Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft
File:                     9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft (raw, json)
Hash identifier:          0zYHvck5BHcjcAECXlCgC0L459T9Ip1IF42ZtFtsWg4=
Subject key identifier:   45:BA:66:17:AE:E3:19:7F:AD:8E:04:A0:1E:69:04:C4:21:66:D3:11
Authority key identifier: F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7
Certificate issuer:       /CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7
Certificate serial:       019D57B914E576F289693BDFF419DB02EDB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft
Manifest number:          078B
Signing time:             Sat 04 Apr 2026 09:00:40 +0000
Manifest this update:     Sat 04 Apr 2026 09:00:40 +0000
Manifest next update:     Sun 05 Apr 2026 09:00:40 +0000
Files and hashes:         1: 9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl (hash: iAH6lChZFquPrlr8JBCjOcnR0YTAzwL1386AAgJe0gU=)
                          2: l5mP-Fm1NetsfAlEdX_lmjpQoXU.roa (hash: TgrkS8N1S8Ck615gk15sSxKWPZHU7gKSYaKnDDznY4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 Apr 2026 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:57:b9:14:e5:76:f2:89:69:3b:df:f4:19:db:02:ed:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7
        Validity
            Not Before: Apr  4 09:00:40 2026 GMT
            Not After : Apr  5 09:00:40 2026 GMT
        Subject: CN=45ba6617aee3197fad8e04a01e6904c42166d311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:23:a7:ee:97:c9:cf:ee:44:36:2b:59:77:e5:
                    7e:81:03:cc:d1:9d:40:2c:9a:4b:d4:54:2d:5d:71:
                    35:8a:e8:7f:6a:c5:64:49:20:b5:91:81:06:db:28:
                    0a:88:a0:dc:cb:67:6f:de:db:b9:70:85:14:da:a6:
                    b8:6c:22:ee:10:8c:ca:dd:b8:3f:f2:ed:e4:db:5c:
                    4f:7f:4d:5f:61:32:4e:76:8c:96:8f:8c:e8:45:1f:
                    6a:cc:31:80:23:95:ff:bd:78:be:70:19:cb:95:a2:
                    82:a2:3c:45:d8:f9:71:36:58:48:0e:b1:62:f8:e3:
                    2c:59:05:30:f3:39:cb:8d:39:f0:94:0d:1d:5d:6a:
                    c7:b6:9a:1f:cd:09:42:fd:d9:55:d8:08:81:16:77:
                    3f:e5:37:1e:6b:66:19:58:b9:62:0c:74:42:e8:0c:
                    3a:ba:58:0a:03:63:ce:f9:b9:29:59:73:73:2a:f2:
                    44:fb:05:c8:38:10:59:10:9d:a6:78:32:59:35:95:
                    77:48:fe:e2:8c:83:65:a0:9c:42:8a:23:0e:19:eb:
                    3c:dc:69:f0:c6:75:a6:7e:2a:83:9c:48:ac:1b:43:
                    8d:27:a2:68:85:52:e1:0b:63:01:10:be:84:67:37:
                    d5:81:cd:3b:54:0e:2d:0f:8f:1a:0f:0d:43:68:a3:
                    2f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BA:66:17:AE:E3:19:7F:AD:8E:04:A0:1E:69:04:C4:21:66:D3:11
