Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
File:                     noHdqtiPcHFhLXw7dhjiTRpSM7s.mft (raw, json)
Hash identifier:          5g/xtGlqb16zXGFFtFz6+2jVSpOsg9QncR1fbEcdtWk=
Subject key identifier:   8E:5D:5A:04:EC:70:87:5C:5A:3A:49:63:FE:13:57:1F:C9:86:67:97
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Certificate issuer:       /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial:       019D99CFF903DCC6E16883AE8555D8A0EED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
Manifest number:          0F6D
Signing time:             Fri 17 Apr 2026 05:00:36 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:36 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:36 +0000
Files and hashes:         1: WiXt3vLRsEbHO4V69Ernp9Pa3Dc.roa (hash: 5/0dAfxj8roSB2N+rzuNs50RghH7Q+7eLmnDrf3ejec=)
                          2: noHdqtiPcHFhLXw7dhjiTRpSM7s.crl (hash: GE8qGeXNi2yg4SZOgCdpnSmLyAwh4zplkCqJVl8yNH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:cf:f9:03:dc:c6:e1:68:83:ae:85:55:d8:a0:ee:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
        Validity
            Not Before: Apr 17 05:00:36 2026 GMT
            Not After : Apr 18 05:00:36 2026 GMT
        Subject: CN=8e5d5a04ec70875c5a3a4963fe13571fc9866797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:13:81:f4:d5:bd:17:b6:27:2b:74:21:d7:2c:
                    e4:4c:ac:78:44:32:79:e0:a7:41:62:19:65:5d:4b:
                    a9:76:9f:52:99:b0:f2:31:82:5c:9e:f7:29:f8:f2:
                    39:76:e6:12:36:a4:10:e4:83:d3:1d:ca:71:94:4d:
                    87:89:d5:47:59:1f:d9:e7:3a:89:4d:c6:ae:df:1d:
                    41:d7:97:63:81:5a:38:d3:ad:0b:50:01:ee:43:12:
                    e8:97:31:fb:8f:71:5f:a7:b9:18:a1:a0:ce:79:ce:
                    d5:15:cd:ac:50:b0:b8:76:cc:1b:b9:14:8c:8d:4d:
                    0d:9f:19:62:f7:2a:e2:78:21:a8:47:4f:7b:80:e9:
                    41:23:93:07:14:48:09:b1:51:cd:89:1e:c5:74:0e:
                    5d:38:a0:1f:bb:5d:30:d4:b6:b1:74:0f:2c:ad:8a:
                    b8:04:64:76:c3:ac:71:18:10:e6:46:fc:ad:95:d8:
                    1a:84:2b:56:53:7f:cd:7e:c2:75:e6:8c:51:3c:b1:
                    6a:83:38:08:44:c2:e0:19:74:90:69:05:37:d1:ac:
                    92:cf:b0:92:3b:0c:65:7f:11:43:35:2f:c6:e7:30:
                    70:66:cf:54:31:b5:63:18:96:1e:02:6e:08:b4:64:
                    cd:f2:ca:6f:43:24:38:cf:83:fd:d5:6e:b7:73:16:
                    02:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5D:5A:04:EC:70:87:5C:5A:3A:49:63:FE:13:57:1F:C9:86:67:97
            X509v3 Authority Key Identifier:
                keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:67:13:42:b5:ec:73:f5:ce:6c:6d:89:06:ac:99:e8:69:89:
         94:b2:ed:32:5e:a9:96:84:4a:c2:ed:e0:1b:f5:57:8f:0d:33:
         ee:2c:10:c9:71:ec:53:e9:1d:24:fd:8d:1f:66:d4:43:a7:c0:
         98:37:2a:c6:47:c3:1b:74:a8:ab:0a:52:4e:8a:b2:89:2e:4b:
         a3:56:06:60:b1:ce:78:3d:75:6a:c1:1e:6c:62:ff:e0:99:a8:
         c9:c5:09:b1:1c:86:54:ab:25:24:8d:d1:64:bf:3f:7a:da:82:
         c7:61:3a:5f:20:ec:c1:13:b8:2b:3f:ea:20:a4:46:ae:da:e4:
         ce:66:ea:85:05:f1:10:3c:0a:e2:98:8b:ac:3f:cc:46:f8:9c:
         50:af:ca:e0:a9:ae:69:05:f7:94:fe:8a:24:73:fd:0e:e3:f6:
         3f:44:dc:bc:3f:40:31:ca:70:a3:8e:d1:df:bd:d2:7e:90:5f:
         6f:83:47:fc:c3:f6:0f:0c:7f:ea:a1:c8:ec:63:a9:97:91:3f:
         f0:78:ab:c7:cd:32:47:8c:a0:8a:d7:ef:3f:e4:90:15:62:8b:
         35:e7:11:1a:20:9b:33:03:25:c3:d0:40:ec:ac:a8:83:49:77:
         27:81:86:5d:f8:24:10:b7:cc:6b:52:bb:f6:42:9a:1d:80:44:
         3a:27:37:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Zz/kD3MbhaIOuhVXYoO7TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllODFkZGFhZDg4ZjcwNzE2MTJkN2MzYjc2MThlMjRkMWE1
MjMzYmIwHhcNMjYwNDE3MDUwMDM2WhcNMjYwNDE4MDUwMDM2WjAzMTEwLwYDVQQD
Eyg4ZTVkNWEwNGVjNzA4NzVjNWEzYTQ5NjNmZTEzNTcxZmM5ODY2Nzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BOB9NW9F7YnK3Qh1yzkTKx4RDJ5
4KdBYhllXUupdp9SmbDyMYJcnvcp+PI5duYSNqQQ5IPTHcpxlE2HidVHWR/Z5zqJ
Tcau3x1B15djgVo4060LUAHuQxLolzH7j3Ffp7kYoaDOec7VFc2sULC4dswbuRSM
jU0Nnxli9yrieCGoR097gOlBI5MHFEgJsVHNiR7FdA5dOKAfu10w1LaxdA8srYq4
BGR2w6xxGBDmRvytldgahCtWU3/NfsJ15oxRPLFqgzgIRMLgGXSQaQU30aySz7CS
OwxlfxFDNS/G5zBwZs9UMbVjGJYeAm4ItGTN8spvQyQ4z4P91W63cxYCfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5dWgTscIdcWjpJY/4TVx/JhmeXMB8GA1UdIwQY
MBaAFJ6B3arYj3BxYS18O3YY4k0aUjO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm9IZHF0aVBjSEZoTFh3N2RoamlUUnBTTTdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lMjJkYzItZjQwNi00MGM5LWJhNWYt
YmY2OWIxMmE2NzQ0LzEvbm9IZHF0aVBjSEZoTFh3N2RoamlUUnBTTTdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lMjJkYzItZjQwNi00MGM5LWJhNWYtYmY2OWIxMmE2NzQ0
LzEvbm9IZHF0aVBjSEZoTFh3N2RoamlUUnBTTTdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArWcTQrXs
c/XObG2JBqyZ6GmJlLLtMl6ploRKwu3gG/VXjw0z7iwQyXHsU+kdJP2NH2bUQ6fA
mDcqxkfDG3SoqwpSToqyiS5Lo1YGYLHOeD11asEebGL/4JmoycUJsRyGVKslJI3R
ZL8/etqCx2E6XyDswRO4Kz/qIKRGrtrkzmbqhQXxEDwK4piLrD/MRvicUK/K4Kmu
aQX3lP6KJHP9DuP2P0TcvD9AMcpwo47R373SfpBfb4NH/MP2Dwx/6qHI7GOpl5E/
8Hirx80yR4ygitfvP+SQFWKLNecRGiCbMwMlw9BA7Kyog0l3J4GGXfgkELfMa1K7
9kKaHYBEOic3XA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:18:33 2026 by rpki-client