Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
File:                     UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json)
Hash identifier:          j6fKIdS25ZKl4fwQ1tkP+unw2jOOTrFNsdWcY8L1E8M=
Subject key identifier:   DD:64:F0:75:35:6A:55:87:3B:57:65:F6:D0:22:14:8E:93:E2:78:64
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Certificate issuer:       /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial:       019D9CD11EF83F45DAEFE8180B650F8FB95E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
Manifest number:          18DB
Signing time:             Fri 17 Apr 2026 19:00:43 +0000
Manifest this update:     Fri 17 Apr 2026 19:00:43 +0000
Manifest next update:     Sat 18 Apr 2026 19:00:43 +0000
Files and hashes:         1: 1-k7RX-PPk5SqtGroDWgJIItQQjA.roa (hash: IwcWGc1l7lyiPBzDcUcfrL8EZTOOhF+n046/Yhtv/0I=)
                          2: CDdW7nCuQzH6NAMjfPJaFceRmv8.roa (hash: 3y28X5gdOE3EjaGMFkwpZSr7meiX5mPuhbh7+VXJVdg=)
                          3: JExJtb-2H86T5l_2TNtSXSkGdK4.roa (hash: PhyjLCVkG5sspCrwOMxylvOtWm2ph/t/PSTEggPhL8U=)
                          4: PkLF5Qe23NpZ0qUxVzRcrTiMnQg.roa (hash: WhFKLI35lPl0xgI1Abtq0FpDyLm3DVBgk69s+Al9tJ0=)
                          5: UAhAd15sm6zy6_JCC2foG_CxY9Q.roa (hash: QNJtOZDMc5d6KWlXodyqH9IN72fjqjARygPkojFQzwM=)
                          6: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: O1STB7dwvHsdd+TK6WdWP/9lC5waqdLRjP8iA+VrH04=)
                          7: Ujf1HQzWin0iYAwrw7fkvXgREuQ.roa (hash: f0htKcIDwehLOvh5H4qdrK1WzEMGMziN25syYu4+eGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:d1:1e:f8:3f:45:da:ef:e8:18:0b:65:0f:8f:b9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
        Validity
            Not Before: Apr 17 19:00:43 2026 GMT
            Not After : Apr 18 19:00:43 2026 GMT
        Subject: CN=dd64f075356a55873b5765f6d022148e93e27864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3f:9b:f2:95:de:30:a4:99:c7:b6:14:df:de:
                    45:29:43:53:62:8a:ef:47:e0:d9:89:59:74:f0:41:
                    96:6e:f7:41:a5:a6:91:d5:6a:0e:32:36:54:13:8b:
                    9e:ef:05:ad:4a:a3:e2:41:b5:bb:44:bb:4d:bf:41:
                    9c:ac:e7:e9:d7:a8:e8:c0:2a:1f:6f:74:e8:20:19:
                    e9:e9:7e:48:05:3c:51:23:a8:55:d3:a1:ad:81:5e:
                    85:80:f2:39:f7:31:06:30:3a:56:b0:08:a2:0c:02:
                    32:28:d0:a7:b7:cd:82:d7:f6:23:f7:70:96:04:0f:
                    ff:7f:86:b7:99:ea:29:83:c4:96:15:47:17:f5:61:
                    63:cf:c3:6b:17:cc:8b:2b:1c:53:74:25:4d:cd:3a:
                    3b:5e:14:46:2b:41:ea:24:a7:da:0e:45:b0:21:ce:
                    e2:a0:2f:1d:74:21:95:ac:b1:53:c7:4c:94:af:ec:
                    4d:44:e2:20:51:0f:8c:fc:3b:3a:4c:eb:49:a5:e7:
