Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft
File:                     n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft (raw, json)
Hash identifier:          RqgnRNIgwTnwfTNme1PuZ7uOCAkqJ6sRGOClRu+r2k4=
Subject key identifier:   4C:99:8F:B9:32:12:B7:24:64:99:B7:6D:DD:62:85:9C:77:D5:EA:CA
Authority key identifier: 9F:94:67:EF:A0:99:4F:8A:31:F3:34:3D:C3:00:BA:A4:93:6A:82:DC
Certificate issuer:       /CN=9f9467efa0994f8a31f3343dc300baa4936a82dc
Certificate serial:       019DCDBD9F8827F8FAC6275DBDE6202CB241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft
Manifest number:          0864
Signing time:             Mon 27 Apr 2026 07:00:49 +0000
Manifest this update:     Mon 27 Apr 2026 07:00:49 +0000
Manifest next update:     Tue 28 Apr 2026 07:00:49 +0000
Files and hashes:         1: SWhQi_UAdhdfZQ8xohoDcQApCOc.roa (hash: gJ6z0wn4XpC1RNjkvRpV7fnnpuhf2KJJCHokwAqVqC8=)
                          2: n5Rn76CZT4ox8zQ9wwC6pJNqgtw.crl (hash: tv62ot7N4xvU0Gyh6jEUEGNzX8sStp6xlDxZ9t2l4kg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:bd:9f:88:27:f8:fa:c6:27:5d:bd:e6:20:2c:b2:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9467efa0994f8a31f3343dc300baa4936a82dc
        Validity
            Not Before: Apr 27 07:00:49 2026 GMT
            Not After : Apr 28 07:00:49 2026 GMT
        Subject: CN=4c998fb93212b7246499b76ddd62859c77d5eaca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6b:bc:78:f2:34:6d:30:4e:d4:3e:10:c6:e7:
                    52:a9:ec:d2:bb:3e:c2:c4:9d:bb:c4:b6:9c:c0:f9:
                    6d:fb:03:25:b1:62:66:97:92:da:78:60:3e:68:47:
                    92:e9:c1:6a:f5:cd:68:5c:88:c0:94:45:b0:26:dd:
                    09:2c:52:9e:0d:e3:12:58:00:27:0f:36:be:48:13:
                    2e:ed:a2:af:3c:67:eb:32:97:fe:76:ec:78:49:d5:
                    ab:1e:fe:4b:fe:16:f5:9f:a8:42:c5:2b:fa:be:b7:
                    8d:18:66:3d:4e:6d:70:a8:89:16:fb:a0:45:85:e2:
                    6d:f3:71:37:0d:76:b4:9e:f5:5b:66:c7:1a:5b:e9:
                    7c:75:77:98:eb:1a:96:f4:3f:8a:98:83:41:1b:69:
                    90:05:a1:43:e4:34:2f:41:c6:e7:b6:8a:90:7a:57:
                    c3:a9:d5:fd:dd:f1:23:07:1e:d6:62:a8:d1:e9:91:
                    e9:35:f0:bc:ce:c2:e2:5a:bc:16:60:5c:ba:5f:1d:
                    4b:82:23:6a:f4:5a:0b:e1:27:60:53:19:92:5d:ac:
                    d7:32:96:7a:99:9c:0b:a0:62:0f:61:f8:ef:39:38:
                    a3:38:24:c4:02:d2:36:ca:88:20:13:63:a0:e6:ab:
                    65:e0:b0:db:cf:10:2b:86:a9:2b:c8:77:0b:83:19:
                    34:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:99:8F:B9:32:12:B7:24:64:99:B7:6D:DD:62:85:9C:77:D5:EA:CA
            X509v3 Authority Key Identifier:
