Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft
File:                     5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft (raw, json)
Hash identifier:          yDGdmL9TJdJqLJ2yRz6oCl98LhKkt+EdnNkgQP4Dh78=
Subject key identifier:   C4:D8:CD:1E:2E:29:24:3E:F9:83:7A:8A:9A:95:F5:29:71:F0:36:6D
Authority key identifier: E5:66:E0:E5:16:28:55:4C:D9:26:34:B7:11:AB:75:8F:84:67:C4:85
Certificate issuer:       /CN=e566e0e51628554cd92634b711ab758f8467c485
Certificate serial:       019D9B199B6C5B52DD666116033945F1D26C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 11:00:39 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:39 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:39 +0000
Files and hashes:         1: 5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl (hash: Rqi81tJ2mTetLZK1MF3H06j6CCHXq5F5MLAJf2aB/iU=)
                          2: RHa6C-9jNNLaQ89byBphWXQhs0Y.roa (hash: MC7bJV6p4PnQ8SBWeR6fNqikexZCV82B1zCu9BiJXRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:9b:6c:5b:52:dd:66:61:16:03:39:45:f1:d2:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e566e0e51628554cd92634b711ab758f8467c485
        Validity
            Not Before: Apr 17 11:00:39 2026 GMT
            Not After : Apr 18 11:00:39 2026 GMT
        Subject: CN=c4d8cd1e2e29243ef9837a8a9a95f52971f0366d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:97:c6:13:80:bd:ee:08:1d:29:0a:f6:3b:15:
                    5a:f5:1f:39:84:23:72:c2:98:41:79:22:d6:6a:7e:
                    ed:5a:2c:b0:50:41:67:9f:ed:8d:c7:f3:dd:f4:ed:
                    03:4d:c2:0a:f7:39:21:c7:12:3d:56:aa:bc:fb:8d:
                    6e:53:c3:bf:3e:54:ad:76:89:0a:35:ad:c8:b6:ad:
                    2a:d2:b7:24:32:51:9b:dd:5e:e7:ed:96:58:0a:23:
                    20:76:b6:91:1b:ec:48:5c:c9:20:af:3b:27:90:3d:
                    27:58:54:74:c3:32:ab:27:0d:69:1c:24:d9:9a:56:
                    fd:47:ff:0c:2e:39:1a:c6:e5:d6:8d:80:55:f0:99:
                    7a:48:ea:ce:48:dc:09:66:2e:08:17:b1:98:e2:80:
                    3f:d2:f3:4f:48:f6:1e:25:c6:44:0f:ff:94:e4:16:
                    9f:6c:cf:6e:22:82:9b:9d:92:8d:b1:d2:7b:26:76:
                    e0:a5:b8:96:96:28:3e:3d:bb:df:86:2d:cc:33:02:
                    12:a6:e5:91:dd:73:11:e6:af:22:35:3e:a2:7b:0b:
                    9c:f6:25:e3:f2:52:b5:d0:cb:01:7c:da:93:50:f6:
                    86:75:a0:b3:8d:df:82:6f:ba:6c:11:fd:24:82:23:
                    33:b0:8a:27:92:b0:47:19:72:be:10:c9:6c:18:4f:
                    44:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D8:CD:1E:2E:29:24:3E:F9:83:7A:8A:9A:95:F5:29:71:F0:36:6D
            X509v3 Authority Key Identifier:
                keyid:E5:66:E0:E5:16:28:55:4C:D9:26:34:B7:11:AB:75:8F:84:67:C4:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a3:39:34:0a:04:a7:5e:06:3f:41:09:95:4b:dc:52:83:72:
         68:38:0b:7f:3a:6f:ee:0f:8f:61:64:09:c3:08:e2:7d:5b:d4:
         9c:24:b3:33:07:08:43:2d:e8:18:21:f1:79:a6:61:b2:38:06:
         24:b0:86:04:9a:91:9e:17:71:ec:08:7f:6a:0d:dc:98:05:65:
         a0:20:97:99:5f:26:eb:1d:72:d6:a8:fb:9e:95:46:8e:fa:4f:
         62:10:e8:44:00:96:e8:83:46:70:01:e0:d6:b6:14:d9:40:3b:
         aa:10:c1:c4:d3:87:bb:07:bf:df:06:8c:c4:8a:1e:04:90:5a:
         db:a5:99:aa:22:ac:56:9f:5b:28:1b:a9:fd:c6:45:34:12:e4:
         10:bf:81:94:a3:d6:1b:21:b6:88:92:99:fe:89:e2:77:d3:5b:
         1a:3a:c0:85:b1:c8:e0:89:a2:48:bd:c5:c1:98:46:38:b0:b8:
         50:64:20:2c:f9:9c:0c:90:e5:b8:89:21:d7:2a:ba:3a:72:62:
         ce:de:d9:90:00:cc:97:37:32:6b:df:4c:d9:fd:b1:ef:ac:27:
         8c:63:37:c0:21:0b:e5:0b:34:f8:2e:96:05:46:7e:33:89:29:
         8b:63:9a:68:89:7b:db:af:ad:68:f0:8e:7d:63:cf:4a:ca:39:
         b3:09:b5:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGZtsW1LdZmEWAzlF8dJsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NjZlMGU1MTYyODU1NGNkOTI2MzRiNzExYWI3NThmODQ2
N2M0ODUwHhcNMjYwNDE3MTEwMDM5WhcNMjYwNDE4MTEwMDM5WjAzMTEwLwYDVQQD
EyhjNGQ4Y2QxZTJlMjkyNDNlZjk4MzdhOGE5YTk1ZjUyOTcxZjAzNjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZfGE4C97ggdKQr2OxVa9R85hCNy
wphBeSLWan7tWiywUEFnn+2Nx/Pd9O0DTcIK9zkhxxI9Vqq8+41uU8O/PlStdokK
Na3Itq0q0rckMlGb3V7n7ZZYCiMgdraRG+xIXMkgrzsnkD0nWFR0wzKrJw1pHCTZ
mlb9R/8MLjkaxuXWjYBV8Jl6SOrOSNwJZi4IF7GY4oA/0vNPSPYeJcZED/+U5Baf
bM9uIoKbnZKNsdJ7JnbgpbiWlig+Pbvfhi3MMwISpuWR3XMR5q8iNT6iewuc9iXj
8lK10MsBfNqTUPaGdaCzjd+Cb7psEf0kgiMzsIonkrBHGXK+EMlsGE9E8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTYzR4uKSQ++YN6ipqV9Slx8DZtMB8GA1UdIwQY
MBaAFOVm4OUWKFVM2SY0txGrdY+EZ8SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVdiZzVSWW9WVXpaSmpTM0VhdDFqNFJueElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kOWUxNmQtN2U4Yy00M2VjLTk5Zjct
ZTI5NmNmZDk3MjA5LzEvNVdiZzVSWW9WVXpaSmpTM0VhdDFqNFJueElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kOWUxNmQtN2U4Yy00M2VjLTk5ZjctZTI5NmNmZDk3MjA5
LzEvNVdiZzVSWW9WVXpaSmpTM0VhdDFqNFJueElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIqM5NAoE
p14GP0EJlUvcUoNyaDgLfzpv7g+PYWQJwwjifVvUnCSzMwcIQy3oGCHxeaZhsjgG
JLCGBJqRnhdx7Ah/ag3cmAVloCCXmV8m6x1y1qj7npVGjvpPYhDoRACW6INGcAHg
1rYU2UA7qhDBxNOHuwe/3waMxIoeBJBa26WZqiKsVp9bKBup/cZFNBLkEL+BlKPW
GyG2iJKZ/onid9NbGjrAhbHI4ImiSL3FwZhGOLC4UGQgLPmcDJDluIkh1yq6OnJi
zt7ZkADMlzcya99M2f2x76wnjGM3wCEL5Qs0+C6WBUZ+M4kpi2OaaIl726+taPCO
fWPPSso5swm1dw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:13:36 2026 by rpki-client