Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
File:                     0FXguG8_USUFSGPPkmTmNG4Ju7c.mft (raw, json)
Hash identifier:          JSHMH2noar9VAd/JP0DShWW7bn0g3753GpiOzxjwL44=
Subject key identifier:   5A:90:F5:37:DB:D9:58:D8:D1:8E:C7:44:29:9D:92:30:75:42:60:FB
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Certificate issuer:       /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial:       019D98F50D719848F4977877479FDED97F24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 01:01:29 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:29 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:29 +0000
Files and hashes:         1: 0FXguG8_USUFSGPPkmTmNG4Ju7c.crl (hash: WGg7tufmzVBql1NnbI9qV4yL+kwMbDKzdzJg40VFBik=)
                          2: 1-w9c7pnS2PwsSI_8DXnKSmxWWCY.roa (hash: MtCzZ0IZEGmQ92H26BCNyGDc1iMQpeKiNKz+gparMMo=)
                          3: ghMafnCVzl3WC9e2jXdlhprt6tE.roa (hash: ogmfUJufoiGGCy+J4/nndYs1pyY6z1m58wMrPeX1rsg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:0d:71:98:48:f4:97:78:77:47:9f:de:d9:7f:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
        Validity
            Not Before: Apr 17 01:01:29 2026 GMT
            Not After : Apr 18 01:01:29 2026 GMT
        Subject: CN=5a90f537dbd958d8d18ec744299d9230754260fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c4:8e:48:01:6c:3e:6e:86:12:51:36:25:89:
                    34:a3:81:e9:4f:06:20:cc:f0:8b:c2:ad:69:71:ab:
                    17:6f:ce:9b:08:cf:56:d8:41:2a:72:79:10:7d:90:
                    f4:5a:54:05:4b:c5:21:23:a5:5d:47:ff:82:82:4e:
                    2a:57:92:a8:f9:d7:f4:9d:bd:99:ee:4c:f0:34:ad:
                    ae:22:05:f0:85:c4:8c:b8:fc:68:44:03:23:cb:1f:
                    bc:a6:dd:0d:02:fd:ea:78:1d:b8:aa:20:48:a7:5c:
                    c9:c4:25:e6:61:75:28:9f:52:56:e2:b8:49:01:d7:
                    18:4f:b4:fe:97:96:be:8c:df:8a:9c:93:2a:1a:1a:
                    d1:c1:37:63:be:2c:d8:24:65:cc:b5:74:d5:08:6e:
                    78:c5:c7:cf:02:37:a2:63:dd:92:35:c1:ec:6f:56:
                    7a:86:bc:b7:07:ed:1b:5a:77:9c:d5:0b:62:94:03:
                    12:f1:4a:94:27:90:28:d0:14:d5:51:9b:03:20:7e:
                    c8:68:72:5f:f8:e3:0a:5b:bb:c4:cc:0c:4a:1e:e3:
                    66:ea:ed:4d:47:b9:89:92:52:3c:f4:37:4f:40:c6:
                    79:14:78:d1:f9:d2:eb:91:98:21:fb:e2:03:8f:c9:
                    ed:22:5b:c2:46:6c:45:30:37:e8:0c:d7:f5:1d:0d:
                    ab:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:90:F5:37:DB:D9:58:D8:D1:8E:C7:44:29:9D:92:30:75:42:60:FB
