Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
File:                     97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft (raw, json)
Hash identifier:          5U6uMSwIgah6Z6xoJQeafvVgL7YjPGPvtxYyxAh+wNE=
Subject key identifier:   F4:7A:DE:22:D6:42:3B:2B:20:56:01:EA:4F:EE:3F:DF:50:9E:1C:C6
Authority key identifier: F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77
Certificate issuer:       /CN=f7b069d33df1225a8b3643a01364f279df40d877
Certificate serial:       019D99997A3131EC3F8A061AEFEC60544508
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
Manifest number:          05B7
Signing time:             Fri 17 Apr 2026 04:01:05 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:05 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:05 +0000
Files and hashes:         1: 97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl (hash: CfycRTkJ3Lmg44UbT1qRSQaPey2qo10bInzjoEvNJzc=)
                          2: xhl0o4V6-hvD85CUbuSTASM7Pe8.roa (hash: UOzsj8ZtwxxJK1k4oeGehyFJR/EivykYvRbt7Q6K/PA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:7a:31:31:ec:3f:8a:06:1a:ef:ec:60:54:45:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b069d33df1225a8b3643a01364f279df40d877
        Validity
            Not Before: Apr 17 04:01:05 2026 GMT
            Not After : Apr 18 04:01:05 2026 GMT
        Subject: CN=f47ade22d6423b2b205601ea4fee3fdf509e1cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d3:18:d9:cd:8b:05:fb:a4:c4:3c:ba:37:c4:
                    84:31:b2:c1:e1:24:eb:04:6b:c7:42:25:eb:cb:fa:
                    3a:40:83:31:a2:4f:21:8b:f0:42:37:44:3f:18:e7:
                    6b:72:c0:9b:80:30:72:c7:01:b9:34:a9:c5:10:f6:
                    ba:99:2d:ee:2a:9a:c8:4b:d2:7b:7d:29:b5:0d:71:
                    02:ef:1f:dd:45:0a:20:1c:a6:0c:cd:17:ab:d4:78:
                    bd:2e:53:7b:f9:c0:66:eb:b9:38:3e:a5:ba:9d:0f:
                    24:f1:1b:7a:ef:91:1c:1f:a5:68:16:b2:94:82:3e:
                    03:26:29:f1:21:fa:e5:c5:d1:57:93:d0:b0:5b:3f:
                    e5:db:58:88:e3:ac:2d:b8:97:4f:f3:ff:2a:61:4b:
                    c8:fc:04:b0:6c:9a:d3:51:82:e3:d5:d2:e5:2b:fd:
                    ad:1b:3b:9f:d0:79:8e:68:27:0a:57:84:ce:47:a2:
                    6e:2c:1d:e1:3e:67:5e:74:fc:b0:ae:13:da:1e:c5:
                    6a:2b:5b:1c:0e:04:33:85:7a:20:77:58:f9:fc:0c:
                    6e:b7:93:15:e8:c3:a9:ab:cb:02:12:6d:87:a7:4b:
                    74:5f:d0:b9:a6:1c:2c:b1:f1:77:61:59:c4:69:40:
                    9b:f6:37:e4:3a:5a:f1:8a:25:c9:95:02:95:be:53:
                    2e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7A:DE:22:D6:42:3B:2B:20:56:01:EA:4F:EE:3F:DF:50:9E:1C:C6
