Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
File:                     B9oznlzTwb4CzmgCoEIYVqoLVHs.mft (raw, json)
Hash identifier:          aDWO5VtoAzfDiykAiQ+qV3ow70pE3/tDBR3vAdE/S4I=
Subject key identifier:   AC:BD:91:8C:D7:A5:6C:89:F6:FE:C0:DA:0F:A1:01:7A:6B:4B:36:53
Authority key identifier: 07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
Certificate issuer:       /CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Certificate serial:       019DCFE3A268A2CF4E02258DF9EC312D32E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
Manifest number:          1146
Signing time:             Mon 27 Apr 2026 17:01:35 +0000
Manifest this update:     Mon 27 Apr 2026 17:01:35 +0000
Manifest next update:     Tue 28 Apr 2026 17:01:35 +0000
Files and hashes:         1: B9oznlzTwb4CzmgCoEIYVqoLVHs.crl (hash: TMVY1DdUtQbwLz6e3g65wAJ1WQU+Ua4oPqAS5M1Jek8=)
                          2: Fh8dU1sk5ALM7kpiO6BAeJeWRH0.roa (hash: jOyoK8xyNESHxZoIIJYDR0iqgib05HyciYjF8KZpxgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:e3:a2:68:a2:cf:4e:02:25:8d:f9:ec:31:2d:32:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
        Validity
            Not Before: Apr 27 17:01:35 2026 GMT
            Not After : Apr 28 17:01:35 2026 GMT
        Subject: CN=acbd918cd7a56c89f6fec0da0fa1017a6b4b3653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d6:69:82:28:50:2f:f2:18:f3:3f:ad:94:c2:
                    13:50:8e:3e:39:0a:fa:c9:66:0b:ad:28:dd:1a:f5:
                    22:24:10:bf:74:5d:3a:8a:92:1d:0a:c7:4d:d8:b4:
                    4e:10:44:13:e5:a8:c1:c6:81:80:f3:1b:24:a6:29:
                    89:15:fd:7b:2a:35:73:ee:df:32:eb:d2:d1:4b:bf:
                    9e:05:de:7a:bc:e3:b6:96:5d:a9:64:13:bb:95:d5:
                    c1:99:98:ba:e6:65:86:4e:65:08:77:77:9a:07:9d:
                    fe:54:8d:ab:d6:dc:c5:b4:94:74:01:52:35:b5:26:
                    90:e9:14:e0:c8:16:fe:01:70:bc:9b:65:a3:e3:fa:
                    21:e0:e0:8d:a8:b2:72:5d:80:53:88:e6:92:ac:07:
                    f3:48:0c:4f:1b:da:b3:87:02:3e:32:71:16:8e:7f:
                    57:12:c1:b8:be:88:ec:84:69:30:80:35:7e:d1:cf:
                    fd:6f:38:f4:88:c6:29:85:aa:9a:4d:5a:9c:01:7e:
                    aa:58:2d:c6:08:f2:da:fa:3c:4d:43:8a:c9:41:6c:
                    f4:2f:be:c6:d2:3d:fb:af:0f:c4:31:b2:21:9b:51:
                    8b:fa:75:95:89:2a:64:eb:51:f5:52:3d:cb:92:e3:
                    d0:fd:97:f9:17:47:5f:86:d8:12:06:a4:2f:eb:56:
                    a8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BD:91:8C:D7:A5:6C:89:F6:FE:C0:DA:0F:A1:01:7A:6B:4B:36:53
            X509v3 Authority Key Identifier:
