Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
File:                     l4kxgrFnGJg7wAjI0If43co9hhQ.mft (raw, json)
Hash identifier:          T5G4/BtnJ4DYXwKLMmsB4/sn9iLHBD7bHz8Cj1f13Xg=
Subject key identifier:   A6:02:3E:2F:4E:E4:C2:90:39:27:DF:C5:83:AF:6C:2D:F2:D4:11:6B
Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
Certificate issuer:       /CN=97893182b16718983bc008c8d087f8ddca3d8614
Certificate serial:       019D9CD18A9FFCF15FBA51582AD1748BA3E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
Manifest number:          18C6
Signing time:             Fri 17 Apr 2026 19:01:11 +0000
Manifest this update:     Fri 17 Apr 2026 19:01:11 +0000
Manifest next update:     Sat 18 Apr 2026 19:01:11 +0000
Files and hashes:         1: 1-AA_Ym6EX8oobe6NeXk7HWy7rN8.roa (hash: 5t3UXfHRI3FdEzMfG7EasqVmyGfPVOTBzPUk3KiG+pQ=)
                          2: 4I6IeKRFTHTfCk6P0VsgUhk8zic.roa (hash: 0XVLTIXxWYyeiCe3iIXGikBSA8t/yImgovN3r1Pbd5A=)
                          3: Br6fq_1p0sOiKlI1DRwR_EbfW2E.roa (hash: WR8ZmHp+6ZanBZA6Ty89Up4dRZVpCdfJ23KhCqCS8TI=)
                          4: PT_eHk2Dy_Wh2XHSZ-ZM2UoqOTc.roa (hash: /7aQ7+RwkclmuJNtVK87g/73oEQXo6yAkx6IMmNGLuU=)
                          5: hjLY93sTfKVGtH04a9-qkylCHmE.roa (hash: /mrPE+eKM9yKGu2TBD1xblJ2DuTRrBr+lNyxB56PAiE=)
                          6: l4kxgrFnGJg7wAjI0If43co9hhQ.crl (hash: 0CTLQMU/1h7GwPX7W9UGkdKp/4Tt/4OeLX8KUmgPsF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:d1:8a:9f:fc:f1:5f:ba:51:58:2a:d1:74:8b:a3:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614
        Validity
            Not Before: Apr 17 19:01:11 2026 GMT
            Not After : Apr 18 19:01:11 2026 GMT
        Subject: CN=a6023e2f4ee4c2903927dfc583af6c2df2d4116b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:13:ec:2d:37:8a:e9:67:18:1e:92:32:b4:84:
                    29:c7:a5:d1:f4:ad:09:43:01:c7:8b:ae:df:94:ec:
                    ef:8f:ef:64:45:ed:ed:d1:ac:97:64:f5:f3:64:d7:
                    da:da:01:78:8f:36:79:d5:34:43:20:cc:6b:52:2e:
                    e7:cc:b2:20:5c:8e:0a:0c:84:73:5e:3a:96:6f:fd:
                    77:1c:a1:02:56:83:49:75:4d:79:e2:ea:8b:98:56:
                    b3:09:c1:26:8b:1d:41:5b:b1:dc:f4:c9:87:17:97:
                    f7:28:bd:cc:8a:14:39:43:6f:25:fa:8e:ca:44:ef:
                    ea:3e:97:c7:5c:77:e6:41:77:6f:bb:be:f0:7f:93:
                    8b:0a:52:47:b6:df:eb:a7:e8:0b:64:87:99:56:db:
                    11:67:7b:60:ef:f7:e7:66:d5:1e:17:3b:ec:20:1e:
                    d8:42:c2:ed:86:7d:7a:f2:92:a2:07:17:8c:36:bb:
                    05:0f:9c:b9:9a:1a:af:2a:bd:d6:c9:43:c2:4f:90:
                    22:b0:1e:3c:5e:29:3e:52:6a:a7:85:d9:d5:0e:b8:
                    35:a1:2e:6f:07:32:28:ee:22:fe:e4:d0:12:16:61:
                    cc:2e:fb:71:37:6c:5f:d1:90:3a:89:06:26:41:36:
                    98:cf:92:72:46:bb:ee:75:b3:6b:7c:51:2c:4b:c2:
                    72:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:02:3E:2F:4E:E4:C2:90:39:27:DF:C5:83:AF:6C:2D:F2:D4:11:6B
            X509v3 Authority Key Identifier:
                keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:1d:df:72:1a:a7:da:f1:31:e3:02:da:14:d8:bd:3d:9f:c9:
         f9:0c:c1:c9:ca:6a:e5:83:c2:35:d7:0f:2e:31:ec:6a:33:3f:
         43:6d:8e:b0:c5:d3:0e:18:17:04:91:14:51:53:48:70:ca:69:
         a4:39:ab:91:37:1c:67:0b:85:f0:ed:43:d2:df:ca:06:bb:dd:
         02:5c:d0:7b:34:a0:10:dc:da:d3:be:d7:98:00:98:6e:7a:20:
         bf:ec:c2:30:97:3a:1a:ae:72:41:a9:27:2e:8b:fa:2b:f9:f9:
         3a:9d:ea:81:8f:00:8a:03:f3:79:db:a4:84:ff:00:20:cd:5b:
         eb:ce:ea:68:8c:07:39:a3:c2:e6:1f:cc:a2:e5:c6:e1:c5:ca:
         7c:ef:bf:e1:cc:25:55:23:ef:74:51:98:f6:8f:5d:34:51:5b:
         c0:07:29:d7:ea:e6:09:a8:b1:88:03:4f:9a:86:f5:73:75:3a:
         3b:a1:79:46:b0:7d:e1:ab:77:50:e3:b8:65:de:73:d6:7a:80:
         4d:e9:4b:ed:fd:39:ce:76:f4:ec:05:08:ac:0c:47:d8:6d:21:
         0b:2c:5d:5a:c1:3c:9a:77:84:65:38:8c:f3:44:9b:58:56:0c:
         b5:df:7a:10:b3:83:ea:4f:21:f8:89:77:fc:31:18:c9:81:95:
         ff:d0:a0:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2c0Yqf/PFfulFYKtF0i6PpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ODkzMTgyYjE2NzE4OTgzYmMwMDhjOGQwODdmOGRkY2Ez
ZDg2MTQwHhcNMjYwNDE3MTkwMTExWhcNMjYwNDE4MTkwMTExWjAzMTEwLwYDVQQD
EyhhNjAyM2UyZjRlZTRjMjkwMzkyN2RmYzU4M2FmNmMyZGYyZDQxMTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhPsLTeK6WcYHpIytIQpx6XR9K0J
QwHHi67flOzvj+9kRe3t0ayXZPXzZNfa2gF4jzZ51TRDIMxrUi7nzLIgXI4KDIRz
XjqWb/13HKECVoNJdU154uqLmFazCcEmix1BW7Hc9MmHF5f3KL3MihQ5Q28l+o7K
RO/qPpfHXHfmQXdvu77wf5OLClJHtt/rp+gLZIeZVtsRZ3tg7/fnZtUeFzvsIB7Y
QsLthn168pKiBxeMNrsFD5y5mhqvKr3WyUPCT5AisB48Xik+UmqnhdnVDrg1oS5v
BzIo7iL+5NASFmHMLvtxN2xf0ZA6iQYmQTaYz5JyRrvudbNrfFEsS8JywQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYCPi9O5MKQOSffxYOvbC3y1BFrMB8GA1UdIwQY
MBaAFJeJMYKxZxiYO8AIyNCH+N3KPYYUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDRreGdyRm5HSmc3d0FqSTBJZjQzY285aGhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8xMjAwNDMtMTczMy00YzcyLWFkNDct
YmMwZTUxMWMyMGNlLzEvbDRreGdyRm5HSmc3d0FqSTBJZjQzY285aGhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8xMjAwNDMtMTczMy00YzcyLWFkNDctYmMwZTUxMWMyMGNl
LzEvbDRreGdyRm5HSmc3d0FqSTBJZjQzY285aGhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARR3fchqn
2vEx4wLaFNi9PZ/J+QzBycpq5YPCNdcPLjHsajM/Q22OsMXTDhgXBJEUUVNIcMpp
pDmrkTccZwuF8O1D0t/KBrvdAlzQezSgENza077XmACYbnogv+zCMJc6Gq5yQakn
Lov6K/n5Op3qgY8AigPzedukhP8AIM1b687qaIwHOaPC5h/MouXG4cXKfO+/4cwl
VSPvdFGY9o9dNFFbwAcp1+rmCaixiANPmob1c3U6O6F5RrB94at3UOO4Zd5z1nqA
TelL7f05znb07AUIrAxH2G0hCyxdWsE8mneEZTiM80SbWFYMtd96ELOD6k8h+Il3
/DEYyYGV/9CgmA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:03:57 2026 by rpki-client