Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
File:                     c46JPc00f32rX3DTUfj84d6qZdE.mft (raw, json)
Hash identifier:          E/b4n+pP/RupwTbErTlk3BfDNbJCppNB5u0FeRfjRnM=
Subject key identifier:   C5:52:AE:93:15:7E:93:B3:87:7B:8E:3E:64:E5:D5:F9:AD:57:96:A3
Authority key identifier: 73:8E:89:3D:CD:34:7F:7D:AB:5F:70:D3:51:F8:FC:E1:DE:AA:65:D1
Certificate issuer:       /CN=738e893dcd347f7dab5f70d351f8fce1deaa65d1
Certificate serial:       019D992AFB81301E743811018EFDDDD9CF76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
Manifest number:          18BF
Signing time:             Fri 17 Apr 2026 02:00:23 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:23 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:23 +0000
Files and hashes:         1: c46JPc00f32rX3DTUfj84d6qZdE.crl (hash: KWd/4VHtCvm3ovyggsmDCUQ55xnBuViVfPUWPfFttts=)
                          2: kY9tmhKeqBmNGdHcsEgpfNUwWzs.roa (hash: ufSkSo79tZguXWEec9VmuCg/qUTf+OMSW2NwdEun2aI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2a:fb:81:30:1e:74:38:11:01:8e:fd:dd:d9:cf:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=738e893dcd347f7dab5f70d351f8fce1deaa65d1
        Validity
            Not Before: Apr 17 02:00:23 2026 GMT
            Not After : Apr 18 02:00:23 2026 GMT
        Subject: CN=c552ae93157e93b3877b8e3e64e5d5f9ad5796a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9b:95:cd:d8:4e:72:5b:83:99:fc:a2:7b:dd:
                    11:56:78:e1:c7:22:6f:55:eb:e7:4a:13:eb:02:fa:
                    f9:6e:05:36:e1:a8:0b:9a:46:82:a7:87:46:45:56:
                    d3:f7:a3:0c:57:76:93:89:2a:a6:40:c3:9d:b8:e2:
                    4a:4d:e1:bc:ef:e2:f1:5b:3d:82:4f:49:db:34:fd:
                    f9:c9:b6:d5:6b:f1:19:9f:5f:e0:e5:00:f7:69:47:
                    78:c8:94:72:3a:af:8e:ac:ed:60:1c:d5:28:ca:30:
                    94:71:5e:e2:28:ac:00:de:a1:c0:72:41:6a:b2:82:
                    c7:38:c7:aa:10:4c:65:d2:ef:75:d5:88:65:8f:9c:
                    cf:e6:a1:ec:be:d3:82:1a:7f:3f:ad:49:f1:dd:3d:
                    f3:93:94:6a:7f:fc:03:48:79:b9:69:1e:97:9e:9a:
                    f0:ff:1a:c5:07:17:70:88:03:1b:35:e3:ca:81:08:
                    9e:36:fd:b4:96:44:8c:54:73:e6:78:2f:16:9d:a5:
                    f7:09:24:7d:f2:e9:e1:0f:79:9f:9a:65:66:fb:f6:
                    f0:cf:7f:de:c6:59:94:db:f8:42:40:81:b6:cb:4b:
                    31:86:e8:fe:1e:a6:aa:33:01:ef:21:be:f0:47:c0:
                    2c:71:33:99:e8:24:21:66:55:fe:1c:2b:f8:ce:89:
                    73:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:52:AE:93:15:7E:93:B3:87:7B:8E:3E:64:E5:D5:F9:AD:57:96:A3
            X509v3 Authority Key Identifier:
                keyid:73:8E:89:3D:CD:34:7F:7D:AB:5F:70:D3:51:F8:FC:E1:DE:AA:65:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:23:dc:fa:33:5d:52:70:05:0b:56:a7:67:e6:1b:69:0f:96:
         1f:2c:37:cb:ce:95:06:fd:74:fb:25:37:8a:75:db:78:a6:88:
         a6:20:2e:84:b5:17:e8:ba:8c:b5:4d:9f:39:f9:01:63:20:04:
         56:cd:2f:4c:d0:05:db:a1:9e:c7:92:16:30:38:72:2b:96:2d:
         6a:60:6b:b4:a3:57:e1:ae:f0:05:ba:3c:b2:9c:bd:a7:70:94:
         de:cb:32:35:fa:58:0f:0e:22:1c:62:9b:61:bb:1f:80:c4:58:
         15:a4:8c:de:5d:83:19:2f:dd:81:f2:34:4a:84:28:f8:b9:c5:
         d7:82:2a:ed:67:80:b0:bd:62:9b:a6:51:af:cc:69:e5:3c:9c:
         5d:9b:62:5e:45:3e:77:bb:1f:52:1b:e9:1f:71:2b:8f:a1:c6:
         64:f5:d5:18:94:2e:4e:da:0e:2a:fa:5e:e5:36:a8:b5:50:2b:
         09:ce:d0:85:63:ad:ed:bd:02:31:a9:74:d3:f9:89:3a:5b:05:
         fe:f6:b1:0c:2c:e6:15:47:87:8b:79:e2:f4:10:8c:b3:dc:12:
         76:89:a7:74:92:af:c9:6c:db:1c:31:f0:c9:56:ad:75:bc:12:
         21:9b:e1:3c:d2:8f:41:3d:07:13:28:b3:e1:54:85:7c:cc:bf:
         54:08:b6:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKvuBMB50OBEBjv3d2c92MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczOGU4OTNkY2QzNDdmN2RhYjVmNzBkMzUxZjhmY2UxZGVh
YTY1ZDEwHhcNMjYwNDE3MDIwMDIzWhcNMjYwNDE4MDIwMDIzWjAzMTEwLwYDVQQD
EyhjNTUyYWU5MzE1N2U5M2IzODc3YjhlM2U2NGU1ZDVmOWFkNTc5NmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJuVzdhOcluDmfyie90RVnjhxyJv
VevnShPrAvr5bgU24agLmkaCp4dGRVbT96MMV3aTiSqmQMOduOJKTeG87+LxWz2C
T0nbNP35ybbVa/EZn1/g5QD3aUd4yJRyOq+OrO1gHNUoyjCUcV7iKKwA3qHAckFq
soLHOMeqEExl0u911Yhlj5zP5qHsvtOCGn8/rUnx3T3zk5Rqf/wDSHm5aR6Xnprw
/xrFBxdwiAMbNePKgQieNv20lkSMVHPmeC8WnaX3CSR98unhD3mfmmVm+/bwz3/e
xlmU2/hCQIG2y0sxhuj+HqaqMwHvIb7wR8AscTOZ6CQhZlX+HCv4zolzCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVSrpMVfpOzh3uOPmTl1fmtV5ajMB8GA1UdIwQY
MBaAFHOOiT3NNH99q19w01H4/OHeqmXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzQ2SlBjMDBmMzJyWDNEVFVmajg0ZDZxWmRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yNTUxNDktOGM0Yi00Y2Q4LTkxOWYt
NzdiYjUzMjIyOGI0LzEvYzQ2SlBjMDBmMzJyWDNEVFVmajg0ZDZxWmRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yNTUxNDktOGM0Yi00Y2Q4LTkxOWYtNzdiYjUzMjIyOGI0
LzEvYzQ2SlBjMDBmMzJyWDNEVFVmajg0ZDZxWmRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyPc+jNd
UnAFC1anZ+YbaQ+WHyw3y86VBv10+yU3inXbeKaIpiAuhLUX6LqMtU2fOfkBYyAE
Vs0vTNAF26Gex5IWMDhyK5YtamBrtKNX4a7wBbo8spy9p3CU3ssyNfpYDw4iHGKb
YbsfgMRYFaSM3l2DGS/dgfI0SoQo+LnF14Iq7WeAsL1im6ZRr8xp5TycXZtiXkU+
d7sfUhvpH3Erj6HGZPXVGJQuTtoOKvpe5TaotVArCc7QhWOt7b0CMal00/mJOlsF
/vaxDCzmFUeHi3ni9BCMs9wSdomndJKvyWzbHDHwyVatdbwSIZvhPNKPQT0HEyiz
4VSFfMy/VAi2gg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:47 2026 by rpki-client