Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
File:                     15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft (raw, json)
Hash identifier:          iA6JsNl9XjruEh84OdNUsnNLlFsWpe7Nt6KdA2IhEIc=
Subject key identifier:   75:AF:FB:F1:44:88:3E:D2:FD:46:07:2C:08:6C:28:24:60:73:DB:B6
Authority key identifier: D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
Certificate issuer:       /CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Certificate serial:       019D9AE268C9FAEF087AB944EFDE65EA0AD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
Manifest number:          104C
Signing time:             Fri 17 Apr 2026 10:00:22 +0000
Manifest this update:     Fri 17 Apr 2026 10:00:22 +0000
Manifest next update:     Sat 18 Apr 2026 10:00:22 +0000
Files and hashes:         1: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl (hash: jJ/ENKLCwQuTB8A5OlRSoWqv56PVLm01k1N0HiroowE=)
                          2: ZHDfzOd0Vs1cFH4Cds3NQzXm5e0.roa (hash: b2Z3qDf5qe3MjesJLnqAMi8pQaoBZLbH5mVHFy7vu6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e2:68:c9:fa:ef:08:7a:b9:44:ef:de:65:ea:0a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
        Validity
            Not Before: Apr 17 10:00:22 2026 GMT
            Not After : Apr 18 10:00:22 2026 GMT
        Subject: CN=75affbf144883ed2fd46072c086c28246073dbb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:07:40:90:20:6f:ca:2d:77:49:aa:05:4d:48:
                    4b:c2:b1:43:8f:b6:78:7a:82:a4:2a:7f:f9:f3:7c:
                    47:9d:d0:73:66:1e:03:a9:be:0e:cc:90:c4:d4:fe:
                    28:99:26:b6:c0:bb:c4:85:92:d8:35:30:1d:7a:8f:
                    d1:c3:91:ae:f4:41:e4:b6:8e:34:57:d8:8e:5d:83:
                    75:ce:8b:c5:ea:fa:0c:95:ae:ff:12:6f:a2:8b:3d:
                    d7:1e:1e:6c:3a:37:b7:2c:f7:45:3c:9b:cd:13:f2:
                    a0:7c:16:9a:6c:3d:5d:40:6f:54:27:31:a5:e2:92:
                    2a:63:d7:4e:f0:fc:bc:c0:39:5d:cf:ed:63:95:21:
                    5d:71:2a:94:52:2c:99:ee:41:0b:89:6d:e5:79:13:
                    fa:52:91:3c:2f:94:44:5d:96:d8:81:4f:f1:73:1f:
                    f1:de:a9:8a:bf:32:d7:35:08:3a:7b:a6:b1:de:ef:
                    96:0b:3f:94:c5:70:29:ae:2c:9e:f8:be:93:4a:eb:
                    62:ef:55:f0:9f:58:d1:d8:ca:7a:5d:c8:c0:21:66:
                    aa:a6:af:43:09:61:e3:e5:6d:ee:3f:f0:15:bd:e4:
                    0e:a6:7a:d0:97:48:91:4a:27:aa:0c:c6:30:a0:38:
                    27:c5:e1:c1:99:01:d9:fb:ac:39:90:75:7e:d8:84:
                    5e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AF:FB:F1:44:88:3E:D2:FD:46:07:2C:08:6C:28:24:60:73:DB:B6
            X509v3 Authority Key Identifier:
                keyid:D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d2:57:74:74:ed:39:7d:ec:51:92:44:1b:b9:4d:3f:46:e0:
         29:08:c2:28:10:e3:2c:81:8f:f2:6d:95:62:f4:b3:33:44:4c:
         29:36:35:0f:08:4d:48:f0:83:87:cf:78:50:02:be:f3:3d:0b:
         49:26:cc:b3:78:eb:09:18:a7:5b:26:b9:0c:12:3f:3f:8d:ec:
         57:de:e0:39:c7:07:fc:c5:f2:a0:47:89:f8:9e:ca:68:ae:9d:
         52:f7:80:2f:f0:45:b5:3d:1e:42:fa:40:34:ae:2b:8d:c0:1c:
         2c:a4:ea:1d:24:95:67:92:5d:78:d8:ee:9d:5d:dc:b9:a7:31:
         2b:cb:fe:02:d1:de:89:bb:6e:83:9a:96:4e:1a:01:fc:ce:91:
         b1:0f:e1:65:24:ed:91:e0:70:3e:4f:b0:e5:8a:33:79:6f:26:
         3f:f7:7d:ee:45:ab:ea:47:40:7a:c3:bb:dc:2a:6b:ee:35:c9:
         87:17:94:60:c4:9f:63:8c:c2:12:84:52:a2:0c:d8:dc:cb:47:
         58:94:c2:ad:71:b2:18:2b:8b:6f:35:29:86:a3:2e:ec:61:0d:
         3b:7a:46:38:58:cd:79:e8:87:0e:65:25:05:53:08:3f:c4:e0:
         73:4d:39:28:5e:e7:9d:ce:94:cc:27:8a:8e:56:d7:97:9b:d9:
         98:93:86:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4mjJ+u8IerlE795l6grWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OTZhZmM1NGZlNjNlZDE3NDBkNWU4OTZiM2Y1OTFiMTE4
NGY2ZGMwHhcNMjYwNDE3MTAwMDIyWhcNMjYwNDE4MTAwMDIyWjAzMTEwLwYDVQQD
Eyg3NWFmZmJmMTQ0ODgzZWQyZmQ0NjA3MmMwODZjMjgyNDYwNzNkYmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgdAkCBvyi13SaoFTUhLwrFDj7Z4
eoKkKn/583xHndBzZh4Dqb4OzJDE1P4omSa2wLvEhZLYNTAdeo/Rw5Gu9EHkto40
V9iOXYN1zovF6voMla7/Em+iiz3XHh5sOje3LPdFPJvNE/KgfBaabD1dQG9UJzGl
4pIqY9dO8Py8wDldz+1jlSFdcSqUUiyZ7kELiW3leRP6UpE8L5REXZbYgU/xcx/x
3qmKvzLXNQg6e6ax3u+WCz+UxXApriye+L6TSuti71Xwn1jR2Mp6XcjAIWaqpq9D
CWHj5W3uP/AVveQOpnrQl0iRSieqDMYwoDgnxeHBmQHZ+6w5kHV+2IReEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWv+/FEiD7S/UYHLAhsKCRgc9u2MB8GA1UdIwQY
MBaAFNeWr8VP5j7RdA1eiWs/WRsRhPbcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zMmFiMTYtOGY2ZC00MTRkLTgwY2Yt
MGE4NjM1OGU5Yzg0LzEvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8zMmFiMTYtOGY2ZC00MTRkLTgwY2YtMGE4NjM1OGU5Yzg0
LzEvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtJXdHTt
OX3sUZJEG7lNP0bgKQjCKBDjLIGP8m2VYvSzM0RMKTY1DwhNSPCDh894UAK+8z0L
SSbMs3jrCRinWya5DBI/P43sV97gOccH/MXyoEeJ+J7KaK6dUveAL/BFtT0eQvpA
NK4rjcAcLKTqHSSVZ5JdeNjunV3cuacxK8v+AtHeibtug5qWThoB/M6RsQ/hZSTt
keBwPk+w5YozeW8mP/d97kWr6kdAesO73Cpr7jXJhxeUYMSfY4zCEoRSogzY3MtH
WJTCrXGyGCuLbzUphqMu7GENO3pGOFjNeeiHDmUlBVMIP8Tgc005KF7nnc6UzCeK
jlbXl5vZmJOG9Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:06:32 2026 by rpki-client