Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
File:                     ZIPWjECz28KafUdyeRpTjD7uIDI.mft (raw, json)
Hash identifier:          OQs51EL+qG4kxsddk2UIqb+StyvmaRb5v7Der08xxBU=
Subject key identifier:   CB:EF:0F:BC:0A:AA:34:58:82:B1:A3:AD:97:25:B9:5F:6A:40:76:D9
Authority key identifier: 64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32
Certificate issuer:       /CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
Certificate serial:       019D98F528C7EAC6E9BF042CF2F7E67A4114
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
Manifest number:          1410
Signing time:             Fri 17 Apr 2026 01:01:36 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:36 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:36 +0000
Files and hashes:         1: ZIPWjECz28KafUdyeRpTjD7uIDI.crl (hash: ejQS99Nzt090niFErYlgZVX8zmkvTxzPEh/KJbT6JnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:28:c7:ea:c6:e9:bf:04:2c:f2:f7:e6:7a:41:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
        Validity
            Not Before: Apr 17 01:01:36 2026 GMT
            Not After : Apr 18 01:01:36 2026 GMT
        Subject: CN=cbef0fbc0aaa345882b1a3ad9725b95f6a4076d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:11:4b:e9:52:87:1d:b9:44:6a:23:17:17:e1:
                    3b:ba:e1:5a:7f:59:33:17:0a:62:24:7b:4e:ec:8a:
                    c2:9a:3d:21:00:78:ee:61:f5:df:c0:31:6e:6b:25:
                    80:06:73:cc:f1:b3:b9:1e:81:20:d5:91:c2:2d:8e:
                    c3:4a:8e:b1:85:3a:b9:91:76:12:f7:14:9d:8f:39:
                    5b:3e:0d:26:cf:e8:9a:be:9c:90:fb:a1:50:cd:43:
                    66:37:8a:41:88:4b:9a:ac:11:f4:57:2f:2d:1f:e0:
                    9b:a0:2e:f4:4c:31:a7:77:eb:04:b7:4d:26:0c:15:
                    7a:6d:f5:02:f8:00:19:ec:61:7d:b1:2c:7d:fa:8e:
                    78:b3:c9:d1:70:93:26:f1:78:24:7f:35:bb:45:f4:
                    96:44:3b:22:46:6c:05:33:23:05:f5:f3:d7:df:89:
                    79:06:73:f7:73:e9:ad:de:5a:91:de:00:5a:66:de:
                    0b:f8:b4:f1:cf:1e:16:70:dc:ab:9a:3a:84:02:09:
                    bb:28:fe:f3:95:bc:fe:2f:22:1b:b3:1e:be:b4:e4:
                    28:91:91:20:4f:8f:e6:a0:38:d2:36:63:e2:40:5e:
                    6a:77:76:3b:e6:21:62:0d:8f:b2:0e:5e:6b:18:2c:
                    3f:59:20:9f:41:c6:2e:be:8f:c7:66:4b:70:94:4b:
                    9d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EF:0F:BC:0A:AA:34:58:82:B1:A3:AD:97:25:B9:5F:6A:40:76:D9
            X509v3 Authority Key Identifier:
                keyid:64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c0:5c:76:58:07:4c:7f:0a:fa:47:52:96:fd:6d:fd:ea:a7:
         f3:f8:47:68:db:ca:b7:71:c9:67:f9:04:8b:42:9d:0c:02:24:
         5d:b5:9f:88:b5:0a:46:fe:06:61:15:3a:e8:dc:db:60:db:11:
         91:59:b4:5f:c7:de:07:33:8c:65:b7:4a:3a:bc:ce:f6:0e:a2:
         00:9f:82:da:0d:5a:1d:1b:f0:87:52:f7:ec:b0:5a:41:17:20:
         09:ba:c2:a6:b2:b7:ae:27:bd:da:8b:db:7b:40:bc:91:cb:32:
         ed:09:21:da:f4:54:70:6e:d0:1a:8f:52:70:b5:80:c6:da:5d:
         ff:97:02:fd:d6:95:91:c9:6a:52:6e:30:d3:c0:98:e4:67:bb:
         04:61:af:35:2d:92:c8:16:99:bb:d8:bf:6a:ef:d9:aa:58:c4:
         e2:4c:95:d4:4f:da:37:bb:2b:1f:b2:89:aa:11:b9:4d:c1:31:
         9a:f4:50:ef:aa:63:64:a1:01:59:a1:30:ef:5f:ef:16:8b:61:
         f1:7f:38:2f:fb:e2:92:7a:a0:2d:26:78:b9:3c:de:ba:63:1a:
         9f:25:e2:fb:38:6f:6a:fe:f7:79:51:6d:d8:70:18:4f:64:29:
         c5:c0:32:1b:54:8f:bc:55:57:f0:6d:b8:09:28:e5:ea:2f:55:
         ee:79:79:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9SjH6sbpvwQs8vfmekEUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ODNkNjhjNDBiM2RiYzI5YTdkNDc3Mjc5MWE1MzhjM2Vl
ZTIwMzIwHhcNMjYwNDE3MDEwMTM2WhcNMjYwNDE4MDEwMTM2WjAzMTEwLwYDVQQD
EyhjYmVmMGZiYzBhYWEzNDU4ODJiMWEzYWQ5NzI1Yjk1ZjZhNDA3NmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+hFL6VKHHblEaiMXF+E7uuFaf1kz
FwpiJHtO7IrCmj0hAHjuYfXfwDFuayWABnPM8bO5HoEg1ZHCLY7DSo6xhTq5kXYS
9xSdjzlbPg0mz+iavpyQ+6FQzUNmN4pBiEuarBH0Vy8tH+CboC70TDGnd+sEt00m
DBV6bfUC+AAZ7GF9sSx9+o54s8nRcJMm8XgkfzW7RfSWRDsiRmwFMyMF9fPX34l5
BnP3c+mt3lqR3gBaZt4L+LTxzx4WcNyrmjqEAgm7KP7zlbz+LyIbsx6+tOQokZEg
T4/moDjSNmPiQF5qd3Y75iFiDY+yDl5rGCw/WSCfQcYuvo/HZktwlEudrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvvD7wKqjRYgrGjrZcluV9qQHbZMB8GA1UdIwQY
MBaAFGSD1oxAs9vCmn1HcnkaU4w+7iAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWklQV2pFQ3oyOEthZlVkeWVScFRqRDd1SURJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wNDUzNWEtNGMwOC00ZGM5LTk3YjEt
ZGQ0YWZmMzYwYTExLzEvWklQV2pFQ3oyOEthZlVkeWVScFRqRDd1SURJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8wNDUzNWEtNGMwOC00ZGM5LTk3YjEtZGQ0YWZmMzYwYTEx
LzEvWklQV2pFQ3oyOEthZlVkeWVScFRqRDd1SURJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsBcdlgH
TH8K+kdSlv1t/eqn8/hHaNvKt3HJZ/kEi0KdDAIkXbWfiLUKRv4GYRU66NzbYNsR
kVm0X8feBzOMZbdKOrzO9g6iAJ+C2g1aHRvwh1L37LBaQRcgCbrCprK3rie92ovb
e0C8kcsy7Qkh2vRUcG7QGo9ScLWAxtpd/5cC/daVkclqUm4w08CY5Ge7BGGvNS2S
yBaZu9i/au/ZqljE4kyV1E/aN7srH7KJqhG5TcExmvRQ76pjZKEBWaEw71/vFoth
8X84L/viknqgLSZ4uTzeumManyXi+zhvav73eVFt2HAYT2QpxcAyG1SPvFVX8G24
CSjl6i9V7nl5eg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:00 2026 by rpki-client