Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
File:                     rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft (raw, json)
Hash identifier:          6RKUCZ+n5uFE25bcRujF3cHcWDdZVN/vsp/y3dNOvcw=
Subject key identifier:   17:6B:D3:1A:66:EE:71:83:B7:51:FA:91:E2:C6:19:21:2C:B4:53:FE
Authority key identifier: AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4
Certificate issuer:       /CN=adc647ba017c8a4599c009be04d81b268eca62f4
Certificate serial:       019D99D01AA8045C010EB92A24D1258C560B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
Manifest number:          07E0
Signing time:             Fri 17 Apr 2026 05:00:45 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:45 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:45 +0000
Files and hashes:         1: rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl (hash: TUv9Lr2tluE17IbbDRUpTFA/PUxVolOdM2rZPaFyaoo=)
                          2: y1Acn-nX2-7OFeDZEqyAj0HHUbI.roa (hash: Z/l1m2g2kzxvfaR8aMT4tSywwcoOw223UuXpwNiGyGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:1a:a8:04:5c:01:0e:b9:2a:24:d1:25:8c:56:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adc647ba017c8a4599c009be04d81b268eca62f4
        Validity
            Not Before: Apr 17 05:00:45 2026 GMT
            Not After : Apr 18 05:00:45 2026 GMT
        Subject: CN=176bd31a66ee7183b751fa91e2c619212cb453fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:35:ca:7d:76:ca:c3:29:1b:fb:24:56:6e:66:
                    05:a1:84:a5:2f:8b:31:e7:4f:5f:c0:5e:df:db:40:
                    65:15:a3:02:90:37:1c:1d:f0:e0:bf:33:d0:bc:6a:
                    3c:de:e6:3b:82:fc:f0:7b:3c:d3:6a:dc:fd:06:c1:
                    5f:c2:8f:81:87:2a:d2:6b:41:fd:1f:0a:fd:b7:72:
                    a9:f0:74:78:22:d7:ce:5a:ed:2d:76:13:e3:46:fd:
                    17:14:99:a3:60:6e:bd:89:60:57:49:4d:c4:3f:a3:
                    df:f1:5e:82:4c:9c:1f:4f:16:0c:fe:78:75:0c:2b:
                    12:dd:67:11:e9:0e:20:79:5c:61:9b:4f:31:c4:56:
                    d2:ed:bd:3b:3c:1f:73:f0:87:b5:ef:b9:79:41:9f:
                    1b:6b:97:21:a9:bf:32:2b:1c:6b:98:47:eb:4a:d5:
                    96:37:07:5d:ff:11:5c:7d:77:e5:2b:d0:d5:cd:d6:
                    16:dc:2a:5a:46:c8:e1:16:3b:3b:dc:20:39:3a:a2:
                    16:aa:8f:b2:ba:75:db:35:37:0b:07:ae:57:2a:e8:
                    c7:ae:27:14:1c:cc:99:37:d3:0f:8e:6d:20:38:7d:
                    d7:82:33:60:91:2a:13:e3:22:5e:1c:98:c0:7c:20:
                    67:fc:81:f3:e7:85:ed:02:44:af:8b:06:84:98:0f:
                    ad:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6B:D3:1A:66:EE:71:83:B7:51:FA:91:E2:C6:19:21:2C:B4:53:FE