            X509v3 Authority Key Identifier:
                keyid:F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:53:df:72:62:10:55:38:70:f0:cb:44:8d:8d:50:a3:ec:e5:
         98:65:91:c2:f8:85:37:79:f4:97:21:a5:ad:b9:2a:67:61:0c:
         60:e8:5f:33:64:31:b0:46:09:ee:3d:b6:a9:7b:31:3e:d4:a8:
         36:8b:79:3b:35:7d:9d:ac:3d:1b:c9:0b:e1:5a:97:f3:90:c8:
         4d:b2:a2:dc:b0:44:02:62:d2:8b:06:15:00:62:ee:72:9d:f0:
         cf:f2:60:a3:98:ae:af:6a:1c:b1:88:e5:b5:87:58:57:41:20:
         19:5b:fe:f5:09:89:89:44:ec:3f:b2:74:57:be:2a:cc:77:fc:
         17:48:93:39:ea:7d:68:fc:af:79:31:87:65:e9:10:39:fc:92:
         d3:96:11:74:42:ed:51:61:f6:6d:58:e9:fe:7a:be:4d:15:2e:
         7c:64:71:f8:a4:a4:11:df:b2:85:3e:b4:35:e4:2d:6d:f2:f9:
         68:d3:0f:92:10:a3:ea:4e:0b:af:55:45:f3:b0:44:ea:13:81:
         09:9b:ab:ed:74:d5:e3:cb:d7:ac:41:37:3e:d4:ec:af:72:64:
         0b:40:93:9b:31:b6:b3:c5:04:1c:62:4b:92:41:d2:83:54:64:
         ce:89:9a:f8:50:dc:ef:d1:54:c7:c5:90:75:f3:95:5c:0b:4b:
         f3:25:6d:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ1XuRTldvKJaTvf9BnbAu24MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NzRmMGM4ZDE2Y2JiNTEwYmJhMWZlM2FjNDY4NWVlZTM1
NmY4ZTcwHhcNMjYwNDA0MDkwMDQwWhcNMjYwNDA1MDkwMDQwWjAzMTEwLwYDVQQD
Eyg0NWJhNjYxN2FlZTMxOTdmYWQ4ZTA0YTAxZTY5MDRjNDIxNjZkMzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCOn7pfJz+5ENitZd+V+gQPM0Z1A
LJpL1FQtXXE1iuh/asVkSSC1kYEG2ygKiKDcy2dv3tu5cIUU2qa4bCLuEIzK3bg/
8u3k21xPf01fYTJOdoyWj4zoRR9qzDGAI5X/vXi+cBnLlaKCojxF2PlxNlhIDrFi
+OMsWQUw8znLjTnwlA0dXWrHtpofzQlC/dlV2AiBFnc/5Tcea2YZWLliDHRC6Aw6
ulgKA2PO+bkpWXNzKvJE+wXIOBBZEJ2meDJZNZV3SP7ijINloJxCiiMOGes83Gnw
xnWmfiqDnEisG0ONJ6JohVLhC2MBEL6EZzfVgc07VA4tD48aDw1DaKMvMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEW6Zheu4xl/rY4EoB5pBMQhZtMRMB8GA1UdIwQY
MBaAFPZ08MjRbLtRC7of46xGhe7jVvjnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW5Ud3lORnN1MUVMdWhfanJFYUY3dU5XLU9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xNjI1NjAtYjRjNS00ZjBkLTljMDYt
MThiZGY4ODQ3NDE4LzEvOW5Ud3lORnN1MUVMdWhfanJFYUY3dU5XLU9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8xNjI1NjAtYjRjNS00ZjBkLTljMDYtMThiZGY4ODQ3NDE4
LzEvOW5Ud3lORnN1MUVMdWhfanJFYUY3dU5XLU9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlPfcmIQ
VThw8MtEjY1Qo+zlmGWRwviFN3n0lyGlrbkqZ2EMYOhfM2QxsEYJ7j22qXsxPtSo
Not5OzV9naw9G8kL4VqX85DITbKi3LBEAmLSiwYVAGLucp3wz/Jgo5iur2ocsYjl
tYdYV0EgGVv+9QmJiUTsP7J0V74qzHf8F0iTOep9aPyveTGHZekQOfyS05YRdELt
UWH2bVjp/nq+TRUufGRx+KSkEd+yhT60NeQtbfL5aNMPkhCj6k4Lr1VF87BE6hOB
CZur7XTV48vXrEE3PtTsr3JkC0CTmzG2s8UEHGJLkkHSg1Rkzoma+FDc79FUx8WQ
dfOVXAtL8yVt+A==
-----END CERTIFICATE-----
Generated at Sat Apr 4 12:15:26 2026 by rpki-client