Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
File:                     t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft (raw, json)
Hash identifier:          tqv+yCM/FKJjZRyGj6OJtINaT3F34Qm2a0d4Uo1SaWU=
Subject key identifier:   0C:C1:31:DD:C0:D3:BA:4B:26:0C:BF:70:60:FE:4D:B3:CB:84:0D:83
Authority key identifier: B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
Certificate issuer:       /CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Certificate serial:       019D99621B7636E81A55A911E5F3129AD535
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
Manifest number:          0D26
Signing time:             Fri 17 Apr 2026 03:00:36 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:36 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:36 +0000
Files and hashes:         1: 1LdSNQtPKGuFRCqVT7O_Fm0yv40.roa (hash: 5g11W+WX3bmU8CryNIDPD2SicuCDU6UduQYdcWR73Uc=)
                          2: RzWzE6OpgeFZk0yxSCkJMoNMTwA.roa (hash: EOrql+fdFMhDNMTm2/S5izzC4MsYg2L6WcA9m2Sp+8U=)
                          3: t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl (hash: RyrQBzQt9gzROtyaHQAfMMzmqwlDCerNiQRTbeQZwpo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:1b:76:36:e8:1a:55:a9:11:e5:f3:12:9a:d5:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
        Validity
            Not Before: Apr 17 03:00:36 2026 GMT
            Not After : Apr 18 03:00:36 2026 GMT
        Subject: CN=0cc131ddc0d3ba4b260cbf7060fe4db3cb840d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:56:ce:17:3f:ed:73:32:0d:43:67:66:8c:4d:
                    ab:8c:ac:f7:54:51:15:82:f3:a4:34:54:3b:a9:4f:
                    21:6d:44:f1:57:a9:75:1e:50:be:ec:30:b7:f5:42:
                    1f:c3:97:54:77:e4:4e:5c:08:db:21:89:af:cf:22:
                    45:bb:af:0c:4e:d6:da:2d:13:85:fb:99:e6:2b:79:
                    bc:19:1f:c8:d1:d3:7d:e8:be:76:cb:4c:9a:11:9b:
                    84:db:76:a8:cd:a9:09:01:f7:ff:ee:9e:16:54:39:
                    14:26:d3:ac:52:f2:07:f1:b3:75:26:1a:28:9d:66:
                    ab:74:80:18:e2:bd:e6:ce:6a:b3:56:d2:a8:d8:1f:
                    59:33:db:53:0d:7b:ce:eb:2d:94:8d:2f:49:35:27:
                    48:d0:d4:a1:29:17:87:46:aa:4b:fe:d1:0e:e0:93:
                    22:a3:68:00:c5:a8:80:71:0c:ac:c0:2a:66:e5:f3:
                    0b:c8:33:fc:eb:ac:99:10:c6:1b:11:ce:0b:df:a1:
                    d7:62:2e:b2:b2:6f:ef:93:29:03:ad:cc:29:4d:99:
                    46:37:da:7e:65:dd:48:20:ec:fa:c1:9d:95:de:29:
                    8a:c9:8d:99:23:63:fd:e9:de:c6:01:e9:23:c3:01:
                    65:e1:30:4e:f5:c9:a1:25:f8:df:63:73:28:4b:30:
                    7a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C1:31:DD:C0:D3:BA:4B:26:0C:BF:70:60:FE:4D:B3:CB:84:0D:83
