Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
File:                     xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft (raw, json)
Hash identifier:          RkFcFu/01n7tpMRE7c4wguImb+pG9IB4zGeNvmzhHWE=
Subject key identifier:   A0:06:51:1E:52:71:46:82:3C:CF:FA:68:76:D5:9F:7C:A3:A0:A9:D6
Authority key identifier: C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
Certificate issuer:       /CN=c51674fee5556728175efb56eaa8b99f3815afa7
Certificate serial:       019D9AAC6A0CCC2E9A35805E3FFA17697664
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
Manifest number:          16C4
Signing time:             Fri 17 Apr 2026 09:01:23 +0000
Manifest this update:     Fri 17 Apr 2026 09:01:23 +0000
Manifest next update:     Sat 18 Apr 2026 09:01:23 +0000
Files and hashes:         1: 5VgBPMnvg-Y4r70mw9zcqUHf-ms.roa (hash: P3U3l0akrscgsoVcKLjR90FDWEx4VR/+ukAn/96yuzo=)
                          2: xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl (hash: ZE9LbWNO6m2K6xsxIa+tOIZijFFFqiS7PCy0GrrzvhQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ac:6a:0c:cc:2e:9a:35:80:5e:3f:fa:17:69:76:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c51674fee5556728175efb56eaa8b99f3815afa7
        Validity
            Not Before: Apr 17 09:01:23 2026 GMT
            Not After : Apr 18 09:01:23 2026 GMT
        Subject: CN=a006511e527146823ccffa6876d59f7ca3a0a9d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:eb:ab:4c:66:ad:1b:f0:d7:e9:e6:54:15:53:
                    6a:31:a7:b3:9c:df:bc:e0:b5:b5:4e:53:87:b4:b5:
                    ca:a0:39:05:78:3a:32:17:89:85:02:de:55:f0:43:
                    03:03:86:4b:f4:11:fd:ee:13:0d:59:0c:5c:3f:13:
                    be:75:04:ba:2a:6c:d8:f4:b6:cc:cd:a4:4c:41:ac:
                    d5:73:82:16:1e:ae:8c:f9:d5:c0:a2:1b:b3:fb:33:
                    a3:3f:e4:6f:cb:16:75:7a:88:4a:4f:77:eb:49:e7:
                    43:0e:71:d4:62:05:04:7e:70:9d:a4:f9:bf:87:12:
                    6a:44:c2:70:cd:d8:3a:29:f4:f0:bf:e3:bd:60:4e:
                    dd:40:54:a6:51:50:e6:3d:58:bb:d1:c0:dc:9c:0f:
                    96:d7:52:f1:34:81:b1:f0:3c:e5:b2:b1:c9:3f:96:
                    d8:36:7a:c4:7e:55:7a:f1:74:98:00:60:11:06:f3:
                    7d:ae:67:8a:0a:0c:a1:5f:c6:dd:9c:0d:70:e7:3d:
                    a6:53:bf:77:e9:d1:8d:ec:ba:0b:bb:03:95:e0:d1:
                    97:bd:27:7c:2d:6d:86:ae:55:fd:c2:e6:93:0a:d7:
                    a6:aa:d3:10:08:da:37:a4:bb:8a:2d:ca:e8:b5:69:
                    33:3b:3a:a3:da:40:c0:a0:4b:81:84:36:09:be:61:
                    82:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:06:51:1E:52:71:46:82:3C:CF:FA:68:76:D5:9F:7C:A3:A0:A9:D6