                keyid:07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:88:fc:00:a5:45:3b:09:7e:b1:94:c7:6e:45:6a:10:56:d9:
         e6:30:4e:cc:6a:80:fa:b3:25:d1:ee:4e:f1:e0:df:2a:9a:0f:
         2d:1a:09:30:6a:f1:97:8f:8d:99:90:f0:9a:12:8a:7c:50:ab:
         b9:22:3a:52:53:c2:3e:4c:7a:55:a6:aa:08:44:66:11:0b:3b:
         0f:9b:02:3a:58:b7:0d:00:02:2a:e2:5b:78:4e:64:da:b0:97:
         b7:1f:7e:f7:ce:4f:0b:b4:44:d4:22:ae:22:c0:e9:a8:d2:fd:
         66:bf:46:02:91:57:41:67:98:8b:57:24:d4:19:83:cb:4a:a3:
         51:64:5b:21:48:a2:34:b6:3b:db:9f:d6:90:b6:3d:09:c4:8c:
         ee:31:37:a1:a4:c4:4a:3f:56:8b:70:37:ea:68:1d:59:04:8b:
         33:35:c6:b2:b6:a4:83:ff:20:94:a0:26:43:ec:81:33:eb:a5:
         45:af:67:80:fb:11:fb:69:a8:0d:fe:70:39:09:87:06:56:44:
         19:65:40:bc:c4:5b:2d:a3:c5:5f:79:86:62:9a:34:d1:79:77:
         59:ad:ae:ab:68:68:a7:e8:21:21:b4:df:e5:12:c8:1b:3c:12:
         83:6c:39:a9:e5:aa:4e:53:04:a4:55:da:94:26:c2:2d:21:42:
         0e:24:1b:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3P46Joos9OAiWN+ewxLTLoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZGEzMzllNWNkM2MxYmUwMmNlNjgwMmEwNDIxODU2YWEw
YjU0N2IwHhcNMjYwNDI3MTcwMTM1WhcNMjYwNDI4MTcwMTM1WjAzMTEwLwYDVQQD
EyhhY2JkOTE4Y2Q3YTU2Yzg5ZjZmZWMwZGEwZmExMDE3YTZiNGIzNjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdZpgihQL/IY8z+tlMITUI4+OQr6
yWYLrSjdGvUiJBC/dF06ipIdCsdN2LROEEQT5ajBxoGA8xskpimJFf17KjVz7t8y
69LRS7+eBd56vOO2ll2pZBO7ldXBmZi65mWGTmUId3eaB53+VI2r1tzFtJR0AVI1
tSaQ6RTgyBb+AXC8m2Wj4/oh4OCNqLJyXYBTiOaSrAfzSAxPG9qzhwI+MnEWjn9X
EsG4vojshGkwgDV+0c/9bzj0iMYphaqaTVqcAX6qWC3GCPLa+jxNQ4rJQWz0L77G
0j37rw/EMbIhm1GL+nWViSpk61H1Uj3LkuPQ/Zf5F0dfhtgSBqQv61aokQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKy9kYzXpWyJ9v7A2g+hAXprSzZTMB8GA1UdIwQY
MBaAFAfaM55c08G+As5oAqBCGFaqC1R7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjlvem5selR3YjRDem1nQ29FSVlWcW9MVkhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9jNjJlMGMtNDQ1NC00M2M4LTk3YmMt
ODE2NzRkOTUzZDU2LzEvQjlvem5selR3YjRDem1nQ29FSVlWcW9MVkhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9jNjJlMGMtNDQ1NC00M2M4LTk3YmMtODE2NzRkOTUzZDU2
LzEvQjlvem5selR3YjRDem1nQ29FSVlWcW9MVkhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4j8AKVF
Owl+sZTHbkVqEFbZ5jBOzGqA+rMl0e5O8eDfKpoPLRoJMGrxl4+NmZDwmhKKfFCr
uSI6UlPCPkx6VaaqCERmEQs7D5sCOli3DQACKuJbeE5k2rCXtx9+985PC7RE1CKu
IsDpqNL9Zr9GApFXQWeYi1ck1BmDy0qjUWRbIUiiNLY725/WkLY9CcSM7jE3oaTE
Sj9Wi3A36mgdWQSLMzXGsrakg/8glKAmQ+yBM+ulRa9ngPsR+2moDf5wOQmHBlZE
GWVAvMRbLaPFX3mGYpo00Xl3Wa2uq2hop+ghIbTf5RLIGzwSg2w5qeWqTlMEpFXa
lCbCLSFCDiQbNg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:50:07 2026 by rpki-client