Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
File:                     H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft (raw, json)
Hash identifier:          K+UVgc6HxwM3LihNZnYq/Rkt+dRgxA52LhsAFc2qwac=
Subject key identifier:   17:CA:19:7F:43:47:4F:8D:46:E9:57:54:C1:CC:F3:7B:8C:AE:85:40
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Certificate issuer:       /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial:       019DA3419598F48919A26BC371760BCC5B9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
Manifest number:          18E1
Signing time:             Sun 19 Apr 2026 01:01:17 +0000
Manifest this update:     Sun 19 Apr 2026 01:01:17 +0000
Manifest next update:     Mon 20 Apr 2026 01:01:17 +0000
Files and hashes:         1: BMPT7NzV-DRi_JSyLfbyEmpeKTA.asa (hash: 15wpV31R6UH9KqtLpqrDAtPxo5M+xz55jsCaBxJ8PWk=)
                          2: H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl (hash: 6ilrYZx0M1pe4whzUqWkDLa/Ur0gpsJUBptD9vVe4IY=)
                          3: RoJCbChu4UCP6HbU25IvOtcjfaQ.roa (hash: ZExXuwYNhboyV3wplBFPIwIw4SZUYPtrZTHjOMct0iE=)
                          4: TCMNO3-CS_Nx-NPlLu6HlbDn--Y.roa (hash: JY2kbXROkO8FWfujlDIjurbZxxm0qrKzSX4v6ycpeWY=)
                          5: X5485C7ZqsWTqkySl5Kn8ckUA60.roa (hash: w+70iAnq3DeMprlSCHwSgxGyujS0yHyNG0DURrrh5ls=)
                          6: Zl6fGzQYTOHjw4PolDvPxgAOgoQ.roa (hash: GhUA9dcCQFJ4Ezs37D2x3nBwq7ffRWZrt0wbE9KxdKY=)
                          7: aPxKVSvNRXkuueNUo0oD6qVAbdI.roa (hash: 61RoVPH2gZzr7aCEfyXLcJOn37DXu2XNDfa7Kms2beA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 01:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:41:95:98:f4:89:19:a2:6b:c3:71:76:0b:cc:5b:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
        Validity
            Not Before: Apr 19 01:01:17 2026 GMT
            Not After : Apr 20 01:01:17 2026 GMT
        Subject: CN=17ca197f43474f8d46e95754c1ccf37b8cae8540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:81:05:39:5b:3c:eb:c1:2e:62:7e:d5:3e:b1:
                    96:b0:15:6a:1b:43:c8:f8:6b:69:7f:ad:d4:a3:4e:
                    34:09:cb:d0:63:b0:2a:85:6f:4a:c3:4a:ba:94:bf:
                    86:bc:fd:b3:3f:ab:e5:50:cb:5d:a7:f7:6b:da:5f:
                    be:0d:f3:89:28:ae:c2:46:61:95:ce:7b:f5:6b:c6:
                    bb:f5:db:0d:d8:44:32:8b:b9:7b:24:05:76:25:9c:
                    25:d9:20:e6:3b:0e:17:c5:1d:8a:78:4d:05:9e:94:
                    7e:91:88:e1:35:f9:89:74:4f:d8:3c:c2:7d:5f:de:
                    cb:68:29:8c:2d:96:72:6f:30:0b:c9:8d:5a:24:d4:
                    ed:24:29:1e:af:48:ae:a5:32:c0:58:d7:77:81:08:
                    ff:6c:79:50:91:d7:4a:43:d6:18:ad:c3:b7:21:92:
                    4f:0e:00:ea:9f:a3:a4:21:cc:42:53:0a:cf:e7:4b:
                    fc:e8:ec:7b:b0:6b:52:ed:b1:18:3b:66:5a:5a:92:
                    3c:9a:23:50:14:c7:e3:d5:16:39:57:98:3d:a5:2c:
