Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
File:                     j9V6dd1-lSvuKDk11t8pJdKCoHA.mft (raw, json)
Hash identifier:          VIiM2zxbQB7wpPiPxRePZB7D5gr4qmpQxEp7AgEhPqc=
Subject key identifier:   A0:7D:D6:7E:26:25:41:74:FF:46:62:57:1F:81:C7:EB:72:17:B5:AE
Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
Certificate issuer:       /CN=8fd57a75dd7e952bee283935d6df2925d282a070
Certificate serial:       019D98BE0E87DE999D6932D244482617D020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
Manifest number:          1849
Signing time:             Fri 17 Apr 2026 00:01:25 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:25 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:25 +0000
Files and hashes:         1: 1-ProWPAo3xOPAlfLXyHl2FoLaSQ.roa (hash: UipbPGi/LNsdDzSZcU72FThIZcRNZgYBDRQICzZQdtI=)
                          2: TxAodq-PWJbB0yRlZgotd8wKMYY.roa (hash: B1bJrRcIm/UVOcci99q39RXXf3qdHKs7kJRjCqO0v8g=)
                          3: _1Cvu-C3Eeb74QQ01oJI3VbAErk.roa (hash: veWk/S2496THUfG9z5Kmti3rd3m5NbM9tA+VyMVoV+s=)
                          4: gqRQBpLK3zXQTfzBnWEhQSsGto0.roa (hash: qD6m/RkAZJfynFeSG5lvjcc7zHJ2to6IwFe26TyaUJs=)
                          5: j9V6dd1-lSvuKDk11t8pJdKCoHA.crl (hash: YzsSA1/iIpLYjHPq36SrCTWLlZ7mvFDqBXpugdQncYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:be:0e:87:de:99:9d:69:32:d2:44:48:26:17:d0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070
        Validity
            Not Before: Apr 17 00:01:25 2026 GMT
            Not After : Apr 18 00:01:25 2026 GMT
        Subject: CN=a07dd67e26254174ff4662571f81c7eb7217b5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:68:45:34:87:b1:a3:c7:71:57:da:60:7c:31:
                    e0:f9:a0:1d:5f:0b:af:45:f8:0b:87:12:5e:a9:4a:
                    ab:d9:58:78:48:84:4e:30:27:88:41:a1:52:51:ec:
                    b0:3d:f1:9e:14:d6:61:86:92:8d:ad:0a:a9:43:53:
                    60:d2:08:7a:35:60:8a:8f:6b:e2:4a:1e:74:f9:bd:
                    64:6c:47:82:63:c3:0c:63:1b:2c:ea:68:3f:bf:55:
                    33:ac:7a:03:44:0b:61:ab:89:2e:64:33:67:cb:bb:
                    bc:f4:3b:0f:2a:ab:7e:06:87:8b:69:5b:4f:19:c4:
                    2c:4e:43:53:d8:7e:24:2b:2e:1c:37:93:65:66:a2:
                    34:bb:dd:ea:47:9e:43:22:a9:88:f2:aa:97:59:5e:
                    9d:6a:1e:a3:a6:3c:87:32:55:a1:34:bc:0d:8f:97:
                    ed:25:c5:01:cb:7f:42:d2:62:31:14:9f:79:f9:99:
                    10:2a:af:ba:95:03:a6:6b:e7:cc:12:83:17:34:b7:
                    fd:4d:52:89:4d:2f:cc:aa:ce:47:61:25:77:a0:84:
                    03:e4:b1:1a:65:f0:b1:fd:b0:ad:f1:2b:76:d6:a7:
                    1d:f2:54:1d:34:09:5b:17:68:bb:44:75:50:d1:9f:
                    c6:09:1c:c3:b0:05:3f:ba:bc:57:ca:7d:05:bd:13:
                    d3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:7D:D6:7E:26:25:41:74:FF:46:62:57:1F:81:C7:EB:72:17:B5:AE
            X509v3 Authority Key Identifier:
                keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b5:22:ee:20:e8:b6:ce:60:df:19:b5:d6:44:07:82:45:f3:
         f5:e0:1e:ab:d9:24:74:b5:9d:19:ac:f1:4a:d7:2a:22:65:7e:
         36:f3:bf:01:61:a2:cd:67:b6:98:46:30:b1:17:9f:ce:46:19:
         f6:2a:dd:82:74:a3:21:a7:ab:a0:fa:d7:8e:fb:36:ad:34:c4:
         25:a1:1e:c0:32:3e:35:4d:5a:cc:eb:21:12:be:b0:d2:34:37:
         2d:c7:2c:e1:8b:68:48:f7:ed:00:9c:b4:53:d4:5d:ff:25:bd:
         bf:77:b6:8b:7c:d6:f5:db:97:f7:ef:bd:85:17:e5:81:87:95:
         ba:a2:0a:1f:19:e5:08:d2:e1:25:f7:35:de:3b:97:d0:b7:e5:
         4a:d2:e8:24:3d:40:ec:ab:54:35:7a:46:9e:d9:44:45:3a:b7:
         0c:f3:b8:6d:fe:91:71:c9:b3:da:c7:e8:c4:2a:33:10:e0:9d:
         8c:3d:83:23:f8:00:b3:c3:6b:36:33:12:e9:35:6e:7e:67:5b:
         35:ac:96:5a:7b:38:3b:63:4e:b3:9c:7f:d6:5b:0f:92:8b:a4:
         2e:ed:a2:37:81:84:18:b5:c7:7e:e4:d3:29:b0:0e:c9:45:99:
         43:3a:99:b8:6d:9d:d8:11:5f:27:53:a9:ae:04:26:ef:61:01:
         9f:38:fe:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yvg6H3pmdaTLSREgmF9AgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZDU3YTc1ZGQ3ZTk1MmJlZTI4MzkzNWQ2ZGYyOTI1ZDI4
MmEwNzAwHhcNMjYwNDE3MDAwMTI1WhcNMjYwNDE4MDAwMTI1WjAzMTEwLwYDVQQD
EyhhMDdkZDY3ZTI2MjU0MTc0ZmY0NjYyNTcxZjgxYzdlYjcyMTdiNWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2hFNIexo8dxV9pgfDHg+aAdXwuv
RfgLhxJeqUqr2Vh4SIROMCeIQaFSUeywPfGeFNZhhpKNrQqpQ1Ng0gh6NWCKj2vi
Sh50+b1kbEeCY8MMYxss6mg/v1UzrHoDRAthq4kuZDNny7u89DsPKqt+BoeLaVtP
GcQsTkNT2H4kKy4cN5NlZqI0u93qR55DIqmI8qqXWV6dah6jpjyHMlWhNLwNj5ft
JcUBy39C0mIxFJ95+ZkQKq+6lQOma+fMEoMXNLf9TVKJTS/Mqs5HYSV3oIQD5LEa
ZfCx/bCt8St21qcd8lQdNAlbF2i7RHVQ0Z/GCRzDsAU/urxXyn0FvRPTmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKB91n4mJUF0/0ZiVx+Bx+tyF7WuMB8GA1UdIwQY
MBaAFI/VenXdfpUr7ig5NdbfKSXSgqBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajlWNmRkMS1sU3Z1S0RrMTF0OHBKZEtDb0hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zOWQ0YjUtYjVjOS00ODBhLTk0MDUt
ZDlhNTM5YjhiN2FkLzEvajlWNmRkMS1sU3Z1S0RrMTF0OHBKZEtDb0hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zOWQ0YjUtYjVjOS00ODBhLTk0MDUtZDlhNTM5YjhiN2Fk
LzEvajlWNmRkMS1sU3Z1S0RrMTF0OHBKZEtDb0hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7Ui7iDo
ts5g3xm11kQHgkXz9eAeq9kkdLWdGazxStcqImV+NvO/AWGizWe2mEYwsRefzkYZ
9irdgnSjIaeroPrXjvs2rTTEJaEewDI+NU1azOshEr6w0jQ3Lccs4YtoSPftAJy0
U9Rd/yW9v3e2i3zW9duX9++9hRflgYeVuqIKHxnlCNLhJfc13juX0LflStLoJD1A
7KtUNXpGntlERTq3DPO4bf6Rccmz2sfoxCozEOCdjD2DI/gAs8NrNjMS6TVufmdb
NayWWns4O2NOs5x/1lsPkoukLu2iN4GEGLXHfuTTKbAOyUWZQzqZuG2d2BFfJ1Op
rgQm72EBnzj+ag==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:27:55 2026 by rpki-client