Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
File:                     TiopnxgqH9UdSwNimXr3qq4Na-k.mft (raw, json)
Hash identifier:          5OrAyTyXvqDVI3W9j+PqeD5QG++hIl03oi85aE4lzFw=
Subject key identifier:   E3:2C:B9:D6:91:B6:37:D8:11:CF:66:A0:EE:D0:DF:88:64:30:FB:AC
Authority key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
Certificate issuer:       /CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Certificate serial:       019D9D0838F3CC905A7300B60E99AA64D173
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
Manifest number:          18C6
Signing time:             Fri 17 Apr 2026 20:00:54 +0000
Manifest this update:     Fri 17 Apr 2026 20:00:54 +0000
Manifest next update:     Sat 18 Apr 2026 20:00:54 +0000
Files and hashes:         1: 2k317uytVg1LgjGnM4csFnuL6uw.roa (hash: X5Q8tV/hqbcuK15v8loayY7mcbXwTofvZ2nrjL9ZwFs=)
                          2: RQBMarFkU3OrDTBkZypKiOwxqg8.roa (hash: WhhYg2h0zkcqk2yaFPJERRYww67tY59hAk64ZXv/RAg=)
                          3: TiopnxgqH9UdSwNimXr3qq4Na-k.crl (hash: aRwhbaw8cR5p5A1UaOm9mMHUb/VBMFYM8XGykQSd2WY=)
                          4: v9i47anpnbrdLEZ-n1nwTrZVjyg.roa (hash: z6aINaroQHvMvD3JovJtp4EHLXzys7G2ZYIjVrJrEgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:08:38:f3:cc:90:5a:73:00:b6:0e:99:aa:64:d1:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
        Validity
            Not Before: Apr 17 20:00:54 2026 GMT
            Not After : Apr 18 20:00:54 2026 GMT
        Subject: CN=e32cb9d691b637d811cf66a0eed0df886430fbac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:58:a5:e7:3d:c7:e9:d3:26:e3:4d:f2:37:20:
                    b0:d8:83:c9:f4:eb:ca:67:66:a0:5f:b3:1f:46:ff:
                    c4:99:b0:cf:8a:b4:0c:10:86:e8:62:2e:9c:a0:0d:
                    46:c6:d6:35:d6:b1:88:aa:d7:15:29:61:33:2b:10:
                    cd:a8:d3:29:de:ef:09:54:4a:4e:f7:ec:7b:54:9d:
                    b1:2c:92:52:4d:0a:f7:08:25:3a:50:43:28:e6:6a:
                    d8:a7:3d:18:89:e9:ac:c0:d8:87:cf:30:f7:b1:aa:
                    00:86:46:03:00:b3:75:48:f4:1d:3a:af:c3:36:fa:
                    66:c6:0f:2d:4d:f5:6b:15:ed:4b:c9:64:65:5a:89:
                    e0:bf:d8:74:fb:5d:ec:1e:12:b8:bf:f8:6f:54:6c:
                    83:2e:65:12:94:b0:cf:f3:f0:86:10:a4:b0:79:f0:
                    f2:45:45:f4:70:e5:57:d8:92:cd:ad:c3:f0:b5:e8:
                    68:ee:4c:f9:38:e7:78:96:47:3c:24:a0:ff:c5:39:
                    c0:97:65:57:b3:19:1f:bf:c7:0d:68:c2:bb:61:45:
                    ec:c3:97:31:9a:6b:51:76:90:39:76:8a:ce:c3:6e:
                    23:6a:0a:47:f1:8b:fa:96:b5:9f:11:34:1b:3b:01:
                    8c:24:9d:9e:ad:5a:75:06:d4:6b:aa:bd:7d:ce:99:
                    53:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2C:B9:D6:91:B6:37:D8:11:CF:66:A0:EE:D0:DF:88:64:30:FB:AC
