Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
File:                     dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft (raw, json)
Hash identifier:          2RpJbVKxxXHuBbAmnpppb5TrLO9LD2OQSoiuQLrHHoc=
Subject key identifier:   BD:DD:8E:19:78:75:0D:3A:F8:25:C5:15:9B:73:65:C9:CC:59:DB:92
Authority key identifier: 74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A
Certificate issuer:       /CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
Certificate serial:       019DA1F893578747CCF1D683B231430B299C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
Manifest number:          085B
Signing time:             Sat 18 Apr 2026 19:01:55 +0000
Manifest this update:     Sat 18 Apr 2026 19:01:55 +0000
Manifest next update:     Sun 19 Apr 2026 19:01:55 +0000
Files and hashes:         1: 0PbPEQsG-kj7SoehWuyEm8KHUSs.roa (hash: PSFO3oJW97UfWkTdnQLs8C6Bk6abk9LmfHzrgXAaZBA=)
                          2: dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl (hash: DTsvrBOHWE7X0tSnqJhLYY5ESSwJgIFZu3/Sz8mokxs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 17:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a1:f8:93:57:87:47:cc:f1:d6:83:b2:31:43:0b:29:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
        Validity
            Not Before: Apr 18 19:01:55 2026 GMT
            Not After : Apr 19 19:01:55 2026 GMT
        Subject: CN=bddd8e1978750d3af825c5159b7365c9cc59db92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f2:ed:73:7a:4e:a3:aa:6e:6f:6c:c2:a3:ac:
                    5d:53:44:c8:22:e3:b8:83:8b:1a:ce:bd:61:e4:f9:
                    67:e2:41:37:da:a8:c8:95:1f:51:d8:96:7a:c3:cd:
                    97:6d:63:1b:44:64:52:99:3f:51:a1:00:bd:59:e6:
                    2c:49:c6:27:0f:46:9a:b2:74:09:e9:1c:2f:57:19:
                    da:56:c9:7a:8c:18:99:5b:4a:2f:b2:98:4c:99:94:
                    84:7b:d3:65:62:9e:33:a5:4b:fb:01:6d:7d:36:1a:
                    f6:f6:61:cf:5a:8d:fb:90:64:11:01:e1:de:8c:aa:
                    95:dc:23:87:54:f8:78:35:cb:e9:05:b1:cf:c5:7a:
                    34:1a:31:aa:43:f8:2e:36:0f:1c:f4:c1:a5:c7:99:
                    49:12:23:db:e0:73:2c:9e:a9:0a:28:c5:af:02:85:
                    bd:51:57:e4:87:a0:d9:54:3c:4b:0e:9f:71:0f:a7:
                    ca:ec:c0:63:0e:8d:64:9d:c7:ae:14:e8:5a:9d:4a:
                    64:9a:68:8c:80:7e:15:91:ed:51:a0:ea:cb:2c:ef:
                    b4:d6:9e:03:74:90:ee:c9:07:e9:b3:a3:40:e6:ff:
                    21:65:6d:e7:2c:ce:45:49:7b:82:52:f4:4b:1d:3c:
                    cc:05:50:96:f0:cf:9c:ff:9d:ad:b7:29:55:75:31:
                    c1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DD:8E:19:78:75:0D:3A:F8:25:C5:15:9B:73:65:C9:CC:59:DB:92
