Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
File:                     quRIJx2Froeamr8Vs7ypg0cKE0g.mft (raw, json)
Hash identifier:          5HDZfy7WYfOEQaTlIe0rqHixbaGXXm035tFR1+h4VIc=
Subject key identifier:   CE:E8:07:88:C6:5B:61:D1:C8:7C:7A:F6:E8:EB:F6:88:07:FD:50:14
Authority key identifier: AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48
Certificate issuer:       /CN=aae448271d85ae879a9abf15b3bca983470a1348
Certificate serial:       019D98F53499065F9F5D91FB388B0FF93CB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
Manifest number:          07BD
Signing time:             Fri 17 Apr 2026 01:01:39 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:39 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:39 +0000
Files and hashes:         1: abh6_OV0w_23vHurZg2lf03FAWI.roa (hash: WaNrZ48mNKxaEjIRodmrrMT60e4DHtMtypg5HH38Fac=)
                          2: quRIJx2Froeamr8Vs7ypg0cKE0g.crl (hash: Q5XaSWMK6trjVhFZwnmnCSuzSo1B/PCDgP/TY2HdJzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:34:99:06:5f:9f:5d:91:fb:38:8b:0f:f9:3c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae448271d85ae879a9abf15b3bca983470a1348
        Validity
            Not Before: Apr 17 01:01:39 2026 GMT
            Not After : Apr 18 01:01:39 2026 GMT
        Subject: CN=cee80788c65b61d1c87c7af6e8ebf68807fd5014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8a:a3:6d:78:a5:57:bb:87:5b:eb:2d:bb:71:
                    b5:4c:04:8b:4f:79:aa:e9:b3:c5:22:13:2c:6a:62:
                    12:b6:3c:28:e0:e3:59:12:64:d5:3f:1f:87:e7:75:
                    53:e0:03:c5:97:c2:c9:5c:b3:91:5c:34:a7:b0:7f:
                    4b:fd:ad:0c:05:df:c8:81:62:95:f1:74:3e:f2:4c:
                    e4:9d:4b:72:4e:a8:2a:fa:e6:26:fb:35:bb:75:bf:
                    39:c3:9a:39:6d:d2:d5:b0:3e:90:c6:59:22:c7:64:
                    1c:83:02:22:20:4b:c4:1e:ca:5a:15:ad:2a:f7:00:
                    98:07:0a:c6:11:1c:b3:ac:c7:12:21:68:2e:87:51:
                    7c:0a:27:8f:32:4b:e8:ca:68:92:f0:6b:4b:66:d8:
                    02:35:21:5f:63:33:96:dc:fe:ef:17:5d:0c:fe:50:
                    bd:b6:8b:b6:bc:df:e9:ed:40:c4:31:e5:2f:95:5b:
                    68:c4:87:f1:21:f3:7d:62:09:12:1f:17:16:14:fa:
                    33:13:f3:78:d2:7c:15:28:0b:68:66:7c:05:0e:14:
                    03:52:05:7a:99:e1:62:62:23:66:e1:12:05:7c:84:
                    9a:1e:d4:5a:fe:28:1b:7b:ee:76:9f:f5:1b:58:38:
                    b7:99:9d:f5:ec:c1:97:ed:27:8d:a2:ac:db:15:88:
                    bf:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E8:07:88:C6:5B:61:D1:C8:7C:7A:F6:E8:EB:F6:88:07:FD:50:14
            X509v3 Authority Key Identifier:
                keyid:AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:2a:90:58:4f:eb:6a:97:4c:d4:e3:7c:68:35:bd:f5:1e:88:
         26:42:8b:62:76:48:2f:a2:86:9e:ca:4c:a4:6f:26:f7:70:36:
         c5:4c:ab:95:b3:b9:c8:23:b4:42:fe:95:eb:42:59:de:a3:17:
         a6:63:18:b1:5d:87:8b:0b:ef:be:19:58:2a:c7:20:a9:c1:d0:
         43:d1:16:5e:b3:f5:4a:3d:e9:f6:bd:8c:69:26:dc:3d:fa:35:
         d6:b1:6d:a4:3b:cf:59:e6:61:55:d9:6c:4a:04:fb:e8:46:af:
         26:f8:15:ad:e2:b2:12:77:76:3f:84:b1:70:5e:12:f5:60:ce:
         45:62:f6:e9:b7:76:9e:07:7c:ce:43:29:c3:4f:bf:fe:28:ae:
         93:98:fb:0e:6e:1a:50:d1:23:6f:21:e1:24:a0:ee:e6:a8:e1:
         e3:89:1f:28:43:0d:5e:a7:de:6b:78:d8:f2:23:a4:a9:6f:a4:
         a8:f8:0d:79:c9:25:3e:14:cc:95:37:43:40:27:21:27:19:56:
         73:48:78:87:9e:ae:cf:50:6a:cf:cb:dc:37:d7:e6:7c:c6:89:
         e6:1a:a0:3a:f5:9b:e3:35:8f:41:4d:f2:4a:5d:2a:17:fa:42:
         dc:45:2b:4f:3b:20:09:41:18:eb:06:03:6d:56:d7:09:dc:6b:
         a1:97:21:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9TSZBl+fXZH7OIsP+TywMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZTQ0ODI3MWQ4NWFlODc5YTlhYmYxNWIzYmNhOTgzNDcw
YTEzNDgwHhcNMjYwNDE3MDEwMTM5WhcNMjYwNDE4MDEwMTM5WjAzMTEwLwYDVQQD
EyhjZWU4MDc4OGM2NWI2MWQxYzg3YzdhZjZlOGViZjY4ODA3ZmQ1MDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4qjbXilV7uHW+stu3G1TASLT3mq
6bPFIhMsamIStjwo4ONZEmTVPx+H53VT4APFl8LJXLORXDSnsH9L/a0MBd/IgWKV
8XQ+8kzknUtyTqgq+uYm+zW7db85w5o5bdLVsD6Qxlkix2QcgwIiIEvEHspaFa0q
9wCYBwrGERyzrMcSIWguh1F8CiePMkvoymiS8GtLZtgCNSFfYzOW3P7vF10M/lC9
tou2vN/p7UDEMeUvlVtoxIfxIfN9YgkSHxcWFPozE/N40nwVKAtoZnwFDhQDUgV6
meFiYiNm4RIFfISaHtRa/igbe+52n/UbWDi3mZ317MGX7SeNoqzbFYi/9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7oB4jGW2HRyHx69ujr9ogH/VAUMB8GA1UdIwQY
MBaAFKrkSCcdha6Hmpq/FbO8qYNHChNIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXVSSUp4MkZyb2VhbXI4VnM3eXBnMGNLRTBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi85ZjI4NWItYTAwYi00MjIyLTllNTUt
Nzk5YTE4YzlhYzVhLzEvcXVSSUp4MkZyb2VhbXI4VnM3eXBnMGNLRTBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi85ZjI4NWItYTAwYi00MjIyLTllNTUtNzk5YTE4YzlhYzVh
LzEvcXVSSUp4MkZyb2VhbXI4VnM3eXBnMGNLRTBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVCqQWE/r
apdM1ON8aDW99R6IJkKLYnZIL6KGnspMpG8m93A2xUyrlbO5yCO0Qv6V60JZ3qMX
pmMYsV2HiwvvvhlYKscgqcHQQ9EWXrP1Sj3p9r2MaSbcPfo11rFtpDvPWeZhVdls
SgT76EavJvgVreKyEnd2P4SxcF4S9WDORWL26bd2ngd8zkMpw0+//iiuk5j7Dm4a
UNEjbyHhJKDu5qjh44kfKEMNXqfea3jY8iOkqW+kqPgNecklPhTMlTdDQCchJxlW
c0h4h56uz1Bqz8vcN9fmfMaJ5hqgOvWb4zWPQU3ySl0qF/pC3EUrTzsgCUEY6wYD
bVbXCdxroZchvA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:09:50 2026 by rpki-client