            X509v3 Authority Key Identifier:
                keyid:B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ac:5f:06:63:4d:06:e3:62:6c:36:08:d7:a8:ed:c4:a0:90:
         e2:a9:ac:aa:db:c0:ad:0e:72:4f:cd:64:47:72:93:9a:ed:58:
         41:ee:e5:23:c1:3f:6b:ef:18:e7:c4:91:24:c5:13:0f:25:55:
         71:24:00:6f:db:58:e1:8f:6b:1b:3b:f5:c4:b0:0a:f0:82:11:
         b4:0a:65:f2:b2:41:62:e8:5a:2e:49:e5:58:68:53:b9:ab:2d:
         bb:46:44:e9:27:75:97:fe:ba:fe:3d:47:1b:1d:54:b3:81:5a:
         91:ff:72:29:bb:7f:de:4b:2d:49:8c:cf:98:e9:a6:f5:3f:7d:
         a7:7f:ed:f6:f2:00:59:c5:f8:09:9b:c8:a8:84:08:89:96:69:
         e1:1d:ea:0a:db:66:cb:ff:21:88:e0:4e:2f:8b:6e:5e:0e:3a:
         d2:60:c1:4a:ab:84:bf:2e:b5:ed:41:af:c0:1e:27:82:6f:89:
         76:38:7f:09:1b:0a:e8:7b:59:f8:89:28:e9:bb:fc:fb:ca:97:
         c6:db:8f:0d:61:d7:70:1a:de:7b:6e:ad:91:db:70:62:90:97:
         62:e0:33:06:ff:9c:c6:0d:68:f5:73:34:a8:f0:1c:d3:f1:08:
         99:bc:8a:07:2f:e1:d1:d0:79:62:02:9e:0c:5d:5f:3b:2a:59:
         28:80:cc:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYht2NugaVakR5fMSmtU1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ZTM0ZjU3ZDAwNzE2NmRlZjRkZDg4MWQ4ZjdkNWI2ZWQ5
NWU2NTYwHhcNMjYwNDE3MDMwMDM2WhcNMjYwNDE4MDMwMDM2WjAzMTEwLwYDVQQD
EygwY2MxMzFkZGMwZDNiYTRiMjYwY2JmNzA2MGZlNGRiM2NiODQwZDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFbOFz/tczINQ2dmjE2rjKz3VFEV
gvOkNFQ7qU8hbUTxV6l1HlC+7DC39UIfw5dUd+ROXAjbIYmvzyJFu68MTtbaLROF
+5nmK3m8GR/I0dN96L52y0yaEZuE23aozakJAff/7p4WVDkUJtOsUvIH8bN1Jhoo
nWardIAY4r3mzmqzVtKo2B9ZM9tTDXvO6y2UjS9JNSdI0NShKReHRqpL/tEO4JMi
o2gAxaiAcQyswCpm5fMLyDP866yZEMYbEc4L36HXYi6ysm/vkykDrcwpTZlGN9p+
Zd1IIOz6wZ2V3imKyY2ZI2P96d7GAekjwwFl4TBO9cmhJfjfY3MoSzB65QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzBMd3A07pLJgy/cGD+TbPLhA2DMB8GA1UdIwQY
MBaAFLfjT1fQBxZt703Ygdj31bbtleZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdC1OUFY5QUhGbTN2VGRpQjJQZlZ0dTJWNWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lNWQ1ODAtZWVlOC00NjNlLTg0YTgt
ZWFjY2I4YjQyZGM5LzEvdC1OUFY5QUhGbTN2VGRpQjJQZlZ0dTJWNWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lNWQ1ODAtZWVlOC00NjNlLTg0YTgtZWFjY2I4YjQyZGM5
LzEvdC1OUFY5QUhGbTN2VGRpQjJQZlZ0dTJWNWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKxfBmNN
BuNibDYI16jtxKCQ4qmsqtvArQ5yT81kR3KTmu1YQe7lI8E/a+8Y58SRJMUTDyVV
cSQAb9tY4Y9rGzv1xLAK8IIRtApl8rJBYuhaLknlWGhTuastu0ZE6Sd1l/66/j1H
Gx1Us4Fakf9yKbt/3kstSYzPmOmm9T99p3/t9vIAWcX4CZvIqIQIiZZp4R3qCttm
y/8hiOBOL4tuXg460mDBSquEvy617UGvwB4ngm+Jdjh/CRsK6HtZ+Iko6bv8+8qX
xtuPDWHXcBree26tkdtwYpCXYuAzBv+cxg1o9XM0qPAc0/EImbyKBy/h0dB5YgKe
DF1fOypZKIDM0Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:00:54 2026 by rpki-client