            X509v3 Authority Key Identifier:
                keyid:74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:17:64:b7:fb:92:f1:b6:29:f9:3b:a8:a7:8c:ae:6b:5c:a7:
         fb:64:ef:a4:11:8a:21:41:22:80:36:a4:71:50:87:69:b4:4e:
         61:35:5c:52:7f:b5:ca:ca:ec:c1:e7:24:e1:50:a3:31:03:80:
         de:a2:55:95:6e:03:90:62:91:67:6a:0f:55:0c:44:bf:68:ac:
         a1:e0:43:bb:73:7c:3e:47:3f:23:27:d5:c6:cc:5a:8a:05:ef:
         26:8b:53:20:0f:93:53:18:aa:cd:8c:4f:b6:1d:89:a1:c7:4e:
         fb:20:ca:85:ec:71:9a:3a:70:17:7d:3d:76:6e:7f:ac:d5:15:
         4e:e8:a5:70:5e:ba:c7:4a:34:78:58:65:9d:ad:0b:0b:9e:b9:
         f8:56:aa:81:31:e4:63:fd:f2:46:bc:20:56:b4:c1:3f:15:a0:
         f8:10:3b:3a:7a:66:0a:be:5d:8a:34:43:52:05:21:db:61:c4:
         f5:86:97:6c:e3:16:fb:b7:fb:9e:bc:5f:d5:67:6c:10:d1:b4:
         c0:92:eb:24:80:ab:0b:54:12:ad:a7:91:5b:47:6f:cc:93:fc:
         da:c2:b8:84:d7:19:91:3e:ba:c3:9c:41:b0:96:fc:bc:23:8e:
         25:39:d3:91:60:00:32:20:a7:1b:92:c0:5f:5e:4b:80:70:7e:
         2f:8b:9a:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2h+JNXh0fM8daDsjFDCymcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NWRiYTU2Y2YxZmZjMmNmYzFkMDVmNGZhODMzMTE3ZWZk
N2M3OGEwHhcNMjYwNDE4MTkwMTU1WhcNMjYwNDE5MTkwMTU1WjAzMTEwLwYDVQQD
EyhiZGRkOGUxOTc4NzUwZDNhZjgyNWM1MTU5YjczNjVjOWNjNTlkYjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfLtc3pOo6pub2zCo6xdU0TIIuO4
g4sazr1h5Pln4kE32qjIlR9R2JZ6w82XbWMbRGRSmT9RoQC9WeYsScYnD0aasnQJ
6RwvVxnaVsl6jBiZW0ovsphMmZSEe9NlYp4zpUv7AW19Nhr29mHPWo37kGQRAeHe
jKqV3COHVPh4NcvpBbHPxXo0GjGqQ/guNg8c9MGlx5lJEiPb4HMsnqkKKMWvAoW9
UVfkh6DZVDxLDp9xD6fK7MBjDo1knceuFOhanUpkmmiMgH4Vke1RoOrLLO+01p4D
dJDuyQfps6NA5v8hZW3nLM5FSXuCUvRLHTzMBVCW8M+c/52ttylVdTHBGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3djhl4dQ06+CXFFZtzZcnMWduSMB8GA1UdIwQY
MBaAFHRdulbPH/ws/B0F9PqDMRfv18eKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEYyNlZzOGZfQ3o4SFFYMC1vTXhGLV9YeDRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82NWQzYTQtNWNjYy00MDM3LWE4Zjgt
MGEzMjcxMTY2NWFkLzEvZEYyNlZzOGZfQ3o4SFFYMC1vTXhGLV9YeDRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82NWQzYTQtNWNjYy00MDM3LWE4ZjgtMGEzMjcxMTY2NWFk
LzEvZEYyNlZzOGZfQ3o4SFFYMC1vTXhGLV9YeDRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihdkt/uS
8bYp+Tuop4yua1yn+2TvpBGKIUEigDakcVCHabROYTVcUn+1ysrsweck4VCjMQOA
3qJVlW4DkGKRZ2oPVQxEv2isoeBDu3N8Pkc/IyfVxsxaigXvJotTIA+TUxiqzYxP
th2JocdO+yDKhexxmjpwF309dm5/rNUVTuilcF66x0o0eFhlna0LC565+FaqgTHk
Y/3yRrwgVrTBPxWg+BA7OnpmCr5dijRDUgUh22HE9YaXbOMW+7f7nrxf1WdsENG0
wJLrJICrC1QSraeRW0dvzJP82sK4hNcZkT66w5xBsJb8vCOOJTnTkWAAMiCnG5LA
X15LgHB+L4ua3w==
-----END CERTIFICATE-----
Generated at Sun Apr 19 02:12:36 2026 by rpki-client