                keyid:9F:94:67:EF:A0:99:4F:8A:31:F3:34:3D:C3:00:BA:A4:93:6A:82:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:5a:23:5e:e0:6c:00:45:70:7d:2e:0b:90:1e:35:ac:ee:51:
         d8:e2:e1:1e:34:80:73:89:18:28:f7:70:ff:1d:00:98:15:c4:
         6d:7c:f8:11:05:35:c4:75:0d:45:5f:c0:61:93:25:67:dc:64:
         c0:92:1c:ab:06:e0:7f:0b:b0:bc:22:03:ad:87:8e:09:be:90:
         2f:3e:ee:f0:e2:0b:21:fb:c2:52:fb:a9:5c:c6:8b:21:d5:99:
         35:16:15:fa:5e:92:3c:28:ac:ad:57:9d:e9:d6:56:ee:f6:cf:
         aa:ed:c9:ca:91:b7:b7:fc:2f:b4:34:c5:56:98:f6:76:d5:99:
         22:c4:f2:a9:6d:23:a1:ab:92:06:d8:0f:a5:dd:0e:76:9c:47:
         cd:7f:6e:80:21:6c:56:44:02:75:5f:d0:31:4a:bf:ab:59:a9:
         21:a7:bf:be:60:71:73:50:32:b4:f0:d3:7c:a9:79:40:4c:a5:
         bc:06:d3:26:b7:82:25:3e:02:47:d7:bb:2d:d5:ec:4e:3d:b5:
         fb:27:d9:ca:f6:48:46:57:34:ce:e9:d2:3e:d1:03:d4:7f:ba:
         8d:8c:81:6c:fe:8a:b2:df:c0:b9:cd:b4:87:f7:d2:df:cf:14:
         41:b2:45:ff:b4:a4:e4:bb:5d:02:5e:21:81:3e:6a:34:4e:02:
         1c:2c:5a:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3NvZ+IJ/j6xiddveYgLLJBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmOTQ2N2VmYTA5OTRmOGEzMWYzMzQzZGMzMDBiYWE0OTM2
YTgyZGMwHhcNMjYwNDI3MDcwMDQ5WhcNMjYwNDI4MDcwMDQ5WjAzMTEwLwYDVQQD
Eyg0Yzk5OGZiOTMyMTJiNzI0NjQ5OWI3NmRkZDYyODU5Yzc3ZDVlYWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2u8ePI0bTBO1D4QxudSqezSuz7C
xJ27xLacwPlt+wMlsWJml5LaeGA+aEeS6cFq9c1oXIjAlEWwJt0JLFKeDeMSWAAn
Dza+SBMu7aKvPGfrMpf+dux4SdWrHv5L/hb1n6hCxSv6vreNGGY9Tm1wqIkW+6BF
heJt83E3DXa0nvVbZscaW+l8dXeY6xqW9D+KmINBG2mQBaFD5DQvQcbntoqQelfD
qdX93fEjBx7WYqjR6ZHpNfC8zsLiWrwWYFy6Xx1LgiNq9FoL4SdgUxmSXazXMpZ6
mZwLoGIPYfjvOTijOCTEAtI2yoggE2Og5qtl4LDbzxArhqkryHcLgxk0rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyZj7kyErckZJm3bd1ihZx31erKMB8GA1UdIwQY
MBaAFJ+UZ++gmU+KMfM0PcMAuqSTaoLcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjVSbjc2Q1pUNG94OHpROXd3QzZwSk5xZ3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iMmQyNzQtYTk1MS00Mzk3LWI5OWQt
YzMwYzdiNTVjMmJjLzEvbjVSbjc2Q1pUNG94OHpROXd3QzZwSk5xZ3R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9iMmQyNzQtYTk1MS00Mzk3LWI5OWQtYzMwYzdiNTVjMmJj
LzEvbjVSbjc2Q1pUNG94OHpROXd3QzZwSk5xZ3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlojXuBs
AEVwfS4LkB41rO5R2OLhHjSAc4kYKPdw/x0AmBXEbXz4EQU1xHUNRV/AYZMlZ9xk
wJIcqwbgfwuwvCIDrYeOCb6QLz7u8OILIfvCUvupXMaLIdWZNRYV+l6SPCisrVed
6dZW7vbPqu3JypG3t/wvtDTFVpj2dtWZIsTyqW0joauSBtgPpd0OdpxHzX9ugCFs
VkQCdV/QMUq/q1mpIae/vmBxc1AytPDTfKl5QEylvAbTJreCJT4CR9e7LdXsTj21
+yfZyvZIRlc0zunSPtED1H+6jYyBbP6Kst/Auc20h/fS388UQbJF/7Sk5LtdAl4h
gT5qNE4CHCxaiA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:17:09 2026 by rpki-client