Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
File:                     _ToehGW_xN9wCJQ3LQuYCOi2Keo.mft (raw, json)
Hash identifier:          bkQb5qudg/0RKgwKXDHcwrTbVu1RAWwSvn0zNbDC1FE=
Subject key identifier:   74:05:DD:3A:DE:65:24:DB:49:E3:C2:98:17:83:46:9E:5D:AA:33:FA
Authority key identifier: FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA
Certificate issuer:       /CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
Certificate serial:       019D99D029AC21F0856DC0EF8292EDBDA51D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
Manifest number:          18C6
Signing time:             Fri 17 Apr 2026 05:00:49 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:49 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:49 +0000
Files and hashes:         1: 1-Txs3OfJBF0-L5N04u9viiEkExs.roa (hash: yCRGF/dCmsVFPH4M1prjAs/Ch8adr1cnpUiJaDaeRHw=)
                          2: PXdVrTfvOREuwYCi1hBh_drpxXc.roa (hash: B/ByN/OVMs5NKQAves3njbZUv4VZGqQ3E5hohAeKtx4=)
                          3: UC4QXNFGsoHkQG3dZ4Gib3wh1nc.roa (hash: m8cmj611CUqDl1+NNeNnVGJqJBdqb5a0cWtJhXaEPn4=)
                          4: _ToehGW_xN9wCJQ3LQuYCOi2Keo.crl (hash: 8io7HHsNH3yxjzy7SXYUjErTWq7JV0MFq5NjQB5BhLU=)
                          5: xqdYiyOjRSciwZ2UnJ_79WalaOo.roa (hash: BhmwEyRFaLJTPcKk47g4mCuag+1KvgvlYQorDHsQN9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:29:ac:21:f0:85:6d:c0:ef:82:92:ed:bd:a5:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
        Validity
            Not Before: Apr 17 05:00:49 2026 GMT
            Not After : Apr 18 05:00:49 2026 GMT
        Subject: CN=7405dd3ade6524db49e3c2981783469e5daa33fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:27:f8:8c:18:19:99:8a:cf:96:ac:c9:84:2e:
                    52:14:e5:5a:22:6d:ae:36:57:ed:3f:38:7b:f3:dc:
                    66:f0:fd:b8:ab:aa:30:a8:bf:21:2d:b8:87:43:22:
                    79:76:fb:7a:c4:20:a3:8b:aa:35:16:7b:f9:fe:15:
                    b1:41:20:33:44:0a:5e:9e:4d:7f:3e:af:4d:73:91:
                    2c:d1:ab:f3:07:eb:1b:b2:b3:fe:14:13:34:4f:14:
                    e7:8c:bb:be:db:83:d1:c4:62:c6:56:1c:ea:18:0a:
                    7a:18:03:48:2d:ad:8c:d8:8f:21:70:40:26:e9:00:
                    02:0e:7d:c9:06:1f:e0:3b:cc:18:99:04:ba:d2:de:
                    9b:af:44:8c:0a:31:8f:b3:56:2f:00:e4:6a:9d:f2:
                    10:17:65:64:a7:0f:5c:89:f6:c6:9c:ea:fb:e1:46:
                    dd:d6:5d:0e:3b:b5:76:da:34:08:7f:94:dd:4e:ca:
                    3c:33:cd:d7:a3:3d:81:dc:b1:41:50:4a:7b:f8:13:
                    56:00:18:73:8d:1d:5b:06:02:d8:a4:08:60:e8:25:
                    49:51:b7:68:0c:6d:54:fd:b2:34:c8:16:11:50:e6:
                    c1:5c:0b:d2:6c:4b:7a:82:f1:f6:10:85:53:32:86:
                    01:b7:f5:2a:e9:62:fd:f6:1c:1f:a6:13:8a:86:70:
                    a0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:05:DD:3A:DE:65:24:DB:49:E3:C2:98:17:83:46:9E:5D:AA:33:FA
            X509v3 Authority Key Identifier:
                keyid:FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:1c:10:57:f2:06:d1:2d:fd:d8:50:8f:c4:e5:dd:a7:c2:5d:
         ac:c8:03:df:e6:60:1d:8f:68:35:68:e4:9e:4e:79:42:bf:4c:
         c6:e5:4c:87:ed:bf:c2:aa:b0:4f:7f:a1:80:60:b4:6e:52:eb:
         d0:62:f5:63:15:00:e8:0e:8e:f1:05:f5:3c:08:a3:42:ae:fc:
         50:82:29:cd:ba:c9:9e:71:1f:e9:53:56:f5:d8:7e:14:23:fd:
         1d:a0:f6:87:a3:75:95:98:3a:4d:8e:9e:a2:b8:bc:8d:d8:11:
         9e:09:a0:bb:fb:7f:94:40:ca:39:7a:29:00:1c:ce:76:97:b8:
         cc:39:ee:d3:98:19:68:13:90:65:72:a1:81:2b:fb:ca:ac:ea:
         90:f3:a2:1d:9c:67:0f:b7:4e:68:0a:f5:95:3f:d3:21:56:63:
         e2:af:88:7d:42:6d:6a:71:63:11:5a:90:cf:27:a6:ba:96:d6:
         bd:6e:fb:08:26:27:47:52:9e:57:2e:6d:60:19:4d:d0:0a:a1:
         14:c6:e2:28:b2:ab:23:14:ba:1a:96:ee:e4:84:2e:83:cd:ba:
         6b:8c:32:fb:f4:01:00:7b:5d:f9:87:f8:5b:4a:39:29:30:59:
         b0:ad:36:b0:7e:0b:bf:f7:ce:a3:d6:96:22:2c:6b:f2:2e:f3:
         f8:e9:10:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0CmsIfCFbcDvgpLtvaUdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkM2ExZTg0NjViZmM0ZGY3MDA4OTQzNzJkMGI5ODA4ZThi
NjI5ZWEwHhcNMjYwNDE3MDUwMDQ5WhcNMjYwNDE4MDUwMDQ5WjAzMTEwLwYDVQQD
Eyg3NDA1ZGQzYWRlNjUyNGRiNDllM2MyOTgxNzgzNDY5ZTVkYWEzM2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoif4jBgZmYrPlqzJhC5SFOVaIm2u
NlftPzh789xm8P24q6owqL8hLbiHQyJ5dvt6xCCji6o1Fnv5/hWxQSAzRApenk1/
Pq9Nc5Es0avzB+sbsrP+FBM0TxTnjLu+24PRxGLGVhzqGAp6GANILa2M2I8hcEAm
6QACDn3JBh/gO8wYmQS60t6br0SMCjGPs1YvAORqnfIQF2Vkpw9cifbGnOr74Ubd
1l0OO7V22jQIf5TdTso8M83Xoz2B3LFBUEp7+BNWABhzjR1bBgLYpAhg6CVJUbdo
DG1U/bI0yBYRUObBXAvSbEt6gvH2EIVTMoYBt/Uq6WL99hwfphOKhnCgWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQF3TreZSTbSePCmBeDRp5dqjP6MB8GA1UdIwQY
MBaAFP06HoRlv8TfcAiUNy0LmAjotinqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RvZWhHV194Tjl3Q0pRM0xRdVlDT2kyS2VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81MTM3MzQtYTQ4NS00YzI4LThhYTYt
OTU1NWQzMGY2ZjhmLzEvX1RvZWhHV194Tjl3Q0pRM0xRdVlDT2kyS2VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS81MTM3MzQtYTQ4NS00YzI4LThhYTYtOTU1NWQzMGY2Zjhm
LzEvX1RvZWhHV194Tjl3Q0pRM0xRdVlDT2kyS2VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArhwQV/IG
0S392FCPxOXdp8JdrMgD3+ZgHY9oNWjknk55Qr9MxuVMh+2/wqqwT3+hgGC0blLr
0GL1YxUA6A6O8QX1PAijQq78UIIpzbrJnnEf6VNW9dh+FCP9HaD2h6N1lZg6TY6e
ori8jdgRngmgu/t/lEDKOXopABzOdpe4zDnu05gZaBOQZXKhgSv7yqzqkPOiHZxn
D7dOaAr1lT/TIVZj4q+IfUJtanFjEVqQzyemupbWvW77CCYnR1KeVy5tYBlN0Aqh
FMbiKLKrIxS6Gpbu5IQug826a4wy+/QBAHtd+Yf4W0o5KTBZsK02sH4Lv/fOo9aW
Iixr8i7z+OkQKg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:43:02 2026 by rpki-client