Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File:                     9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier:          cnwP0Y8I78RNB9USgHMT1+xamH23K0ui8fk3ncemjCY=
Subject key identifier:   87:2F:0A:E2:C8:E5:61:C5:E6:D0:D2:9D:CB:E2:C8:11:55:15:44:A9
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer:       /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial:       019DDFC44C39707467FAB8EE381B3AA617FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number:          1879
Signing time:             Thu 30 Apr 2026 19:01:16 +0000
Manifest this update:     Thu 30 Apr 2026 19:01:16 +0000
Manifest next update:     Fri 01 May 2026 19:01:16 +0000
Files and hashes:         1: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: ZiUPKy4442EXBMRgmFP2Oqoi+Izw9iTz8nxqdkDs7P4=)
                          2: PmvPeyfuH32uVVKqSfQ5RmaGzZA.roa (hash: 9iQB+r4y8DYdCOUHJllDHq/E35qdiIubyMUUaFVIXsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 14:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:df:c4:4c:39:70:74:67:fa:b8:ee:38:1b:3a:a6:17:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
        Validity
            Not Before: Apr 30 19:01:16 2026 GMT
            Not After : May  1 19:01:16 2026 GMT
        Subject: CN=872f0ae2c8e561c5e6d0d29dcbe2c811551544a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:80:44:3a:3a:ce:2a:fa:ea:f2:ea:b3:9e:bf:
                    90:fb:00:40:b4:53:ad:14:ac:78:fe:ea:80:70:1c:
                    23:0c:8f:bd:c5:66:a6:fe:6f:2e:02:c0:32:e7:55:
                    5a:97:fb:ff:b9:b4:8e:97:08:0f:50:fe:dc:2b:58:
                    25:3e:c8:b3:41:91:21:40:4d:6e:74:9d:0b:37:ce:
                    a7:ef:af:60:78:77:22:cf:b4:cd:cd:cf:45:4d:53:
                    3b:0e:4b:6f:ab:29:ff:34:f2:e6:b7:7c:81:eb:a0:
                    de:1d:8d:33:ea:73:19:52:01:93:24:63:53:14:44:
                    13:e0:af:69:aa:ab:dd:d3:6a:b1:95:29:af:70:00:
                    ae:22:76:1b:0b:74:25:a7:12:d4:79:70:8b:42:17:
                    4e:90:79:1a:5b:b0:8d:a8:ad:41:66:3c:ab:f4:99:
                    8d:6e:4a:75:42:80:e1:e1:61:27:8c:ff:74:44:91:
                    e1:8f:1e:cf:23:37:35:e6:60:6a:5d:dd:fb:5d:50:
                    c4:7d:89:53:fd:46:ce:69:1e:4a:22:a2:37:ef:56:
                    80:e5:cb:54:c6:20:da:02:f7:f5:cd:72:95:80:44:
                    ef:22:d9:72:df:56:fc:0b:e6:d0:84:32:83:33:78:
                    02:29:f6:16:8c:75:5d:32:45:35:e8:69:57:5f:62:
                    be:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2F:0A:E2:C8:E5:61:C5:E6:D0:D2:9D:CB:E2:C8:11:55:15:44:A9
            X509v3 Authority Key Identifier:
                keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:23:a8:51:c2:7b:ca:58:c2:7a:bc:46:f0:40:2a:5e:86:11:
         73:98:c2:3d:7c:30:a3:5e:f2:7d:be:08:47:64:47:0a:75:4a:
         9c:58:ea:41:db:dc:3d:fd:3c:4d:ea:d8:93:70:42:cf:f7:9b:
         39:a4:68:01:d3:7b:c5:34:73:db:26:9a:41:00:3b:ab:a5:28:
         3e:3a:dd:d7:d2:58:60:ba:0f:2f:0c:88:ec:4a:29:c9:28:a3:
         15:fb:4d:fb:6c:5d:bc:70:e7:ae:fb:8a:71:55:51:54:07:a0:
         40:b3:e6:aa:ae:6e:1c:ea:8e:fe:65:98:1d:e2:9e:45:3c:09:
         bb:4a:c9:1c:82:93:77:7a:c5:50:67:d6:59:87:9a:57:38:3b:
         ee:8d:70:cc:32:0e:ad:a6:51:a4:4e:44:53:46:7c:f6:47:60:
         3d:aa:7a:42:70:37:ef:35:26:1c:dd:c4:56:91:a0:8d:f9:12:
         2f:47:c2:4d:48:f3:22:2c:6c:df:63:e1:03:a8:07:0a:c2:47:
         8a:d0:65:32:f7:16:5f:b6:f5:5c:e8:a3:c4:2b:7f:50:c9:75:
         fa:0c:7e:71:f2:8c:66:41:b4:06:b5:35:ef:7e:32:0d:a2:97:
         e5:31:35:18:fe:e1:7b:31:d4:d3:c1:59:10:ce:8a:61:9f:70:
         0e:31:64:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3fxEw5cHRn+rjuOBs6phf7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1Njc2OWE0MmU0NDI2NmYwMzdlY2IzOTBkNDExNWZlYmUz
ODYxYTQwHhcNMjYwNDMwMTkwMTE2WhcNMjYwNTAxMTkwMTE2WjAzMTEwLwYDVQQD
Eyg4NzJmMGFlMmM4ZTU2MWM1ZTZkMGQyOWRjYmUyYzgxMTU1MTU0NGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IBEOjrOKvrq8uqznr+Q+wBAtFOt
FKx4/uqAcBwjDI+9xWam/m8uAsAy51Val/v/ubSOlwgPUP7cK1glPsizQZEhQE1u
dJ0LN86n769geHciz7TNzc9FTVM7Dktvqyn/NPLmt3yB66DeHY0z6nMZUgGTJGNT
FEQT4K9pqqvd02qxlSmvcACuInYbC3QlpxLUeXCLQhdOkHkaW7CNqK1BZjyr9JmN
bkp1QoDh4WEnjP90RJHhjx7PIzc15mBqXd37XVDEfYlT/UbOaR5KIqI371aA5ctU
xiDaAvf1zXKVgETvItly31b8C+bQhDKDM3gCKfYWjHVdMkU16GlXX2K+hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcvCuLI5WHF5tDSncviyBFVFUSpMB8GA1UdIwQY
MBaAFPVnaaQuRCZvA37LOQ1BFf6+OGGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMWQyZmQtNGRiZC00MzYyLWFjN2It
N2EzZmZiMDBiNzE2LzEvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hMWQyZmQtNGRiZC00MzYyLWFjN2ItN2EzZmZiMDBiNzE2
LzEvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAyOoUcJ7
yljCerxG8EAqXoYRc5jCPXwwo17yfb4IR2RHCnVKnFjqQdvcPf08TerYk3BCz/eb
OaRoAdN7xTRz2yaaQQA7q6UoPjrd19JYYLoPLwyI7EopySijFftN+2xdvHDnrvuK
cVVRVAegQLPmqq5uHOqO/mWYHeKeRTwJu0rJHIKTd3rFUGfWWYeaVzg77o1wzDIO
raZRpE5EU0Z89kdgPap6QnA37zUmHN3EVpGgjfkSL0fCTUjzIixs32PhA6gHCsJH
itBlMvcWX7b1XOijxCt/UMl1+gx+cfKMZkG0BrU1734yDaKX5TE1GP7hezHU08FZ
EM6KYZ9wDjFkjA==
-----END CERTIFICATE-----
Generated at Thu Apr 30 23:41:29 2026 by rpki-client