            X509v3 Authority Key Identifier:
                keyid:F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:06:8b:09:26:84:15:e9:d5:43:26:93:77:ed:a4:12:b8:b6:
         69:92:b5:6a:b5:c5:1c:a4:36:2a:51:2f:4b:b2:d3:42:58:a7:
         fb:03:5d:05:3a:14:0e:8c:e1:11:d1:f8:a9:6b:5d:de:dd:f5:
         a9:62:b1:a0:ed:1e:52:17:6a:73:35:1a:6b:4f:23:36:76:2a:
         ea:d2:1b:f3:cd:7f:34:e7:bc:a7:bd:39:59:16:0e:b3:6e:0f:
         54:3b:09:06:72:16:d5:96:4a:aa:18:07:96:7b:ae:d9:e9:b1:
         b4:c6:2b:08:b6:52:a6:81:f8:c5:6a:9e:ee:ed:3a:fb:13:cf:
         e7:99:fc:c5:a7:9c:fc:17:de:f5:3c:ab:54:49:3e:22:17:2f:
         5c:7d:81:7e:3b:f4:de:94:5f:d0:df:ce:e4:1f:a1:4d:51:1c:
         84:e9:45:fa:67:63:86:43:f8:a2:de:65:92:84:f9:0c:3b:13:
         88:06:67:3c:f5:c5:a4:63:07:7d:23:3d:52:84:37:ad:a5:0e:
         6d:67:c2:c1:9d:bb:5a:c6:1b:2d:55:76:23:ce:52:8c:2f:ae:
         2f:21:21:cc:a7:61:b0:09:f7:0b:0f:5e:f5:b1:fc:cc:f1:20:
         7d:1c:df:97:2f:9e:e6:6f:05:ad:55:d2:9f:8c:4e:59:e6:f8:
         c4:f0:f5:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmXoxMew/igYa7+xgVEUIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YjA2OWQzM2RmMTIyNWE4YjM2NDNhMDEzNjRmMjc5ZGY0
MGQ4NzcwHhcNMjYwNDE3MDQwMTA1WhcNMjYwNDE4MDQwMTA1WjAzMTEwLwYDVQQD
EyhmNDdhZGUyMmQ2NDIzYjJiMjA1NjAxZWE0ZmVlM2ZkZjUwOWUxY2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NMY2c2LBfukxDy6N8SEMbLB4STr
BGvHQiXry/o6QIMxok8hi/BCN0Q/GOdrcsCbgDByxwG5NKnFEPa6mS3uKprIS9J7
fSm1DXEC7x/dRQogHKYMzRer1Hi9LlN7+cBm67k4PqW6nQ8k8Rt675EcH6VoFrKU
gj4DJinxIfrlxdFXk9CwWz/l21iI46wtuJdP8/8qYUvI/ASwbJrTUYLj1dLlK/2t
Gzuf0HmOaCcKV4TOR6JuLB3hPmdedPywrhPaHsVqK1scDgQzhXogd1j5/Axut5MV
6MOpq8sCEm2Hp0t0X9C5phwssfF3YVnEaUCb9jfkOlrxiiXJlQKVvlMuowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPR63iLWQjsrIFYB6k/uP99QnhzGMB8GA1UdIwQY
MBaAFPewadM98SJaizZDoBNk8nnfQNh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTdCcDB6M3hJbHFMTmtPZ0UyVHllZDlBMkhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82ZjQ5ZTEtZTcwNC00YWI0LWI5NGMt
NWZkY2I3ODNhNmVjLzEvOTdCcDB6M3hJbHFMTmtPZ0UyVHllZDlBMkhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi82ZjQ5ZTEtZTcwNC00YWI0LWI5NGMtNWZkY2I3ODNhNmVj
LzEvOTdCcDB6M3hJbHFMTmtPZ0UyVHllZDlBMkhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZwaLCSaE
FenVQyaTd+2kEri2aZK1arXFHKQ2KlEvS7LTQlin+wNdBToUDozhEdH4qWtd3t31
qWKxoO0eUhdqczUaa08jNnYq6tIb881/NOe8p705WRYOs24PVDsJBnIW1ZZKqhgH
lnuu2emxtMYrCLZSpoH4xWqe7u06+xPP55n8xaec/Bfe9TyrVEk+IhcvXH2Bfjv0
3pRf0N/O5B+hTVEchOlF+mdjhkP4ot5lkoT5DDsTiAZnPPXFpGMHfSM9UoQ3raUO
bWfCwZ27WsYbLVV2I85SjC+uLyEhzKdhsAn3Cw9e9bH8zPEgfRzfly+e5m8FrVXS
n4xOWeb4xPD1/g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:20:56 2026 by rpki-client