Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
File:                     46xjX9RfVHHGwsP-Re8btDOLwnk.mft (raw, json)
Hash identifier:          2qovuj2wsNV+sah7GLl5bnjaO8uEEO4EUXymta9FZN0=
Subject key identifier:   94:C5:3A:A4:81:D3:27:4D:94:A8:35:F1:7B:85:5C:B8:11:ED:68:1D
Authority key identifier: E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79
Certificate issuer:       /CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
Certificate serial:       019D98502D9FB391B9247E7B6EEEA24FE3B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
Manifest number:          1854
Signing time:             Thu 16 Apr 2026 22:01:24 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:24 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:24 +0000
Files and hashes:         1: 46xjX9RfVHHGwsP-Re8btDOLwnk.crl (hash: qJkZAWALPg9/0LfIJPi1Lo9XzVe2cr6sxeYieNLbT9U=)
                          2: _X4eAftjp_R6giU6rV2GZ0FQz9k.roa (hash: VsMljmTZjJFOFhFmrTsEwtE5iJWXUJLVzyxqYH1Mkto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:2d:9f:b3:91:b9:24:7e:7b:6e:ee:a2:4f:e3:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
        Validity
            Not Before: Apr 16 22:01:24 2026 GMT
            Not After : Apr 17 22:01:24 2026 GMT
        Subject: CN=94c53aa481d3274d94a835f17b855cb811ed681d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:47:1a:41:3a:c3:dd:45:40:ae:9e:31:87:a9:
                    be:80:3f:56:92:09:a7:f3:6e:fc:28:fb:cb:2f:6f:
                    5f:34:85:e9:7b:05:fc:2a:bc:72:db:cf:b4:8d:68:
                    4a:8f:0d:dd:19:aa:45:54:f3:4d:9a:0c:a9:d7:9e:
                    08:e6:75:52:ae:0e:8c:ab:dc:1a:84:0d:81:68:85:
                    84:0e:d4:31:61:ee:41:0b:90:85:51:6f:3a:8c:1a:
                    a6:4b:24:9c:51:98:a4:fe:a1:c6:d0:8b:a0:10:11:
                    41:ac:f1:c1:0f:e4:7b:da:30:a3:a2:60:bc:fe:94:
                    9f:b6:bf:39:96:08:ff:f7:21:b1:d9:f1:fc:8f:91:
                    90:04:9a:a3:ad:9d:40:3b:d4:dd:10:bd:bf:9f:b5:
                    9e:9e:7a:24:98:21:d4:ab:53:e3:bd:2c:88:de:48:
                    b7:5d:0e:b2:10:80:c2:68:6f:6f:07:cf:95:ff:db:
                    fd:2d:18:ba:b3:a3:b1:5e:c6:f2:74:ec:2d:ac:e1:
                    b9:46:f4:52:f0:b3:a9:12:45:10:3c:be:ff:67:0f:
                    75:76:0e:eb:68:64:60:0b:28:7c:84:2a:cf:4a:71:
                    f4:ae:b8:9f:ff:4d:4c:a6:9a:2a:28:7e:8b:24:25:
                    ac:e9:ba:b4:ac:82:22:74:24:43:5a:96:a8:32:c7:
                    b2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C5:3A:A4:81:D3:27:4D:94:A8:35:F1:7B:85:5C:B8:11:ED:68:1D
            X509v3 Authority Key Identifier:
                keyid:E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:5a:58:35:86:db:d8:bc:57:4a:34:0e:0a:79:fb:f7:87:c6:
         30:43:66:a7:b0:2c:69:2b:6e:f8:1f:c6:c2:e9:a2:fa:ab:7c:
         e5:2e:41:1b:60:85:b8:24:40:59:0d:d3:b3:a0:5e:f5:c8:cf:
         94:1a:91:37:36:43:05:94:f5:61:8e:03:e1:29:10:be:ba:4f:
         74:f7:ce:f8:85:ff:c7:ae:09:08:95:65:2f:8a:23:46:ca:93:
         b0:e0:2d:54:0c:b3:de:10:8b:55:9f:06:86:85:23:6c:07:67:
         e4:80:d8:66:7c:93:56:cf:6a:5f:5c:1f:e8:a5:15:52:a6:33:
         f3:97:a7:1d:8d:4b:2b:bf:2e:c0:a3:c9:66:b1:bc:c0:b0:11:
         ac:3e:80:73:ed:49:09:6b:d9:0c:f6:2d:d7:aa:11:0d:0b:3b:
         3e:bc:69:ef:49:20:4c:85:47:f3:0a:5b:89:c1:05:44:0c:c7:
         e6:b2:f2:16:9a:2b:db:b5:81:f7:86:9c:c4:aa:db:c4:aa:b0:
         b0:d2:fa:3a:d8:98:ac:e3:62:ed:eb:28:dc:49:9e:3d:55:1a:
         81:9a:c1:df:49:61:b3:fe:6f:7d:4d:d7:be:17:d0:8f:d6:05:
         9b:04:20:27:b0:d5:79:cb:93:2c:c8:f8:b0:fe:ce:a2:92:09:
         65:af:ec:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUC2fs5G5JH57bu6iT+O5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYWM2MzVmZDQ1ZjU0NzFjNmMyYzNmZTQ1ZWYxYmI0MzM4
YmMyNzkwHhcNMjYwNDE2MjIwMTI0WhcNMjYwNDE3MjIwMTI0WjAzMTEwLwYDVQQD
Eyg5NGM1M2FhNDgxZDMyNzRkOTRhODM1ZjE3Yjg1NWNiODExZWQ2ODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEcaQTrD3UVArp4xh6m+gD9Wkgmn
8278KPvLL29fNIXpewX8Krxy28+0jWhKjw3dGapFVPNNmgyp154I5nVSrg6Mq9wa
hA2BaIWEDtQxYe5BC5CFUW86jBqmSyScUZik/qHG0IugEBFBrPHBD+R72jCjomC8
/pSftr85lgj/9yGx2fH8j5GQBJqjrZ1AO9TdEL2/n7WennokmCHUq1PjvSyI3ki3
XQ6yEIDCaG9vB8+V/9v9LRi6s6OxXsbydOwtrOG5RvRS8LOpEkUQPL7/Zw91dg7r
aGRgCyh8hCrPSnH0rrif/01MppoqKH6LJCWs6bq0rIIidCRDWpaoMseyHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTFOqSB0ydNlKg18XuFXLgR7WgdMB8GA1UdIwQY
MBaAFOOsY1/UX1RxxsLD/kXvG7Qzi8J5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDZ4alg5UmZWSEhHd3NQLVJlOGJ0RE9Md25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZjg3MGUtMmJhNS00Yjg4LTkxYTAt
MWQyMzQ4ZGJkMDM2LzEvNDZ4alg5UmZWSEhHd3NQLVJlOGJ0RE9Md25rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8yZjg3MGUtMmJhNS00Yjg4LTkxYTAtMWQyMzQ4ZGJkMDM2
LzEvNDZ4alg5UmZWSEhHd3NQLVJlOGJ0RE9Md25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFpYNYbb
2LxXSjQOCnn794fGMENmp7AsaStu+B/Gwumi+qt85S5BG2CFuCRAWQ3Ts6Be9cjP
lBqRNzZDBZT1YY4D4SkQvrpPdPfO+IX/x64JCJVlL4ojRsqTsOAtVAyz3hCLVZ8G
hoUjbAdn5IDYZnyTVs9qX1wf6KUVUqYz85enHY1LK78uwKPJZrG8wLARrD6Ac+1J
CWvZDPYt16oRDQs7Prxp70kgTIVH8wpbicEFRAzH5rLyFpor27WB94acxKrbxKqw
sNL6OtiYrONi7eso3EmePVUagZrB30lhs/5vfU3XvhfQj9YFmwQgJ7DVecuTLMj4
sP7OopIJZa/sQg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:10 2026 by rpki-client