            X509v3 Authority Key Identifier:
                keyid:AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ac:71:ed:9b:db:ff:72:ec:5c:7c:33:d9:ef:82:08:d3:ac:
         d7:57:48:42:de:dc:c5:4b:9e:69:9a:07:dd:d4:6e:06:08:8b:
         ec:89:9a:99:7b:99:bc:83:46:48:0c:d2:9d:cd:65:51:13:81:
         67:cd:39:aa:fc:8e:4f:81:c0:fc:11:e6:ad:d7:12:a8:43:db:
         fd:a1:f4:ef:00:18:82:4f:22:04:4d:50:5a:aa:42:85:d6:1e:
         21:f4:fc:5c:fb:f7:be:71:a9:1e:fe:3d:27:7f:10:40:c2:1a:
         31:14:7d:4f:d4:19:6e:db:4d:f9:84:a7:72:3e:6a:5b:2d:1c:
         8f:c7:06:3f:97:f4:2e:fb:c7:ba:f6:60:c9:d6:1c:51:ee:92:
         0d:81:4b:5b:5d:1b:6a:84:98:7f:37:74:8e:d8:e2:6b:a1:55:
         d2:b4:b2:7d:98:55:59:2c:0e:31:a4:2a:82:49:88:4b:fe:9f:
         a3:ad:fb:17:a0:83:0a:e4:67:59:66:28:48:78:46:37:a8:ee:
         2f:5e:30:76:1e:0a:b7:ec:9b:f5:24:e8:ff:22:a7:ab:45:8d:
         0f:b4:60:3a:ca:c6:de:1c:38:73:98:a6:b5:79:4c:6d:5b:6b:
         c3:dc:ee:cd:16:4a:d6:0c:8c:39:98:d4:2c:7e:7e:c0:5a:b1:
         fb:27:8d:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0BqoBFwBDrkqJNEljFYLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYzY0N2JhMDE3YzhhNDU5OWMwMDliZTA0ZDgxYjI2OGVj
YTYyZjQwHhcNMjYwNDE3MDUwMDQ1WhcNMjYwNDE4MDUwMDQ1WjAzMTEwLwYDVQQD
EygxNzZiZDMxYTY2ZWU3MTgzYjc1MWZhOTFlMmM2MTkyMTJjYjQ1M2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzXKfXbKwykb+yRWbmYFoYSlL4sx
509fwF7f20BlFaMCkDccHfDgvzPQvGo83uY7gvzwezzTatz9BsFfwo+BhyrSa0H9
Hwr9t3Kp8HR4ItfOWu0tdhPjRv0XFJmjYG69iWBXSU3EP6Pf8V6CTJwfTxYM/nh1
DCsS3WcR6Q4geVxhm08xxFbS7b07PB9z8Ie177l5QZ8ba5chqb8yKxxrmEfrStWW
Nwdd/xFcfXflK9DVzdYW3CpaRsjhFjs73CA5OqIWqo+yunXbNTcLB65XKujHricU
HMyZN9MPjm0gOH3XgjNgkSoT4yJeHJjAfCBn/IHz54XtAkSviwaEmA+tNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdr0xpm7nGDt1H6keLGGSEstFP+MB8GA1UdIwQY
MBaAFK3GR7oBfIpFmcAJvgTYGyaOymL0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmNaSHVnRjhpa1dad0FtLUJOZ2JKbzdLWXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lMWQ0YjctNzQ2Yy00MjZmLWE2YzUt
ZGQ1ZjU1MDEwYTA2LzEvcmNaSHVnRjhpa1dad0FtLUJOZ2JKbzdLWXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9lMWQ0YjctNzQ2Yy00MjZmLWE2YzUtZGQ1ZjU1MDEwYTA2
LzEvcmNaSHVnRjhpa1dad0FtLUJOZ2JKbzdLWXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6xx7Zvb
/3LsXHwz2e+CCNOs11dIQt7cxUueaZoH3dRuBgiL7ImamXuZvINGSAzSnc1lUROB
Z805qvyOT4HA/BHmrdcSqEPb/aH07wAYgk8iBE1QWqpChdYeIfT8XPv3vnGpHv49
J38QQMIaMRR9T9QZbttN+YSncj5qWy0cj8cGP5f0LvvHuvZgydYcUe6SDYFLW10b
aoSYfzd0jtjia6FV0rSyfZhVWSwOMaQqgkmIS/6fo637F6CDCuRnWWYoSHhGN6ju
L14wdh4Kt+yb9STo/yKnq0WND7RgOsrG3hw4c5imtXlMbVtrw9zuzRZK1gyMOZjU
LH5+wFqx+yeN8w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:40:59 2026 by rpki-client