Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
File:                     l0mtdlnaE07UgHT025NBzodRffQ.mft (raw, json)
Hash identifier:          vaPWQtU9OnXud2Ruev2UZVSklB/j4HR07QFwor8sruE=
Subject key identifier:   16:DA:47:80:6A:EF:2D:32:40:30:95:E6:DF:B4:66:47:51:00:56:A9
Authority key identifier: 97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4
Certificate issuer:       /CN=9749ad7659da134ed48074f4db9341ce87517df4
Certificate serial:       019DA41D173A23FE3AB30315E0C43DAD7765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
Manifest number:          15C9
Signing time:             Sun 19 Apr 2026 05:01:03 +0000
Manifest this update:     Sun 19 Apr 2026 05:01:03 +0000
Manifest next update:     Mon 20 Apr 2026 05:01:03 +0000
Files and hashes:         1: l0mtdlnaE07UgHT025NBzodRffQ.crl (hash: BhcAfKw9T5TVdOInOuugGTqPV3QAjMPh0LIA9sO0b/w=)
                          2: mv-gyPT3AAUqYw5fkKue_M69yD0.asa (hash: pG0VFppChD1L8nts7G+N3RIXaIJY8yOyzeP60c1h49M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:1d:17:3a:23:fe:3a:b3:03:15:e0:c4:3d:ad:77:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9749ad7659da134ed48074f4db9341ce87517df4
        Validity
            Not Before: Apr 19 05:01:03 2026 GMT
            Not After : Apr 20 05:01:03 2026 GMT
        Subject: CN=16da47806aef2d32403095e6dfb46647510056a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b7:4a:bb:e0:9f:6a:0c:b5:d2:08:cb:15:0f:
                    f7:68:4a:cc:ef:5a:39:85:de:16:8e:1b:31:4e:28:
                    36:f5:69:da:55:72:a9:6b:aa:59:5c:be:41:5e:e1:
                    58:ce:18:95:04:9a:50:f0:92:8f:5b:e2:7d:ad:8f:
                    95:32:fd:a1:be:9c:de:f8:19:01:f8:66:24:67:b6:
                    c3:b7:81:81:bc:a1:c7:b1:23:fb:02:07:f4:f3:e7:
                    e1:9a:49:5a:bc:8f:32:c9:6b:45:a6:91:c4:3a:af:
                    88:0f:57:9b:14:8e:22:4c:63:fb:9b:2b:00:48:0d:
                    1b:53:79:71:7e:ce:5a:f0:f5:d9:81:66:5b:3c:15:
                    76:ab:a5:56:fb:25:42:4c:02:cc:52:c1:d6:4c:ee:
                    29:30:fd:1d:86:5f:a0:ce:e3:79:37:0f:75:16:67:
                    cf:f8:00:5d:08:09:63:43:48:ca:34:55:a9:f0:86:
                    22:ef:70:82:38:0c:c9:39:2b:ba:7e:7a:39:3d:39:
                    55:ad:4a:0b:1e:4c:88:c0:cc:87:5a:20:25:03:f3:
                    bc:57:b3:db:f6:e2:b5:be:94:2f:3a:cd:67:e1:c1:
                    51:5f:76:e0:d3:80:0a:b8:6f:7c:30:bb:95:79:e6:
                    44:a6:66:67:e1:41:23:6a:81:37:68:f1:87:07:dc:
                    62:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DA:47:80:6A:EF:2D:32:40:30:95:E6:DF:B4:66:47:51:00:56:A9
            X509v3 Authority Key Identifier:
