Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
File:                     ml52-SnSG1hvQuMPfZsAOZs9y_A.mft (raw, json)
Hash identifier:          JdTpaKd2rBjjQ8a4hVU8ioRWD5c/AHzeIVKETN+pVrQ=
Subject key identifier:   99:26:AA:02:14:BF:C2:54:AD:8F:59:BF:9C:41:60:60:72:83:A0:59
Authority key identifier: 9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0
Certificate issuer:       /CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0
Certificate serial:       019DA3AEAA21715EE714FE0DDC6183DF866B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
Manifest number:          066E
Signing time:             Sun 19 Apr 2026 03:00:26 +0000
Manifest this update:     Sun 19 Apr 2026 03:00:26 +0000
Manifest next update:     Mon 20 Apr 2026 03:00:26 +0000
Files and hashes:         1: 717UmVfC56DLyzJIkewUlvfIFG0.roa (hash: Xhib9unp/jlsbHbrOLeTYpepAcBI94Ed/fU4OASJBZU=)
                          2: BCOBN8DqixOn7YBQJAuR5IVl3Tk.roa (hash: 9eQOj920J0RKfKOBG+x3ZwJkzFsoj5C4wlDIoVBASe0=)
                          3: _Na7vfMNE6KH8ABANOjjdG6uU4g.roa (hash: ucbQ9Dez3TCtvipedZVK8XnEorKB2QzPJMl5rkm50kY=)
                          4: _fhuGjpkRKlqYVqbCWdqX4nzLXQ.roa (hash: pemjsumjmI0Bd/B3SuE+a27XcI8Ly+FKaqAAHNiWTdM=)
                          5: ml52-SnSG1hvQuMPfZsAOZs9y_A.crl (hash: tX8110zNBLaxQfPaHu2CIktonNiw2ZVT1ApJt+LYov8=)
                          6: qMXcH8GKPtZKcC7oXNX1oSyED7Q.roa (hash: 1tbxCaHbYh4w/bTWHNKN1f4HzQQFR2Btp4iUYuLrWWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:ae:aa:21:71:5e:e7:14:fe:0d:dc:61:83:df:86:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0
        Validity
            Not Before: Apr 19 03:00:26 2026 GMT
            Not After : Apr 20 03:00:26 2026 GMT
        Subject: CN=9926aa0214bfc254ad8f59bf9c4160607283a059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:be:ec:46:69:19:02:c2:af:f2:33:99:c2:7f:
                    ae:bb:9f:c2:3e:dc:db:76:45:a4:16:97:cd:cd:f1:
                    23:26:20:87:1d:46:69:36:4a:65:ba:64:58:98:37:
                    56:e2:be:29:8d:d4:70:74:0f:28:67:3d:4b:98:99:
                    b7:42:68:72:f4:a0:86:6a:75:f2:91:e1:41:94:8a:
                    c3:82:3b:2c:23:64:87:eb:5f:79:4e:fc:c0:98:82:
                    38:08:05:c5:27:b8:c7:48:42:0e:bf:89:46:19:55:
                    c5:21:e8:8b:1f:9f:c6:0d:37:68:d7:9b:9b:d5:ab:
                    61:6f:e5:a9:83:85:49:9a:a3:13:a3:9d:b4:1f:a3:
                    b9:28:24:81:23:ff:f6:4f:d2:c4:34:f0:7c:dd:d6:
                    11:28:c4:1e:d8:19:95:92:d0:ce:52:9e:f8:48:c4:
                    df:58:e0:c6:15:dd:31:96:45:7e:26:20:91:fe:68:
                    4b:1e:c7:45:5f:75:b8:2a:1a:b6:12:e2:18:8a:cf:
                    ec:65:d3:c9:84:a3:ef:8d:66:fc:26:67:fc:ab:82:
                    4c:c5:7a:0f:63:4b:d2:57:d1:3c:97:d3:7b:79:23:
                    72:6c:31:a8:87:0b:76:03:d6:f4:d0:3c:fb:93:73:
                    70:23:96:00:1a:80:a5:36:a5:f2:b4:7e:5b:1f:4b:
                    54:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:26:AA:02:14:BF:C2:54:AD:8F:59:BF:9C:41:60:60:72:83:A0:59
            X509v3 Authority Key Identifier:
                keyid:9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:16:f5:07:79:d3:dd:43:3c:14:4f:d7:cf:f1:87:90:dc:87:
         56:fc:64:62:bd:b2:d2:01:1f:e9:32:3f:67:f7:50:6b:0b:ab:
         27:eb:22:58:a4:a9:9f:f1:d9:04:50:52:63:cb:26:64:1d:a6:
         07:6e:04:0d:3b:4e:db:69:a1:2c:f6:da:3a:1f:d3:eb:81:5c:
         fe:88:9a:ce:e6:e3:42:68:9f:9f:01:52:76:5f:11:61:4a:82:
         fb:da:52:c2:33:b5:b4:c7:60:b1:fe:a7:bb:60:88:d7:23:f9:
         43:a4:c3:f0:48:e9:26:a1:19:ed:8a:41:84:fa:62:f4:32:bf:
         be:1f:c8:93:f5:46:b1:59:c2:e2:7d:ce:0d:7b:85:c6:59:21:
         ea:79:6d:d7:2e:4b:c5:e9:e8:c1:a7:fc:06:67:ed:48:73:d4:
         13:f7:e3:46:0a:fd:3e:ce:16:17:07:94:96:f9:0f:bb:d3:8a:
         f0:1b:82:36:18:8b:2c:7e:35:e4:3d:07:dc:29:47:3b:8f:a4:
         31:2f:01:44:38:11:be:b8:79:74:7d:f0:15:64:f7:5c:0f:b0:
         a3:7e:4a:64:01:87:58:95:4d:34:e5:1a:96:f0:48:52:10:56:
         b5:ea:1b:d4:8c:17:ee:4d:5b:4c:da:19:b6:95:ad:6a:e3:f2:
         4e:17:d4:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jrqohcV7nFP4N3GGD34ZrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNWU3NmY5MjlkMjFiNTg2ZjQyZTMwZjdkOWIwMDM5OWIz
ZGNiZjAwHhcNMjYwNDE5MDMwMDI2WhcNMjYwNDIwMDMwMDI2WjAzMTEwLwYDVQQD
Eyg5OTI2YWEwMjE0YmZjMjU0YWQ4ZjU5YmY5YzQxNjA2MDcyODNhMDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA177sRmkZAsKv8jOZwn+uu5/CPtzb
dkWkFpfNzfEjJiCHHUZpNkplumRYmDdW4r4pjdRwdA8oZz1LmJm3Qmhy9KCGanXy
keFBlIrDgjssI2SH6195TvzAmII4CAXFJ7jHSEIOv4lGGVXFIeiLH5/GDTdo15ub
1athb+Wpg4VJmqMTo520H6O5KCSBI//2T9LENPB83dYRKMQe2BmVktDOUp74SMTf
WODGFd0xlkV+JiCR/mhLHsdFX3W4Khq2EuIYis/sZdPJhKPvjWb8Jmf8q4JMxXoP
Y0vSV9E8l9N7eSNybDGohwt2A9b00Dz7k3NwI5YAGoClNqXytH5bH0tUtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkmqgIUv8JUrY9Zv5xBYGByg6BZMB8GA1UdIwQY
MBaAFJpedvkp0htYb0LjD32bADmbPcvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWw1Mi1TblNHMWh2UXVNUGZac0FPWnM5eV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83NjdkNmQtMzZjOC00MDNiLTgxYjAt
YjRhYWEyM2ZkYWE5LzEvbWw1Mi1TblNHMWh2UXVNUGZac0FPWnM5eV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS83NjdkNmQtMzZjOC00MDNiLTgxYjAtYjRhYWEyM2ZkYWE5
LzEvbWw1Mi1TblNHMWh2UXVNUGZac0FPWnM5eV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhb1B3nT
3UM8FE/Xz/GHkNyHVvxkYr2y0gEf6TI/Z/dQawurJ+siWKSpn/HZBFBSY8smZB2m
B24EDTtO22mhLPbaOh/T64Fc/oiazubjQmifnwFSdl8RYUqC+9pSwjO1tMdgsf6n
u2CI1yP5Q6TD8EjpJqEZ7YpBhPpi9DK/vh/Ik/VGsVnC4n3ODXuFxlkh6nlt1y5L
xenowaf8BmftSHPUE/fjRgr9Ps4WFweUlvkPu9OK8BuCNhiLLH415D0H3ClHO4+k
MS8BRDgRvrh5dH3wFWT3XA+wo35KZAGHWJVNNOUalvBIUhBWteob1IwX7k1bTNoZ
tpWtauPyThfU/g==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:12 2026 by rpki-client