Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
File:                     C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft (raw, json)
Hash identifier:          FZpn+SgpaxCW8YHVvZUUdXGiNaLV37H48XEfM9Qaprk=
Subject key identifier:   FB:40:60:59:31:15:8C:E0:25:59:D8:D5:EA:AA:8E:34:C6:6D:AF:80
Authority key identifier: 0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2
Certificate issuer:       /CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
Certificate serial:       019D9AAC4292DA2C3B0D15F768D049DD6366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
Manifest number:          039D
Signing time:             Fri 17 Apr 2026 09:01:13 +0000
Manifest this update:     Fri 17 Apr 2026 09:01:13 +0000
Manifest next update:     Sat 18 Apr 2026 09:01:13 +0000
Files and hashes:         1: C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl (hash: if4lUqJ8fSGxJrkeSCWSdeyIeAc+yefpFklU6m2LawE=)
                          2: GTbIIUIo-dUPXDDNc0IDT6FB8t4.roa (hash: 8J7E94r3VGtcxGoE3/Ht7FS8OoqmAYFunNkzFd6kzqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ac:42:92:da:2c:3b:0d:15:f7:68:d0:49:dd:63:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
        Validity
            Not Before: Apr 17 09:01:13 2026 GMT
            Not After : Apr 18 09:01:13 2026 GMT
        Subject: CN=fb40605931158ce02559d8d5eaaa8e34c66daf80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:41:f0:37:1c:af:65:d3:09:11:fd:8d:b1:a3:
                    4f:5a:8a:53:fd:0a:bd:dd:97:d6:14:e0:ab:78:a7:
                    1c:00:ed:bf:0d:bb:63:03:bd:dd:4d:25:29:3d:ad:
                    a6:57:97:0f:51:45:0e:64:7c:23:47:d2:7c:90:3e:
                    fd:56:be:84:7d:d4:9a:4c:23:a0:6c:a8:26:83:7d:
                    0d:9e:7f:3c:3e:3b:3e:7a:60:a2:7c:db:99:8c:c2:
                    b4:07:26:e8:66:c8:72:dc:49:6a:6d:59:ec:b3:51:
                    6c:c6:a0:63:6a:e9:da:91:03:c4:07:1b:0a:40:01:
                    e5:bd:a4:79:88:6d:09:3c:4d:15:6e:6b:a9:4a:46:
                    b0:bc:be:1d:43:db:25:47:04:32:1e:00:9f:d4:6f:
                    82:cf:f8:98:ed:83:4b:bb:78:9d:7b:44:73:03:c1:
                    dd:14:9b:b9:f1:70:2e:f4:b3:fa:a5:d0:e4:a1:50:
                    72:a1:15:77:b0:12:cc:c6:ba:68:c4:27:12:a8:f2:
                    ff:c2:a2:d0:67:12:2b:3f:87:58:3c:78:a7:cc:49:
                    af:86:1d:e1:b0:00:d4:8d:62:f2:0a:0e:4f:db:c0:
                    69:ce:35:5e:25:d6:c6:fc:9b:a3:4b:6d:96:d1:6e:
                    a0:6a:b0:43:8f:24:7c:a3:60:47:97:0e:1e:6e:2b:
                    ed:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:40:60:59:31:15:8C:E0:25:59:D8:D5:EA:AA:8E:34:C6:6D:AF:80
