Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
File:                     2amIkW1RQG-aJp8woC0AhrV_TVo.mft (raw, json)
Hash identifier:          b1DhvoDItRiJ7zoje5avyMsPz1WHvZ7G5Rd+Ba5LEdU=
Subject key identifier:   79:B5:9E:FF:25:FF:11:ED:0C:8D:B7:32:48:AB:40:8E:83:91:D9:0C
Authority key identifier: D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
Certificate issuer:       /CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Certificate serial:       019DCCAB7B81C8465F989AC5C755C3A9BBE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
Manifest number:          15DB
Signing time:             Mon 27 Apr 2026 02:01:23 +0000
Manifest this update:     Mon 27 Apr 2026 02:01:23 +0000
Manifest next update:     Tue 28 Apr 2026 02:01:23 +0000
Files and hashes:         1: 2amIkW1RQG-aJp8woC0AhrV_TVo.crl (hash: mnUDuaP2QNg7R9WhNEdSsPo8PZ0yMige8siEC1ZovcY=)
                          2: FZlBOz2gFwzrDKVZ6gMchrb7teE.roa (hash: EuuVBUMpYSozzMT++aJ7DLlwFhh2sATMKgkOl8ndakk=)
                          3: K7KxlLY2WatJsywG92R4ecjbJts.roa (hash: 8xdVDeeroKkICVR29LmlWFlFnGabZ7Twpz4B/6DfSks=)
                          4: NDgqCtDrOUYcmZnr7ZqMrN3yeTM.roa (hash: aFsHKPD3aDqi8AsyYFkl+KwMr/91eKpghE7dmjN+xQ4=)
                          5: Xpg7_54CQOeG7QycRDw4ah5iMNs.roa (hash: dqDW8tmSmWAQ4qkHZYDnkpUDNy/teMQGCc2EetkL07I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cc:ab:7b:81:c8:46:5f:98:9a:c5:c7:55:c3:a9:bb:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
        Validity
            Not Before: Apr 27 02:01:23 2026 GMT
            Not After : Apr 28 02:01:23 2026 GMT
        Subject: CN=79b59eff25ff11ed0c8db73248ab408e8391d90c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ae:44:22:43:92:3e:eb:9a:a2:d3:3c:5c:c6:
                    86:8f:8c:14:8a:47:2a:31:c6:86:8b:14:cd:e5:18:
                    c0:75:40:d0:55:4f:8e:b6:9e:22:39:3d:38:16:e2:
                    8b:eb:ea:31:4f:a9:98:fc:d9:9e:90:d9:9b:09:8e:
                    18:2e:45:a6:4a:bb:2e:ed:c7:31:c4:53:79:a5:08:
                    4a:f7:6d:5f:77:53:98:63:27:69:0a:b2:8d:ac:c6:
                    d0:59:c2:90:c1:3b:2f:6f:70:28:7b:17:18:1d:c6:
                    9a:36:98:b3:01:9f:21:b5:e9:39:39:5f:34:24:90:
                    5e:60:f2:89:86:a9:fe:59:54:25:78:75:56:ab:c3:
                    d4:1d:f3:64:94:90:48:f0:68:05:e7:85:af:58:3b:
                    6a:59:a9:4f:15:cd:f5:5a:9d:f2:7b:5d:12:a9:07:
                    8a:49:9d:b4:51:8b:d7:ae:16:2c:78:cb:d9:3e:49:
                    4e:40:e2:bb:b3:a8:b7:0b:6a:cb:8a:e0:ff:bf:3e:
                    1b:77:58:11:bc:58:4d:64:6c:59:b9:16:96:1a:95:
                    a7:b3:ff:b3:df:39:61:db:38:78:ed:06:9a:1c:85:
                    62:12:b7:21:1c:b0:ea:17:19:15:1c:6c:2f:17:c3:
                    8c:82:2f:70:82:d4:c6:de:95:34:16:d2:72:fa:4a:
                    44:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B5:9E:FF:25:FF:11:ED:0C:8D:B7:32:48:AB:40:8E:83:91:D9:0C
            X509v3 Authority Key Identifier:
                keyid:D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d1:8b:8f:e4:66:92:08:cc:ab:ce:dc:83:03:63:07:8c:a5:
         46:f4:6e:9c:ce:48:0c:16:96:4d:bc:67:c0:54:44:57:df:68:
         8a:90:f2:50:ef:95:fa:f9:f8:64:c6:df:d3:bc:e2:79:bb:6a:
         bb:cf:05:fd:9b:f0:2e:8e:28:55:2b:02:35:a8:c8:29:be:6f:
         29:7e:d4:c5:d9:35:a3:ab:5c:14:24:8a:43:56:77:30:64:e8:
         fc:1a:92:c3:71:c5:9a:22:69:5f:5c:f9:6b:20:85:ed:ab:96:
         91:a1:b7:92:4b:1c:53:0f:09:67:a1:e0:f6:71:24:b5:34:d2:
         41:06:53:0f:3c:0e:f7:58:f1:ca:fe:ca:b0:e2:c7:39:25:2d:
         03:94:df:b0:bc:a1:a0:54:dd:b6:b6:d9:1f:d6:be:a9:be:43:
         c8:b5:fb:b4:e2:a6:c9:55:7a:22:23:3e:e1:85:e7:a5:08:7b:
         47:fd:df:c9:cf:00:c9:5f:5d:ad:59:c5:39:ef:88:6e:2f:75:
         a7:4d:59:60:db:c4:21:9c:65:b2:ed:5f:7f:8c:b6:ec:84:73:
         e2:54:92:e8:77:8b:99:9e:8c:34:03:fe:ef:b8:bd:0d:45:76:
         6a:2f:ba:db:bb:53:e9:12:48:d1:a2:cf:d2:35:c9:c5:f5:82:
         31:a4:98:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Mq3uByEZfmJrFx1XDqbvpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YTk4ODkxNmQ1MTQwNmY5YTI2OWYzMGEwMmQwMDg2YjU3
ZjRkNWEwHhcNMjYwNDI3MDIwMTIzWhcNMjYwNDI4MDIwMTIzWjAzMTEwLwYDVQQD
Eyg3OWI1OWVmZjI1ZmYxMWVkMGM4ZGI3MzI0OGFiNDA4ZTgzOTFkOTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt65EIkOSPuuaotM8XMaGj4wUikcq
McaGixTN5RjAdUDQVU+Otp4iOT04FuKL6+oxT6mY/NmekNmbCY4YLkWmSrsu7ccx
xFN5pQhK921fd1OYYydpCrKNrMbQWcKQwTsvb3AoexcYHcaaNpizAZ8htek5OV80
JJBeYPKJhqn+WVQleHVWq8PUHfNklJBI8GgF54WvWDtqWalPFc31Wp3ye10SqQeK
SZ20UYvXrhYseMvZPklOQOK7s6i3C2rLiuD/vz4bd1gRvFhNZGxZuRaWGpWns/+z
3zlh2zh47QaaHIViErchHLDqFxkVHGwvF8OMgi9wgtTG3pU0FtJy+kpEmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHm1nv8l/xHtDI23MkirQI6DkdkMMB8GA1UdIwQY
MBaAFNmpiJFtUUBvmiafMKAtAIa1f01aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85NjJiM2YtZmMyNi00NTQ5LWFlMDIt
NGQwNDlhMWVhZjJmLzEvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy85NjJiM2YtZmMyNi00NTQ5LWFlMDItNGQwNDlhMWVhZjJm
LzEvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNGLj+Rm
kgjMq87cgwNjB4ylRvRunM5IDBaWTbxnwFREV99oipDyUO+V+vn4ZMbf07ziebtq
u88F/ZvwLo4oVSsCNajIKb5vKX7Uxdk1o6tcFCSKQ1Z3MGTo/BqSw3HFmiJpX1z5
ayCF7auWkaG3kkscUw8JZ6Hg9nEktTTSQQZTDzwO91jxyv7KsOLHOSUtA5TfsLyh
oFTdtrbZH9a+qb5DyLX7tOKmyVV6IiM+4YXnpQh7R/3fyc8AyV9drVnFOe+Ibi91
p01ZYNvEIZxlsu1ff4y27IRz4lSS6HeLmZ6MNAP+77i9DUV2ai+627tT6RJI0aLP
0jXJxfWCMaSY/w==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:17:31 2026 by rpki-client