Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
File:                     cROEjAz5BGjQfWmfcUx_10ihMmk.mft (raw, json)
Hash identifier:          gtFWrn/OjPFvlSj6QMc6bGEli8KbXW4Zyp3hvC7GMFA=
Subject key identifier:   50:52:88:F1:CA:24:B3:95:41:E4:F0:20:10:76:36:DD:32:CA:29:2E
Authority key identifier: 71:13:84:8C:0C:F9:04:68:D0:7D:69:9F:71:4C:7F:D7:48:A1:32:69
Certificate issuer:       /CN=7113848c0cf90468d07d699f714c7fd748a13269
Certificate serial:       019DDDD6839EFD7DCF42D554EEF5788FD227
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
Manifest number:          54
Signing time:             Thu 30 Apr 2026 10:01:56 +0000
Manifest this update:     Thu 30 Apr 2026 10:01:56 +0000
Manifest next update:     Fri 01 May 2026 10:01:56 +0000
Files and hashes:         1: D1ljQNpkE18grA9Cjl9zV5PU2GE.asa (hash: OS9sXwUaA+1JocSwcXhLS2ungGRd4+pZ36fpmwGLwW8=)
                          2: cROEjAz5BGjQfWmfcUx_10ihMmk.crl (hash: zUlS+lL2NQnsAUdNw/ULUaTzr98aXjugwRNqH65g+Kk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:dd:d6:83:9e:fd:7d:cf:42:d5:54:ee:f5:78:8f:d2:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7113848c0cf90468d07d699f714c7fd748a13269
        Validity
            Not Before: Apr 30 10:01:56 2026 GMT
            Not After : May  1 10:01:56 2026 GMT
        Subject: CN=505288f1ca24b39541e4f020107636dd32ca292e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:37:b3:1c:52:ea:7d:7a:6e:8b:9e:31:1f:69:
                    8d:09:9b:04:72:58:08:5c:ba:1e:97:63:d1:9e:74:
                    4a:e4:d0:19:94:8f:0c:d6:da:b0:fe:61:20:63:3a:
                    42:a7:6c:5c:48:b3:d0:ef:42:76:56:c5:de:a7:3d:
                    65:ca:16:f3:22:14:ad:4d:9f:28:20:83:c9:96:b0:
                    57:75:16:c7:07:d7:4e:27:48:c0:dc:df:c9:2d:ed:
                    22:da:d8:f5:7d:31:75:7d:5f:8f:a9:16:25:7a:69:
                    b1:f9:8e:59:0b:04:dc:54:88:d8:1c:bc:c4:83:46:
                    cb:6a:a4:5a:83:42:59:4e:2f:e8:54:f2:14:b2:77:
                    26:37:b8:2f:58:e8:13:85:df:dd:d0:09:93:e5:89:
                    1a:80:d9:dc:ce:33:5e:66:24:11:85:94:a9:e4:5e:
                    b7:2c:a5:88:1c:e8:70:4c:fc:f2:f8:60:a7:82:67:
                    6b:17:b0:6f:e0:c1:92:16:d6:ad:fb:c8:fd:8f:60:
                    2f:7b:9d:45:95:30:25:99:a6:86:d8:a2:f2:fd:fe:
                    82:8b:e8:74:2d:16:74:11:08:75:2c:16:58:6c:b8:
                    eb:a5:5d:c4:4a:c6:e6:c8:58:52:dc:48:7c:9f:07:
                    2c:75:eb:a2:58:5b:cf:1d:b8:9b:80:4c:63:8e:28:
                    c5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:52:88:F1:CA:24:B3:95:41:E4:F0:20:10:76:36:DD:32:CA:29:2E
            X509v3 Authority Key Identifier:
