Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
File:                     01CzV9ze5o--vcVVPbMknG6Clsc.mft (raw, json)
Hash identifier:          XVWVx7aledx0GYjQX1B8TPvh6IJ6oPlEKM04bVAkUNc=
Subject key identifier:   B9:00:9E:E3:76:27:DF:8F:37:8A:54:03:A6:76:99:19:A5:5B:0C:6C
Authority key identifier: D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
Certificate issuer:       /CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Certificate serial:       019D992B5C55C20C3A7DFCDA48A63E56E567
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
Manifest number:          07CB
Signing time:             Fri 17 Apr 2026 02:00:48 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:48 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:48 +0000
Files and hashes:         1: 01CzV9ze5o--vcVVPbMknG6Clsc.crl (hash: +1PcqfM0mMBZ2KT3aso1o6cgE5muzT4dynDCK4qyDi8=)
                          2: 4VA7wZJaiHWG2GAPtA5u1BDcn4I.roa (hash: PqJvEzmh32UVxsDr7waFI7G4gmqJkPLZ5CaOrNIefv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:5c:55:c2:0c:3a:7d:fc:da:48:a6:3e:56:e5:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
        Validity
            Not Before: Apr 17 02:00:48 2026 GMT
            Not After : Apr 18 02:00:48 2026 GMT
        Subject: CN=b9009ee37627df8f378a5403a6769919a55b0c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cc:07:3e:01:19:32:4a:9d:1d:6c:1d:75:79:
                    97:72:9b:f5:f1:d3:65:eb:05:91:4e:be:2d:66:a0:
                    f2:02:46:5d:3e:7e:71:08:a6:69:cf:a9:3f:fc:fe:
                    12:cd:9f:4d:cc:1e:4d:14:ea:d9:ed:09:21:c9:ca:
                    2b:91:97:90:39:7c:b6:97:8e:15:84:b9:7e:7e:8e:
                    a9:06:7a:46:11:81:b6:36:b4:52:98:dc:dd:7d:94:
                    96:47:70:81:64:cd:fc:08:76:f6:5d:12:50:96:e6:
                    0d:50:a6:56:13:6d:1a:cd:c6:d5:6c:84:93:e7:2c:
                    cc:e6:d6:f2:3b:44:f8:3b:9e:ba:c7:cf:10:d8:5c:
                    63:e0:82:4c:dc:42:ae:29:8a:d3:df:74:e4:ef:75:
                    c1:62:9c:94:22:92:ce:6f:d0:ac:db:17:b6:d8:48:
                    ff:2a:1b:14:d4:8c:0f:ae:d1:13:70:e2:e1:6d:33:
                    eb:04:0b:8c:ec:d8:58:6f:f2:20:88:c5:3f:b2:59:
                    33:fc:ec:a1:92:8b:a1:1f:40:16:35:cd:17:54:3f:
                    61:c2:af:c3:a4:2d:25:0d:7d:dd:c0:91:8d:5a:cb:
                    e1:22:c1:4a:3a:5e:ef:0b:38:7a:fc:9b:d9:b9:ff:
                    0d:35:0f:52:98:8b:6c:db:1b:f1:55:81:ef:6f:7a:
                    c7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:00:9E:E3:76:27:DF:8F:37:8A:54:03:A6:76:99:19:A5:5B:0C:6C
