Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
File:                     mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft (raw, json)
Hash identifier:          Fd6yn+71S07V/H+A4w/q/sCXs/k5fcXRfsv3vKe9Y4g=
Subject key identifier:   48:7C:65:E8:D0:59:AA:43:A9:DE:C0:86:77:A4:0C:87:B8:B9:64:EE
Authority key identifier: 98:F9:E0:C2:0A:CD:C8:FA:A7:44:1A:08:43:FF:8A:01:F3:D9:DB:C5
Certificate issuer:       /CN=98f9e0c20acdc8faa7441a0843ff8a01f3d9dbc5
Certificate serial:       019D9A3E2CB2F16094BCAF1D9B2F94D6A973
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 07:00:59 +0000
Manifest this update:     Fri 17 Apr 2026 07:00:59 +0000
Manifest next update:     Sat 18 Apr 2026 07:00:59 +0000
Files and hashes:         1: Ido2M0FweL3C9dqdc0-U2P4b0R8.roa (hash: ZFVyhccObFtKIvVwdVOf1IOPpLnjK5DJfJnbV+g9WKs=)
                          2: mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl (hash: masYIdYuCTWasIGrYEfiQxZWlGJUhlO+k3z31AldFEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:2c:b2:f1:60:94:bc:af:1d:9b:2f:94:d6:a9:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98f9e0c20acdc8faa7441a0843ff8a01f3d9dbc5
        Validity
            Not Before: Apr 17 07:00:59 2026 GMT
            Not After : Apr 18 07:00:59 2026 GMT
        Subject: CN=487c65e8d059aa43a9dec08677a40c87b8b964ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:53:15:07:86:97:00:49:0c:df:86:5e:b5:06:
                    0f:35:33:e5:36:3a:a5:2c:f6:10:f0:e1:7f:b6:2e:
                    40:54:96:65:f8:ab:e8:f0:65:7d:56:26:cd:d1:60:
                    bb:d1:b2:aa:84:26:f4:5b:3e:c3:a6:42:62:16:fb:
                    d5:d4:8e:5a:50:2d:12:4d:c3:e2:08:87:07:3e:e6:
                    f8:68:85:b4:bc:89:bc:d5:1c:ac:eb:3a:a7:c3:5a:
                    39:79:34:fd:5e:42:48:ee:ce:c0:a8:51:9a:0a:4e:
                    6f:cf:00:26:5b:92:24:e5:ec:c4:1e:e0:1c:ed:b1:
                    ed:04:be:24:2b:86:b8:e7:be:89:de:af:f4:74:25:
                    be:94:b9:d7:15:2f:e3:56:0d:30:b1:9d:79:8d:d7:
                    75:d4:e3:66:b1:d0:c8:90:84:c3:3e:36:af:d6:dc:
                    48:e2:4a:50:81:65:e3:e1:7a:73:d9:7c:ac:3a:7e:
                    ff:6f:4f:a2:79:05:c1:08:65:67:6e:6b:b3:cf:5d:
                    9d:e4:b9:a8:fd:92:c6:ae:8d:1f:ac:f1:9d:c6:c8:
                    ae:a8:fb:9a:97:a9:64:91:94:20:a3:39:b8:b0:6f:
                    1f:2b:59:e3:a0:43:d6:1c:64:28:7b:9d:e3:47:bd:
                    f0:b2:be:83:68:3e:6a:99:f9:1e:28:2a:72:59:de:
                    ab:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7C:65:E8:D0:59:AA:43:A9:DE:C0:86:77:A4:0C:87:B8:B9:64:EE
            X509v3 Authority Key Identifier:
                keyid:98:F9:E0:C2:0A:CD:C8:FA:A7:44:1A:08:43:FF:8A:01:F3:D9:DB:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:69:1a:05:3d:4d:27:3b:96:21:70:0f:3f:eb:86:9a:11:75:
         da:30:0a:56:ef:64:4e:3e:63:1b:90:3b:85:d4:8c:48:8b:f4:
         d4:1e:36:13:00:5a:42:fe:48:ac:c2:80:9d:8a:e6:62:d2:8f:
         e8:ed:b5:fb:01:e0:40:f7:02:b7:34:57:a3:b7:0c:89:5f:c1:
         7b:ea:43:91:e8:43:66:86:ab:72:2b:49:e2:47:05:ad:b2:6f:
         d1:b0:67:b8:61:06:79:1b:18:77:5c:54:2f:a6:2e:f9:b0:d0:
         d2:f2:80:57:7a:43:f7:53:2c:97:fc:28:8a:fe:e3:62:b7:3a:
         f6:26:e8:b3:a0:48:d1:97:24:13:6b:dc:b9:ff:1a:03:6e:c5:
         4b:32:8b:74:cf:c5:96:7b:ba:c3:70:73:a0:56:c9:2b:31:4b:
         c5:58:af:c7:cc:4f:db:50:d7:14:39:9b:76:72:03:a1:c3:2b:
         ce:aa:98:28:12:3c:76:f3:cc:87:0d:d6:e4:ae:77:7f:b7:3e:
         09:11:c4:98:bd:fa:c5:fa:a7:ce:c5:62:19:0b:5f:65:1d:eb:
         bb:af:e2:0e:15:8b:9e:af:e1:e0:09:ac:40:a3:b9:16:ba:3a:
         5c:a8:d1:68:0c:33:68:3d:64:4b:93:1a:08:22:b8:3d:61:57:
         a7:53:e5:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPiyy8WCUvK8dmy+U1qlzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZjllMGMyMGFjZGM4ZmFhNzQ0MWEwODQzZmY4YTAxZjNk
OWRiYzUwHhcNMjYwNDE3MDcwMDU5WhcNMjYwNDE4MDcwMDU5WjAzMTEwLwYDVQQD
Eyg0ODdjNjVlOGQwNTlhYTQzYTlkZWMwODY3N2E0MGM4N2I4Yjk2NGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1MVB4aXAEkM34ZetQYPNTPlNjql
LPYQ8OF/ti5AVJZl+Kvo8GV9VibN0WC70bKqhCb0Wz7DpkJiFvvV1I5aUC0STcPi
CIcHPub4aIW0vIm81Rys6zqnw1o5eTT9XkJI7s7AqFGaCk5vzwAmW5Ik5ezEHuAc
7bHtBL4kK4a4576J3q/0dCW+lLnXFS/jVg0wsZ15jdd11ONmsdDIkITDPjav1txI
4kpQgWXj4Xpz2XysOn7/b0+ieQXBCGVnbmuzz12d5Lmo/ZLGro0frPGdxsiuqPua
l6lkkZQgozm4sG8fK1njoEPWHGQoe53jR73wsr6DaD5qmfkeKCpyWd6rpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEh8ZejQWapDqd7AhnekDIe4uWTuMB8GA1UdIwQY
MBaAFJj54MIKzcj6p0QaCEP/igHz2dvFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVBuZ3dnck55UHFuUkJvSVFfLUtBZlBaMjhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xODhkNzUtMmJmMi00OGYxLTkxZjct
YzQ4Y2EyN2E5YzAxLzEvbVBuZ3dnck55UHFuUkJvSVFfLUtBZlBaMjhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xODhkNzUtMmJmMi00OGYxLTkxZjctYzQ4Y2EyN2E5YzAx
LzEvbVBuZ3dnck55UHFuUkJvSVFfLUtBZlBaMjhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGkaBT1N
JzuWIXAPP+uGmhF12jAKVu9kTj5jG5A7hdSMSIv01B42EwBaQv5IrMKAnYrmYtKP
6O21+wHgQPcCtzRXo7cMiV/Be+pDkehDZoarcitJ4kcFrbJv0bBnuGEGeRsYd1xU
L6Yu+bDQ0vKAV3pD91Msl/woiv7jYrc69ibos6BI0ZckE2vcuf8aA27FSzKLdM/F
lnu6w3BzoFbJKzFLxVivx8xP21DXFDmbdnIDocMrzqqYKBI8dvPMhw3W5K53f7c+
CRHEmL36xfqnzsViGQtfZR3ru6/iDhWLnq/h4AmsQKO5Fro6XKjRaAwzaD1kS5Ma
CCK4PWFXp1Pl/w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:44:18 2026 by rpki-client