Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
File:                     F263G9VVdvRXY7retnbtWZkNOWo.mft (raw, json)
Hash identifier:          U5mezs2TOX12NkcVuFk7Hg/grgx5Ztidj+LRUtQCbsw=
Subject key identifier:   E9:72:10:35:35:FA:6A:AA:24:6E:8A:AB:07:A8:7C:92:14:21:03:0F
Authority key identifier: 17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A
Certificate issuer:       /CN=176eb71bd55576f45763badeb676ed59990d396a
Certificate serial:       019D98BDE6E56DA448A06312F118AA253221
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
Manifest number:          0FD1
Signing time:             Fri 17 Apr 2026 00:01:15 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:15 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:15 +0000
Files and hashes:         1: F263G9VVdvRXY7retnbtWZkNOWo.crl (hash: PtnqloilkyLGsykbAPSBgtJvKJApXKnSMUW0YAWtYtc=)
                          2: TtRKH9knUsTtGw8i9ETNhV45f1A.roa (hash: /FXsS0uTBoFuVqv1ofXkL6jk4IQYFBWtqa9QOl+TE6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:e6:e5:6d:a4:48:a0:63:12:f1:18:aa:25:32:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=176eb71bd55576f45763badeb676ed59990d396a
        Validity
            Not Before: Apr 17 00:01:15 2026 GMT
            Not After : Apr 18 00:01:15 2026 GMT
        Subject: CN=e972103535fa6aaa246e8aab07a87c921421030f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4e:55:89:77:77:94:c9:93:cc:99:b9:26:d8:
                    5f:c0:ce:de:83:93:8d:b7:6e:07:ad:21:bb:38:87:
                    f6:a8:27:07:56:6c:d2:a1:69:e3:10:0e:b0:65:57:
                    02:c9:5a:fa:e5:18:7b:ba:87:98:63:4c:39:4d:c4:
                    c0:47:17:96:11:4c:22:cc:75:f7:6b:e2:5d:0a:b7:
                    49:7a:89:c3:23:72:3d:d6:46:27:0f:a5:a2:24:ba:
                    4c:25:6f:76:74:9e:86:7e:df:1b:ce:58:bb:25:a0:
                    da:7d:a5:fb:9c:97:ea:34:91:ab:0a:35:86:6d:87:
                    4a:e4:cd:f4:b6:de:aa:7f:77:8d:27:9e:28:43:cf:
                    16:45:ae:bd:a7:89:1e:4a:40:22:19:7d:5f:74:2b:
                    03:0d:33:ad:85:b6:57:f6:b5:d4:ef:66:f5:e2:78:
                    f5:7b:e5:be:8b:92:85:33:12:d5:a6:70:c7:0f:f3:
                    12:0d:2c:fc:84:52:ba:5a:01:0e:1c:14:78:8f:7b:
                    ca:c0:74:a0:65:7d:a2:68:dd:f5:2e:f8:65:2b:50:
                    fb:42:47:70:57:f1:62:6e:27:10:5c:1a:f8:a5:df:
                    d3:2d:14:f9:c1:d6:f8:ee:23:70:4a:eb:84:c8:c5:
                    43:9f:aa:11:b6:be:61:80:20:ca:ff:f1:65:a1:d0:
                    90:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:72:10:35:35:FA:6A:AA:24:6E:8A:AB:07:A8:7C:92:14:21:03:0F
            X509v3 Authority Key Identifier:
                keyid:17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:05:d5:9f:1e:2d:72:15:ce:9d:69:25:47:8c:14:4e:ae:eb:
         79:ff:d0:fc:32:3b:bc:34:24:85:44:e7:e4:09:43:c2:1e:78:
         a0:57:01:09:a1:df:22:f4:c1:df:dc:d8:3d:00:6f:ea:2a:80:
         80:9c:1c:90:8c:fd:2f:ed:a3:65:fa:9b:80:5a:32:50:fe:24:
         8c:2b:d0:5c:c3:bd:16:60:13:bd:ea:ce:26:67:e2:af:4f:79:
         ef:42:6b:b7:89:17:b1:60:65:ce:af:09:eb:80:1e:c0:6e:db:
         34:b3:45:f2:78:65:2a:e8:02:c8:8c:92:eb:bf:b9:31:40:40:
         bd:51:ff:34:68:cf:24:25:3b:4e:7d:e5:48:16:f2:2a:1e:6b:
         d0:20:52:cd:90:a0:0c:f2:06:3a:59:c7:f2:48:02:b1:d0:a4:
         bc:fe:54:ac:ce:bd:2a:60:1d:08:65:ba:63:5f:60:11:6d:bf:
         6b:a7:8c:dd:b2:4b:fd:11:5a:c5:04:76:2c:03:89:02:4b:eb:
         f0:67:bb:8b:f2:1b:af:5b:36:13:08:60:79:be:68:0c:ea:71:
         f0:1a:b3:8d:05:a0:c4:a7:52:c6:b7:cf:66:3c:fb:3f:81:69:
         1c:91:52:13:e1:f7:0e:a4:3b:fc:05:a9:af:cf:95:d8:53:6b:
         6a:7d:98:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YveblbaRIoGMS8RiqJTIhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NmViNzFiZDU1NTc2ZjQ1NzYzYmFkZWI2NzZlZDU5OTkw
ZDM5NmEwHhcNMjYwNDE3MDAwMTE1WhcNMjYwNDE4MDAwMTE1WjAzMTEwLwYDVQQD
EyhlOTcyMTAzNTM1ZmE2YWFhMjQ2ZThhYWIwN2E4N2M5MjE0MjEwMzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA305ViXd3lMmTzJm5JthfwM7eg5ON
t24HrSG7OIf2qCcHVmzSoWnjEA6wZVcCyVr65Rh7uoeYY0w5TcTARxeWEUwizHX3
a+JdCrdJeonDI3I91kYnD6WiJLpMJW92dJ6Gft8bzli7JaDafaX7nJfqNJGrCjWG
bYdK5M30tt6qf3eNJ54oQ88WRa69p4keSkAiGX1fdCsDDTOthbZX9rXU72b14nj1
e+W+i5KFMxLVpnDHD/MSDSz8hFK6WgEOHBR4j3vKwHSgZX2iaN31LvhlK1D7Qkdw
V/FibicQXBr4pd/TLRT5wdb47iNwSuuEyMVDn6oRtr5hgCDK//FlodCQNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlyEDU1+mqqJG6KqweofJIUIQMPMB8GA1UdIwQY
MBaAFBdutxvVVXb0V2O63rZ27VmZDTlqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjI2M0c5VlZkdlJYWTdyZXRuYnRXWmtOT1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8zNWY5YzQtN2I5Ni00ZmNiLWJjYTIt
OWRkM2QyMTkwN2EzLzEvRjI2M0c5VlZkdlJYWTdyZXRuYnRXWmtOT1dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8zNWY5YzQtN2I5Ni00ZmNiLWJjYTItOWRkM2QyMTkwN2Ez
LzEvRjI2M0c5VlZkdlJYWTdyZXRuYnRXWmtOT1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAXVnx4t
chXOnWklR4wUTq7ref/Q/DI7vDQkhUTn5AlDwh54oFcBCaHfIvTB39zYPQBv6iqA
gJwckIz9L+2jZfqbgFoyUP4kjCvQXMO9FmATverOJmfir09570Jrt4kXsWBlzq8J
64AewG7bNLNF8nhlKugCyIyS67+5MUBAvVH/NGjPJCU7Tn3lSBbyKh5r0CBSzZCg
DPIGOlnH8kgCsdCkvP5UrM69KmAdCGW6Y19gEW2/a6eM3bJL/RFaxQR2LAOJAkvr
8Ge7i/Ibr1s2Ewhgeb5oDOpx8BqzjQWgxKdSxrfPZjz7P4FpHJFSE+H3DqQ7/AWp
r8+V2FNran2YsQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:45:51 2026 by rpki-client