Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
File:                     zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft (raw, json)
Hash identifier:          QxVnM9mXG3z/Br0OeiTTVI2dWXWtoGtLHA+gGtqWUus=
Subject key identifier:   59:2E:ED:C7:E8:5E:E2:2C:13:F5:B3:E8:44:3D:45:47:72:55:7D:FE
Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Certificate issuer:       /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Certificate serial:       019D9BBF024E87E09D17A400D812325F9C33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
Manifest number:          095F
Signing time:             Fri 17 Apr 2026 14:01:19 +0000
Manifest this update:     Fri 17 Apr 2026 14:01:19 +0000
Manifest next update:     Sat 18 Apr 2026 14:01:19 +0000
Files and hashes:         1: Fq4x87XmupBOAkCisYEcN7XqoZE.roa (hash: xhD7nGAh96AYY5dfhK9D1eKT7BFTs6JVCiD3DWI5RbU=)
                          2: GNvJW18bYA7Iq3h7nGvfqYocolI.roa (hash: FgGibrDdMqKVVsL/e+tMDlZ3wp8xt85KBE6mvBGDeGA=)
                          3: NC1kNBCi5IA0F53iafyWv28tEdg.roa (hash: 8XZEHga4sRd8LXiMX0n/9qmmvIkKf8zzb9XvKz8gxCo=)
                          4: _C1dxAYzgojRgjfg932a5o53DHI.roa (hash: MWoWdwypjbLGhZ5K85xQtJNC5yRCwOAiowUMTjpjyv8=)
                          5: mX5I2M6iUKt8zF4BPfPZOGSFhgk.roa (hash: 0QO3Ga/khcmLBiYg4OsBbI4MsveK0cBOujs5qnZ+UZ4=)
                          6: zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl (hash: ADPuUpp1tRmAvKzLZW5Lc7q8mQbxyB4RJi9HaX2mR7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:bf:02:4e:87:e0:9d:17:a4:00:d8:12:32:5f:9c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
        Validity
            Not Before: Apr 17 14:01:19 2026 GMT
            Not After : Apr 18 14:01:19 2026 GMT
        Subject: CN=592eedc7e85ee22c13f5b3e8443d454772557dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6d:01:ff:5f:67:43:d1:f7:1a:59:8c:f6:e8:
                    82:ea:25:de:20:37:bd:fe:0e:8e:19:11:3d:68:5f:
                    39:92:98:d6:f6:6f:56:d2:ae:17:78:fd:39:d0:03:
                    45:8f:69:25:c1:e6:5a:93:a3:b0:5e:cb:15:38:f7:
                    95:f8:07:63:e0:a1:4c:14:9d:90:b9:2e:55:94:fc:
                    c1:3f:81:e8:15:0f:c8:36:e9:84:b2:84:41:07:ed:
                    57:a6:4b:13:48:cf:e2:1f:37:0e:bc:36:ed:67:1d:
                    41:1a:53:39:04:81:76:95:ad:6e:48:d7:9a:d4:29:
                    c4:e9:8e:89:28:dd:47:91:dd:84:a1:56:da:eb:c7:
                    82:da:1f:af:58:f0:38:32:ad:30:9f:dc:43:cf:0d:
                    f0:2d:1f:85:5d:f0:74:1b:67:0a:1c:92:4c:c2:a9:
                    60:39:fc:31:71:e4:12:ed:e3:8e:8b:4f:bb:64:94:
                    8c:0a:d7:45:74:05:bb:a9:22:d9:1d:62:98:f2:b0:
                    53:4c:7d:e0:64:54:ad:4d:0a:09:fc:c9:ed:f8:60:
                    4b:11:d6:da:f8:3d:07:cf:86:85:1c:c4:6c:2e:fd:
                    29:c8:17:eb:67:ae:ca:4c:55:ac:3e:20:30:84:d4:
                    a1:a6:f7:f8:fa:dd:05:3a:24:90:a7:0d:5e:52:78:
                    8c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:2E:ED:C7:E8:5E:E2:2C:13:F5:B3:E8:44:3D:45:47:72:55:7D:FE
            X509v3 Authority Key Identifier:
                keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ef:17:15:7e:33:1b:90:16:b4:ab:20:2e:1e:f0:0f:b0:85:
         66:a0:ca:c3:3b:3f:af:73:0a:5e:8a:23:ad:76:71:8a:4b:b0:
         10:b0:87:98:19:a1:5a:8d:46:e3:b0:5e:ae:a6:e1:94:a5:cd:
         68:60:32:69:a8:72:b3:9f:8a:14:ee:17:ef:bc:46:47:2a:6b:
         46:82:f6:28:b5:0b:f4:6c:2b:23:68:1f:2c:e3:12:9a:70:c5:
         93:50:cb:ae:9f:e7:dc:bc:c4:eb:00:e9:da:da:53:87:07:e9:
         e4:a9:e9:89:f2:11:ab:7a:51:41:ba:7e:9e:56:fe:ac:c8:6b:
         ec:22:41:fc:98:43:3f:a7:2c:48:15:d7:68:db:19:d3:5e:16:
         68:ce:5b:e2:f9:dc:72:b6:39:be:a3:90:fe:ab:b2:b1:5c:9d:
         34:20:be:e3:79:30:78:1b:77:e3:6b:4e:46:82:26:ab:3b:97:
         07:77:55:2e:70:09:fa:32:27:96:16:cd:d2:ed:8e:5d:e9:ea:
         5d:a7:31:6e:5a:d4:e1:6f:d4:0c:50:19:27:40:09:44:96:06:
         69:f9:21:c9:25:73:d2:af:db:c2:60:1c:67:b3:eb:49:5e:b2:
         66:44:94:fe:09:7e:6d:97:45:9f:af:d1:9d:9e:92:d5:55:1b:
         d2:33:49:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvwJOh+CdF6QA2BIyX5wzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNTYzNjA2MjRjYzFiNGM0OWRhNzJiYzMyNWY1YmI2YWI0
ZDgzMDAwHhcNMjYwNDE3MTQwMTE5WhcNMjYwNDE4MTQwMTE5WjAzMTEwLwYDVQQD
Eyg1OTJlZWRjN2U4NWVlMjJjMTNmNWIzZTg0NDNkNDU0NzcyNTU3ZGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm0B/19nQ9H3GlmM9uiC6iXeIDe9
/g6OGRE9aF85kpjW9m9W0q4XeP050ANFj2klweZak6OwXssVOPeV+Adj4KFMFJ2Q
uS5VlPzBP4HoFQ/INumEsoRBB+1XpksTSM/iHzcOvDbtZx1BGlM5BIF2la1uSNea
1CnE6Y6JKN1Hkd2EoVba68eC2h+vWPA4Mq0wn9xDzw3wLR+FXfB0G2cKHJJMwqlg
OfwxceQS7eOOi0+7ZJSMCtdFdAW7qSLZHWKY8rBTTH3gZFStTQoJ/Mnt+GBLEdba
+D0Hz4aFHMRsLv0pyBfrZ67KTFWsPiAwhNShpvf4+t0FOiSQpw1eUniMEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFku7cfoXuIsE/Wz6EQ9RUdyVX3+MB8GA1UdIwQY
MBaAFM5WNgYkzBtMSdpyvDJfW7arTYMAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUt
YTk4ZWYzMDA4NTgwLzEvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUtYTk4ZWYzMDA4NTgw
LzEvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmO8XFX4z
G5AWtKsgLh7wD7CFZqDKwzs/r3MKXoojrXZxikuwELCHmBmhWo1G47BerqbhlKXN
aGAyaahys5+KFO4X77xGRyprRoL2KLUL9GwrI2gfLOMSmnDFk1DLrp/n3LzE6wDp
2tpThwfp5KnpifIRq3pRQbp+nlb+rMhr7CJB/JhDP6csSBXXaNsZ014WaM5b4vnc
crY5vqOQ/quysVydNCC+43kweBt342tORoImqzuXB3dVLnAJ+jInlhbN0u2OXenq
XacxblrU4W/UDFAZJ0AJRJYGafkhySVz0q/bwmAcZ7PrSV6yZkSU/gl+bZdFn6/R
nZ6S1VUb0jNJ5g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:22:28 2026 by rpki-client