Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft
File:                     95FxTraksq_vgC6cF53Cz8LRzOU.mft (raw, json)
Hash identifier:          TX1dDreigaVjFa+234/PDCVthdagmWmetEa6PeutRIY=
Subject key identifier:   8F:4A:20:AB:DC:7F:6E:D1:30:BE:98:67:1D:37:BB:83:69:23:36:41
Authority key identifier: F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5
Certificate issuer:       /CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5
Certificate serial:       019D9818D87AE51C846533AA2CC6EED9525A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft
Manifest number:          18C1
Signing time:             Thu 16 Apr 2026 21:00:58 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:58 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:58 +0000
Files and hashes:         1: 95FxTraksq_vgC6cF53Cz8LRzOU.crl (hash: QZdC2OOVc2ppEMHs52fdz8Rtaf0MpDVe/jmMuaPW+HI=)
                          2: wcTBVnf35_NIZbe8iI9wOnq94MM.roa (hash: cNxB2jzcwkyyFD+d0tJNZcO3QM57Dig2ypBOPVIdUQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:d8:7a:e5:1c:84:65:33:aa:2c:c6:ee:d9:52:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5
        Validity
            Not Before: Apr 16 21:00:58 2026 GMT
            Not After : Apr 17 21:00:58 2026 GMT
        Subject: CN=8f4a20abdc7f6ed130be98671d37bb8369233641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ac:1a:c9:91:49:b8:9b:95:ea:89:b4:a2:ea:
                    c1:cc:69:7d:4c:87:9a:05:bb:cc:d5:d3:c8:d5:17:
                    7a:4b:7a:a8:54:ec:fe:11:65:96:6e:56:2e:05:34:
                    5a:3a:0e:c9:92:e2:c2:6d:2a:af:40:f6:db:cc:95:
                    18:3d:f5:2d:d4:3c:a8:87:b6:73:74:ae:ff:75:42:
                    7c:5b:a9:bd:02:56:4f:db:58:c7:24:e8:32:e8:f8:
                    67:e6:90:69:26:4c:f5:8d:12:5f:81:6b:84:90:27:
                    80:2c:8c:d3:0d:ee:96:bc:d3:f4:53:69:c7:cf:15:
                    47:bb:2c:45:7a:ef:dd:d2:12:0f:f1:8e:98:54:f3:
                    43:93:d7:99:1f:4a:84:ba:16:bd:77:22:7e:94:57:
                    3f:61:11:e4:84:25:3d:61:48:33:a5:9f:26:f4:d7:
                    58:c4:08:8a:bb:31:22:6e:1e:a3:eb:28:6c:22:94:
                    a9:49:d0:34:06:24:45:1b:d0:3f:37:2c:22:df:ba:
                    c1:23:a8:bf:c8:b8:5f:8c:31:97:fd:59:b1:e7:19:
                    14:36:70:56:d4:c4:a8:44:ed:fa:db:41:d3:e0:4b:
                    99:45:a1:15:52:46:06:df:f1:3e:52:f0:0d:9a:05:
                    94:eb:fd:a0:1d:d6:34:65:4d:88:99:d0:b0:90:ab:
                    3e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4A:20:AB:DC:7F:6E:D1:30:BE:98:67:1D:37:BB:83:69:23:36:41
            X509v3 Authority Key Identifier:
                keyid:F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ac:05:fe:25:ad:54:73:c3:3f:b2:f3:3a:16:d8:20:f9:57:
         80:68:64:16:14:77:11:cf:77:06:4b:78:25:9e:b5:13:ac:ab:
         15:23:bd:ec:85:c9:96:b5:da:00:45:d4:b3:11:c4:6a:79:b1:
         d2:f8:d2:9b:70:e7:a1:17:ec:24:39:3a:84:cb:b7:ef:cc:9f:
         bc:d6:7d:75:03:4f:5b:eb:16:c6:0d:d3:61:c6:5c:8c:52:a8:
         c3:7c:90:f5:06:21:e9:00:22:84:fa:38:7a:e2:58:93:5a:2e:
         5c:b7:f3:e3:3d:88:5c:d2:55:e3:33:f9:fc:bb:50:c0:e6:84:
         2d:4b:41:50:9f:9d:df:76:ee:60:5b:d9:7e:55:00:a6:7d:a0:
         d1:9d:50:8a:61:4a:51:3b:64:fa:63:80:43:8d:ab:a7:05:b8:
         c7:37:2a:cf:58:74:0d:96:12:08:ae:e9:b8:f9:c0:01:32:c0:
         89:2b:cd:7c:b0:62:77:3a:69:5e:4d:75:5b:e0:f3:da:20:6e:
         06:33:a8:2d:a0:64:20:8d:b3:1e:70:aa:3f:02:d2:68:6f:77:
         71:e3:96:9a:18:27:f0:5b:13:c3:25:f1:ac:37:e6:a1:ca:78:
         b9:76:30:ee:f6:2d:89:15:65:dc:c4:14:2f:07:9e:5c:e2:c3:
         2d:8a:cb:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGNh65RyEZTOqLMbu2VJaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3OTE3MTRlYjZhNGIyYWZlZjgwMmU5YzE3OWRjMmNmYzJk
MWNjZTUwHhcNMjYwNDE2MjEwMDU4WhcNMjYwNDE3MjEwMDU4WjAzMTEwLwYDVQQD
Eyg4ZjRhMjBhYmRjN2Y2ZWQxMzBiZTk4NjcxZDM3YmI4MzY5MjMzNjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6wayZFJuJuV6om0ourBzGl9TIea
BbvM1dPI1Rd6S3qoVOz+EWWWblYuBTRaOg7JkuLCbSqvQPbbzJUYPfUt1Dyoh7Zz
dK7/dUJ8W6m9AlZP21jHJOgy6Phn5pBpJkz1jRJfgWuEkCeALIzTDe6WvNP0U2nH
zxVHuyxFeu/d0hIP8Y6YVPNDk9eZH0qEuha9dyJ+lFc/YRHkhCU9YUgzpZ8m9NdY
xAiKuzEibh6j6yhsIpSpSdA0BiRFG9A/Nywi37rBI6i/yLhfjDGX/Vmx5xkUNnBW
1MSoRO3620HT4EuZRaEVUkYG3/E+UvANmgWU6/2gHdY0ZU2ImdCwkKs+ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9KIKvcf27RML6YZx03u4NpIzZBMB8GA1UdIwQY
MBaAFPeRcU62pLKv74AunBedws/C0czlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTVGeFRyYWtzcV92Z0M2Y0Y1M0N6OExSek9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84NjJmYzAtNWNiZS00Y2E3LWE0NDUt
M2FlZTQwODdiNTZmLzEvOTVGeFRyYWtzcV92Z0M2Y0Y1M0N6OExSek9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84NjJmYzAtNWNiZS00Y2E3LWE0NDUtM2FlZTQwODdiNTZm
LzEvOTVGeFRyYWtzcV92Z0M2Y0Y1M0N6OExSek9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh6wF/iWt
VHPDP7LzOhbYIPlXgGhkFhR3Ec93Bkt4JZ61E6yrFSO97IXJlrXaAEXUsxHEanmx
0vjSm3DnoRfsJDk6hMu378yfvNZ9dQNPW+sWxg3TYcZcjFKow3yQ9QYh6QAihPo4
euJYk1ouXLfz4z2IXNJV4zP5/LtQwOaELUtBUJ+d33buYFvZflUApn2g0Z1QimFK
UTtk+mOAQ42rpwW4xzcqz1h0DZYSCK7puPnAATLAiSvNfLBidzppXk11W+Dz2iBu
BjOoLaBkII2zHnCqPwLSaG93ceOWmhgn8FsTwyXxrDfmocp4uXYw7vYtiRVl3MQU
LweeXOLDLYrLOg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:51 2026 by rpki-client