            X509v3 Authority Key Identifier:
                keyid:D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:f5:21:42:52:0b:3d:63:9b:60:b8:cf:44:6d:3c:94:02:39:
         60:97:a0:6c:75:c6:67:68:e3:aa:3b:0e:d5:c7:4f:a3:57:75:
         15:75:74:3f:f2:1a:d6:d9:11:31:77:c5:2d:17:1f:9f:92:0d:
         db:89:2d:46:4f:54:aa:34:ba:1c:81:53:3f:bb:24:5e:47:84:
         03:bd:ed:1f:24:39:59:f2:f6:4b:fd:92:76:fa:46:1b:61:4c:
         e3:12:dd:76:67:d9:3a:e2:78:c9:83:aa:0f:3d:6b:55:b5:a7:
         2b:99:c4:b9:9d:30:a5:4d:fc:fa:ea:a7:31:6a:95:8b:2a:4a:
         b1:73:4e:47:a6:01:41:4f:96:01:dd:be:61:34:de:07:a2:d4:
         50:b0:fe:a6:f8:b7:1b:fd:ac:ad:01:93:a7:d4:c5:85:3f:32:
         dd:ff:17:0c:fe:87:93:a3:f6:7f:e3:95:02:19:35:cb:0e:9e:
         1c:0a:b8:e4:23:90:2a:40:a1:40:e0:f3:26:14:a0:df:9b:55:
         b4:fc:79:e3:85:66:c0:68:92:c9:a6:64:8c:da:5a:15:d9:0a:
         60:fa:4a:ad:93:59:3e:5f:f1:f6:23:c4:bd:a1:1d:23:62:bb:
         ae:a0:1c:83:28:64:63:48:f8:47:51:5a:d5:5c:47:0c:0f:95:
         cc:38:4a:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK1xVwgw6ffzaSKY+VuVnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTBiMzU3ZGNkZWU2OGZiZWJkYzU1NTNkYjMyNDljNmU4
Mjk2YzcwHhcNMjYwNDE3MDIwMDQ4WhcNMjYwNDE4MDIwMDQ4WjAzMTEwLwYDVQQD
EyhiOTAwOWVlMzc2MjdkZjhmMzc4YTU0MDNhNjc2OTkxOWE1NWIwYzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8wHPgEZMkqdHWwddXmXcpv18dNl
6wWRTr4tZqDyAkZdPn5xCKZpz6k//P4SzZ9NzB5NFOrZ7QkhycorkZeQOXy2l44V
hLl+fo6pBnpGEYG2NrRSmNzdfZSWR3CBZM38CHb2XRJQluYNUKZWE20azcbVbIST
5yzM5tbyO0T4O566x88Q2Fxj4IJM3EKuKYrT33Tk73XBYpyUIpLOb9Cs2xe22Ej/
KhsU1IwPrtETcOLhbTPrBAuM7NhYb/IgiMU/slkz/OyhkouhH0AWNc0XVD9hwq/D
pC0lDX3dwJGNWsvhIsFKOl7vCzh6/JvZuf8NNQ9SmIts2xvxVYHvb3rHXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkAnuN2J9+PN4pUA6Z2mRmlWwxsMB8GA1UdIwQY
MBaAFNNQs1fc3uaPvr3FVT2zJJxugpbHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYjU2OTYtZTc3Ni00MDIxLWJhZGYt
ZmZlZDUzZjQ1ZGVkLzEvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wYjU2OTYtZTc3Ni00MDIxLWJhZGYtZmZlZDUzZjQ1ZGVk
LzEvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAofUhQlIL
PWObYLjPRG08lAI5YJegbHXGZ2jjqjsO1cdPo1d1FXV0P/Ia1tkRMXfFLRcfn5IN
24ktRk9UqjS6HIFTP7skXkeEA73tHyQ5WfL2S/2SdvpGG2FM4xLddmfZOuJ4yYOq
Dz1rVbWnK5nEuZ0wpU38+uqnMWqViypKsXNOR6YBQU+WAd2+YTTeB6LUULD+pvi3
G/2srQGTp9TFhT8y3f8XDP6Hk6P2f+OVAhk1yw6eHAq45COQKkChQODzJhSg35tV
tPx544VmwGiSyaZkjNpaFdkKYPpKrZNZPl/x9iPEvaEdI2K7rqAcgyhkY0j4R1Fa
1VxHDA+VzDhKlA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:24:12 2026 by rpki-client