                keyid:97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:b8:af:74:9f:2c:68:5f:d4:b6:03:60:8f:a5:43:c9:0e:93:
         0b:b8:75:55:07:8b:c0:3f:37:3e:4d:96:0c:82:59:09:51:0e:
         89:94:46:54:87:58:33:af:b0:56:f8:99:66:51:34:0f:da:03:
         56:43:2e:1c:64:d1:84:c3:74:6c:16:dc:4c:ee:88:90:21:a3:
         64:c6:21:a4:a6:4b:01:b9:d0:92:54:e4:ef:13:0e:94:94:c1:
         55:6e:6a:8c:ce:55:60:39:4e:12:30:0f:4b:c9:e2:77:30:33:
         1e:94:66:51:b5:82:01:66:f9:f3:a2:28:03:73:8d:cb:2e:ae:
         f4:a0:28:4d:91:65:75:e3:6c:e7:2a:00:2b:30:c0:7b:85:14:
         2a:32:27:88:1b:d1:6c:41:2a:66:5a:15:47:7a:83:08:01:f3:
         1f:f3:a3:2c:73:a3:47:ed:34:0c:5a:50:fa:21:a2:e1:b7:27:
         81:69:03:16:2e:eb:cd:72:fc:c5:95:8a:4a:54:e8:47:57:6b:
         41:07:c9:1a:79:c6:92:33:43:7e:81:3a:b7:1d:6e:65:eb:9d:
         fe:cb:5b:c0:07:c2:06:4e:e4:bc:c6:db:29:56:c4:7d:c8:de:
         97:7e:08:2d:a9:d2:3f:d6:90:ee:be:25:54:6d:b5:10:5e:f7:
         58:80:13:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kHRc6I/46swMV4MQ9rXdlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NDlhZDc2NTlkYTEzNGVkNDgwNzRmNGRiOTM0MWNlODc1
MTdkZjQwHhcNMjYwNDE5MDUwMTAzWhcNMjYwNDIwMDUwMTAzWjAzMTEwLwYDVQQD
EygxNmRhNDc4MDZhZWYyZDMyNDAzMDk1ZTZkZmI0NjY0NzUxMDA1NmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7dKu+Cfagy10gjLFQ/3aErM71o5
hd4WjhsxTig29WnaVXKpa6pZXL5BXuFYzhiVBJpQ8JKPW+J9rY+VMv2hvpze+BkB
+GYkZ7bDt4GBvKHHsSP7Agf08+fhmklavI8yyWtFppHEOq+ID1ebFI4iTGP7mysA
SA0bU3lxfs5a8PXZgWZbPBV2q6VW+yVCTALMUsHWTO4pMP0dhl+gzuN5Nw91FmfP
+ABdCAljQ0jKNFWp8IYi73CCOAzJOSu6fno5PTlVrUoLHkyIwMyHWiAlA/O8V7Pb
9uK1vpQvOs1n4cFRX3bg04AKuG98MLuVeeZEpmZn4UEjaoE3aPGHB9xi8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbaR4Bq7y0yQDCV5t+0ZkdRAFapMB8GA1UdIwQY
MBaAFJdJrXZZ2hNO1IB09NuTQc6HUX30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDBtdGRsbmFFMDdVZ0hUMDI1TkJ6b2RSZmZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hNzAxMWEtNmUxNS00ZTliLWJhOWUt
MzJkNzljYzQ5ZjIyLzEvbDBtdGRsbmFFMDdVZ0hUMDI1TkJ6b2RSZmZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hNzAxMWEtNmUxNS00ZTliLWJhOWUtMzJkNzljYzQ5ZjIy
LzEvbDBtdGRsbmFFMDdVZ0hUMDI1TkJ6b2RSZmZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnrivdJ8s
aF/UtgNgj6VDyQ6TC7h1VQeLwD83Pk2WDIJZCVEOiZRGVIdYM6+wVviZZlE0D9oD
VkMuHGTRhMN0bBbcTO6IkCGjZMYhpKZLAbnQklTk7xMOlJTBVW5qjM5VYDlOEjAP
S8nidzAzHpRmUbWCAWb586IoA3ONyy6u9KAoTZFldeNs5yoAKzDAe4UUKjIniBvR
bEEqZloVR3qDCAHzH/OjLHOjR+00DFpQ+iGi4bcngWkDFi7rzXL8xZWKSlToR1dr
QQfJGnnGkjNDfoE6tx1uZeud/stbwAfCBk7kvMbbKVbEfcjel34ILanSP9aQ7r4l
VG21EF73WIAT1g==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:02:59 2026 by rpki-client