:95:d0:f3:72:f1:4c:df:66:
         c9:ee:fe:bd:bf:31:da:6c:46:c4:c4:16:17:c2:73:ef:54:55:
         a9:43:d6:7b:05:c9:ba:98:d6:da:53:0d:3b:be:08:5b:d1:28:
         4f:53:df:c8:48:bd:d5:ee:b2:c3:7f:fa:ad:4e:ea:07:de:f9:
         75:49:f8:d4:d1:79:2a:06:33:71:08:81:53:98:35:dc:dd:ac:
         7a:6f:10:af:7c:6e:0a:45:fa:56:83:b4:b6:f6:f5:84:28:9d:
         90:ce:ae:0b:c9:dd:f3:12:8b:d5:fe:5e:49:32:48:34:45:e0:
         05:bb:1a:b8:3a:0f:42:4d:ef:ef:8f:35:4b:e0:73:a6:a8:2a:
         83:90:e9:c7:b9:50:df:a8:82:93:8f:94:06:38:d3:37:73:b8:
         9d:37:fd:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvTRX5kStY2SA2WYWJVhMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwODNhNjQxMTc5NmJmNzI2Mzg3ZjdhNTVjZjg0YjU3Y2E4
OTliZWIwHhcNMjYwNDE3MDAwMDI5WhcNMjYwNDE4MDAwMDI5WjAzMTEwLwYDVQQD
EygzOTliODUwNzQ5NjdiZjUxNGIzZjJlNzg4NjRlOGRmNjZkMjI4NzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxcMvvJPmJSk1rFXRHbQQFSB6NvQ
F39Zi5vaAJBOa7gc+nsJmaaR05bHm/ArZNboLBAr8XdByAVNDapvAGquHJ0b6UtH
+x3xuWNuFwCBVHSR8591XBnf++KqlYcjLUy45kRKwxEsTu38wiWEy9a7Ac1JvWh8
l9cIQFwTIu4ZUDHqFNbnlLK89VOQTP7p9VO8RyKhuPqfGRXSYoTV7mmb4Mt6KxkY
NMozStcQDpf98ZXOUoXtGw0JrW8jISJ4kEerqNfrE9M6wGrHTnVndQ/BUJ7mx6wm
bt9qNrsbrF9RHCADHCrLjAWkITwxjMvP4hwY58BSrjw2quiY4GGqNzjaQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmbhQdJZ79RSz8ueIZOjfZtIochMB8GA1UdIwQY
MBaAFBCDpkEXlr9yY4f3pVz4S1fKiZvrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUlPbVFSZVd2M0pqaF9lbFhQaExWOHFKbS1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kYzMzMGQtZGFkMi00ZTcwLWExNDkt
OTFjZjRmYzcwM2ViLzEvRUlPbVFSZVd2M0pqaF9lbFhQaExWOHFKbS1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9kYzMzMGQtZGFkMi00ZTcwLWExNDktOTFjZjRmYzcwM2Vi
LzEvRUlPbVFSZVd2M0pqaF9lbFhQaExWOHFKbS1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo7yXHaIk
79C/bEdkH83BAlw3KNB26lXwOtIzWbi3GTxGW1cvJaKCa3YMIAIn/gp87IcUR/ve
lWT6qCbs/MGplG/rEvVyqqBsIUxJZFUL3Gm5frmp0d91R14AcyuI7yvKuIEgfpXQ
83LxTN9mye7+vb8x2mxGxMQWF8Jz71RVqUPWewXJupjW2lMNO74IW9EoT1PfyEi9
1e6yw3/6rU7qB975dUn41NF5KgYzcQiBU5g13N2sem8Qr3xuCkX6VoO0tvb1hCid
kM6uC8nd8xKL1f5eSTJINEXgBbsauDoPQk3v7481S+Bzpqgqg5Dpx7lQ36iCk4+U
BjjTN3O4nTf90Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:41 2026 by rpki-client