Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
File:                     l0Zhyxw45jvXi9aysdaGhqVBW_U.mft (raw, json)
Hash identifier:          6EmwDE3LEkal9Wgn2RsV5RIlt6srBb27Svz1VX/tntc=
Subject key identifier:   E7:D8:EF:0E:68:12:66:24:92:67:48:4A:26:31:88:23:4C:C3:DD:85
Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
Certificate issuer:       /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Certificate serial:       019D98BDF13499783046800FC305895A3AF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
Manifest number:          18CB
Signing time:             Fri 17 Apr 2026 00:01:17 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:17 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:17 +0000
Files and hashes:         1: 3JvVaHFxMvE7oKb_Rk5KcxOo0QM.roa (hash: ni3uO/fhFfgK3uTopvt+sNnEoUiIwxpRI4kiwz3P0Q4=)
                          2: C9Y58BKwkaw0ZHTl_j0txcpI-HU.asa (hash: 6ft+Zt4xMqD8pufWleBqsqUW7RgXeGTKhk+GP4M0q7Q=)
                          3: b4x9At5aHU384b0djamWkOwy0Gk.roa (hash: kQ+bOS8CQlnm4PmXuVXiGK4SgaDFMpdC3HI9bBKlvtQ=)
                          4: l0Zhyxw45jvXi9aysdaGhqVBW_U.crl (hash: QFytt/Rc8BFUmV7LKfKfjUCI8HwaDbO1CaO/6UIlplA=)
                          5: mYpQfCwGUFa_N3gCiTs-pRnvFpc.roa (hash: gQqVTcaiR3QtkZ8CYSUcJShg6d7Q858NjMwMx9HDxMo=)
                          6: vEZLnR5almH1CGYItYBwVOGJqYY.asa (hash: Q9dmdkbTJa12zCUuc9rAzbHv2trspyTh+XDW4FOxvK4=)
                          7: yu-i2x-62u9GgIqkbHtrB0flg3s.roa (hash: DBRnQF75P0UT8wiwqTpnRrbuWAWKmmICP891u/zUXI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:f1:34:99:78:30:46:80:0f:c3:05:89:5a:3a:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
        Validity
            Not Before: Apr 17 00:01:17 2026 GMT
            Not After : Apr 18 00:01:17 2026 GMT
        Subject: CN=e7d8ef0e681266249267484a263188234cc3dd85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3f:7f:dd:c8:16:c1:cd:37:cb:9b:8a:fd:ea:
                    a6:e5:41:54:67:5b:ba:4f:cc:bd:1b:2b:a5:ec:27:
                    0a:26:01:9b:86:6a:f0:3c:1d:ec:5c:bb:ba:fe:49:
                    79:e0:4e:f9:07:a5:f7:cb:6a:8b:c1:f6:27:41:4b:
                    ae:18:3a:c9:46:5e:bb:3e:cb:5f:e5:4e:46:62:29:
                    89:92:ae:bf:ad:b7:19:19:74:d5:97:d8:87:85:85:
                    d2:99:31:ce:93:59:1e:d0:71:3b:37:ec:20:cb:b2:
                    07:26:1b:04:9d:30:d2:36:a1:9a:a7:54:f5:4b:b3:
                    02:1c:87:d9:b9:d0:7f:72:b2:61:7d:14:b3:0e:8e:
                    55:01:e2:90:41:97:bf:61:47:b5:08:34:fd:4c:90:
                    36:be:38:6f:8b:99:e4:c6:f8:84:f8:22:01:37:41:
                    3d:68:6c:18:2a:cc:37:b3:1c:d9:30:e1:de:b5:8d:
                    d4:d0:c8:97:99:17:27:45:c5:2c:fc:23:d5:77:57:
                    88:02:dd:5f:e0:55:5e:e8:2f:f5:d0:32:d8:a0:1d:
                    96:51:76:ec:ac:b3:6c:96:2c:c8:86:ed:52:fa:3b:
                    e7:2e:26:ac:c8:31:bc:d2:5f:e4:dc:eb:c2:dc:d7:
                    67:b2:87:03:c7:b5:5b:49:6a:a2:fe:b2:54:3b:8d:
                    52:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D8:EF:0E:68:12:66:24:92:67:48:4A:26:31:88:23:4C:C3:DD:85
            X509v3 Authority Key Identifier:
                keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:a6:07:e3:d6:bb:52:93:bb:e0:88:92:c7:db:da:32:5a:16:
         6c:0c:b8:0f:da:1a:c2:fb:b3:a6:b4:3e:d7:3b:6e:6a:20:f4:
         7a:12:24:cb:d1:a1:91:cd:fe:c4:8d:c8:64:d6:ee:5f:13:85:
         84:a0:6e:26:2b:8c:a8:25:ad:f0:c9:84:fa:8e:3f:41:0c:b9:
         e1:a1:7e:97:7c:f2:55:32:af:a1:61:8f:a3:9a:8e:b6:e8:ba:
         8e:fe:08:d5:09:fc:f2:06:88:a8:07:4f:7e:9b:2d:fb:b4:ac:
         23:f2:d0:fb:3e:52:dc:34:a9:86:30:0e:4e:0c:24:6a:ec:ba:
         8d:45:13:e0:d6:02:38:49:f0:a5:a2:fe:e5:97:8e:0c:cf:ce:
         51:82:6a:a5:fc:5e:04:ce:02:ee:6e:00:3b:89:53:29:83:0c:
         44:f7:06:40:a8:8c:74:26:93:c6:59:3c:4e:67:f8:e7:ae:5b:
         9f:74:5b:5f:07:4f:92:05:c8:5a:28:70:2e:7d:7a:04:a4:38:
         dc:e1:f2:6e:96:18:6e:4b:6e:f1:66:24:fe:0b:a0:f4:0d:d6:
         82:ce:62:0f:76:12:6f:db:c7:d7:f5:96:0e:25:5c:21:4c:76:
         b2:82:71:17:b0:de:56:e0:21:81:49:6d:bd:43:a4:2b:e7:f7:
         72:75:49:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvfE0mXgwRoAPwwWJWjr1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NDY2MWNiMWMzOGU2M2JkNzhiZDZiMmIxZDY4Njg2YTU0
MTViZjUwHhcNMjYwNDE3MDAwMTE3WhcNMjYwNDE4MDAwMTE3WjAzMTEwLwYDVQQD
EyhlN2Q4ZWYwZTY4MTI2NjI0OTI2NzQ4NGEyNjMxODgyMzRjYzNkZDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD9/3cgWwc03y5uK/eqm5UFUZ1u6
T8y9Gyul7CcKJgGbhmrwPB3sXLu6/kl54E75B6X3y2qLwfYnQUuuGDrJRl67Pstf
5U5GYimJkq6/rbcZGXTVl9iHhYXSmTHOk1ke0HE7N+wgy7IHJhsEnTDSNqGap1T1
S7MCHIfZudB/crJhfRSzDo5VAeKQQZe/YUe1CDT9TJA2vjhvi5nkxviE+CIBN0E9
aGwYKsw3sxzZMOHetY3U0MiXmRcnRcUs/CPVd1eIAt1f4FVe6C/10DLYoB2WUXbs
rLNslizIhu1S+jvnLiasyDG80l/k3OvC3NdnsocDx7VbSWqi/rJUO41SLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfY7w5oEmYkkmdISiYxiCNMw92FMB8GA1UdIwQY
MBaAFJdGYcscOOY714vWsrHWhoalQVv1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDBaaHl4dzQ1anZYaTlheXNkYUdocVZCV19VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hMGJmM2UtMzY0NS00ZTE2LWJjYTkt
OGFkYWMxN2U5MGFlLzEvbDBaaHl4dzQ1anZYaTlheXNkYUdocVZCV19VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9hMGJmM2UtMzY0NS00ZTE2LWJjYTktOGFkYWMxN2U5MGFl
LzEvbDBaaHl4dzQ1anZYaTlheXNkYUdocVZCV19VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp6YH49a7
UpO74IiSx9vaMloWbAy4D9oawvuzprQ+1ztuaiD0ehIky9Ghkc3+xI3IZNbuXxOF
hKBuJiuMqCWt8MmE+o4/QQy54aF+l3zyVTKvoWGPo5qOtui6jv4I1Qn88gaIqAdP
fpst+7SsI/LQ+z5S3DSphjAOTgwkauy6jUUT4NYCOEnwpaL+5ZeODM/OUYJqpfxe
BM4C7m4AO4lTKYMMRPcGQKiMdCaTxlk8Tmf4565bn3RbXwdPkgXIWihwLn16BKQ4
3OHybpYYbktu8WYk/gug9A3Wgs5iD3YSb9vH1/WWDiVcIUx2soJxF7DeVuAhgUlt
vUOkK+f3cnVJLw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:48:11 2026 by rpki-client