Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
File:                     c2spT5ZdrWQPnjU784-a8RkUeeo.mft (raw, json)
Hash identifier:          zixYqwfNR6PfcP+8P/awXuNndnD/Fn6rv6L/e1HLHAs=
Subject key identifier:   17:D5:B1:B6:4E:AB:69:64:8D:B9:9A:EB:7B:8B:39:B8:E4:9C:D7:64
Authority key identifier: 73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA
Certificate issuer:       /CN=736b294f965dad640f9e353bf38f9af1191479ea
Certificate serial:       019DA5669C82A27978B360E7BEC55EAEFDBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
Manifest number:          16E4
Signing time:             Sun 19 Apr 2026 11:00:58 +0000
Manifest this update:     Sun 19 Apr 2026 11:00:58 +0000
Manifest next update:     Mon 20 Apr 2026 11:00:58 +0000
Files and hashes:         1: PwQvETm7cRPxaiSCl5RIXoxMRHo.roa (hash: LgW22oFTQfKbq8qvGxkyVXGKtUsCBhBLz4XP/aisFIs=)
                          2: c2spT5ZdrWQPnjU784-a8RkUeeo.crl (hash: Yn7Ygj7OoQPkrIZhVRPQ80zJMW5y/wVd6GLjmAQbbmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a5:66:9c:82:a2:79:78:b3:60:e7:be:c5:5e:ae:fd:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=736b294f965dad640f9e353bf38f9af1191479ea
        Validity
            Not Before: Apr 19 11:00:58 2026 GMT
            Not After : Apr 20 11:00:58 2026 GMT
        Subject: CN=17d5b1b64eab69648db99aeb7b8b39b8e49cd764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:23:0b:99:26:c0:9d:3f:8c:bc:10:0c:51:22:
                    01:61:97:b0:85:84:d1:21:4b:d8:22:67:8f:3e:a4:
                    c1:53:2a:2d:01:e8:63:a4:c5:78:a8:1a:9d:56:aa:
                    35:16:ec:71:31:51:e8:ba:01:e6:fe:fb:ef:ba:5a:
                    55:fb:f8:32:df:27:20:54:0c:68:a8:4d:a7:07:80:
                    85:36:e1:2b:40:c2:e7:ed:23:8a:e6:27:af:fa:3b:
                    3f:e6:31:48:86:16:1d:87:7a:0c:70:37:0f:fa:d2:
                    6c:12:17:eb:28:fd:bf:97:78:17:9d:a6:ac:71:1f:
                    a1:e9:5a:0e:d7:24:cf:cb:ca:f6:b7:62:90:3b:f3:
                    cd:20:dd:81:73:d9:e0:f9:d3:f2:48:2e:93:6a:7c:
                    8f:78:e8:bc:c7:e4:59:79:36:e1:24:25:69:77:f2:
                    17:49:b2:1d:26:2f:2a:02:d1:19:0c:ee:40:d4:af:
                    aa:03:96:58:0b:76:93:b1:6d:e0:b7:a0:e3:c3:f9:
                    ea:f5:90:46:0f:9d:78:b1:ba:16:82:61:4a:e6:e7:
                    a5:84:50:20:65:fd:5a:ba:7c:06:9c:e8:82:c3:90:
                    77:f8:19:92:61:39:ff:1f:4c:55:c8:5e:87:55:c5:
                    53:f4:cc:65:b6:a7:4f:0d:bb:a0:a9:30:1b:9e:0c:
                    81:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D5:B1:B6:4E:AB:69:64:8D:B9:9A:EB:7B:8B:39:B8:E4:9C:D7:64
            X509v3 Authority Key Identifier:
                keyid:73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:49:bf:43:d5:8e:c0:15:fc:7b:9c:c4:20:96:9a:27:56:fe:
         d8:a1:c8:37:89:8d:eb:84:22:e1:9c:37:fa:ff:59:91:71:49:
         fc:96:0d:bf:95:e0:75:b9:76:40:2a:1a:92:3d:a9:da:0f:23:
         ed:97:87:01:ab:c5:fc:e5:12:e3:a9:ed:cf:67:bd:6b:ee:8b:
         5c:63:69:e8:11:6c:3a:bf:f4:18:6b:a4:9f:39:5f:8a:38:81:
         8e:7a:02:1d:e9:b4:c2:89:19:13:d3:29:5a:84:17:85:41:d1:
         93:cc:14:91:86:50:30:1e:b9:d7:82:8d:cc:77:13:b6:c2:d3:
         f3:3e:2e:da:e4:34:ad:d4:3c:73:42:af:7b:5d:59:38:41:66:
         6f:06:cc:59:95:8a:7c:20:85:51:f7:1b:fc:d6:c0:9f:95:6d:
         aa:b7:cc:d3:d2:0e:03:ee:1b:0b:34:3c:37:93:c5:bc:09:66:
         fa:d3:f4:dd:12:36:9b:3a:f1:d0:c6:d5:91:70:f0:a2:f9:d4:
         ac:27:e1:fc:be:c8:f3:71:51:43:77:2a:f9:19:89:65:b6:86:
         0e:34:cf:76:18:3f:29:d9:7c:6e:1a:f0:66:0d:88:6a:83:ba:
         50:97:19:7b:07:f7:32:f6:6b:48:4f:b2:a2:00:a1:98:d9:59:
         49:05:2f:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lZpyConl4s2DnvsVerv28MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNmIyOTRmOTY1ZGFkNjQwZjllMzUzYmYzOGY5YWYxMTkx
NDc5ZWEwHhcNMjYwNDE5MTEwMDU4WhcNMjYwNDIwMTEwMDU4WjAzMTEwLwYDVQQD
EygxN2Q1YjFiNjRlYWI2OTY0OGRiOTlhZWI3YjhiMzliOGU0OWNkNzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyMLmSbAnT+MvBAMUSIBYZewhYTR
IUvYImePPqTBUyotAehjpMV4qBqdVqo1FuxxMVHougHm/vvvulpV+/gy3ycgVAxo
qE2nB4CFNuErQMLn7SOK5iev+js/5jFIhhYdh3oMcDcP+tJsEhfrKP2/l3gXnaas
cR+h6VoO1yTPy8r2t2KQO/PNIN2Bc9ng+dPySC6TanyPeOi8x+RZeTbhJCVpd/IX
SbIdJi8qAtEZDO5A1K+qA5ZYC3aTsW3gt6Djw/nq9ZBGD514sboWgmFK5uelhFAg
Zf1aunwGnOiCw5B3+BmSYTn/H0xVyF6HVcVT9MxltqdPDbugqTAbngyBGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfVsbZOq2lkjbma63uLObjknNdkMB8GA1UdIwQY
MBaAFHNrKU+WXa1kD541O/OPmvEZFHnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzJzcFQ1WmRyV1FQbmpVNzg0LWE4UmtVZWVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hNzFhNWMtMTc0Ni00M2M0LWE2N2Yt
YThmNzZiZDI2YTI3LzEvYzJzcFQ1WmRyV1FQbmpVNzg0LWE4UmtVZWVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9hNzFhNWMtMTc0Ni00M2M0LWE2N2YtYThmNzZiZDI2YTI3
LzEvYzJzcFQ1WmRyV1FQbmpVNzg0LWE4UmtVZWVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvkm/Q9WO
wBX8e5zEIJaaJ1b+2KHIN4mN64Qi4Zw3+v9ZkXFJ/JYNv5Xgdbl2QCoakj2p2g8j
7ZeHAavF/OUS46ntz2e9a+6LXGNp6BFsOr/0GGuknzlfijiBjnoCHem0wokZE9Mp
WoQXhUHRk8wUkYZQMB6514KNzHcTtsLT8z4u2uQ0rdQ8c0Kve11ZOEFmbwbMWZWK
fCCFUfcb/NbAn5VtqrfM09IOA+4bCzQ8N5PFvAlm+tP03RI2mzrx0MbVkXDwovnU
rCfh/L7I83FRQ3cq+RmJZbaGDjTPdhg/Kdl8bhrwZg2IaoO6UJcZewf3MvZrSE+y
ogChmNlZSQUvmA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:19:57 2026 by rpki-client