Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
File:                     1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft (raw, json)
Hash identifier:          gzOlauq/MEJdkws0U9jpBfgJLttbovMQQykxQPjEjIk=
Subject key identifier:   A5:BA:C3:09:94:12:2C:C7:7D:E9:05:C8:7A:28:8E:E1:6A:BB:46:87
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Certificate issuer:       /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial:       019D9A74D090F94076214542B663A484B745
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
Manifest number:          18CE
Signing time:             Fri 17 Apr 2026 08:00:39 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:39 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:39 +0000
Files and hashes:         1: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl (hash: o456KP7EL/CgvSU65+Qh/8UTSAgMkEjtIJwYZagNZs4=)
                          2: 40tYHzrdIOKM0_j4QKh_7shzx8k.roa (hash: SKNQQTkqDQxf7nvw2qRuH0Vq4RF5cs3xZPCOte7W/OA=)
                          3: QNpprllplAM88mMrWtN3ag177fE.roa (hash: 5dP2zjfT0bTz8XtRVCAWieBHqUYv0AqhPnTwXU8eFn4=)
                          4: Ss-pxg7MCUnATOQpuT8Jh8a6KnM.roa (hash: kmr+HuErFhNT7cviIumckQWDHYCPiWsB0llSSAYvKio=)
                          5: dkTEhcSUjmDmfcgVaKjPvVY65ho.roa (hash: CEmoGVLgn+ZeP+7mTHI7wWOP1MgXpbR4Ij+5W74s23I=)
                          6: fXSStTtN6IqbqkCD3E5j3kC-YHI.roa (hash: zVgHJh9lJVijMpBB+dDgMK+AGLHEUW+Je1xWignFzIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:d0:90:f9:40:76:21:45:42:b6:63:a4:84:b7:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
        Validity
            Not Before: Apr 17 08:00:39 2026 GMT
            Not After : Apr 18 08:00:39 2026 GMT
        Subject: CN=a5bac30994122cc77de905c87a288ee16abb4687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:87:0f:dc:87:0a:2f:9a:95:a2:9c:87:88:f9:
                    53:85:fe:3a:a1:95:9d:f6:1b:d9:23:de:4c:d6:1f:
                    da:78:62:49:1a:69:53:a9:a1:bb:08:be:f2:e9:dc:
                    78:73:f1:3a:4c:50:9c:4b:31:df:f3:4d:c1:5a:2a:
                    f6:d9:ae:67:fb:20:fa:cc:79:11:ba:5b:2e:65:0f:
                    cb:0a:62:20:83:e2:ef:38:2f:60:c9:ad:c1:4c:ff:
                    96:55:54:78:e7:c2:c8:02:26:ca:30:e7:b9:83:b0:
                    08:e6:3b:1b:b5:bb:ac:a5:d6:4f:4e:4b:77:0e:dd:
                    5b:63:db:6d:67:70:25:72:c6:3f:62:34:67:e2:d7:
                    53:c5:5d:ec:6e:a8:2e:80:c3:76:a3:b2:6f:24:b7:
                    fe:7c:7b:92:b4:80:90:97:b5:ee:76:bb:ed:d3:0e:
                    2e:b1:8a:62:30:de:c2:6b:80:d1:f8:80:69:fe:20:
                    31:a2:23:59:b1:fb:94:f0:dc:40:13:d5:65:e1:2a:
                    01:91:8d:5c:69:f7:08:e5:57:ac:09:5e:b4:a5:04:
                    09:ed:d7:0e:53:8f:37:43:0c:0a:e6:53:7c:11:b8:
                    2f:64:11:41:68:80:ae:cb:21:8f:e8:72:29:16:2f:
                    63:93:97:36:94:3a:ad:1a:35:a7:77:f6:a8:f0:dd:
                    d2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BA:C3:09:94:12:2C:C7:7D:E9:05:C8:7A:28:8E:E1:6A:BB:46:87
            X509v3 Authority Key Identifier:
                keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ea:0c:6a:c4:ee:41:c4:1f:0e:97:62:48:4a:6b:10:a0:e4:
         8d:ff:dc:18:05:6f:20:81:76:9c:26:bb:3c:de:9d:46:56:68:
         3b:a9:ed:81:a0:2d:09:5b:53:29:f4:76:a7:8a:4c:51:e4:ee:
         d2:b3:9b:4d:49:70:a7:1c:74:70:cb:4c:0c:b7:f1:6e:ff:f2:
         9f:a3:23:0f:16:45:53:97:3f:b7:6f:12:49:50:68:51:8f:b9:
         1e:1b:f0:10:b3:71:1f:34:6a:b2:df:67:e8:73:6a:3e:d4:59:
         5c:5b:06:8e:6f:da:6a:7e:4f:b3:7a:20:b9:ab:5b:25:dc:e4:
         f5:21:5d:f1:95:48:05:1b:55:1c:3c:b9:ab:69:13:0c:e7:bb:
         b2:a1:1a:fd:e8:51:fe:16:df:74:fe:9b:a8:4e:f2:f9:9e:a0:
         a4:33:15:04:10:08:74:3b:aa:ba:bc:ac:c9:04:7a:0e:ab:77:
         f7:86:9d:01:08:dd:3e:10:db:82:1c:71:17:7c:27:96:e0:7e:
         7f:92:07:6e:b4:1e:32:be:8f:85:1e:50:cb:84:3e:5e:06:59:
         0a:78:cc:9e:ff:3e:ec:8f:ab:71:ab:6c:3c:08:9e:32:72:c4:
         8d:dd:90:e7:c6:3f:d2:6b:cc:73:b0:31:c2:86:a4:88:f7:ec:
         cb:df:13:7d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2adNCQ+UB2IUVCtmOkhLdFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ODU3ZWNmNDQxZTVlYTFkNzE4MWZlYzdlOTdlNmRiYzEy
MjBmYzIwHhcNMjYwNDE3MDgwMDM5WhcNMjYwNDE4MDgwMDM5WjAzMTEwLwYDVQQD
EyhhNWJhYzMwOTk0MTIyY2M3N2RlOTA1Yzg3YTI4OGVlMTZhYmI0Njg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsocP3IcKL5qVopyHiPlThf46oZWd
9hvZI95M1h/aeGJJGmlTqaG7CL7y6dx4c/E6TFCcSzHf803BWir22a5n+yD6zHkR
ulsuZQ/LCmIgg+LvOC9gya3BTP+WVVR458LIAibKMOe5g7AI5jsbtbuspdZPTkt3
Dt1bY9ttZ3AlcsY/YjRn4tdTxV3sbqgugMN2o7JvJLf+fHuStICQl7Xudrvt0w4u
sYpiMN7Ca4DR+IBp/iAxoiNZsfuU8NxAE9Vl4SoBkY1cafcI5VesCV60pQQJ7dcO
U483QwwK5lN8EbgvZBFBaICuyyGP6HIpFi9jk5c2lDqtGjWnd/ao8N3SIwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKW6wwmUEizHfekFyHoojuFqu0aHMB8GA1UdIwQY
MBaAFPiFfs9EHl6h1xgf7H6X5tvBIg/CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1JVi16MFFlWHFIWEdCX3NmcGZtMjhFaUQ4SS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYzg0OTc2LWQ1ZWEtNGU3Zi04ZWQz
LWE4OWY4MTc3NjQwNi8xLzEtSVYtejBRZVhxSFhHQl9zZnBmbTI4RWlEOEkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJhL2M4NDk3Ni1kNWVhLTRlN2YtOGVkMy1hODlmODE3NzY0
MDYvMS8xLUlWLXowUWVYcUhYR0Jfc2ZwZm0yOEVpRDhJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAceoM
asTuQcQfDpdiSEprEKDkjf/cGAVvIIF2nCa7PN6dRlZoO6ntgaAtCVtTKfR2p4pM
UeTu0rObTUlwpxx0cMtMDLfxbv/yn6MjDxZFU5c/t28SSVBoUY+5HhvwELNxHzRq
st9n6HNqPtRZXFsGjm/aan5Ps3oguatbJdzk9SFd8ZVIBRtVHDy5q2kTDOe7sqEa
/ehR/hbfdP6bqE7y+Z6gpDMVBBAIdDuqurysyQR6Dqt394adAQjdPhDbghxxF3wn
luB+f5IHbrQeMr6PhR5Qy4Q+XgZZCnjMnv8+7I+rcatsPAieMnLEjd2Q58Y/0mvM
c7AxwoakiPfsy98TfQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:29:26 2026 by rpki-client