Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft
File:                     mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft (raw, json)
Hash identifier:          8JQCrwo6lpnPprv7zevQg0sXvKeLJB4VvPTPU9B/H+I=
Subject key identifier:   9D:2C:53:EA:80:EC:00:FC:6D:DC:34:1D:B4:68:2A:E7:71:06:D6:19
Authority key identifier: 98:45:03:D4:D1:81:40:B9:2A:A8:92:31:93:10:1D:0F:3E:AF:E2:C3
Certificate issuer:       /CN=984503d4d18140b92aa8923193101d0f3eafe2c3
Certificate serial:       019D992B6E286AC728BD66BF287D2F1835CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft
Manifest number:          131D
Signing time:             Fri 17 Apr 2026 02:00:53 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:53 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:53 +0000
Files and hashes:         1: GbzVHVPV7fqmfNx03Nok7Xwc57w.roa (hash: zeJi6kvcTN0CQfz2lKYhPJQbiGipkfJNH0B8vGsiI7o=)
                          2: mEUD1NGBQLkqqJIxkxAdDz6v4sM.crl (hash: hHlU5wHlp/VLM9ITZoRyhFY4G+aVUlgblTvpCem5+Ho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:6e:28:6a:c7:28:bd:66:bf:28:7d:2f:18:35:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984503d4d18140b92aa8923193101d0f3eafe2c3
        Validity
            Not Before: Apr 17 02:00:53 2026 GMT
            Not After : Apr 18 02:00:53 2026 GMT
        Subject: CN=9d2c53ea80ec00fc6ddc341db4682ae77106d619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3d:48:66:67:a1:cb:48:27:44:60:1c:5f:88:
                    a3:e1:61:25:ec:f3:8f:02:91:38:65:60:ff:b2:c0:
                    00:f2:da:bb:9b:54:45:62:ee:f1:28:09:f1:5e:bf:
                    f2:43:f2:e2:d3:21:f5:5f:14:42:dc:92:70:0c:3a:
                    fb:87:16:ea:e5:c5:d4:62:0c:13:e8:29:6e:34:dc:
                    37:49:8c:7f:0f:cd:6f:7f:de:31:49:9a:80:56:53:
                    2c:1a:ab:38:da:42:46:2f:a0:a3:79:2f:10:d9:e1:
                    71:81:ea:4b:0e:f2:88:36:08:8d:88:33:4c:62:5c:
                    9b:6c:03:4c:52:7c:a5:95:b4:cd:14:af:c9:43:9a:
                    50:e8:06:92:8f:be:15:e6:5f:69:9c:5b:e3:3a:19:
                    e8:e6:9f:08:9e:6a:b1:2f:c4:77:03:3c:19:b8:23:
                    34:1b:a4:3a:eb:39:9c:74:8e:e1:66:3b:5e:c3:bd:
                    ae:e3:76:82:0f:19:c8:5b:94:89:e3:1f:28:68:1b:
                    fa:8f:1c:00:4e:7d:88:10:92:08:e1:cd:a3:ed:9e:
                    80:bc:42:32:32:fe:88:d6:db:94:03:88:ae:41:0b:
                    ac:e4:2c:ab:71:80:35:77:b2:92:f8:32:12:46:85:
                    e2:e6:c3:a9:c5:b5:f6:11:bf:89:c3:69:14:c6:64:
                    c5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2C:53:EA:80:EC:00:FC:6D:DC:34:1D:B4:68:2A:E7:71:06:D6:19
            X509v3 Authority Key Identifier:
                keyid:98:45:03:D4:D1:81:40:B9:2A:A8:92:31:93:10:1D:0F:3E:AF:E2:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:f0:3e:42:57:c5:84:4d:03:8c:32:d9:46:9a:11:9c:25:ea:
         64:65:a0:34:ce:b7:c5:0f:7d:4a:d5:54:35:4a:ba:92:17:65:
         4e:a4:5b:0f:b2:bc:3c:f5:b2:be:9e:b4:57:7f:7b:d0:ad:38:
         66:61:bb:57:3f:01:5d:9d:64:cc:ba:73:cb:65:3a:dd:35:05:
         87:bb:ab:35:64:42:50:41:6b:b0:bd:ec:3d:ed:ef:b4:1c:b6:
         56:1c:ec:2d:3b:a8:3a:93:ae:6e:92:a1:46:e6:d4:91:9d:ca:
         ed:bc:38:ee:26:f0:13:5d:5b:8b:cf:de:c2:ed:cb:14:c9:8f:
         2f:92:b6:f6:f1:6d:d2:c7:03:21:5e:0e:56:ca:02:2b:83:86:
         8d:66:e6:26:86:62:3c:fa:cd:81:e9:8b:fd:d0:6f:2c:8c:37:
         dd:92:4b:59:ce:1f:52:b5:5c:c2:46:72:fe:f3:53:90:bb:c5:
         31:e4:6c:04:e1:14:86:6c:3e:90:06:5f:fa:3b:d3:cc:29:d0:
         a4:42:74:99:1d:9f:0a:8c:a3:69:25:cc:7d:21:10:3a:b2:b7:
         3c:6c:81:e2:72:0e:64:48:b1:cf:a8:b5:14:3c:0f:7d:2e:ca:
         4d:38:8e:17:b3:e0:65:cb:63:c6:34:ae:a3:de:82:80:30:bc:
         b4:19:5d:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK24oascovWa/KH0vGDXKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NDUwM2Q0ZDE4MTQwYjkyYWE4OTIzMTkzMTAxZDBmM2Vh
ZmUyYzMwHhcNMjYwNDE3MDIwMDUzWhcNMjYwNDE4MDIwMDUzWjAzMTEwLwYDVQQD
Eyg5ZDJjNTNlYTgwZWMwMGZjNmRkYzM0MWRiNDY4MmFlNzcxMDZkNjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD1IZmehy0gnRGAcX4ij4WEl7POP
ApE4ZWD/ssAA8tq7m1RFYu7xKAnxXr/yQ/Li0yH1XxRC3JJwDDr7hxbq5cXUYgwT
6CluNNw3SYx/D81vf94xSZqAVlMsGqs42kJGL6CjeS8Q2eFxgepLDvKINgiNiDNM
YlybbANMUnyllbTNFK/JQ5pQ6AaSj74V5l9pnFvjOhno5p8InmqxL8R3AzwZuCM0
G6Q66zmcdI7hZjtew72u43aCDxnIW5SJ4x8oaBv6jxwATn2IEJII4c2j7Z6AvEIy
Mv6I1tuUA4iuQQus5CyrcYA1d7KS+DISRoXi5sOpxbX2Eb+Jw2kUxmTF5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0sU+qA7AD8bdw0HbRoKudxBtYZMB8GA1UdIwQY
MBaAFJhFA9TRgUC5KqiSMZMQHQ8+r+LDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUVVRDFOR0JRTGtxcUpJeGt4QWREejZ2NHNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jYTlmMmMtNTI2ZS00NTNmLThiMzIt
NjBmZWVjZWE5YWE0LzEvbUVVRDFOR0JRTGtxcUpJeGt4QWREejZ2NHNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9jYTlmMmMtNTI2ZS00NTNmLThiMzItNjBmZWVjZWE5YWE0
LzEvbUVVRDFOR0JRTGtxcUpJeGt4QWREejZ2NHNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtPA+QlfF
hE0DjDLZRpoRnCXqZGWgNM63xQ99StVUNUq6khdlTqRbD7K8PPWyvp60V3970K04
ZmG7Vz8BXZ1kzLpzy2U63TUFh7urNWRCUEFrsL3sPe3vtBy2VhzsLTuoOpOubpKh
RubUkZ3K7bw47ibwE11bi8/ewu3LFMmPL5K29vFt0scDIV4OVsoCK4OGjWbmJoZi
PPrNgemL/dBvLIw33ZJLWc4fUrVcwkZy/vNTkLvFMeRsBOEUhmw+kAZf+jvTzCnQ
pEJ0mR2fCoyjaSXMfSEQOrK3PGyB4nIOZEixz6i1FDwPfS7KTTiOF7PgZctjxjSu
o96CgDC8tBldGA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:33:45 2026 by rpki-client