                keyid:71:13:84:8C:0C:F9:04:68:D0:7D:69:9F:71:4C:7F:D7:48:A1:32:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:dc:b2:c1:ff:74:da:76:4a:c2:ce:2c:b9:ae:62:38:b3:59:
         2b:b3:45:80:ad:be:49:bd:53:66:74:bd:66:53:13:60:7a:8e:
         4d:9f:e5:84:2e:a0:3a:a6:99:be:40:68:c3:12:ac:c7:b8:03:
         e0:d7:75:aa:2f:bf:52:c6:b8:3b:c8:ac:38:6f:50:4e:56:5b:
         f2:0c:80:8f:82:3a:49:ff:9a:3f:d7:be:9e:a1:85:19:43:84:
         d7:22:68:d3:dd:67:5c:d0:38:d6:93:14:81:44:12:02:ee:8f:
         04:4f:e3:66:5e:03:a3:51:67:d0:6b:44:9b:1b:5e:32:24:17:
         d2:85:32:e7:d1:76:d7:7c:e4:db:12:66:37:ea:a5:75:07:a7:
         24:9c:db:0c:06:6c:6a:1d:4e:6f:3d:9b:11:58:2e:69:6d:56:
         d6:b1:30:69:b8:e1:72:52:7d:c5:bd:b3:4b:0c:a3:ae:a7:da:
         71:94:50:1d:fc:15:dd:3b:8b:77:d6:72:fa:63:e4:dc:ee:23:
         ad:d9:af:69:b6:7c:43:91:29:c1:5a:5a:68:5e:ff:aa:ea:3b:
         49:ed:24:e1:0b:88:df:00:d4:76:fd:57:7c:6c:31:bf:89:ba:
         06:ae:92:f3:68:8e:1a:46:83:eb:75:07:75:26:ce:96:9c:98:
         50:e4:84:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3d1oOe/X3PQtVU7vV4j9InMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTM4NDhjMGNmOTA0NjhkMDdkNjk5ZjcxNGM3ZmQ3NDhh
MTMyNjkwHhcNMjYwNDMwMTAwMTU2WhcNMjYwNTAxMTAwMTU2WjAzMTEwLwYDVQQD
Eyg1MDUyODhmMWNhMjRiMzk1NDFlNGYwMjAxMDc2MzZkZDMyY2EyOTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8zezHFLqfXpui54xH2mNCZsEclgI
XLoel2PRnnRK5NAZlI8M1tqw/mEgYzpCp2xcSLPQ70J2VsXepz1lyhbzIhStTZ8o
IIPJlrBXdRbHB9dOJ0jA3N/JLe0i2tj1fTF1fV+PqRYlemmx+Y5ZCwTcVIjYHLzE
g0bLaqRag0JZTi/oVPIUsncmN7gvWOgThd/d0AmT5YkagNnczjNeZiQRhZSp5F63
LKWIHOhwTPzy+GCngmdrF7Bv4MGSFtat+8j9j2Ave51FlTAlmaaG2KLy/f6Ci+h0
LRZ0EQh1LBZYbLjrpV3ESsbmyFhS3Eh8nwcsdeuiWFvPHbibgExjjijFeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBSiPHKJLOVQeTwIBB2Nt0yyikuMB8GA1UdIwQY
MBaAFHEThIwM+QRo0H1pn3FMf9dIoTJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JPRWpBejVCR2pRZldtZmNVeF8xMGloTW1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wYWIxZDUtMWI4NC00NGYzLTg3ZGQt
MjZhY2NiN2VmZDdmLzEvY1JPRWpBejVCR2pRZldtZmNVeF8xMGloTW1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8wYWIxZDUtMWI4NC00NGYzLTg3ZGQtMjZhY2NiN2VmZDdm
LzEvY1JPRWpBejVCR2pRZldtZmNVeF8xMGloTW1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNyywf90
2nZKws4sua5iOLNZK7NFgK2+Sb1TZnS9ZlMTYHqOTZ/lhC6gOqaZvkBowxKsx7gD
4Nd1qi+/Usa4O8isOG9QTlZb8gyAj4I6Sf+aP9e+nqGFGUOE1yJo091nXNA41pMU
gUQSAu6PBE/jZl4Do1Fn0GtEmxteMiQX0oUy59F213zk2xJmN+qldQenJJzbDAZs
ah1Obz2bEVguaW1W1rEwabjhclJ9xb2zSwyjrqfacZRQHfwV3TuLd9Zy+mPk3O4j
rdmvabZ8Q5EpwVpaaF7/quo7Se0k4QuI3wDUdv1XfGwxv4m6Bq6S82iOGkaD63UH
dSbOlpyYUOSEYw==
-----END CERTIFICATE-----
Generated at Thu Apr 30 12:46:22 2026 by rpki-client