Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
File:                     vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft (raw, json)
Hash identifier:          HiUDdQPHJNPxn4VgL87Nkb/q3Humatub+846dhHRq9g=
Subject key identifier:   C7:C7:C2:7D:D7:8A:59:60:37:40:F1:49:79:1C:20:4A:D4:DC:55:9A
Authority key identifier: BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
Certificate issuer:       /CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Certificate serial:       019D9AAC581CABCB880366E75EFBB5F77690
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 09:01:19 +0000
Manifest this update:     Fri 17 Apr 2026 09:01:19 +0000
Manifest next update:     Sat 18 Apr 2026 09:01:19 +0000
Files and hashes:         1: E-AZAYW2qhUsuxgQihaSy4RhoY0.roa (hash: l+7T0JWdCWQ5tKjG5dZn2DS4OH6HFvOG8YRDG8ncZNg=)
                          2: vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl (hash: zoDl2Fdpum4SIQixbJSdZs5Tv2AKQeWY0mf5jviasdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ac:58:1c:ab:cb:88:03:66:e7:5e:fb:b5:f7:76:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3033a102b3b7912a366320f4435c53fb9773f4
        Validity
            Not Before: Apr 17 09:01:19 2026 GMT
            Not After : Apr 18 09:01:19 2026 GMT
        Subject: CN=c7c7c27dd78a59603740f149791c204ad4dc559a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:04:7f:fe:b1:ca:01:8d:77:6a:9b:e8:f3:e7:
                    fa:38:3c:d6:80:28:a5:3e:45:1a:55:95:53:43:c5:
                    09:fc:d8:b2:3f:23:dd:07:cc:cf:f2:b0:d6:68:7b:
                    af:5b:b8:8a:b3:30:bb:de:e2:6b:69:b1:3f:d0:61:
                    f6:33:5a:65:3f:63:46:7c:f2:de:67:f9:e2:de:11:
                    5c:42:e2:03:45:cd:50:c7:12:92:22:a7:94:a9:7b:
                    20:15:3b:a8:16:37:40:05:a2:43:10:af:aa:af:89:
                    aa:5e:2d:09:32:5a:22:5c:c5:37:69:60:39:45:af:
                    bf:38:aa:c8:3a:10:d8:2e:72:35:88:07:b8:0c:c6:
                    6b:ec:64:aa:fa:34:de:e6:ff:93:9a:be:0c:1f:32:
                    e4:8b:cd:ca:12:86:0e:23:c2:b5:88:66:b5:fb:87:
                    e1:61:ef:c8:39:82:79:8c:bc:f7:72:b7:0d:65:c1:
                    dc:d2:b5:58:37:be:13:e9:26:18:12:fd:75:2f:5f:
                    9b:a4:f4:a1:94:ed:2e:8c:25:e2:27:7d:58:20:88:
                    75:1b:40:62:e5:40:55:57:ae:dd:77:88:43:1d:52:
                    8a:4e:13:e9:64:d0:9f:2a:be:6d:f9:f2:5d:53:d1:
                    47:61:a3:c0:03:06:62:b2:8f:8d:e9:65:34:e6:f5:
                    5e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C7:C2:7D:D7:8A:59:60:37:40:F1:49:79:1C:20:4A:D4:DC:55:9A
            X509v3 Authority Key Identifier:
                keyid:BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:bf:0b:e6:8b:d2:1d:aa:77:18:67:3d:c2:4a:e5:92:6e:17:
         3f:ee:59:7f:26:a0:40:34:fd:4b:9a:03:9f:d5:f5:0b:6a:a9:
         4b:d7:40:3e:98:af:3c:cc:03:a8:7f:27:03:c1:53:4a:f9:12:
         fd:6a:a1:cd:df:68:0c:15:8e:64:21:1f:f2:d9:59:ea:38:bd:
         06:65:d4:d6:ad:39:4b:40:e0:48:77:8f:c2:94:1f:fb:3b:3b:
         6d:04:af:48:a2:43:fc:9e:87:d3:f1:c7:14:16:5e:83:2d:ac:
         11:c1:e7:1c:d1:b5:d1:d0:1a:25:c8:6d:b3:67:7d:1f:57:3e:
         36:13:63:08:35:07:ef:0e:61:11:be:02:84:b4:bd:d7:75:5a:
         a6:ed:81:e9:9d:3d:54:9c:55:94:48:f1:85:ae:98:78:ac:0a:
         86:07:b8:52:6a:12:57:1b:a4:ac:d6:d9:ea:46:60:88:83:90:
         6b:8b:9a:a4:c1:4d:dc:7c:25:d3:d5:d0:e8:0c:55:09:e0:db:
         a7:a4:5a:7f:52:94:ad:08:68:e8:01:0c:93:c4:0f:11:d4:16:
         ad:f8:79:a4:d7:4c:dc:2c:b5:f9:05:9b:4f:be:16:1a:9d:7d:
         db:52:9f:15:c7:8c:61:1b:7f:61:cb:b2:8c:87:bf:85:a2:f8:
         94:57:e4:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arFgcq8uIA2bnXvu193aQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMzAzM2ExMDJiM2I3OTEyYTM2NjMyMGY0NDM1YzUzZmI5
NzczZjQwHhcNMjYwNDE3MDkwMTE5WhcNMjYwNDE4MDkwMTE5WjAzMTEwLwYDVQQD
EyhjN2M3YzI3ZGQ3OGE1OTYwMzc0MGYxNDk3OTFjMjA0YWQ0ZGM1NTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgR//rHKAY13apvo8+f6ODzWgCil
PkUaVZVTQ8UJ/NiyPyPdB8zP8rDWaHuvW7iKszC73uJrabE/0GH2M1plP2NGfPLe
Z/ni3hFcQuIDRc1QxxKSIqeUqXsgFTuoFjdABaJDEK+qr4mqXi0JMloiXMU3aWA5
Ra+/OKrIOhDYLnI1iAe4DMZr7GSq+jTe5v+Tmr4MHzLki83KEoYOI8K1iGa1+4fh
Ye/IOYJ5jLz3crcNZcHc0rVYN74T6SYYEv11L1+bpPShlO0ujCXiJ31YIIh1G0Bi
5UBVV67dd4hDHVKKThPpZNCfKr5t+fJdU9FHYaPAAwZiso+N6WU05vVe4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfHwn3XillgN0DxSXkcIErU3FWaMB8GA1UdIwQY
MBaAFLwwM6ECs7eRKjZjIPRDXFP7l3P0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkRBem9RS3p0NUVxTm1NZzlFTmNVX3VYY19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zMGNmMDctM2ZhOC00NGE2LTkzNWIt
ZjlhN2FjZDkxYmNjLzEvdkRBem9RS3p0NUVxTm1NZzlFTmNVX3VYY19RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zMGNmMDctM2ZhOC00NGE2LTkzNWItZjlhN2FjZDkxYmNj
LzEvdkRBem9RS3p0NUVxTm1NZzlFTmNVX3VYY19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATb8L5ovS
Hap3GGc9wkrlkm4XP+5ZfyagQDT9S5oDn9X1C2qpS9dAPpivPMwDqH8nA8FTSvkS
/Wqhzd9oDBWOZCEf8tlZ6ji9BmXU1q05S0DgSHePwpQf+zs7bQSvSKJD/J6H0/HH
FBZegy2sEcHnHNG10dAaJchts2d9H1c+NhNjCDUH7w5hEb4ChLS913Vapu2B6Z09
VJxVlEjxha6YeKwKhge4UmoSVxukrNbZ6kZgiIOQa4uapMFN3Hwl09XQ6AxVCeDb
p6Raf1KUrQho6AEMk8QPEdQWrfh5pNdM3Cy1+QWbT74WGp1921KfFceMYRt/Ycuy
jIe/haL4lFfksA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:01:52 2026 by rpki-client