Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
File:                     psb8p1JpxrAQpvpxCeQxXgagg9w.mft (raw, json)
Hash identifier:          QFeVEmsQGSJYYVpDLwNBgCALf0mkTSzH120dsQHAZxE=
Subject key identifier:   30:B2:49:3A:B0:D1:A3:53:48:E4:F0:8D:4E:4F:A6:C9:E0:E3:D8:DD
Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
Certificate issuer:       /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Certificate serial:       019DA2D333262D05FDBC79E5B043CD4E6F6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
Manifest number:          18CA
Signing time:             Sat 18 Apr 2026 23:00:43 +0000
Manifest this update:     Sat 18 Apr 2026 23:00:43 +0000
Manifest next update:     Sun 19 Apr 2026 23:00:43 +0000
Files and hashes:         1: YB8uK3pVluHiYzZPZMIZIoTnMfI.roa (hash: 7tVqBE7ngonAMrRLqWAl1nUrhE0O3jGUi08m3ADIJNY=)
                          2: psb8p1JpxrAQpvpxCeQxXgagg9w.crl (hash: geec0ftiohAz239NMWBAd+V34inK2AVS2TQzPeWuVD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 23:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a2:d3:33:26:2d:05:fd:bc:79:e5:b0:43:cd:4e:6f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
        Validity
            Not Before: Apr 18 23:00:43 2026 GMT
            Not After : Apr 19 23:00:43 2026 GMT
        Subject: CN=30b2493ab0d1a35348e4f08d4e4fa6c9e0e3d8dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e5:7b:65:54:73:bf:7e:bf:36:57:bb:a6:f3:
                    5b:03:21:5c:07:aa:57:8c:f3:57:03:8d:d0:62:ee:
                    01:af:8a:5b:02:4a:25:1d:fb:a4:00:99:33:c9:8f:
                    02:03:ce:f4:8c:fe:e6:76:c3:1d:86:16:06:69:b5:
                    cd:82:d0:27:04:78:0d:4f:d5:a9:72:0e:65:44:bb:
                    ae:1b:cc:89:19:10:bd:ca:1b:14:c5:1a:82:32:19:
                    b1:3e:67:36:7c:98:ee:90:68:b0:26:c9:43:a3:6a:
                    13:b9:a2:8d:fc:07:7c:47:fb:2d:e8:a4:64:5c:55:
                    4e:83:35:d5:3a:29:4b:37:c1:97:f5:92:9a:47:4d:
                    b6:ad:83:2a:0a:f7:29:de:69:c5:cd:11:17:0e:ad:
                    8f:96:99:7f:7c:0f:ff:6d:84:41:ac:05:88:f7:fd:
                    10:6c:78:84:ef:82:77:07:44:f0:0b:8d:67:47:b7:
                    56:01:25:92:1d:ba:ce:51:08:d6:e6:58:20:34:5a:
                    ee:88:91:47:ce:80:01:ca:03:cd:20:ae:91:de:76:
                    20:bd:55:de:eb:cb:93:fc:4e:ed:75:6f:75:22:8c:
                    3f:df:39:a6:ad:1e:d5:64:da:8b:59:87:09:12:48:
                    e9:cc:d6:20:70:39:9a:5a:eb:ba:4d:c9:ae:ce:9f:
                    34:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B2:49:3A:B0:D1:A3:53:48:E4:F0:8D:4E:4F:A6:C9:E0:E3:D8:DD
            X509v3 Authority Key Identifier:
                keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ab:aa:f0:5d:2a:da:04:06:30:59:ce:5b:95:42:54:e5:e5:
         12:7c:13:e5:2b:52:c4:af:e9:c5:38:93:b9:6c:fe:55:7c:02:
         b6:48:1c:80:da:d3:34:51:6e:8a:7c:a2:33:0a:3f:9d:89:07:
         17:ec:53:3e:65:d1:4a:99:99:16:ec:84:42:54:07:48:f6:13:
         d6:b8:b1:da:e2:a7:52:79:2e:bb:c4:f3:0b:9a:5c:2c:b3:40:
         c5:14:1c:16:28:b7:e8:25:98:81:f4:92:c4:53:d0:6a:36:97:
         b4:99:b0:c6:f7:f5:e2:15:fe:08:c8:21:21:0c:00:4a:1d:e8:
         5f:b8:d5:91:4a:e2:8c:7f:1b:fd:4c:02:c2:f9:3e:2a:e3:12:
         ff:42:59:ae:b0:a0:ef:45:ea:b6:d7:4a:5c:ae:d9:80:8a:35:
         a9:b0:0e:7c:43:ac:bc:fb:06:9f:fe:db:77:03:0a:dd:37:e5:
         79:80:c8:b2:a3:9a:ca:76:0a:67:57:c3:2c:9b:0a:e7:a1:12:
         87:2c:75:fd:46:35:90:14:1b:1f:db:0a:a1:24:09:62:e0:78:
         7f:f3:1b:86:16:49:a1:0e:34:e7:cb:d8:df:d2:ac:b1:01:ab:
         f0:06:ba:09:c4:5a:0d:0b:9e:b1:fa:ea:3b:11:f5:83:13:41:
         52:44:42:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2i0zMmLQX9vHnlsEPNTm9rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YzZmY2E3NTI2OWM2YjAxMGE2ZmE3MTA5ZTQzMTVlMDZh
MDgzZGMwHhcNMjYwNDE4MjMwMDQzWhcNMjYwNDE5MjMwMDQzWjAzMTEwLwYDVQQD
EygzMGIyNDkzYWIwZDFhMzUzNDhlNGYwOGQ0ZTRmYTZjOWUwZTNkOGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+V7ZVRzv36/Nle7pvNbAyFcB6pX
jPNXA43QYu4Br4pbAkolHfukAJkzyY8CA870jP7mdsMdhhYGabXNgtAnBHgNT9Wp
cg5lRLuuG8yJGRC9yhsUxRqCMhmxPmc2fJjukGiwJslDo2oTuaKN/Ad8R/st6KRk
XFVOgzXVOilLN8GX9ZKaR022rYMqCvcp3mnFzREXDq2Plpl/fA//bYRBrAWI9/0Q
bHiE74J3B0TwC41nR7dWASWSHbrOUQjW5lggNFruiJFHzoABygPNIK6R3nYgvVXe
68uT/E7tdW91Iow/3zmmrR7VZNqLWYcJEkjpzNYgcDmaWuu6Tcmuzp80kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCySTqw0aNTSOTwjU5Ppsng49jdMB8GA1UdIwQY
MBaAFKbG/KdSacawEKb6cQnkMV4GoIPcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHNiOHAxSnB4ckFRcHZweENlUXhYZ2FnZzl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lYWI3ZWYtOGNkNi00ZGZlLThmMWUt
ODZlMjlmMDVlYjk3LzEvcHNiOHAxSnB4ckFRcHZweENlUXhYZ2FnZzl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9lYWI3ZWYtOGNkNi00ZGZlLThmMWUtODZlMjlmMDVlYjk3
LzEvcHNiOHAxSnB4ckFRcHZweENlUXhYZ2FnZzl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIquq8F0q
2gQGMFnOW5VCVOXlEnwT5StSxK/pxTiTuWz+VXwCtkgcgNrTNFFuinyiMwo/nYkH
F+xTPmXRSpmZFuyEQlQHSPYT1rix2uKnUnkuu8TzC5pcLLNAxRQcFii36CWYgfSS
xFPQajaXtJmwxvf14hX+CMghIQwASh3oX7jVkUrijH8b/UwCwvk+KuMS/0JZrrCg
70XqttdKXK7ZgIo1qbAOfEOsvPsGn/7bdwMK3TfleYDIsqOaynYKZ1fDLJsK56ES
hyx1/UY1kBQbH9sKoSQJYuB4f/MbhhZJoQ4058vY39KssQGr8Aa6CcRaDQuesfrq
OxH1gxNBUkRCsA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:30:07 2026 by rpki-client