                    a7:39:45:ec:d2:84:ca:e0:81:3d:cf:a4:34:8a:91:
                    ad:e2:56:62:0c:1f:48:b3:91:d3:34:4d:c4:8c:ee:
                    ce:07:e0:ae:ff:27:ce:83:c4:f3:5f:e8:65:09:65:
                    58:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:CA:19:7F:43:47:4F:8D:46:E9:57:54:C1:CC:F3:7B:8C:AE:85:40
            X509v3 Authority Key Identifier:
                keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:34:a0:5a:5a:04:16:25:d4:ea:ab:21:09:fc:e8:d3:82:9c:
         ff:e8:4a:9b:59:04:75:98:0a:68:56:24:3d:17:77:1e:20:49:
         e5:d3:ec:ed:df:d8:ff:bd:02:c2:f3:4e:43:15:50:be:b9:5e:
         d3:8d:89:6a:32:d1:c4:8b:70:23:05:01:24:5f:3c:ac:0c:0d:
         27:58:a9:9f:ab:ff:dd:46:ff:ce:e6:de:15:86:0b:3a:d2:97:
         74:48:3e:21:f2:bf:99:11:23:8a:f2:34:ba:de:c6:07:6b:6d:
         48:c3:78:fd:16:83:8e:0c:5c:e8:b6:83:84:63:24:77:fe:ce:
         e2:cc:24:13:be:62:09:4d:05:83:ff:0c:7d:f2:51:61:c7:d0:
         cb:08:2b:63:04:2f:36:40:de:86:bc:7f:e6:38:d8:4f:8d:10:
         3c:4d:72:31:af:c1:97:5c:54:1c:c4:31:0e:16:ff:d1:fb:eb:
         dd:ab:47:e0:66:07:61:d3:81:7d:cd:b0:13:11:d6:3e:b3:d8:
         38:ca:88:36:cb:76:a7:56:11:94:9a:0a:e5:62:f9:bf:1f:80:
         58:b7:0e:38:3d:4a:93:3f:4a:92:9f:69:2a:13:2d:bd:ec:d1:
         29:2f:35:da:6d:76:58:f8:a2:99:c7:de:21:93:4f:61:c3:4f:
         c1:ff:33:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jQZWY9IkZomvDcXYLzFuaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNjFhYTVkMWJlZmQ3YTBmZTNlNGRmZTNhYThkYTczZWZj
ZmJhMzQwHhcNMjYwNDE5MDEwMTE3WhcNMjYwNDIwMDEwMTE3WjAzMTEwLwYDVQQD
EygxN2NhMTk3ZjQzNDc0ZjhkNDZlOTU3NTRjMWNjZjM3YjhjYWU4NTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoEFOVs868EuYn7VPrGWsBVqG0PI
+Gtpf63Uo040CcvQY7AqhW9Kw0q6lL+GvP2zP6vlUMtdp/dr2l++DfOJKK7CRmGV
znv1a8a79dsN2EQyi7l7JAV2JZwl2SDmOw4XxR2KeE0FnpR+kYjhNfmJdE/YPMJ9
X97LaCmMLZZybzALyY1aJNTtJCker0iupTLAWNd3gQj/bHlQkddKQ9YYrcO3IZJP
DgDqn6OkIcxCUwrP50v86Ox7sGtS7bEYO2ZaWpI8miNQFMfj1RY5V5g9pSynOUXs
0oTK4IE9z6Q0ipGt4lZiDB9Is5HTNE3EjO7OB+Cu/yfOg8TzX+hlCWVYuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfKGX9DR0+NRulXVMHM83uMroVAMB8GA1UdIwQY
MBaAFB9hql0b79eg/j5N/jqo2nPvz7o0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYWQ0MTQtM2RmMS00YjM4LTg2OWUt
YzYyMWU4ZGY5NWZmLzEvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wYWQ0MTQtM2RmMS00YjM4LTg2OWUtYzYyMWU4ZGY5NWZm
LzEvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzSgWloE
FiXU6qshCfzo04Kc/+hKm1kEdZgKaFYkPRd3HiBJ5dPs7d/Y/70CwvNOQxVQvrle
042JajLRxItwIwUBJF88rAwNJ1ipn6v/3Ub/zubeFYYLOtKXdEg+IfK/mREjivI0
ut7GB2ttSMN4/RaDjgxc6LaDhGMkd/7O4swkE75iCU0Fg/8MffJRYcfQywgrYwQv
NkDehrx/5jjYT40QPE1yMa/Bl1xUHMQxDhb/0fvr3atH4GYHYdOBfc2wExHWPrPY
OMqINst2p1YRlJoK5WL5vx+AWLcOOD1Kkz9Kkp9pKhMtvezRKS812m12WPiimcfe
IZNPYcNPwf8zCw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:56:57 2026 by rpki-client