Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft
File:                     ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft (raw, json)
Hash identifier:          8ckC/qz0M9YytLW//FYt/qUO8tW+NlkVfp+c5mQmaLE=
Subject key identifier:   B0:C6:BF:49:42:A0:67:79:D8:D2:74:63:9B:CA:D4:40:1C:00:73:03
Authority key identifier: 79:DF:50:E2:68:94:BB:0E:81:35:96:06:D8:2B:71:90:C1:75:98:CC
Certificate issuer:       /CN=79df50e26894bb0e81359606d82b7190c17598cc
Certificate serial:       019D992B0644F855A901E8FECBAE385EA577
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 02:00:26 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:26 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:26 +0000
Files and hashes:         1: EhG-iYZNFoJEhs2X2OptzmxOfqw.roa (hash: aCu6x2h9aVNHZRLsGFz7tjoYTapCoh/tz4jAafHyEh0=)
                          2: ed9Q4miUuw6BNZYG2CtxkMF1mMw.crl (hash: yfh81OiodRgI8joMVFrxRAoeOCkQHudeJZEWgl2gsjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:06:44:f8:55:a9:01:e8:fe:cb:ae:38:5e:a5:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79df50e26894bb0e81359606d82b7190c17598cc
        Validity
            Not Before: Apr 17 02:00:26 2026 GMT
            Not After : Apr 18 02:00:26 2026 GMT
        Subject: CN=b0c6bf4942a06779d8d274639bcad4401c007303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6e:e1:ee:0f:76:13:a7:63:99:c2:bc:80:a1:
                    9f:8d:49:85:20:88:b2:18:4e:bd:4b:5d:e3:2b:5a:
                    98:34:5c:5b:2a:6d:b2:49:50:16:30:94:26:d7:03:
                    bf:bf:7a:8a:55:17:70:da:11:49:ec:04:61:e2:07:
                    5a:f0:da:75:07:32:44:01:ad:d3:35:50:ff:de:08:
                    25:e4:d2:30:30:5f:09:c4:d4:17:27:42:31:3e:66:
                    0d:42:df:22:5b:48:09:39:92:1b:9e:ba:c6:6e:b7:
                    88:48:65:8a:4f:aa:72:55:30:55:41:ff:e1:9d:c3:
                    38:26:f9:28:82:08:27:dc:1a:e3:5d:99:c1:8d:4e:
                    85:f0:ce:2d:fe:a6:10:c6:b2:26:f6:33:02:58:a9:
                    f9:35:af:45:7e:74:dc:b3:96:19:8b:12:c8:7f:4f:
                    7f:81:fe:46:02:5b:5a:cf:76:cf:53:a0:b3:0e:80:
                    d6:42:16:fa:20:82:28:6c:92:4b:ec:c3:3f:28:0f:
                    58:89:df:df:2e:20:75:f8:93:6a:f3:5c:04:d2:ee:
                    10:e7:27:4e:39:c9:27:77:9a:ff:7e:28:1a:85:a7:
                    94:06:bf:3c:06:09:9d:1e:a1:48:d3:af:92:35:6e:
                    9b:25:a2:2b:6f:da:c5:c6:e6:3c:52:3d:7d:7f:c1:
                    39:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C6:BF:49:42:A0:67:79:D8:D2:74:63:9B:CA:D4:40:1C:00:73:03
            X509v3 Authority Key Identifier:
                keyid:79:DF:50:E2:68:94:BB:0E:81:35:96:06:D8:2B:71:90:C1:75:98:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:99:55:bb:40:0f:e8:fe:31:bf:79:b6:b0:4d:73:27:35:91:
         0e:dd:c9:71:52:5f:aa:bf:f6:bf:c2:72:0a:f5:aa:63:15:22:
         89:82:90:99:b5:6d:75:a4:e5:0a:d7:65:99:d4:c6:fa:26:b7:
         49:4f:6c:b3:85:ef:2b:8a:12:25:04:e7:8a:c1:64:80:b1:a9:
         18:84:6f:34:3e:c3:51:86:5e:a0:9f:7f:c2:2b:03:c8:20:a4:
         3c:fd:8c:a5:11:b6:d6:92:40:1e:7e:f0:b3:f2:48:b9:ac:bb:
         d8:ed:66:81:51:a1:1a:ac:96:8e:97:62:b1:88:a3:58:ef:2f:
         f7:f6:67:81:c3:61:6b:1a:0a:4b:a1:91:64:ad:4a:26:46:98:
         1e:34:64:f1:5e:55:d9:03:dd:8f:ea:c0:07:d0:c9:18:00:b2:
         ba:b1:c1:49:33:d6:df:49:84:ae:fe:e8:ed:a6:93:4c:df:c3:
         30:d8:cf:a0:35:df:f3:7d:5e:2d:05:9f:ce:44:3c:b9:14:0c:
         98:e4:11:68:82:2b:a3:0e:e6:2e:cc:63:27:82:47:ac:3f:af:
         77:e8:b6:d2:72:d7:e4:eb:97:63:d0:f0:3e:09:34:44:6e:b0:
         d3:61:cd:4f:c6:cf:98:b2:84:95:0c:10:07:6a:71:4d:90:d9:
         a4:86:94:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKwZE+FWpAej+y644XqV3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZGY1MGUyNjg5NGJiMGU4MTM1OTYwNmQ4MmI3MTkwYzE3
NTk4Y2MwHhcNMjYwNDE3MDIwMDI2WhcNMjYwNDE4MDIwMDI2WjAzMTEwLwYDVQQD
EyhiMGM2YmY0OTQyYTA2Nzc5ZDhkMjc0NjM5YmNhZDQ0MDFjMDA3MzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm7h7g92E6djmcK8gKGfjUmFIIiy
GE69S13jK1qYNFxbKm2ySVAWMJQm1wO/v3qKVRdw2hFJ7ARh4gda8Np1BzJEAa3T
NVD/3ggl5NIwMF8JxNQXJ0IxPmYNQt8iW0gJOZIbnrrGbreISGWKT6pyVTBVQf/h
ncM4Jvkogggn3BrjXZnBjU6F8M4t/qYQxrIm9jMCWKn5Na9FfnTcs5YZixLIf09/
gf5GAltaz3bPU6CzDoDWQhb6IIIobJJL7MM/KA9Yid/fLiB1+JNq81wE0u4Q5ydO
Ocknd5r/figahaeUBr88BgmdHqFI06+SNW6bJaIrb9rFxuY8Uj19f8E5EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDGv0lCoGd52NJ0Y5vK1EAcAHMDMB8GA1UdIwQY
MBaAFHnfUOJolLsOgTWWBtgrcZDBdZjMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWQ5UTRtaVV1dzZCTlpZRzJDdHhrTUYxbU13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83ODI0NDctZWM4Yi00Mjg5LTljMWMt
MjhmOTYwZWI3YTM5LzEvZWQ5UTRtaVV1dzZCTlpZRzJDdHhrTUYxbU13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC83ODI0NDctZWM4Yi00Mjg5LTljMWMtMjhmOTYwZWI3YTM5
LzEvZWQ5UTRtaVV1dzZCTlpZRzJDdHhrTUYxbU13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5lVu0AP
6P4xv3m2sE1zJzWRDt3JcVJfqr/2v8JyCvWqYxUiiYKQmbVtdaTlCtdlmdTG+ia3
SU9ss4XvK4oSJQTnisFkgLGpGIRvND7DUYZeoJ9/wisDyCCkPP2MpRG21pJAHn7w
s/JIuay72O1mgVGhGqyWjpdisYijWO8v9/ZngcNhaxoKS6GRZK1KJkaYHjRk8V5V
2QPdj+rAB9DJGACyurHBSTPW30mErv7o7aaTTN/DMNjPoDXf831eLQWfzkQ8uRQM
mOQRaIIrow7mLsxjJ4JHrD+vd+i20nLX5OuXY9DwPgk0RG6w02HNT8bPmLKElQwQ
B2pxTZDZpIaUwg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:45:15 2026 by rpki-client