Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
File:                     ejUNAkrwH46vElcXyqA6r60YTh0.mft (raw, json)
Hash identifier:          qbzOQqDmT9sZsNpbrXhCNuWcPFaSJX18yzCzTY5KPG4=
Subject key identifier:   BD:CE:6F:8A:BE:D2:DA:32:DA:9C:70:24:B1:09:EB:7E:75:47:46:F5
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Certificate issuer:       /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial:       019D9A7525E4D0B413DAA158A26A18686736
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 08:01:01 +0000
Manifest this update:     Fri 17 Apr 2026 08:01:01 +0000
Manifest next update:     Sat 18 Apr 2026 08:01:01 +0000
Files and hashes:         1: 1-r7_fUEpPJ7LUjRWlFNkAxAOLSs.roa (hash: QA7GMjXjaXuTwdxfPne5d0+pqwIBxuYEEIDse7vYIO0=)
                          2: ES59hOIvPLDzVlJ0I-0JDt9aHrQ.roa (hash: uICrLcYcQwJ8TrC2iTXXi0SFYCmHd+cO9NYWiYi1hEQ=)
                          3: LyXo3omYYFGu0x-1vxCVc0jOXXk.roa (hash: tP3+/CoTgyHttLpNnNbTKpXPtaBjJcLwdaSRY8FXziI=)
                          4: Ux0GK8vhew9-6Io06jn8phMnWko.roa (hash: nIk3ffbMCGpJ8s89KtcodgQ7duWnbnupf2+qt/z+NVY=)
                          5: XOGzJgiv8zAvESFhap-saZBvegs.roa (hash: eulsgNSz45FKPDyCpVhnxj2XCa1xVua9poOew9IQNuQ=)
                          6: ejUNAkrwH46vElcXyqA6r60YTh0.crl (hash: lE+1+urh1l1phoTRFWTf9FzyGLbIeydtwoLxxI29LUc=)
                          7: npu-xEBPXBXxkjcFkM42ClvBry0.roa (hash: oFDGroXu7G/kMj4/zbhdw+C0K6I1N4oL3NK6l6o4+Dw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 08:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:75:25:e4:d0:b4:13:da:a1:58:a2:6a:18:68:67:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
        Validity
            Not Before: Apr 17 08:01:01 2026 GMT
            Not After : Apr 18 08:01:01 2026 GMT
        Subject: CN=bdce6f8abed2da32da9c7024b109eb7e754746f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e8:47:3b:6d:80:cd:32:82:d4:16:ef:f3:9d:
                    05:8b:b0:ed:3b:85:a2:ea:7b:9a:e8:b2:98:86:c9:
                    ca:cd:ba:52:9d:88:1a:0e:99:db:3c:be:78:3d:50:
                    0a:55:4b:d4:de:67:e9:e0:e6:27:04:a8:62:65:7d:
                    36:40:7a:cc:07:d9:da:2a:ea:94:31:d2:a0:ea:f2:
                    98:4c:21:a6:6a:37:4f:08:0c:3c:b9:04:ba:3c:c7:
                    e8:99:38:00:3f:01:cd:a5:38:7e:68:b7:7a:d6:f8:
                    09:ca:1b:a0:36:d6:50:04:59:db:38:1d:bd:41:cc:
                    b5:08:59:90:39:29:43:66:05:f6:c0:ce:91:40:a1:
                    43:fb:cb:11:b1:f9:c0:80:67:98:42:d5:77:35:bc:
                    98:46:c6:96:8e:ef:8e:b6:73:6d:01:40:c2:19:d5:
                    e6:e8:72:e7:91:93:2d:f3:e5:5c:97:44:9d:63:56:
                    5f:a0:2b:88:da:1a:c6:fa:1f:ac:44:08:84:88:71:
                    00:24:7c:da:40:68:5d:d5:e2:f9:ee:7f:3a:99:b7:
                    da:9d:2a:b6:c7:cf:34:8a:23:84:bc:d2:70:96:44:
                    f3:33:2a:35:e5:72:c6:97:7f:87:72:b3:c6:cf:3b:
                    8c:03:0b:27:a0:bc:ee:37:c1:25:38:be:b5:ef:11:
                    c6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CE:6F:8A:BE:D2:DA:32:DA:9C:70:24:B1:09:EB:7E:75:47:46:F5
            X509v3 Authority Key Identifier:
                keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:a1:57:89:4e:c3:9c:8a:d3:3d:3e:9f:a7:a4:8f:9c:f4:2e:
         c5:25:28:c6:dc:4f:c2:5c:64:d4:7e:63:e9:36:ae:ca:07:24:
         92:0a:5b:71:21:ea:3c:c6:ca:ab:b1:17:97:67:f1:74:6f:89:
         f1:ba:fb:8d:45:53:11:9a:96:05:14:89:8e:40:b5:d5:1b:c8:
         c1:d5:b2:00:e9:9b:7d:6f:42:00:e7:5e:9f:3e:1d:bc:5c:8b:
         1d:de:4f:43:23:e2:d1:0f:71:dc:8f:7d:1b:90:84:60:28:3e:
         9f:3a:db:db:1c:9f:35:fa:2f:93:2c:93:a0:bf:eb:9d:d6:f4:
         82:2f:44:a6:6f:92:45:2e:ce:0d:80:c0:cc:bb:91:cf:31:4d:
         95:c6:bb:4b:3d:52:15:d7:65:72:67:de:b5:dd:9e:44:af:c5:
         f7:30:c1:50:b4:eb:5c:8d:fa:0e:61:a7:1b:98:a8:27:64:e7:
         4a:07:25:4d:72:31:b8:27:c8:94:53:c1:6b:6c:1b:06:62:e4:
         5d:29:6d:74:0a:df:e8:f1:4c:3e:86:40:8e:79:13:a3:b5:33:
         2f:0e:65:16:45:ef:78:ab:84:38:bb:05:2d:87:76:84:40:ae:
         df:74:28:94:a6:11:ca:5b:1e:17:bb:fe:ff:2f:00:b7:43:43:
         52:bc:69:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adSXk0LQT2qFYomoYaGc2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMzUwZDAyNGFmMDFmOGVhZjEyNTcxN2NhYTAzYWFmYWQx
ODRlMWQwHhcNMjYwNDE3MDgwMTAxWhcNMjYwNDE4MDgwMTAxWjAzMTEwLwYDVQQD
EyhiZGNlNmY4YWJlZDJkYTMyZGE5YzcwMjRiMTA5ZWI3ZTc1NDc0NmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuhHO22AzTKC1Bbv850Fi7DtO4Wi
6nua6LKYhsnKzbpSnYgaDpnbPL54PVAKVUvU3mfp4OYnBKhiZX02QHrMB9naKuqU
MdKg6vKYTCGmajdPCAw8uQS6PMfomTgAPwHNpTh+aLd61vgJyhugNtZQBFnbOB29
Qcy1CFmQOSlDZgX2wM6RQKFD+8sRsfnAgGeYQtV3NbyYRsaWju+OtnNtAUDCGdXm
6HLnkZMt8+Vcl0SdY1ZfoCuI2hrG+h+sRAiEiHEAJHzaQGhd1eL57n86mbfanSq2
x880iiOEvNJwlkTzMyo15XLGl3+HcrPGzzuMAwsnoLzuN8ElOL617xHG+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3Ob4q+0toy2pxwJLEJ6351R0b1MB8GA1UdIwQY
MBaAFHo1DQJK8B+OrxJXF8qgOq+tGE4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWpVTkFrcndINDZ2RWxjWHlxQTZyNjBZVGgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi83OTY2YWUtOWM4OC00M2U5LWI4OTkt
ZDAwM2U1NmZlNzUzLzEvZWpVTkFrcndINDZ2RWxjWHlxQTZyNjBZVGgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi83OTY2YWUtOWM4OC00M2U5LWI4OTktZDAwM2U1NmZlNzUz
LzEvZWpVTkFrcndINDZ2RWxjWHlxQTZyNjBZVGgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApKFXiU7D
nIrTPT6fp6SPnPQuxSUoxtxPwlxk1H5j6TauygckkgpbcSHqPMbKq7EXl2fxdG+J
8br7jUVTEZqWBRSJjkC11RvIwdWyAOmbfW9CAOdenz4dvFyLHd5PQyPi0Q9x3I99
G5CEYCg+nzrb2xyfNfovkyyToL/rndb0gi9Epm+SRS7ODYDAzLuRzzFNlca7Sz1S
Fddlcmfetd2eRK/F9zDBULTrXI36DmGnG5ioJ2TnSgclTXIxuCfIlFPBa2wbBmLk
XSltdArf6PFMPoZAjnkTo7UzLw5lFkXveKuEOLsFLYd2hECu33QolKYRylseF7v+
/y8At0NDUrxprA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:39:53 2026 by rpki-client