Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft
File:                     fYtUoMG_jx-cTJVpuXXKRuuobOc.mft (raw, json)
Hash identifier:          F5lBlKT2MULvHEDQQRZWReUuoT9cegAOXxdBNoYuOm4=
Subject key identifier:   6D:40:20:3F:68:66:56:D0:4B:F4:02:3B:BB:F8:CA:2E:48:B8:10:EB
Authority key identifier: 7D:8B:54:A0:C1:BF:8F:1F:9C:4C:95:69:B9:75:CA:46:EB:A8:6C:E7
Certificate issuer:       /CN=7d8b54a0c1bf8f1f9c4c9569b975ca46eba86ce7
Certificate serial:       019DDD68022C0A07FEA61D4B79D63A6112D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fYtUoMG_jx-cTJVpuXXKRuuobOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft
Manifest number:          016C
Signing time:             Thu 30 Apr 2026 08:01:14 +0000
Manifest this update:     Thu 30 Apr 2026 08:01:14 +0000
Manifest next update:     Fri 01 May 2026 08:01:14 +0000
Files and hashes:         1: AXRVN_DR5BycQVCdRUvhSmejAc8.asa (hash: W8JeQq9+EkgLaIUZ5BFcb8k9jWkbcN2YzZXMIaK67Sg=)
                          2: fYtUoMG_jx-cTJVpuXXKRuuobOc.crl (hash: OaT37qlUbt3edtiNUaTTxWjTd6PISgzVWVG40GjPuN0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fYtUoMG_jx-cTJVpuXXKRuuobOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:dd:68:02:2c:0a:07:fe:a6:1d:4b:79:d6:3a:61:12:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d8b54a0c1bf8f1f9c4c9569b975ca46eba86ce7
        Validity
            Not Before: Apr 30 08:01:14 2026 GMT
            Not After : May  1 08:01:14 2026 GMT
        Subject: CN=6d40203f686656d04bf4023bbbf8ca2e48b810eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:9e:15:0f:f1:32:e0:b4:c0:17:c1:9b:89:53:
                    45:48:c3:54:d8:66:f9:c6:15:f3:13:3a:b7:6c:85:
                    27:6b:e6:07:81:ce:dc:10:fd:0d:db:a9:b2:b6:69:
                    f5:12:fb:5a:0d:be:f4:75:ec:f8:9d:56:85:6e:53:
                    6e:da:09:0f:11:e7:a6:54:ee:97:e2:a0:8d:bf:4d:
                    84:85:15:40:df:22:26:0a:4a:c5:80:4f:84:41:77:
                    1d:d5:33:4d:4b:f5:59:74:80:5d:4b:3f:22:4a:9a:
                    45:07:3d:2a:22:1f:01:e2:c7:3f:64:0f:42:9c:fe:
                    23:52:c5:3e:f0:2c:36:fa:e5:b3:c6:e9:e5:da:a1:
                    1f:48:3b:29:ab:b2:62:f2:be:99:52:1f:55:bd:e8:
                    c8:da:77:d1:e3:9c:2a:0e:a9:cb:58:1c:e2:b2:99:
                    69:b1:ba:65:27:79:ac:16:01:0d:aa:41:7d:63:db:
                    50:49:ae:31:84:85:8f:23:e8:40:0e:56:bf:e6:bb:
                    d2:dc:0f:2b:38:94:e1:02:72:43:65:07:71:ea:0a:
                    88:82:45:3b:a4:52:b5:83:d8:04:ce:1d:66:02:f1:
                    08:c8:d3:87:fe:b6:77:a0:09:4d:e6:18:aa:9f:29:
                    f7:b7:46:57:36:9b:69:a7:de:92:f0:58:9b:b2:4c:
                    79:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:40:20:3F:68:66:56:D0:4B:F4:02:3B:BB:F8:CA:2E:48:B8:10:EB
