Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
File:                     1uU17yFuvm9_xVz73DFTK5EtjmM.mft (raw, json)
Hash identifier:          sJ6SEljf1OAHpfUF4KVbDZFTIS72A7nM38cnNft/7to=
Subject key identifier:   5C:82:FC:94:30:65:53:F6:39:98:8A:7B:2C:1B:A5:2E:1F:45:19:06
Authority key identifier: D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63
Certificate issuer:       /CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
Certificate serial:       019D999943E681002259C107654C5FE29D63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
Manifest number:          0DEA
Signing time:             Fri 17 Apr 2026 04:00:51 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:51 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:51 +0000
Files and hashes:         1: 1uU17yFuvm9_xVz73DFTK5EtjmM.crl (hash: W06cohs8xJzAdj4UMuF6mCcqrI3h+8TmW+4bDES8WL0=)
                          2: KU8q2n2CMANYI0fRJo2s7p5G3KY.roa (hash: TGvZcgRzyrpwF/XoDD+tDWJMqg0cIvjLnDlG6w6JYqw=)
                          3: oyTo08KWYqEf8lV71zt18bZl5ow.roa (hash: xhup0SobxwErF5ofC7EOIpLrzzOxwF+wSlAfxajK56Y=)
                          4: w0AIzL_yXPCHkJImPTgRwJJtTaU.roa (hash: sZxn5UqLt4mLh2cPzkHphFRVza6dN160+xYuKyv4YdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:43:e6:81:00:22:59:c1:07:65:4c:5f:e2:9d:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
        Validity
            Not Before: Apr 17 04:00:51 2026 GMT
            Not After : Apr 18 04:00:51 2026 GMT
        Subject: CN=5c82fc94306553f639988a7b2c1ba52e1f451906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3f:2c:82:65:89:f0:c9:86:51:9a:df:01:ee:
                    89:aa:cd:83:7b:0a:a6:b8:07:78:e5:94:bf:65:86:
                    a7:fe:f4:40:9a:ca:ff:49:38:3a:92:b1:04:08:9d:
                    fe:ca:1a:7c:a6:3b:47:e7:8b:45:f2:8a:1d:ce:84:
                    ae:63:47:e1:a5:ba:3a:5e:5c:8c:32:47:41:8d:bf:
                    0e:7c:28:60:57:64:ef:21:77:1f:db:29:da:be:6b:
                    74:c8:d3:94:fd:c1:79:25:80:bd:1a:24:2d:26:75:
                    98:9e:0e:87:7c:d5:98:64:69:a0:34:3f:69:b1:f0:
                    ee:ee:43:98:5e:20:85:51:f3:a2:45:c2:80:d4:a0:
                    6f:2e:cf:25:ed:f2:e2:5c:c2:20:a8:4c:d3:d4:5f:
                    00:58:58:85:cf:a6:73:ef:e7:f2:76:c5:0b:7b:6b:
                    97:e2:c3:e3:b7:a8:cd:d2:ac:cf:5f:51:cd:a5:b1:
                    88:ed:20:d4:67:71:fa:92:db:0b:fa:6f:d2:09:3d:
                    1e:fb:a2:57:12:4b:9e:17:95:88:d2:7e:8e:c4:84:
                    5b:ff:d2:d9:15:de:c1:d9:b9:a5:bc:5a:00:91:22:
                    a7:a1:e8:73:3f:46:c3:36:90:9a:1e:a8:e8:fa:77:
                    3f:fb:0b:77:b3:6b:b9:73:b2:bd:a4:5b:cd:b1:f8:
                    fe:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:82:FC:94:30:65:53:F6:39:98:8A:7B:2C:1B:A5:2E:1F:45:19:06
            X509v3 Authority Key Identifier:
                keyid:D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:c2:61:f3:e3:f9:06:95:cf:d5:47:60:4f:d7:ba:2e:ee:69:
         5e:c8:50:46:e7:76:e9:8f:23:0c:bc:81:75:e2:f1:b8:d9:5e:
         88:4d:ff:4c:39:e4:a7:e4:fc:c4:b1:06:e6:6b:7e:c0:2c:8b:
         b7:ec:27:93:86:d7:23:95:fe:d6:c0:25:d1:60:d6:e3:d9:a4:
         b1:05:2d:ce:f5:1b:88:21:f1:8c:7a:2d:13:b9:a2:86:3b:e1:
         c1:b0:a4:c4:c5:6e:4b:9a:9c:e8:f9:87:6b:ce:9d:55:d1:e1:
         7b:de:3f:e7:09:54:bc:48:f3:2d:dd:6b:18:a6:10:0c:99:5a:
         e4:33:d6:0e:8d:52:d8:9c:91:19:bf:6a:42:d7:26:5a:ad:06:
         b3:51:76:f2:e6:71:38:5d:e7:6c:e8:c8:85:26:e0:2f:b4:0a:
         c6:91:cb:49:2d:a6:03:cd:b7:84:a6:90:b9:9b:71:17:e5:f6:
         95:ff:0a:ee:3b:8a:23:1e:14:5f:f2:0f:2c:d2:d3:eb:b3:93:
         5e:fa:bc:49:af:4e:70:19:9a:e9:a5:70:3b:26:66:53:e4:ac:
         17:03:c5:60:16:11:8e:cf:c7:b4:c5:64:c1:11:81:c2:77:e0:
         11:ef:6c:2f:12:4b:b0:9e:5a:df:09:9e:41:b9:40:70:83:80:
         7b:65:6a:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmUPmgQAiWcEHZUxf4p1jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZTUzNWVmMjE2ZWJlNmY3ZmM1NWNmYmRjMzE1MzJiOTEy
ZDhlNjMwHhcNMjYwNDE3MDQwMDUxWhcNMjYwNDE4MDQwMDUxWjAzMTEwLwYDVQQD
Eyg1YzgyZmM5NDMwNjU1M2Y2Mzk5ODhhN2IyYzFiYTUyZTFmNDUxOTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD8sgmWJ8MmGUZrfAe6Jqs2Dewqm
uAd45ZS/ZYan/vRAmsr/STg6krEECJ3+yhp8pjtH54tF8oodzoSuY0fhpbo6XlyM
MkdBjb8OfChgV2TvIXcf2ynavmt0yNOU/cF5JYC9GiQtJnWYng6HfNWYZGmgND9p
sfDu7kOYXiCFUfOiRcKA1KBvLs8l7fLiXMIgqEzT1F8AWFiFz6Zz7+fydsULe2uX
4sPjt6jN0qzPX1HNpbGI7SDUZ3H6ktsL+m/SCT0e+6JXEkueF5WI0n6OxIRb/9LZ
Fd7B2bmlvFoAkSKnoehzP0bDNpCaHqjo+nc/+wt3s2u5c7K9pFvNsfj+JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyC/JQwZVP2OZiKeywbpS4fRRkGMB8GA1UdIwQY
MBaAFNblNe8hbr5vf8Vc+9wxUyuRLY5jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXVVMTd5RnV2bTlfeFZ6NzNERlRLNUV0am1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZDBkN2QtZjQyNS00MDhhLWIwN2Qt
MDc3MTFlZDAyYjc1LzEvMXVVMTd5RnV2bTlfeFZ6NzNERlRLNUV0am1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iZDBkN2QtZjQyNS00MDhhLWIwN2QtMDc3MTFlZDAyYjc1
LzEvMXVVMTd5RnV2bTlfeFZ6NzNERlRLNUV0am1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8Jh8+P5
BpXP1UdgT9e6Lu5pXshQRud26Y8jDLyBdeLxuNleiE3/TDnkp+T8xLEG5mt+wCyL
t+wnk4bXI5X+1sAl0WDW49mksQUtzvUbiCHxjHotE7mihjvhwbCkxMVuS5qc6PmH
a86dVdHhe94/5wlUvEjzLd1rGKYQDJla5DPWDo1S2JyRGb9qQtcmWq0Gs1F28uZx
OF3nbOjIhSbgL7QKxpHLSS2mA823hKaQuZtxF+X2lf8K7juKIx4UX/IPLNLT67OT
Xvq8Sa9OcBma6aVwOyZmU+SsFwPFYBYRjs/HtMVkwRGBwnfgEe9sLxJLsJ5a3wme
QblAcIOAe2Vq/w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:40:42 2026 by rpki-client