            X509v3 Authority Key Identifier:
                keyid:0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:cd:f7:80:a6:4c:39:8d:79:dc:06:a2:c5:b4:5b:4d:42:35:
         9d:db:d0:57:56:45:77:cb:16:03:d2:01:4b:d3:8c:19:83:e8:
         00:73:a2:d4:72:76:6f:c1:71:c4:7e:fa:bd:96:ec:a0:94:33:
         3d:3c:85:18:f7:ae:5d:3d:de:32:f0:96:76:54:97:3b:a2:df:
         fb:06:66:6a:0b:16:eb:a3:7c:55:b1:0f:9c:6a:84:6e:42:9d:
         cc:b4:a4:8a:26:6f:fc:fe:4d:f9:df:fc:96:01:c9:84:32:b1:
         fc:af:5b:ec:e8:3c:58:26:a1:2b:1c:8f:d5:d6:2b:35:52:85:
         cb:84:80:c6:9e:50:12:8d:b7:93:74:d5:e0:13:18:af:36:7f:
         c6:16:95:02:93:dc:7a:72:ec:1b:9c:16:26:84:f1:5b:49:38:
         7a:20:09:89:5a:c8:a1:e2:d3:ce:21:8e:77:68:af:18:cc:bb:
         f4:c1:e7:8f:36:4d:28:d9:58:57:74:fa:f3:a2:2e:7f:51:ce:
         6b:e0:7c:cb:38:b2:7a:52:2e:ec:76:c7:11:33:24:10:2d:eb:
         83:2d:e1:3a:82:c6:93:bb:8d:a8:6a:ea:57:02:e6:d8:b9:b7:
         f0:13:89:ba:f8:65:05:93:cf:33:e5:1b:a2:43:9f:4c:b1:18:
         f0:c9:f3:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arEKS2iw7DRX3aNBJ3WNmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZmNmZGUwYTc3MmZhN2MzZTlkMTlmYTcwNzdmNzAyNmJk
NzcxYjIwHhcNMjYwNDE3MDkwMTEzWhcNMjYwNDE4MDkwMTEzWjAzMTEwLwYDVQQD
EyhmYjQwNjA1OTMxMTU4Y2UwMjU1OWQ4ZDVlYWFhOGUzNGM2NmRhZjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkHwNxyvZdMJEf2NsaNPWopT/Qq9
3ZfWFOCreKccAO2/DbtjA73dTSUpPa2mV5cPUUUOZHwjR9J8kD79Vr6EfdSaTCOg
bKgmg30Nnn88Pjs+emCifNuZjMK0ByboZshy3ElqbVnss1FsxqBjaunakQPEBxsK
QAHlvaR5iG0JPE0VbmupSkawvL4dQ9slRwQyHgCf1G+Cz/iY7YNLu3ide0RzA8Hd
FJu58XAu9LP6pdDkoVByoRV3sBLMxrpoxCcSqPL/wqLQZxIrP4dYPHinzEmvhh3h
sADUjWLyCg5P28BpzjVeJdbG/JujS22W0W6garBDjyR8o2BHlw4ebivtcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtAYFkxFYzgJVnY1eqqjjTGba+AMB8GA1UdIwQY
MBaAFAv8/eCncvp8Pp0Z+nB39wJr13GyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ196OTRLZHktbnctblJuNmNIZjNBbXZYY2JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81Y2UzZGMtMDNlMi00NzgzLWEzNGMt
NDM3NWQ2NzVmY2YzLzEvQ196OTRLZHktbnctblJuNmNIZjNBbXZYY2JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81Y2UzZGMtMDNlMi00NzgzLWEzNGMtNDM3NWQ2NzVmY2Yz
LzEvQ196OTRLZHktbnctblJuNmNIZjNBbXZYY2JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALc33gKZM
OY153AaixbRbTUI1ndvQV1ZFd8sWA9IBS9OMGYPoAHOi1HJ2b8FxxH76vZbsoJQz
PTyFGPeuXT3eMvCWdlSXO6Lf+wZmagsW66N8VbEPnGqEbkKdzLSkiiZv/P5N+d/8
lgHJhDKx/K9b7Og8WCahKxyP1dYrNVKFy4SAxp5QEo23k3TV4BMYrzZ/xhaVApPc
enLsG5wWJoTxW0k4eiAJiVrIoeLTziGOd2ivGMy79MHnjzZNKNlYV3T686Iuf1HO
a+B8yziyelIu7HbHETMkEC3rgy3hOoLGk7uNqGrqVwLm2Lm38BOJuvhlBZPPM+Ub
okOfTLEY8MnzNA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:41:05 2026 by rpki-client