            X509v3 Authority Key Identifier:
                keyid:4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:91:dc:79:7f:ed:4f:af:fb:ea:80:de:86:cb:6c:eb:e7:5c:
         90:bc:57:d0:eb:f4:13:90:8b:16:27:5c:13:e0:cd:1e:52:9c:
         ca:ab:00:59:0d:e6:69:bd:e3:c5:9f:53:ee:14:f2:ef:58:fe:
         d2:5b:fb:d3:28:5f:78:9a:cf:e2:43:83:2f:58:9c:52:d9:08:
         52:8a:0e:0f:2b:a7:ee:21:2e:87:3c:ae:f5:9f:a2:22:c3:7f:
         0b:ff:57:f5:ea:ca:dd:66:37:3a:d4:64:c9:6e:34:64:ad:42:
         44:b6:af:a6:7b:0a:04:b2:95:8a:16:77:bc:08:04:6d:1c:11:
         47:65:c8:9f:42:f4:60:e4:c5:6a:80:56:cf:e3:fe:7c:69:c0:
         09:84:31:02:a4:ac:55:d5:b6:e4:21:d1:37:8b:e9:22:cc:ea:
         ac:d7:06:21:cd:0a:46:b0:26:a9:6d:83:63:c7:b4:ff:10:be:
         5a:ce:44:2d:91:12:29:61:9e:e8:4b:0a:67:a5:df:3f:31:03:
         59:40:f8:df:5d:30:90:3e:18:4a:cc:46:5a:74:78:2e:21:8f:
         47:81:e7:c3:b6:08:a9:c5:b2:63:42:51:52:4f:bb:6b:97:bc:
         e7:89:cf:a8:3b:67:68:1c:7e:f6:3d:31:5c:93:1e:42:d4:c4:
         24:bc:14:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dCDjzzJBacwC2DpmqZNFzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMmEyOTlmMTgyYTFmZDUxZDRiMDM2Mjk5N2FmN2FhYWUw
ZDZiZTkwHhcNMjYwNDE3MjAwMDU0WhcNMjYwNDE4MjAwMDU0WjAzMTEwLwYDVQQD
EyhlMzJjYjlkNjkxYjYzN2Q4MTFjZjY2YTBlZWQwZGY4ODY0MzBmYmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lil5z3H6dMm403yNyCw2IPJ9OvK
Z2agX7MfRv/EmbDPirQMEIboYi6coA1GxtY11rGIqtcVKWEzKxDNqNMp3u8JVEpO
9+x7VJ2xLJJSTQr3CCU6UEMo5mrYpz0YiemswNiHzzD3saoAhkYDALN1SPQdOq/D
Nvpmxg8tTfVrFe1LyWRlWongv9h0+13sHhK4v/hvVGyDLmUSlLDP8/CGEKSwefDy
RUX0cOVX2JLNrcPwteho7kz5OOd4lkc8JKD/xTnAl2VXsxkfv8cNaMK7YUXsw5cx
mmtRdpA5dorOw24jagpH8Yv6lrWfETQbOwGMJJ2erVp1BtRrqr19zplTZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMsudaRtjfYEc9moO7Q34hkMPusMB8GA1UdIwQY
MBaAFE4qKZ8YKh/VHUsDYpl696quDWvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGlvcG54Z3FIOVVkU3dOaW1YcjNxcTROYS1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kM2RmMjYtM2RiNS00NTM5LTgwMzAt
ZjJjZTc3ZTMxOTFlLzEvVGlvcG54Z3FIOVVkU3dOaW1YcjNxcTROYS1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kM2RmMjYtM2RiNS00NTM5LTgwMzAtZjJjZTc3ZTMxOTFl
LzEvVGlvcG54Z3FIOVVkU3dOaW1YcjNxcTROYS1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJHceX/t
T6/76oDehsts6+dckLxX0Ov0E5CLFidcE+DNHlKcyqsAWQ3mab3jxZ9T7hTy71j+
0lv70yhfeJrP4kODL1icUtkIUooODyun7iEuhzyu9Z+iIsN/C/9X9erK3WY3OtRk
yW40ZK1CRLavpnsKBLKVihZ3vAgEbRwRR2XIn0L0YOTFaoBWz+P+fGnACYQxAqSs
VdW25CHRN4vpIszqrNcGIc0KRrAmqW2DY8e0/xC+Ws5ELZESKWGe6EsKZ6XfPzED
WUD4310wkD4YSsxGWnR4LiGPR4Hnw7YIqcWyY0JRUk+7a5e854nPqDtnaBx+9j0x
XJMeQtTEJLwU1Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:43:20 2026 by rpki-client