            X509v3 Authority Key Identifier:
                keyid:C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:c7:49:f4:5d:b9:e0:92:0f:92:2b:0b:22:73:0b:53:82:99:
         9b:a4:45:d9:67:f4:54:64:5f:06:4b:9b:5d:04:d0:75:53:31:
         e8:cf:13:95:53:96:5d:5d:af:4f:71:29:44:8d:3e:09:1b:6c:
         4d:a4:81:11:6c:1c:48:3c:26:ed:4a:5b:2e:29:40:dd:97:96:
         5c:1d:95:94:ad:bc:05:6e:e9:cd:b7:c9:05:c3:98:b4:99:f9:
         29:d1:8e:b5:3a:20:36:ae:af:d8:a7:93:3c:9c:ae:de:76:3f:
         ad:5a:3a:a8:76:b2:1b:53:80:06:70:8e:45:2e:f9:d7:6a:ae:
         07:76:ab:e3:9c:d8:3e:ce:75:ad:b1:90:eb:6f:ee:3c:74:9d:
         57:7e:10:c4:11:ef:a9:17:0a:6f:f2:b7:e2:8d:99:8b:68:90:
         b5:11:3d:b8:0e:f8:95:6d:79:8b:b5:95:0e:30:df:4c:6f:53:
         19:7f:9b:c6:fe:1e:a1:4a:4e:d6:87:e8:2a:67:09:db:eb:54:
         f6:29:e2:46:08:74:cf:95:0b:61:3b:02:a7:de:ff:38:48:d1:
         ca:bd:3c:8c:d6:80:c5:8e:5d:f4:f5:70:9b:fb:64:43:90:bb:
         14:43:54:be:91:d8:ae:d0:1f:94:bd:4b:e0:ff:64:36:1b:f6:
         e1:76:e5:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arGoMzC6aNYBeP/oXaXZkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MTY3NGZlZTU1NTY3MjgxNzVlZmI1NmVhYThiOTlmMzgx
NWFmYTcwHhcNMjYwNDE3MDkwMTIzWhcNMjYwNDE4MDkwMTIzWjAzMTEwLwYDVQQD
EyhhMDA2NTExZTUyNzE0NjgyM2NjZmZhNjg3NmQ1OWY3Y2EzYTBhOWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluurTGatG/DX6eZUFVNqMaeznN+8
4LW1TlOHtLXKoDkFeDoyF4mFAt5V8EMDA4ZL9BH97hMNWQxcPxO+dQS6KmzY9LbM
zaRMQazVc4IWHq6M+dXAohuz+zOjP+RvyxZ1eohKT3frSedDDnHUYgUEfnCdpPm/
hxJqRMJwzdg6KfTwv+O9YE7dQFSmUVDmPVi70cDcnA+W11LxNIGx8DzlsrHJP5bY
NnrEflV68XSYAGARBvN9rmeKCgyhX8bdnA1w5z2mU7936dGN7LoLuwOV4NGXvSd8
LW2GrlX9wuaTCtemqtMQCNo3pLuKLcrotWkzOzqj2kDAoEuBhDYJvmGCiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAGUR5ScUaCPM/6aHbVn3yjoKnWMB8GA1UdIwQY
MBaAFMUWdP7lVWcoF177VuqouZ84Fa+nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFJaMF91VlZaeWdYWHZ0VzZxaTVuemdWcjZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81ZmIwODktMjU4OS00YzcxLWIwMjYt
M2NiZTFhZjNiODJjLzEveFJaMF91VlZaeWdYWHZ0VzZxaTVuemdWcjZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC81ZmIwODktMjU4OS00YzcxLWIwMjYtM2NiZTFhZjNiODJj
LzEveFJaMF91VlZaeWdYWHZ0VzZxaTVuemdWcjZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMdJ9F25
4JIPkisLInMLU4KZm6RF2Wf0VGRfBkubXQTQdVMx6M8TlVOWXV2vT3EpRI0+CRts
TaSBEWwcSDwm7UpbLilA3ZeWXB2VlK28BW7pzbfJBcOYtJn5KdGOtTogNq6v2KeT
PJyu3nY/rVo6qHayG1OABnCORS7512quB3ar45zYPs51rbGQ62/uPHSdV34QxBHv
qRcKb/K34o2Zi2iQtRE9uA74lW15i7WVDjDfTG9TGX+bxv4eoUpO1ofoKmcJ2+tU
9iniRgh0z5ULYTsCp97/OEjRyr08jNaAxY5d9PVwm/tkQ5C7FENUvpHYrtAflL1L
4P9kNhv24XblAw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:21:20 2026 by rpki-client