Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
File:                     S-CVOnswPWoemgKHFgwvRg8H8iY.mft (raw, json)
Hash identifier:          XjcemzW+fkc+sGALfmPJTLLHrpBP9wSMT0lD5AqmK8w=
Subject key identifier:   CC:DA:46:32:39:B6:FC:FD:7B:54:A5:41:B1:1D:D0:D1:83:A3:80:71
Authority key identifier: 4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
Certificate issuer:       /CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Certificate serial:       019D9818BF00E092BC0021D92242F712A746
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
Manifest number:          1794
Signing time:             Thu 16 Apr 2026 21:00:51 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:51 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:51 +0000
Files and hashes:         1: S-CVOnswPWoemgKHFgwvRg8H8iY.crl (hash: 4LCsTFwiKOfCcPspVp9VLv+gDa4bBpC/QS51nZgV4o4=)
                          2: jHBsMIq_X95A0zcUUfrUU1TqRyA.roa (hash: di3dTOJ0E+QggdsPKZ6fs3tupenGj8s6a2rjVQo/JqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:bf:00:e0:92:bc:00:21:d9:22:42:f7:12:a7:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
        Validity
            Not Before: Apr 16 21:00:51 2026 GMT
            Not After : Apr 17 21:00:51 2026 GMT
        Subject: CN=ccda463239b6fcfd7b54a541b11dd0d183a38071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:75:8e:ed:32:fe:56:03:33:e8:fd:97:1d:07:
                    6f:f7:dc:66:bb:8b:e9:3e:83:a8:08:ed:8a:8e:6b:
                    7f:ca:15:89:ea:fb:d7:e7:35:ab:91:6b:ca:d5:6e:
                    96:3c:de:86:6a:99:8d:6b:1b:1f:51:1e:08:e3:fa:
                    c3:a9:8b:97:9c:05:de:02:88:58:d8:df:8f:50:a1:
                    fb:fb:9a:46:de:70:89:b5:c0:7f:b5:47:f2:92:a0:
                    84:20:de:7a:b7:ee:da:10:bd:15:93:3b:7c:78:e6:
                    b1:dc:63:40:9d:2e:7d:58:28:7a:cd:42:d0:19:70:
                    57:6f:b4:be:c0:f3:74:0c:13:1f:66:68:d1:51:7c:
                    3e:47:63:02:ee:f8:13:c3:02:ae:ac:f7:63:44:44:
                    8c:19:cc:70:21:c3:24:86:79:f5:07:54:7e:51:3f:
                    d3:1a:cc:7a:d7:a2:ea:4e:e5:4d:2e:bb:21:5f:2c:
                    f5:85:04:e9:c6:16:1e:fb:62:7a:fb:75:03:50:06:
                    ca:31:c4:63:df:82:02:ff:d3:b5:34:57:6c:79:e7:
                    be:96:9c:06:cf:e0:8a:6c:e2:fa:f3:a7:9f:7a:8d:
                    9d:7e:df:21:db:53:54:2a:8f:80:72:3d:9a:6b:58:
                    83:48:1f:71:a4:9f:25:c3:7c:80:72:88:23:d2:71:
                    1c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DA:46:32:39:B6:FC:FD:7B:54:A5:41:B1:1D:D0:D1:83:A3:80:71
            X509v3 Authority Key Identifier:
                keyid:4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:22:6e:42:b0:ea:82:0d:a3:4d:fc:d5:ef:8c:b2:20:a1:c6:
         e5:98:eb:55:88:d3:cf:38:30:65:55:d9:47:e9:55:08:76:85:
         e3:b7:e8:cb:53:4d:1d:be:8b:6f:63:89:13:94:d7:1b:f3:39:
         cf:6b:5e:4c:a2:ef:ed:ea:28:2c:f8:df:14:14:8a:82:80:a2:
         df:1a:4e:9a:b4:7b:31:d1:43:bc:da:60:38:d3:99:49:d5:38:
         0f:7d:0c:af:24:82:63:42:ec:5b:68:b3:de:b2:59:97:7f:fb:
         99:9b:33:f6:a2:9e:29:f2:0f:d6:c1:d6:0f:61:24:01:7f:80:
         22:32:39:8f:f4:d1:9f:f6:dd:15:d2:36:c3:ad:f6:1a:be:d1:
         58:71:71:be:e5:40:a9:d1:67:a5:7e:4f:6e:51:97:0f:27:b9:
         9a:d3:fd:f1:58:1a:95:ec:f6:65:e1:2e:f6:74:f3:9e:ab:f5:
         60:af:a3:6c:8f:20:31:47:ce:e9:c7:58:1d:3a:3f:bb:3f:b0:
         1d:a3:10:ec:fa:e1:e3:82:40:15:b7:5d:23:43:3e:30:9e:dc:
         c5:73:3f:aa:60:28:67:92:31:61:97:7a:34:10:20:9d:f9:eb:
         d2:cb:d9:ed:cd:46:4c:07:de:9c:05:11:4a:03:5a:68:ba:05:
         01:a6:49:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGL8A4JK8ACHZIkL3EqdGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZTA5NTNhN2IzMDNkNmExZTlhMDI4NzE2MGMyZjQ2MGYw
N2YyMjYwHhcNMjYwNDE2MjEwMDUxWhcNMjYwNDE3MjEwMDUxWjAzMTEwLwYDVQQD
EyhjY2RhNDYzMjM5YjZmY2ZkN2I1NGE1NDFiMTFkZDBkMTgzYTM4MDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13WO7TL+VgMz6P2XHQdv99xmu4vp
PoOoCO2Kjmt/yhWJ6vvX5zWrkWvK1W6WPN6GapmNaxsfUR4I4/rDqYuXnAXeAohY
2N+PUKH7+5pG3nCJtcB/tUfykqCEIN56t+7aEL0Vkzt8eOax3GNAnS59WCh6zULQ
GXBXb7S+wPN0DBMfZmjRUXw+R2MC7vgTwwKurPdjRESMGcxwIcMkhnn1B1R+UT/T
Gsx616LqTuVNLrshXyz1hQTpxhYe+2J6+3UDUAbKMcRj34IC/9O1NFdseee+lpwG
z+CKbOL686efeo2dft8h21NUKo+Acj2aa1iDSB9xpJ8lw3yAcogj0nEcKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzaRjI5tvz9e1SlQbEd0NGDo4BxMB8GA1UdIwQY
MBaAFEvglTp7MD1qHpoChxYML0YPB/ImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy1DVk9uc3dQV29lbWdLSEZnd3ZSZzhIOGlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lNDVjNTItMTcxZi00YzVjLWFiZTgt
ZWU5NmQwZGYwMDAzLzEvUy1DVk9uc3dQV29lbWdLSEZnd3ZSZzhIOGlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9lNDVjNTItMTcxZi00YzVjLWFiZTgtZWU5NmQwZGYwMDAz
LzEvUy1DVk9uc3dQV29lbWdLSEZnd3ZSZzhIOGlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJSJuQrDq
gg2jTfzV74yyIKHG5ZjrVYjTzzgwZVXZR+lVCHaF47foy1NNHb6Lb2OJE5TXG/M5
z2teTKLv7eooLPjfFBSKgoCi3xpOmrR7MdFDvNpgONOZSdU4D30MrySCY0LsW2iz
3rJZl3/7mZsz9qKeKfIP1sHWD2EkAX+AIjI5j/TRn/bdFdI2w632Gr7RWHFxvuVA
qdFnpX5PblGXDye5mtP98Vgalez2ZeEu9nTznqv1YK+jbI8gMUfO6cdYHTo/uz+w
HaMQ7Prh44JAFbddI0M+MJ7cxXM/qmAoZ5IxYZd6NBAgnfnr0svZ7c1GTAfenAUR
SgNaaLoFAaZJQg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:54:42 2026 by rpki-client