Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
File:                     xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json)
Hash identifier:          u/cnikuxGuWOmP7iBuVR44YQth06gzqX07kbbyEDSxA=
Subject key identifier:   20:AD:E0:5B:0C:AF:80:E6:B1:BB:75:8C:37:F5:EB:6E:BE:E7:6A:86
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Certificate issuer:       /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial:       019D98F4A60DD1D46A36DD845B9ECBE9217B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
Manifest number:          18DD
Signing time:             Fri 17 Apr 2026 01:01:03 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:03 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:03 +0000
Files and hashes:         1: 2VGlQCljw9cFJl5EHzBeMDJwXVo.roa (hash: Do0oxRXzURqrwthzVRT/8OMjdF0dAGArF8nmDv/TCrU=)
                          2: Azzq-GPNmgEzF12yB55hFBGmQ5Y.roa (hash: gQCxAX0kGUP6fOqE0f4xg6Y7BKr1YkDG2KCm3PY3vks=)
                          3: ChcDyRnaAHF3OD9h8CZLxTYLnd0.roa (hash: 6ABtGMwyDO/6lM571vE9Iuqd9TQr+m5PP3ymm7KdDMo=)
                          4: FqgScginFUes_17Ndt6kdOrzAkA.roa (hash: a3G9kD/8P4BMkG64yuvOvu/MjxsZVk5qCgCtyW3lY6c=)
                          5: IsrXRGLVffEPsnHVbl_BeBHARaA.roa (hash: 2bYUOyrmy0HgRWN9bHIQfD3C31xnJN8Zzbysmp0r1Aw=)
                          6: T6pXE_xgE4WrCZgfLS6PwaHzerg.roa (hash: G4WSUskcjpTP61QhWQEI/av+RXa/41Ip20fNLeEJAoQ=)
                          7: VLiSP46DJX8Dog7Og_5_Z19OaAw.roa (hash: 3gWIgE8p9hzKRB2RaJcWZL2QSZhVwmUm6N+ESpdKpAQ=)
                          8: WzL_Le9qToZCW6aHE2N-2HuJYvQ.roa (hash: XiM6tnhPeoo8/I0UsVcX68fQNBFdvSj5FK8MxmFwo94=)
                          9: b_n3Z3GxujBB68-zb1vahju6Fp0.roa (hash: fBmej85zCOTwohAZSrZlJvl4CdYQMz+WBefO+9bGgMc=)
                          10: leefmemMjsnYBH_PRIls4mGDQQg.roa (hash: H8hE7idzBRzXS/SDOwJGlem7diQp5JTlS92HhAhqaHk=)
                          11: oSUSV9XksEu-hj7frAtIPDI4QUc.roa (hash: Ba7z9fv3oVKNrP/ZNMw28ZH2Y9v/Nbz2kHCWUqIYg+s=)
                          12: sVlG1_wshTtHh3K3-dmfU3V-ohU.roa (hash: bMT/BHfnv5hKh+kUsN5whSknK8wJI4XccjCUKzZX56c=)
                          13: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: OjZhJYhnop4+cgopIPmEvR+KaZYgGCGISg8vEc1bvj8=)
                          14: zGuXwu3v-M9bXZipAlRCLhWgY9Y.roa (hash: q3HTdT+bmIS7eJfWEweBp4+RgfhLQ35j5qT2Y42OjrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:a6:0d:d1:d4:6a:36:dd:84:5b:9e:cb:e9:21:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
        Validity
            Not Before: Apr 17 01:01:03 2026 GMT
            Not After : Apr 18 01:01:03 2026 GMT
        Subject: CN=20ade05b0caf80e6b1bb758c37f5eb6ebee76a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cb:04:c0:96:db:4b:e5:3f:be:79:ca:9a:de:
                    29:71:f0:3d:2a:8a:6c:d7:f1:06:20:2d:1c:bf:4a:
                    ff:87:a3:43:af:99:d1:61:83:4e:35:1c:39:14:c9:
                    98:93:1a:00:31:f8:c9:58:85:45:cf:41:18:41:5f:
                    a9:22:76:65:c3:72:e7:7b:38:b1:7e:a5:f2:6c:cc:
                    40:92:dd:71:d1:e2:30:1d:83:64:e4:39:6e:2b:20:
                    5e:02:4f:a9:dd:73:27:7c:94:40:95:ef:b9:92:78:
                    21:79:15:01:18:e5:0b:c4:94:9f:e4:95:6c:e3:11:
                    ae:08:f9:23:63:c7:50:42:c2:08:54:89:f7:24:3d:
                    b9:10:a0:40:7d:b7:c7:89:bb:5f:37:03:95:fd:a0:
                    73:2d:18:42:a0:3c:f5:d0:81:48:55:c6:42:66:3e:
                    4a:28:8d:4a:b1:4a:fa:42:59:20:e8:98:d7:53:83:
                    f4:db:ef:6c:6e:62:5a:7c:fc:69:38:9b:a7:55:b4:
                    f5:c6:d9:4a:c2:c7:a6:f8:02:00:90:b2:71:96:e2:
                    f3:39:4b:4d:27:b4:52:db:7c:ed:e0:b2:90:74:cd:
                    15:7e:c5:8d:37:b0:9c:a1:65:a4:1c:64:02:4a:d9:
                    df:e4:c8:f2:1f:27:ca:90:36:f4:8a:57:ee:ae:7b:
                    73:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AD:E0:5B:0C:AF:80:E6:B1:BB:75:8C:37:F5:EB:6E:BE:E7:6A:86
            X509v3 Authority Key Identifier:
                keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f5:c9:f0:8d:ae:ae:52:92:d4:a8:20:24:d7:74:80:e7:99:
         f9:4e:56:ef:04:43:ce:a7:a9:e0:bc:e2:dd:41:0d:7e:8a:e0:
         b9:c4:24:7f:bc:44:a0:57:fa:6e:b6:63:be:b7:66:2a:08:d2:
         35:d2:4c:8f:f5:7d:f8:cf:69:06:b2:a7:0c:79:8c:e8:a2:25:
         79:61:86:26:f3:3d:5d:30:87:b6:8c:74:3d:5a:29:0b:22:4c:
         a1:3b:fa:d9:c3:86:48:97:ef:16:f3:d7:67:b3:34:4e:3f:8c:
         0d:6c:d7:27:71:11:21:1b:df:2d:7e:d8:ae:14:49:a9:a6:5a:
         dc:52:39:0f:5d:5f:c2:dd:bc:5b:97:c1:47:2c:f5:7e:5f:36:
         bc:1f:f0:c0:c6:7f:34:b8:2d:bc:47:c4:4c:c6:5a:a6:53:c3:
         d6:65:a7:99:46:93:2d:19:fd:ca:39:69:cc:f4:7c:d5:1b:b2:
         8c:66:b8:fd:79:78:8d:23:f8:1c:57:4f:fe:58:31:27:51:93:
         5a:92:bc:58:34:95:85:24:bb:eb:e0:e4:7c:64:5f:9d:6b:67:
         ca:74:8c:93:e2:43:5a:4e:d7:dc:4a:17:05:a6:d6:9a:b5:82:
         d1:11:f2:5d:f0:7a:f9:92:35:d1:89:88:48:4c:fa:c3:ee:bf:
         31:14:6d:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9KYN0dRqNt2EW57L6SF7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2
Y2MyNjAwHhcNMjYwNDE3MDEwMTAzWhcNMjYwNDE4MDEwMTAzWjAzMTEwLwYDVQQD
EygyMGFkZTA1YjBjYWY4MGU2YjFiYjc1OGMzN2Y1ZWI2ZWJlZTc2YTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ssEwJbbS+U/vnnKmt4pcfA9Kops
1/EGIC0cv0r/h6NDr5nRYYNONRw5FMmYkxoAMfjJWIVFz0EYQV+pInZlw3Lnezix
fqXybMxAkt1x0eIwHYNk5DluKyBeAk+p3XMnfJRAle+5kngheRUBGOULxJSf5JVs
4xGuCPkjY8dQQsIIVIn3JD25EKBAfbfHibtfNwOV/aBzLRhCoDz10IFIVcZCZj5K
KI1KsUr6Qlkg6JjXU4P02+9sbmJafPxpOJunVbT1xtlKwsem+AIAkLJxluLzOUtN
J7RS23zt4LKQdM0VfsWNN7CcoWWkHGQCStnf5MjyHyfKkDb0ilfurntzuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCt4FsMr4Dmsbt1jDf1626+52qGMB8GA1UdIwQY
MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt
NjA3ZDRmMzdmNTlmLzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm
LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/XJ8I2u
rlKS1KggJNd0gOeZ+U5W7wRDzqep4Lzi3UENforgucQkf7xEoFf6brZjvrdmKgjS
NdJMj/V9+M9pBrKnDHmM6KIleWGGJvM9XTCHtox0PVopCyJMoTv62cOGSJfvFvPX
Z7M0Tj+MDWzXJ3ERIRvfLX7YrhRJqaZa3FI5D11fwt28W5fBRyz1fl82vB/wwMZ/
NLgtvEfETMZaplPD1mWnmUaTLRn9yjlpzPR81RuyjGa4/Xl4jSP4HFdP/lgxJ1GT
WpK8WDSVhSS76+DkfGRfnWtnynSMk+JDWk7X3EoXBabWmrWC0RHyXfB6+ZI10YmI
SEz6w+6/MRRteQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:24:12 2026 by rpki-client