Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
File:                     vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft (raw, json)
Hash identifier:          x7h9QUgpzbVbj9nAU7QaSp7fyok05PAx/Nyp5Cv2z9k=
Subject key identifier:   FE:B0:6B:5E:09:70:D4:6C:34:34:6F:0B:F7:97:9D:AA:02:57:93:4D
Authority key identifier: BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
Certificate issuer:       /CN=becec531e5c37756b828663f9cc20ad6217713ac
Certificate serial:       019D9850687FCA1655AEA96B74FB816D8BE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
Manifest number:          11F0
Signing time:             Thu 16 Apr 2026 22:01:39 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:39 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:39 +0000
Files and hashes:         1: OTRSO5_pHSeulNj4xXvHd4-oZGw.roa (hash: GumSyhlt9WpNHRYRGiGvb9zCBM/7gwLeOV+M6h7PvAY=)
                          2: YFFevfcb0MJ_yPF5gFWuiYNPaqg.roa (hash: lHBaBK2XvWUWSJ/Pzslgj1K8IVs6D38UMIfHsQwv/ik=)
                          3: rti6tjnaJyfv_Ylmdsnl4AB3DYs.roa (hash: RksYRj9xScfDwNjU2z8C2o8FShcQoua9yZqEvSMWJ+M=)
                          4: vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl (hash: D0SAZOg8TTinJlXy8S5SRFUWxu4c/af6BgNm4bBlhq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:68:7f:ca:16:55:ae:a9:6b:74:fb:81:6d:8b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=becec531e5c37756b828663f9cc20ad6217713ac
        Validity
            Not Before: Apr 16 22:01:39 2026 GMT
            Not After : Apr 17 22:01:39 2026 GMT
        Subject: CN=feb06b5e0970d46c34346f0bf7979daa0257934d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:01:82:c9:d0:28:f0:4d:75:4d:51:ce:87:77:
                    52:26:3c:4d:0b:b5:3d:c2:c5:59:83:40:3d:49:2a:
                    37:fd:c2:05:14:61:f0:7b:23:2e:18:15:26:f8:d7:
                    e6:be:ec:ae:a7:e1:66:5c:25:d2:18:6b:57:68:10:
                    22:2f:36:70:31:99:04:28:1e:fc:68:63:5d:f6:36:
                    23:79:6c:12:97:ef:b0:1e:a9:f1:db:92:61:bb:b5:
                    af:0d:13:38:36:d9:e4:7e:8d:49:6f:7d:c6:79:b3:
                    d9:75:54:d2:8e:53:19:83:4d:2f:15:94:26:f8:20:
                    4d:c4:06:3e:00:30:b4:c4:21:44:bd:88:8d:7f:31:
                    85:b6:93:44:05:a2:6e:92:22:bb:54:c7:d1:c7:b7:
                    1e:6f:87:9a:ba:ed:20:8b:c6:c1:03:fc:c5:45:27:
                    8e:67:7c:d1:90:f9:fd:e4:eb:2a:ac:1a:df:fa:fe:
                    69:2b:b4:e4:53:0e:c2:c5:e6:83:30:85:60:c7:78:
                    13:69:34:3e:e8:fd:b4:d0:19:09:09:d8:97:e5:2c:
                    0d:ee:d0:cb:54:ca:22:b0:7f:1c:3c:22:d2:0a:df:
                    62:0c:4f:c0:56:aa:32:ff:a0:af:74:2d:4e:11:09:
                    d2:80:2d:ad:42:08:fa:b1:56:d4:3c:b1:bd:4c:b3:
                    54:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B0:6B:5E:09:70:D4:6C:34:34:6F:0B:F7:97:9D:AA:02:57:93:4D
            X509v3 Authority Key Identifier:
                keyid:BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ad:f3:7b:e1:fe:ac:f6:07:c5:b5:7e:df:7d:6b:6b:ce:4a:
         f6:f7:91:58:07:9d:ba:de:b1:c0:0e:11:0a:de:b9:7c:b2:1b:
         09:f6:c5:5c:60:77:2b:3d:9c:5a:d2:23:0e:0e:31:ee:55:3e:
         28:d1:35:b8:f3:b9:5b:2d:9c:ce:52:70:fc:0a:79:ce:71:a3:
         08:da:e8:ce:40:9d:f4:91:ed:b8:0a:4d:40:a5:11:be:e9:4a:
         a1:68:8a:84:01:de:ff:e8:a5:8c:8b:e6:61:92:62:75:88:0d:
         70:a5:23:89:a1:5c:2f:5b:38:0c:c0:5e:41:6b:e6:72:76:55:
         46:2e:4e:cc:9a:23:92:f1:8a:e9:53:3c:2c:1c:5d:0c:a1:db:
         8c:3a:25:3f:94:62:8f:54:66:9c:64:61:e1:3c:13:7f:2c:d9:
         12:bf:b6:e7:bf:5e:29:b8:a7:7d:df:c5:56:93:6f:41:3d:5d:
         17:d9:05:d0:c0:6e:62:12:40:85:3c:ae:94:54:98:0d:d8:2a:
         7e:33:de:45:3f:ea:2e:47:c5:5b:6c:69:67:84:62:f4:78:bb:
         b3:1a:14:14:ba:c2:86:09:a7:3f:c9:36:01:c0:a3:ba:b4:c2:
         e6:ad:aa:62:f5:5f:fa:f4:15:49:83:fb:5e:ff:1a:76:82:17:
         2d:b5:3f:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUGh/yhZVrqlrdPuBbYvoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlY2VjNTMxZTVjMzc3NTZiODI4NjYzZjljYzIwYWQ2MjE3
NzEzYWMwHhcNMjYwNDE2MjIwMTM5WhcNMjYwNDE3MjIwMTM5WjAzMTEwLwYDVQQD
EyhmZWIwNmI1ZTA5NzBkNDZjMzQzNDZmMGJmNzk3OWRhYTAyNTc5MzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgGCydAo8E11TVHOh3dSJjxNC7U9
wsVZg0A9SSo3/cIFFGHweyMuGBUm+Nfmvuyup+FmXCXSGGtXaBAiLzZwMZkEKB78
aGNd9jYjeWwSl++wHqnx25Jhu7WvDRM4Ntnkfo1Jb33GebPZdVTSjlMZg00vFZQm
+CBNxAY+ADC0xCFEvYiNfzGFtpNEBaJukiK7VMfRx7ceb4eauu0gi8bBA/zFRSeO
Z3zRkPn95OsqrBrf+v5pK7TkUw7CxeaDMIVgx3gTaTQ+6P200BkJCdiX5SwN7tDL
VMoisH8cPCLSCt9iDE/AVqoy/6CvdC1OEQnSgC2tQgj6sVbUPLG9TLNUMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6wa14JcNRsNDRvC/eXnaoCV5NNMB8GA1UdIwQY
MBaAFL7OxTHlw3dWuChmP5zCCtYhdxOsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnM3Rk1lWERkMWE0S0dZX25NSUsxaUYzRTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8xYmNiOGItYTNmOC00OGNjLThkYjkt
M2RmOWUyMWY0YmNjLzEvdnM3Rk1lWERkMWE0S0dZX25NSUsxaUYzRTZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8xYmNiOGItYTNmOC00OGNjLThkYjktM2RmOWUyMWY0YmNj
LzEvdnM3Rk1lWERkMWE0S0dZX25NSUsxaUYzRTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnK3ze+H+
rPYHxbV+331ra85K9veRWAedut6xwA4RCt65fLIbCfbFXGB3Kz2cWtIjDg4x7lU+
KNE1uPO5Wy2czlJw/Ap5znGjCNrozkCd9JHtuApNQKURvulKoWiKhAHe/+iljIvm
YZJidYgNcKUjiaFcL1s4DMBeQWvmcnZVRi5OzJojkvGK6VM8LBxdDKHbjDolP5Ri
j1RmnGRh4TwTfyzZEr+2579eKbinfd/FVpNvQT1dF9kF0MBuYhJAhTyulFSYDdgq
fjPeRT/qLkfFW2xpZ4Ri9Hi7sxoUFLrChgmnP8k2AcCjurTC5q2qYvVf+vQVSYP7
Xv8adoIXLbU/Ow==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:44:38 2026 by rpki-client