Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File:                     alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier:          /L55m139gz0Eei8hEe5gmchgO3TxiA2YpsAFeqaoTic=
Subject key identifier:   62:4A:F3:91:81:0B:05:A5:59:50:21:85:AD:86:A8:D7:81:49:38:B1
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       019D9F2DAC9C66AF5B7C20ACF8B0D24F2DE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number:          0F88
Signing time:             Sat 18 Apr 2026 06:01:03 +0000
Manifest this update:     Sat 18 Apr 2026 06:01:03 +0000
Manifest next update:     Sun 19 Apr 2026 06:01:03 +0000
Files and hashes:         1: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=)
                          2: 588PNHg6CncRbEovNSIqaa8i5LI.roa (hash: cKLcHrzYxurc879bXkmUn4CshZz0QJYPGDzoguXub1Y=)
                          3: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=)
                          4: G8BPphhm9oFoNoaDVHCDJOi1A1I.roa (hash: o25EiApUpZto47Wgp7aaZGTEkqSv5P2WX51MC5xNgcg=)
                          5: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=)
                          6: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=)
                          7: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=)
                          8: alg23em52u81qKf3TWMm9rQtp00.crl (hash: 12UD13XTflKsBWi6CeCTgNoRh+o8KozWgLFImEUkMXE=)
                          9: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=)
                          10: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=)
                          11: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=)
                          12: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9f:2d:ac:9c:66:af:5b:7c:20:ac:f8:b0:d2:4f:2d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: Apr 18 06:01:03 2026 GMT
            Not After : Apr 19 06:01:03 2026 GMT
        Subject: CN=624af391810b05a559502185ad86a8d7814938b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:15:73:47:85:e3:da:f2:7d:9d:91:4d:44:fd:
                    19:fb:8e:52:24:4e:36:3f:9d:a8:62:d2:76:8a:4c:
                    c3:2c:97:c8:b7:79:f2:82:a8:38:9c:90:bb:9f:08:
                    1c:2c:f6:0f:ca:c4:dd:2e:14:de:9d:d2:73:09:ef:
                    98:e0:5d:c5:74:3b:a9:05:01:46:93:36:56:63:cc:
                    30:a9:a9:bc:5a:d5:0b:7e:c5:9c:c3:15:6b:ce:4e:
                    4e:6c:66:7c:22:f6:06:6d:dd:1b:2c:79:bf:e5:4c:
                    ec:63:62:8c:48:3a:62:ab:36:fc:5b:c5:67:2d:3d:
                    6e:c5:1a:5c:ac:c1:0a:aa:f2:2c:d0:7f:e5:b9:62:
                    65:81:0a:f2:69:2c:4a:27:80:11:20:6c:9b:2d:88:
                    23:ac:91:b8:60:34:b1:cf:85:bc:84:7e:b4:44:9c:
                    e0:48:31:ec:21:ef:f2:59:70:ab:a5:01:30:44:a6:
                    dc:06:6c:05:2a:8d:26:ec:af:df:32:8b:d7:bc:92:
                    b0:fd:b9:7e:47:aa:db:b4:2c:7b:df:6d:78:5e:6b:
                    20:78:5b:09:4c:12:a9:08:52:23:84:93:da:e8:6d:
                    ea:c6:d5:a2:f2:bc:84:72:3c:77:5e:6d:84:87:7c:
                    02:ac:ae:22:f8:d5:2d:c6:08:ce:ed:6e:e9:52:4d:
                    16:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4A:F3:91:81:0B:05:A5:59:50:21:85:AD:86:A8:D7:81:49:38:B1
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e1:06:30:06:91:ce:28:c2:3f:ee:13:ce:a7:e2:ff:9d:e6:
         0b:65:a5:8e:97:ba:5c:31:51:57:1b:72:66:27:43:50:47:95:
         54:8d:5d:65:d8:91:7a:a8:01:05:7d:8f:c2:c4:e0:b7:40:b4:
         1c:35:4d:7e:b7:99:68:ae:c7:97:a2:95:f7:b4:68:73:9d:13:
         3b:05:c1:d1:e9:33:ae:d3:b7:07:a6:d8:6e:06:44:0b:d1:70:
         45:c7:f7:f4:6b:4e:e4:db:34:37:0f:fc:2a:f6:9f:79:b0:62:
         79:f3:27:1d:33:2a:f8:c3:02:bb:7c:1c:d8:31:42:93:e1:dd:
         93:36:82:79:66:1a:39:36:07:7e:4a:df:0a:17:7f:74:1b:97:
         9b:0d:24:27:cf:0b:19:4a:15:0a:0a:69:bc:a3:a3:06:fa:03:
         53:02:4c:fb:7a:46:a3:15:e7:ba:30:d6:19:e4:72:05:b9:7b:
         57:08:36:d3:4d:ac:99:ed:e2:55:65:f8:b3:70:cf:d0:73:fd:
         7f:bd:3b:e3:bb:10:1b:74:fd:a8:b0:d0:d9:a6:c6:3e:f7:80:
         92:e2:87:d4:8c:4d:8a:a0:3b:a9:32:5d:97:5e:08:3e:52:99:
         ca:4f:72:3c:ed:d0:b3:db:8b:6e:36:51:2b:45:99:dc:bb:95:
         f1:1a:1d:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2fLaycZq9bfCCs+LDSTy3kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy
ZGE3NGQwHhcNMjYwNDE4MDYwMTAzWhcNMjYwNDE5MDYwMTAzWjAzMTEwLwYDVQQD
Eyg2MjRhZjM5MTgxMGIwNWE1NTk1MDIxODVhZDg2YThkNzgxNDkzOGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphVzR4Xj2vJ9nZFNRP0Z+45SJE42
P52oYtJ2ikzDLJfIt3nygqg4nJC7nwgcLPYPysTdLhTendJzCe+Y4F3FdDupBQFG
kzZWY8wwqam8WtULfsWcwxVrzk5ObGZ8IvYGbd0bLHm/5UzsY2KMSDpiqzb8W8Vn
LT1uxRpcrMEKqvIs0H/luWJlgQryaSxKJ4ARIGybLYgjrJG4YDSxz4W8hH60RJzg
SDHsIe/yWXCrpQEwRKbcBmwFKo0m7K/fMovXvJKw/bl+R6rbtCx73214XmsgeFsJ
TBKpCFIjhJPa6G3qxtWi8ryEcjx3Xm2Eh3wCrK4i+NUtxgjO7W7pUk0WjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJK85GBCwWlWVAhha2GqNeBSTixMB8GA1UdIwQY
MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt
YzE5OTQyNzM3ZTZkLzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk
LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuEGMAaR
zijCP+4Tzqfi/53mC2Wljpe6XDFRVxtyZidDUEeVVI1dZdiReqgBBX2PwsTgt0C0
HDVNfreZaK7Hl6KV97Roc50TOwXB0ekzrtO3B6bYbgZEC9FwRcf39GtO5Ns0Nw/8
KvafebBiefMnHTMq+MMCu3wc2DFCk+HdkzaCeWYaOTYHfkrfChd/dBuXmw0kJ88L
GUoVCgppvKOjBvoDUwJM+3pGoxXnujDWGeRyBbl7Vwg2002sme3iVWX4s3DP0HP9
f70747sQG3T9qLDQ2abGPveAkuKH1IxNiqA7qTJdl14IPlKZyk9yPO3Qs9uLbjZR
K0WZ3LuV8Rod6A==
-----END CERTIFICATE-----
Generated at Sat Apr 18 16:53:11 2026 by rpki-client