Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
File:                     E_hJa3nRwE0IKvg_G-al6rDGYIk.mft (raw, json)
Hash identifier:          nsd/aihwedP1wYbKH0ekaGon1DYtcLANgWZ0s7yogeo=
Subject key identifier:   01:64:92:25:3B:4C:FD:ED:AC:63:5B:68:4D:4D:5A:A6:CE:49:9B:AF
Authority key identifier: 13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
Certificate issuer:       /CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Certificate serial:       019D9999954203537CF4230F95F410A1FAAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
Manifest number:          18C8
Signing time:             Fri 17 Apr 2026 04:01:12 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:12 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:12 +0000
Files and hashes:         1: 0-jMAvh0Spb5-xmRErQMwSZjKoM.roa (hash: +jeSUtpRT2LXECnK0ZPglZoRmjktcmKAgTbcZjeh29w=)
                          2: E_hJa3nRwE0IKvg_G-al6rDGYIk.crl (hash: ahPwZkgabwxwN2eCj1SrXXi8kjCygMu08HOfY/d+D6c=)
                          3: PiYMPWiZqPKiPSxxOffNzBJuyIA.roa (hash: iYM4COezS5hiEnoLC5DueAtMJwExPCIZLeAMdYmXws0=)
                          4: VOsklXRPi5AsfytJ7h-_DeqIeyg.roa (hash: tKatxYKbmsaEuCNsIxKCmZyCQCE1Y1J4bjW+cSVHx5Q=)
                          5: tv3k8_tkXaxqUisHZsrZ24FV1-U.roa (hash: +j2LkHTfDUaDhQsNd6JulSvZcuxXP5xrCRRkIe7nNyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:95:42:03:53:7c:f4:23:0f:95:f4:10:a1:fa:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
        Validity
            Not Before: Apr 17 04:01:12 2026 GMT
            Not After : Apr 18 04:01:12 2026 GMT
        Subject: CN=016492253b4cfdedac635b684d4d5aa6ce499baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f6:a1:52:91:0d:0f:4e:39:04:58:5e:7c:e7:
                    82:11:24:7f:5b:fc:4a:85:34:f4:e6:4f:98:58:fc:
                    48:cb:e7:4d:e0:e7:23:54:d0:62:17:e8:1e:33:37:
                    cc:9c:02:ff:7c:56:96:88:ec:f2:4f:76:de:2b:68:
                    cf:a6:19:de:81:0c:a1:74:5a:93:4a:e0:8c:92:db:
                    67:e2:85:7b:da:73:1a:42:3a:17:50:2d:b5:de:27:
                    43:57:e2:c6:f8:5b:ed:7c:b3:8a:d9:af:36:1f:d3:
                    07:a7:4a:a3:f6:a1:56:4d:2a:d4:66:b7:b9:36:7f:
                    52:c1:30:63:b7:d8:30:b0:77:65:1b:40:73:c0:4a:
                    c2:2b:ba:e4:d7:89:97:5c:14:e0:74:7a:58:30:08:
                    f9:e2:d1:8f:3f:28:e7:7a:8a:4a:a6:6a:42:91:e1:
                    2f:f2:a6:98:ab:72:82:7a:4e:a1:4e:51:de:c3:49:
                    ab:5b:4a:64:58:e5:26:ce:50:45:40:43:c9:51:fc:
                    76:02:67:bb:ab:73:b6:88:60:c2:0f:c3:63:d5:56:
                    2b:92:06:68:f7:7e:13:ee:32:c1:f3:bd:3f:53:bc:
                    6f:8e:d8:5a:c1:72:84:c6:89:c8:1c:32:31:d8:42:
                    96:f3:74:74:aa:52:ca:a6:00:31:da:6c:71:03:3d:
                    ae:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:64:92:25:3B:4C:FD:ED:AC:63:5B:68:4D:4D:5A:A6:CE:49:9B:AF
            X509v3 Authority Key Identifier:
                keyid:13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:5f:10:bd:d4:89:c3:45:c6:e3:a4:83:c8:45:f4:88:3f:21:
         4e:80:d2:cc:93:8a:54:ba:b0:22:d4:6c:f7:d9:b0:3a:49:e8:
         b9:7c:3e:8c:ce:02:df:2f:59:36:a8:f4:98:89:87:24:dd:ee:
         3a:8a:20:e7:c8:02:3e:82:23:48:a3:56:f2:97:20:9a:c7:1d:
         f8:3a:24:77:14:5b:b7:3e:56:de:0c:22:a3:56:9c:ea:40:67:
         67:64:45:04:1f:8d:61:dd:b8:f4:d1:3e:41:0d:73:9a:37:38:
         8e:31:60:63:ec:74:e7:34:44:7b:1d:9a:77:7c:ff:bf:13:0e:
         93:aa:1f:9e:2a:49:ce:bb:a4:b5:c8:0e:f6:b0:60:72:79:cd:
         1f:75:a1:f6:a2:2b:bb:f4:cf:38:bc:6b:7d:9a:a2:70:c3:71:
         39:8c:d5:51:02:ea:fb:15:6d:2c:3d:66:be:2e:95:33:ee:c0:
         74:a1:b8:a3:1a:70:30:51:8a:4b:bb:5b:17:7f:c6:ee:1c:de:
         de:53:29:47:f5:9c:7c:54:4e:29:9d:12:85:72:61:f3:e6:96:
         0b:2a:34:67:d9:5d:e9:36:a8:60:92:d8:75:b5:dd:c8:5b:43:
         a7:52:75:c1:38:ee:37:5e:88:2b:1e:8f:ab:03:2d:7a:45:0b:
         b7:01:f0:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmZVCA1N89CMPlfQQofqsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZjg0OTZiNzlkMWMwNGQwODJhZjgzZjFiZTZhNWVhYjBj
NjYwODkwHhcNMjYwNDE3MDQwMTEyWhcNMjYwNDE4MDQwMTEyWjAzMTEwLwYDVQQD
EygwMTY0OTIyNTNiNGNmZGVkYWM2MzViNjg0ZDRkNWFhNmNlNDk5YmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPahUpEND045BFhefOeCESR/W/xK
hTT05k+YWPxIy+dN4OcjVNBiF+geMzfMnAL/fFaWiOzyT3beK2jPphnegQyhdFqT
SuCMkttn4oV72nMaQjoXUC213idDV+LG+FvtfLOK2a82H9MHp0qj9qFWTSrUZre5
Nn9SwTBjt9gwsHdlG0BzwErCK7rk14mXXBTgdHpYMAj54tGPPyjneopKpmpCkeEv
8qaYq3KCek6hTlHew0mrW0pkWOUmzlBFQEPJUfx2Ame7q3O2iGDCD8Nj1VYrkgZo
934T7jLB870/U7xvjthawXKExonIHDIx2EKW83R0qlLKpgAx2mxxAz2u4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFkkiU7TP3trGNbaE1NWqbOSZuvMB8GA1UdIwQY
MBaAFBP4SWt50cBNCCr4PxvmpeqwxmCJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRV9oSmEzblJ3RTBJS3ZnX0ctYWw2ckRHWUlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9lZWIyNmYtNjc5MC00MmNlLThjY2Mt
NTRhMjVlMmNkYWE5LzEvRV9oSmEzblJ3RTBJS3ZnX0ctYWw2ckRHWUlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9lZWIyNmYtNjc5MC00MmNlLThjY2MtNTRhMjVlMmNkYWE5
LzEvRV9oSmEzblJ3RTBJS3ZnX0ctYWw2ckRHWUlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEV8QvdSJ
w0XG46SDyEX0iD8hToDSzJOKVLqwItRs99mwOknouXw+jM4C3y9ZNqj0mImHJN3u
Ooog58gCPoIjSKNW8pcgmscd+DokdxRbtz5W3gwio1ac6kBnZ2RFBB+NYd249NE+
QQ1zmjc4jjFgY+x05zREex2ad3z/vxMOk6ofnipJzruktcgO9rBgcnnNH3Wh9qIr
u/TPOLxrfZqicMNxOYzVUQLq+xVtLD1mvi6VM+7AdKG4oxpwMFGKS7tbF3/G7hze
3lMpR/WcfFROKZ0ShXJh8+aWCyo0Z9ld6TaoYJLYdbXdyFtDp1J1wTjuN16IKx6P
qwMtekULtwHw9Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:04:21 2026 by rpki-client