Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
File:                     R05tfOu9CCEsqMjVka5aBrwDuXg.mft (raw, json)
Hash identifier:          V/wQncojEi1tn6/DVhRBMw4NKZtx6Tl6wDJy3ET5Roc=
Subject key identifier:   F8:B3:F0:26:DB:21:47:77:D6:B1:AF:34:99:A5:D3:7E:D2:F4:9B:3D
Authority key identifier: 47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78
Certificate issuer:       /CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978
Certificate serial:       019D9E1B2419F27B0EA4AB7170B93A6240CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
Manifest number:          18C1
Signing time:             Sat 18 Apr 2026 01:01:11 +0000
Manifest this update:     Sat 18 Apr 2026 01:01:11 +0000
Manifest next update:     Sun 19 Apr 2026 01:01:11 +0000
Files and hashes:         1: 6sl1QA3sSuaYTj_Hf-IVWFHdb3I.roa (hash: L4J1WXXqopoGn75Rlv6PEAeVXiFveHZ3dIS9nhaDc3c=)
                          2: R05tfOu9CCEsqMjVka5aBrwDuXg.crl (hash: OwF3khbDU9rezlzRE0eHaoVBfe63RrzXu3eN97yWOmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9e:1b:24:19:f2:7b:0e:a4:ab:71:70:b9:3a:62:40:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978
        Validity
            Not Before: Apr 18 01:01:11 2026 GMT
            Not After : Apr 19 01:01:11 2026 GMT
        Subject: CN=f8b3f026db214777d6b1af3499a5d37ed2f49b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bb:05:b2:0c:18:27:95:2c:98:06:d8:5e:18:
                    8b:9c:04:7d:d5:89:09:f7:29:f2:54:e9:e9:85:2b:
                    e4:34:0d:c6:e3:f4:77:e8:a8:f6:d6:e0:ac:2f:26:
                    34:00:11:61:ee:1c:96:17:dc:5c:5a:56:9b:6f:69:
                    f6:8c:13:cc:4f:3c:8e:fa:69:c3:d2:61:ac:12:2d:
                    18:b5:76:d1:09:e7:aa:a3:72:4a:1f:3f:f8:66:f2:
                    b6:cd:33:c1:6e:3d:bb:9f:26:e8:de:95:ac:54:d0:
                    97:fc:79:43:f3:e7:fa:d8:7c:c4:88:d7:a4:79:a4:
                    ac:94:a4:56:9f:03:b3:45:7d:57:7b:94:61:4a:30:
                    26:c9:af:2c:27:bb:4b:f4:05:c0:18:a0:3c:1e:e7:
                    8b:d4:6e:d9:cd:f3:4c:fe:64:21:53:13:01:4d:3e:
                    03:8b:f8:92:da:4a:22:60:a4:03:8e:58:61:c5:37:
                    4e:a2:4a:51:04:cc:f0:6a:7c:86:b1:9a:8e:bf:77:
                    f8:9b:22:7c:39:cd:75:43:a6:48:19:b8:22:4c:f6:
                    9b:73:e6:d7:6c:70:bc:0a:b2:f3:19:3b:9b:40:39:
                    18:3b:96:09:80:26:4d:b8:e3:72:3d:70:b1:74:6c:
                    f2:28:66:35:a8:61:6b:2e:2b:ba:e8:48:16:bd:b7:
                    e0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B3:F0:26:DB:21:47:77:D6:B1:AF:34:99:A5:D3:7E:D2:F4:9B:3D
            X509v3 Authority Key Identifier:
                keyid:47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:54:55:1e:17:b2:54:c2:cf:4d:1e:f1:ad:c0:9d:0c:3b:18:
         1e:ff:cb:3a:4a:f5:48:88:fa:a7:e3:88:06:be:e7:3d:02:c5:
         2f:52:43:49:cf:1e:99:c1:a3:48:78:6b:9b:be:ed:1f:f5:79:
         45:b7:79:3b:2a:76:14:ea:1b:4a:e5:ce:18:ac:ca:9e:16:62:
         cc:f7:a2:3a:4e:fa:b7:f6:f2:5c:94:2b:be:75:c0:ec:e2:6b:
         26:3a:09:3e:29:64:ec:22:f3:a6:93:db:46:9d:38:7d:4c:b1:
         35:d7:bf:28:11:4c:4e:70:92:a4:77:b2:3f:02:96:cc:c2:da:
         83:87:fe:cf:7e:c2:13:4d:0f:59:51:a2:34:66:70:90:8b:6b:
         3c:32:20:a6:70:29:d7:86:4a:4c:0f:db:e2:47:19:cb:7a:b1:
         64:55:5d:ed:21:e6:85:a1:f0:6a:7b:da:87:00:31:56:78:43:
         55:0d:19:93:b7:89:7e:d4:13:d9:ca:66:b7:9b:be:f5:f3:88:
         6b:1b:44:15:ed:d4:7d:ad:c0:47:cf:fd:de:cf:ae:c9:d5:f3:
         62:16:a6:4a:9d:bf:c0:3b:08:11:70:41:d1:36:7a:c5:55:7e:
         38:2a:ff:ab:bb:a8:e3:3a:99:e2:43:e0:5f:f1:04:9b:a0:2c:
         21:4f:56:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2eGyQZ8nsOpKtxcLk6YkDKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NGU2ZDdjZWJiZDA4MjEyY2E4YzhkNTkxYWU1YTA2YmMw
M2I5NzgwHhcNMjYwNDE4MDEwMTExWhcNMjYwNDE5MDEwMTExWjAzMTEwLwYDVQQD
EyhmOGIzZjAyNmRiMjE0Nzc3ZDZiMWFmMzQ5OWE1ZDM3ZWQyZjQ5YjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrsFsgwYJ5UsmAbYXhiLnAR91YkJ
9ynyVOnphSvkNA3G4/R36Kj21uCsLyY0ABFh7hyWF9xcWlabb2n2jBPMTzyO+mnD
0mGsEi0YtXbRCeeqo3JKHz/4ZvK2zTPBbj27nybo3pWsVNCX/HlD8+f62HzEiNek
eaSslKRWnwOzRX1Xe5RhSjAmya8sJ7tL9AXAGKA8HueL1G7ZzfNM/mQhUxMBTT4D
i/iS2koiYKQDjlhhxTdOokpRBMzwanyGsZqOv3f4myJ8Oc11Q6ZIGbgiTPabc+bX
bHC8CrLzGTubQDkYO5YJgCZNuONyPXCxdGzyKGY1qGFrLiu66EgWvbfg8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiz8CbbIUd31rGvNJml037S9Js9MB8GA1UdIwQY
MBaAFEdObXzrvQghLKjI1ZGuWga8A7l4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjA1dGZPdTlDQ0VzcU1qVmthNWFCcndEdVhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS80ZTJjNmUtZjc4MS00Mzk0LTk1NjUt
MjljNzUyY2M1OTU2LzEvUjA1dGZPdTlDQ0VzcU1qVmthNWFCcndEdVhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS80ZTJjNmUtZjc4MS00Mzk0LTk1NjUtMjljNzUyY2M1OTU2
LzEvUjA1dGZPdTlDQ0VzcU1qVmthNWFCcndEdVhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFRVHhey
VMLPTR7xrcCdDDsYHv/LOkr1SIj6p+OIBr7nPQLFL1JDSc8emcGjSHhrm77tH/V5
Rbd5Oyp2FOobSuXOGKzKnhZizPeiOk76t/byXJQrvnXA7OJrJjoJPilk7CLzppPb
Rp04fUyxNde/KBFMTnCSpHeyPwKWzMLag4f+z37CE00PWVGiNGZwkItrPDIgpnAp
14ZKTA/b4kcZy3qxZFVd7SHmhaHwanvahwAxVnhDVQ0Zk7eJftQT2cpmt5u+9fOI
axtEFe3Ufa3AR8/93s+uydXzYhamSp2/wDsIEXBB0TZ6xVV+OCr/q7uo4zqZ4kPg
X/EEm6AsIU9WKQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:06:06 2026 by rpki-client