Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
File:                     8DpbV31dnm0cX9O-1ADpacC-fDQ.mft (raw, json)
Hash identifier:          hBxjiej6rT4fh4PgjNl6b1jzeOwUDuU8TWXmNCPymrI=
Subject key identifier:   B0:BC:C6:4C:08:7F:E2:38:DC:11:73:95:11:F8:67:F0:31:2B:DC:9B
Authority key identifier: F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34
Certificate issuer:       /CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
Certificate serial:       019D9BBE4BC01071F1EC3BCDE6550213CCA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
Manifest number:          18BD
Signing time:             Fri 17 Apr 2026 14:00:32 +0000
Manifest this update:     Fri 17 Apr 2026 14:00:32 +0000
Manifest next update:     Sat 18 Apr 2026 14:00:32 +0000
Files and hashes:         1: 8DpbV31dnm0cX9O-1ADpacC-fDQ.crl (hash: u2QoHynN0S0/iornlNvWSZDg9ndbN6FAE6NwpFzgMeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:4b:c0:10:71:f1:ec:3b:cd:e6:55:02:13:cc:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
        Validity
            Not Before: Apr 17 14:00:32 2026 GMT
            Not After : Apr 18 14:00:32 2026 GMT
        Subject: CN=b0bcc64c087fe238dc11739511f867f0312bdc9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:65:eb:7f:7a:d1:6a:3c:8f:7b:b3:8c:20:82:
                    83:d7:74:e6:0d:ba:32:b7:b4:29:52:7e:ea:fd:55:
                    a5:12:25:d0:af:cc:78:6c:51:02:9c:04:a2:78:cf:
                    49:71:2a:af:8f:0a:47:c7:26:a0:ac:33:28:58:cf:
                    2c:2b:65:88:d7:a4:f5:db:47:69:72:d5:12:a1:04:
                    2d:34:ac:8c:74:45:80:f6:64:64:79:55:14:4f:e2:
                    84:eb:27:fd:ba:b0:2c:34:d3:4f:b0:eb:d8:b9:35:
                    d4:35:83:de:f2:11:79:48:e2:00:23:3e:73:72:1e:
                    f2:2a:83:a2:b0:67:bb:ae:8c:94:69:b0:6a:49:fb:
                    e7:7e:65:0c:1b:2b:2f:9f:d7:03:1c:a9:3c:d8:2a:
                    a1:ff:d0:7f:3b:97:5f:ea:91:6f:99:a0:f1:7a:90:
                    b5:82:ac:63:f7:2d:09:ee:86:0e:70:49:92:72:46:
                    a6:63:c7:b5:79:c9:02:49:57:3e:00:1b:32:c8:68:
                    15:fe:23:37:57:9e:37:b4:c9:35:d9:7b:03:4f:5f:
                    87:e3:ea:7f:7e:37:a1:1c:ef:3c:6a:fa:8c:cd:19:
                    5a:5e:e0:e8:35:a3:a5:45:6c:14:69:3e:bd:b0:c3:
                    8f:3b:b6:e2:03:a2:9c:64:72:ee:6d:1d:c5:49:52:
                    b3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BC:C6:4C:08:7F:E2:38:DC:11:73:95:11:F8:67:F0:31:2B:DC:9B
            X509v3 Authority Key Identifier:
                keyid:F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:06:ec:0f:5b:a1:9a:de:0d:ac:d0:8a:82:07:af:15:a2:0e:
         d7:77:ec:72:25:2f:09:06:9b:0a:e1:60:b1:29:c8:35:fe:86:
         30:2a:a1:98:27:24:c3:19:b8:7a:e9:8c:41:fe:66:aa:e6:0d:
         4b:6c:b1:f7:9c:49:c1:2d:80:97:35:e6:aa:54:a7:2f:a2:f3:
         bf:8b:f3:39:54:be:00:a7:9b:97:2d:37:a5:2f:bf:5c:a7:42:
         52:00:28:fe:de:5b:bc:6f:b7:d4:ee:a8:ea:8b:ca:10:1d:a9:
         ff:57:bc:21:11:73:53:63:5c:43:ef:7e:23:5e:b9:ef:a3:4b:
         74:f3:3c:4a:62:e0:f8:8d:f9:30:42:11:38:07:4c:4c:23:fe:
         1b:8b:79:1f:12:4e:b0:06:00:b5:93:20:9a:a8:3d:6f:35:eb:
         4f:ca:c9:a5:61:95:94:fe:98:c7:11:a2:1f:6c:17:19:a6:37:
         2f:78:46:91:03:f1:7c:b0:8c:db:2b:33:b4:48:75:a3:62:01:
         38:f6:23:90:8e:dd:2d:bc:46:e9:3d:c3:b7:a1:fe:5b:8d:49:
         07:11:16:f7:70:79:80:37:bc:34:92:36:28:bd:66:84:f4:ac:
         7d:95:b9:c3:61:3d:41:e3:84:93:e9:b9:31:45:50:1e:c0:20:
         f4:32:b1:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvkvAEHHx7DvN5lUCE8ypMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwM2E1YjU3N2Q1ZDllNmQxYzVmZDNiZWQ0MDBlOTY5YzBi
ZTdjMzQwHhcNMjYwNDE3MTQwMDMyWhcNMjYwNDE4MTQwMDMyWjAzMTEwLwYDVQQD
EyhiMGJjYzY0YzA4N2ZlMjM4ZGMxMTczOTUxMWY4NjdmMDMxMmJkYzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmXrf3rRajyPe7OMIIKD13TmDboy
t7QpUn7q/VWlEiXQr8x4bFECnASieM9JcSqvjwpHxyagrDMoWM8sK2WI16T120dp
ctUSoQQtNKyMdEWA9mRkeVUUT+KE6yf9urAsNNNPsOvYuTXUNYPe8hF5SOIAIz5z
ch7yKoOisGe7royUabBqSfvnfmUMGysvn9cDHKk82Cqh/9B/O5df6pFvmaDxepC1
gqxj9y0J7oYOcEmSckamY8e1eckCSVc+ABsyyGgV/iM3V543tMk12XsDT1+H4+p/
fjehHO88avqMzRlaXuDoNaOlRWwUaT69sMOPO7biA6KcZHLubR3FSVKz0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLC8xkwIf+I43BFzlRH4Z/AxK9ybMB8GA1UdIwQY
MBaAFPA6W1d9XZ5tHF/TvtQA6WnAvnw0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOERwYlYzMWRubTBjWDlPLTFBRHBhY0MtZkRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS82ODg5NDMtNzEzZC00OTFlLWE3MjEt
ZWNhNTlmODIwMThhLzEvOERwYlYzMWRubTBjWDlPLTFBRHBhY0MtZkRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS82ODg5NDMtNzEzZC00OTFlLWE3MjEtZWNhNTlmODIwMThh
LzEvOERwYlYzMWRubTBjWDlPLTFBRHBhY0MtZkRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqQbsD1uh
mt4NrNCKggevFaIO13fsciUvCQabCuFgsSnINf6GMCqhmCckwxm4eumMQf5mquYN
S2yx95xJwS2AlzXmqlSnL6Lzv4vzOVS+AKebly03pS+/XKdCUgAo/t5bvG+31O6o
6ovKEB2p/1e8IRFzU2NcQ+9+I16576NLdPM8SmLg+I35MEIROAdMTCP+G4t5HxJO
sAYAtZMgmqg9bzXrT8rJpWGVlP6YxxGiH2wXGaY3L3hGkQPxfLCM2ysztEh1o2IB
OPYjkI7dLbxG6T3Dt6H+W41JBxEW93B5gDe8NJI2KL1mhPSsfZW5w2E9QeOEk+m5
MUVQHsAg9DKxxA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:30:37 2026 by rpki-client