            X509v3 Authority Key Identifier:
                keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:dc:26:1f:c7:12:a5:d9:80:5e:c5:0c:ab:98:d5:8b:20:99:
         2c:ea:72:41:44:75:02:86:d1:d5:0c:9a:7d:30:22:9c:7a:59:
         9b:d3:a3:99:99:75:15:3f:65:18:3f:8a:73:01:c6:3b:7d:d7:
         04:16:d5:c9:44:2d:df:ed:2d:78:04:a5:b1:79:55:dd:c0:76:
         37:58:5c:01:4c:c9:90:2b:29:52:04:f8:6b:88:53:b5:10:7d:
         0d:85:20:79:3d:f7:68:fa:a8:f0:19:39:be:5d:c0:34:3b:a6:
         3b:2e:14:8b:4a:c8:06:0e:dd:96:86:db:e9:3b:86:d3:23:a1:
         1b:1a:7a:4c:be:0c:c0:91:97:f0:74:ff:e5:4a:ed:65:51:26:
         53:23:2e:02:60:4b:aa:f0:47:c5:28:ff:2d:73:63:cb:6d:15:
         ec:94:4d:86:06:1e:5b:bb:81:61:4c:08:5f:5f:48:3d:74:83:
         17:78:7b:cf:bd:c6:4b:f9:ab:d1:aa:26:5e:c6:aa:37:1c:41:
         2c:b2:c5:56:d2:33:3f:ea:77:cb:fd:39:d6:00:16:dc:6b:2d:
         06:90:63:23:0a:3a:ed:b6:45:37:28:d5:7d:6a:4d:14:07:8c:
         16:45:15:50:d1:cc:3c:33:c7:44:63:3d:eb:b1:7b:7b:88:3c:
         48:f3:94:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9Q1xmEj0l3h3R5/e2X8kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNTVlMGI4NmYzZjUxMjUwNTQ4NjNjZjkyNjRlNjM0NmUw
OWJiYjcwHhcNMjYwNDE3MDEwMTI5WhcNMjYwNDE4MDEwMTI5WjAzMTEwLwYDVQQD
Eyg1YTkwZjUzN2RiZDk1OGQ4ZDE4ZWM3NDQyOTlkOTIzMDc1NDI2MGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8SOSAFsPm6GElE2JYk0o4HpTwYg
zPCLwq1pcasXb86bCM9W2EEqcnkQfZD0WlQFS8UhI6VdR/+Cgk4qV5Ko+df0nb2Z
7kzwNK2uIgXwhcSMuPxoRAMjyx+8pt0NAv3qeB24qiBIp1zJxCXmYXUon1JW4rhJ
AdcYT7T+l5a+jN+KnJMqGhrRwTdjvizYJGXMtXTVCG54xcfPAjeiY92SNcHsb1Z6
hry3B+0bWnec1QtilAMS8UqUJ5Ao0BTVUZsDIH7IaHJf+OMKW7vEzAxKHuNm6u1N
R7mJklI89DdPQMZ5FHjR+dLrkZgh++IDj8ntIlvCRmxFMDfoDNf1HQ2rgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqQ9Tfb2VjY0Y7HRCmdkjB1QmD7MB8GA1UdIwQY
MBaAFNBV4LhvP1ElBUhjz5Jk5jRuCbu3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8xY2JhOWYtY2Q2ZS00ZDEyLWE3OGQt
Zjk4YzdmZWMxOTRlLzEvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8xY2JhOWYtY2Q2ZS00ZDEyLWE3OGQtZjk4YzdmZWMxOTRl
LzEvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNwmH8cS
pdmAXsUMq5jViyCZLOpyQUR1AobR1QyafTAinHpZm9OjmZl1FT9lGD+KcwHGO33X
BBbVyUQt3+0teASlsXlV3cB2N1hcAUzJkCspUgT4a4hTtRB9DYUgeT33aPqo8Bk5
vl3ANDumOy4Ui0rIBg7dlobb6TuG0yOhGxp6TL4MwJGX8HT/5UrtZVEmUyMuAmBL
qvBHxSj/LXNjy20V7JRNhgYeW7uBYUwIX19IPXSDF3h7z73GS/mr0aomXsaqNxxB
LLLFVtIzP+p3y/051gAW3GstBpBjIwo67bZFNyjVfWpNFAeMFkUVUNHMPDPHRGM9
67F7e4g8SPOUMg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:56:03 2026 by rpki-client