                    fd:39:9c:9b:fa:f6:ae:75:75:c6:57:c3:80:57:03:
                    c6:36:cd:77:0e:26:0d:39:96:07:3e:4a:be:94:d4:
                    fc:b2:96:fc:91:ef:25:d9:dd:2b:2f:68:37:6b:20:
                    f1:18:08:bf:a5:97:2b:9d:4a:01:6e:5b:37:df:64:
                    bf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:64:F0:75:35:6A:55:87:3B:57:65:F6:D0:22:14:8E:93:E2:78:64
            X509v3 Authority Key Identifier:
                keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:9e:b1:ea:e4:5a:0d:e7:af:8d:b2:8c:c0:58:b7:6e:b2:ec:
         2b:f8:80:c8:02:1d:21:14:d3:b7:dc:ed:0d:cd:18:cf:c8:6c:
         52:6c:ee:81:aa:bb:8f:b9:81:f7:7d:8a:c3:88:c2:a2:9d:61:
         53:c2:e7:8f:3c:c9:0d:2d:3c:e5:a2:c9:c5:96:1e:89:86:79:
         36:aa:49:26:4c:1e:53:70:06:b0:4f:ac:88:5d:ac:24:4d:16:
         fc:6d:25:77:00:c7:14:f2:ed:f4:1a:d2:82:1a:06:e8:47:2d:
         f2:57:dd:a8:d8:d6:09:f2:69:67:2f:fc:d4:b9:c5:8f:87:e6:
         f7:ae:8e:b4:81:5d:e1:43:32:92:b6:54:67:27:02:82:5e:16:
         b9:57:36:12:78:f7:3c:44:eb:a4:0d:41:f3:96:ee:b2:42:22:
         26:51:e3:f2:e6:63:b6:b4:4b:e1:b1:42:cc:71:fe:22:9d:ba:
         6d:de:7b:c6:2a:5d:46:ab:bc:e1:3b:9a:b3:09:41:63:fd:d0:
         c9:bf:fa:66:90:1a:aa:27:11:50:c5:d0:70:de:08:af:8e:a6:
         9f:a6:ba:37:e3:3b:64:25:71:92:c3:f5:f5:97:24:02:2a:99:
         98:ca:61:5e:4d:17:25:78:92:f9:68:5d:7c:01:b5:a8:1f:58:
         05:f7:5e:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2c0R74P0Xa7+gYC2UPj7leMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz
ZTIwZWEwHhcNMjYwNDE3MTkwMDQzWhcNMjYwNDE4MTkwMDQzWjAzMTEwLwYDVQQD
EyhkZDY0ZjA3NTM1NmE1NTg3M2I1NzY1ZjZkMDIyMTQ4ZTkzZTI3ODY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD+b8pXeMKSZx7YU395FKUNTYorv
R+DZiVl08EGWbvdBpaaR1WoOMjZUE4ue7wWtSqPiQbW7RLtNv0GcrOfp16jowCof
b3ToIBnp6X5IBTxRI6hV06GtgV6FgPI59zEGMDpWsAiiDAIyKNCnt82C1/Yj93CW
BA//f4a3meopg8SWFUcX9WFjz8NrF8yLKxxTdCVNzTo7XhRGK0HqJKfaDkWwIc7i
oC8ddCGVrLFTx0yUr+xNROIgUQ+M/Ds6TOtJpef9OZyb+vaudXXGV8OAVwPGNs13
DiYNOZYHPkq+lNT8spb8ke8l2d0rL2g3ayDxGAi/pZcrnUoBbls332S/SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1k8HU1alWHO1dl9tAiFI6T4nhkMB8GA1UdIwQY
MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt
NTU2MDhiNjk0NDU2LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2
LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa56x6uRa
DeevjbKMwFi3brLsK/iAyAIdIRTTt9ztDc0Yz8hsUmzugaq7j7mB932Kw4jCop1h
U8LnjzzJDS085aLJxZYeiYZ5NqpJJkweU3AGsE+siF2sJE0W/G0ldwDHFPLt9BrS
ghoG6Ect8lfdqNjWCfJpZy/81LnFj4fm966OtIFd4UMykrZUZycCgl4WuVc2Enj3
PETrpA1B85buskIiJlHj8uZjtrRL4bFCzHH+Ip26bd57xipdRqu84TuaswlBY/3Q
yb/6ZpAaqicRUMXQcN4Ir46mn6a6N+M7ZCVxksP19ZckAiqZmMphXk0XJXiS+Whd
fAG1qB9YBfdeJA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:30:46 2026 by rpki-client