            X509v3 Authority Key Identifier:
                keyid:7D:8B:54:A0:C1:BF:8F:1F:9C:4C:95:69:B9:75:CA:46:EB:A8:6C:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYtUoMG_jx-cTJVpuXXKRuuobOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:64:7b:5b:f8:77:41:49:f3:ec:38:e3:be:b1:f4:f1:f5:6b:
         9c:e1:ae:59:95:24:b7:b2:96:af:d3:56:be:4e:5a:c5:38:51:
         bd:b6:84:dc:09:66:a0:ea:60:dd:bc:e8:c8:6a:85:e9:40:7f:
         7c:db:d0:02:3a:f1:bf:ed:61:80:83:74:29:24:75:0a:f5:e1:
         85:0a:b5:ed:0d:9d:ea:e8:7e:de:81:12:c0:81:40:a9:26:db:
         0d:35:81:71:db:c8:b4:44:10:3e:31:3d:e1:15:9f:15:11:a9:
         cf:33:84:4d:b5:cc:f7:e7:d0:0b:eb:5e:7a:6d:29:33:86:04:
         a0:e6:a8:f7:17:3d:1f:18:88:6e:e5:ed:94:ca:75:15:5a:07:
         41:eb:a8:aa:6d:56:51:56:9e:19:4a:c2:fe:d5:af:02:87:ab:
         2a:80:4c:85:91:0f:49:90:cc:67:d3:d6:53:3c:43:53:6a:b1:
         c4:a6:0e:3f:ff:96:fb:b1:81:b7:0e:5f:f6:d4:56:f8:32:24:
         6f:44:fe:d8:c0:34:83:dc:5c:c2:bc:77:b9:5e:29:06:e0:32:
         3d:a3:00:a9:85:27:7e:d2:fa:1a:f6:7a:a7:1b:d7:20:bd:a2:
         f5:3f:33:4c:c5:2c:63:65:e3:31:98:23:ea:91:51:c0:f7:a9:
         0c:3d:12:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3daAIsCgf+ph1LedY6YRLTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkOGI1NGEwYzFiZjhmMWY5YzRjOTU2OWI5NzVjYTQ2ZWJh
ODZjZTcwHhcNMjYwNDMwMDgwMTE0WhcNMjYwNTAxMDgwMTE0WjAzMTEwLwYDVQQD
Eyg2ZDQwMjAzZjY4NjY1NmQwNGJmNDAyM2JiYmY4Y2EyZTQ4YjgxMGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Z4VD/Ey4LTAF8GbiVNFSMNU2Gb5
xhXzEzq3bIUna+YHgc7cEP0N26mytmn1EvtaDb70dez4nVaFblNu2gkPEeemVO6X
4qCNv02EhRVA3yImCkrFgE+EQXcd1TNNS/VZdIBdSz8iSppFBz0qIh8B4sc/ZA9C
nP4jUsU+8Cw2+uWzxunl2qEfSDspq7Ji8r6ZUh9VvejI2nfR45wqDqnLWBzisplp
sbplJ3msFgENqkF9Y9tQSa4xhIWPI+hADla/5rvS3A8rOJThAnJDZQdx6gqIgkU7
pFK1g9gEzh1mAvEIyNOH/rZ3oAlN5hiqnyn3t0ZXNptpp96S8Fibskx5PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1AID9oZlbQS/QCO7v4yi5IuBDrMB8GA1UdIwQY
MBaAFH2LVKDBv48fnEyVabl1ykbrqGznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZll0VW9NR19qeC1jVEpWcHVYWEtSdXVvYk9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS82NTFmYWUtYjIwYS00YThlLTlhM2Mt
ZjUyMjc2YmU5ZTFlLzEvZll0VW9NR19qeC1jVEpWcHVYWEtSdXVvYk9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS82NTFmYWUtYjIwYS00YThlLTlhM2MtZjUyMjc2YmU5ZTFl
LzEvZll0VW9NR19qeC1jVEpWcHVYWEtSdXVvYk9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmR7W/h3
QUnz7DjjvrH08fVrnOGuWZUkt7KWr9NWvk5axThRvbaE3AlmoOpg3bzoyGqF6UB/
fNvQAjrxv+1hgIN0KSR1CvXhhQq17Q2d6uh+3oESwIFAqSbbDTWBcdvItEQQPjE9
4RWfFRGpzzOETbXM9+fQC+teem0pM4YEoOao9xc9HxiIbuXtlMp1FVoHQeuoqm1W
UVaeGUrC/tWvAoerKoBMhZEPSZDMZ9PWUzxDU2qxxKYOP/+W+7GBtw5f9tRW+DIk
b0T+2MA0g9xcwrx3uV4pBuAyPaMAqYUnftL6GvZ6pxvXIL2i9T8zTMUsY2XjMZgj
6pFRwPepDD0Siw==
-----END CERTIFICATE-----
Generated at Thu Apr 30 12:53:10 2026 by rpki-client