Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
File:                     T4EisJRezMsfL7mRL72GqgSmGYc.mft (raw, json)
Hash identifier:          MGcD0zyUhVdEAUpcRNPCHZtqJ2WuHtj7IjWqqgebRmo=
Subject key identifier:   78:E2:55:F1:8C:6E:E5:CD:1A:8F:81:26:D3:0B:C3:A8:2E:DE:52:21
Authority key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
Certificate issuer:       /CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Certificate serial:       019D9961E9FE2F98BC800E0CCD8A97A579F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 03:00:24 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:24 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:24 +0000
Files and hashes:         1: T4EisJRezMsfL7mRL72GqgSmGYc.crl (hash: v8lCkX7oOuQLEkMIXvTVqIfWSqiwrNgkryCo+zZcMYw=)
                          2: uulI6ExTJtP3irGdM2S5HIHQNgA.roa (hash: dOSl4h1kgdktrCS2a2Neg4UQzObDt3tKhXAVO/T4UEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:61:e9:fe:2f:98:bc:80:0e:0c:cd:8a:97:a5:79:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
        Validity
            Not Before: Apr 17 03:00:24 2026 GMT
            Not After : Apr 18 03:00:24 2026 GMT
        Subject: CN=78e255f18c6ee5cd1a8f8126d30bc3a82ede5221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8d:e0:99:f2:18:56:77:43:08:2a:3e:47:4a:
                    77:4f:67:95:f8:fd:05:f3:53:04:cf:7c:b4:22:92:
                    f4:aa:89:53:20:b6:aa:e1:a1:db:bd:d6:f0:e6:ca:
                    2d:20:90:e7:88:13:d5:64:ea:47:06:1a:9e:e2:8d:
                    8e:ae:1f:de:b4:d5:be:db:0d:67:e9:98:f0:ce:5e:
                    af:72:35:52:f1:36:2a:da:5f:af:ae:3f:a1:16:59:
                    04:8b:e1:72:2d:3e:ed:29:0f:30:c8:aa:27:88:23:
                    49:10:4e:26:89:ea:9a:eb:6d:79:b8:df:37:e2:dc:
                    6a:15:d9:37:bb:dc:3e:96:dc:5c:66:b9:65:6e:14:
                    16:e2:37:90:57:ea:2f:9b:f8:4a:0a:91:bf:e2:a4:
                    80:51:b5:86:27:d1:5f:b5:f6:bf:d5:aa:90:2c:79:
                    d2:34:8b:5f:3e:7b:87:da:33:1f:9e:36:cd:73:c9:
                    fa:33:bc:f6:e8:2b:57:7d:4f:5a:a3:f5:11:e7:81:
                    91:75:dd:5c:37:8e:c2:eb:48:ee:d5:65:12:99:fe:
                    be:e6:1b:d6:1f:e7:6e:93:c2:2f:3b:3a:02:8d:b9:
                    b5:f5:a1:71:1c:ed:d9:3e:71:c2:4f:54:ca:1b:56:
                    8e:82:e6:56:ea:c4:f8:c2:f6:65:a3:43:a3:cb:bc:
                    e6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E2:55:F1:8C:6E:E5:CD:1A:8F:81:26:D3:0B:C3:A8:2E:DE:52:21
            X509v3 Authority Key Identifier:
                keyid:4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:30:f2:a8:79:c7:b1:e4:11:ab:51:ed:cc:f3:59:5d:ff:d7:
         33:a6:88:85:1e:cc:a9:4f:fe:70:85:bd:a3:23:d3:0d:44:97:
         b4:87:b1:5f:99:5e:b5:04:74:6d:d5:cd:69:c3:af:16:1d:ba:
         f5:e3:c8:a5:fb:2b:57:e3:c7:ee:3f:20:18:f5:bc:ab:5d:06:
         54:9b:e0:f1:05:70:88:61:d7:5d:7a:50:e0:64:ff:ce:b6:d0:
         38:63:21:9f:d1:37:2e:6b:28:ff:0c:7d:75:ab:c4:9d:01:91:
         58:c7:f1:95:46:12:fe:4c:67:6d:9e:b9:6e:22:a5:aa:69:6f:
         40:08:3d:5b:69:66:47:59:89:66:1b:bf:1b:cc:74:bb:c2:4b:
         d3:ae:c1:cb:ca:e3:c1:4c:a3:8e:ab:07:56:a6:97:dd:10:4f:
         75:42:1e:ef:2c:2e:65:ce:91:8b:d1:cf:a5:9d:62:fe:50:d8:
         12:72:27:f8:2b:45:b0:44:e2:bb:7e:e2:71:09:b2:8e:58:e6:
         f6:4e:97:36:20:94:44:8e:10:3f:fd:bf:65:41:c5:44:46:24:
         8e:45:ba:f2:36:e2:7b:06:c6:f7:f1:a7:15:71:70:6c:6e:8b:
         86:58:3f:90:3d:f3:64:e1:15:f5:1c:82:ee:34:d1:f7:73:f5:
         91:4a:b5:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYen+L5i8gA4MzYqXpXnxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmODEyMmIwOTQ1ZWNjY2IxZjJmYjk5MTJmYmQ4NmFhMDRh
NjE5ODcwHhcNMjYwNDE3MDMwMDI0WhcNMjYwNDE4MDMwMDI0WjAzMTEwLwYDVQQD
Eyg3OGUyNTVmMThjNmVlNWNkMWE4ZjgxMjZkMzBiYzNhODJlZGU1MjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso3gmfIYVndDCCo+R0p3T2eV+P0F
81MEz3y0IpL0qolTILaq4aHbvdbw5sotIJDniBPVZOpHBhqe4o2Orh/etNW+2w1n
6Zjwzl6vcjVS8TYq2l+vrj+hFlkEi+FyLT7tKQ8wyKoniCNJEE4mieqa6215uN83
4txqFdk3u9w+ltxcZrllbhQW4jeQV+ovm/hKCpG/4qSAUbWGJ9Fftfa/1aqQLHnS
NItfPnuH2jMfnjbNc8n6M7z26CtXfU9ao/UR54GRdd1cN47C60ju1WUSmf6+5hvW
H+duk8IvOzoCjbm19aFxHO3ZPnHCT1TKG1aOguZW6sT4wvZlo0Ojy7zmCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjiVfGMbuXNGo+BJtMLw6gu3lIhMB8GA1UdIwQY
MBaAFE+BIrCUXszLHy+5kS+9hqoEphmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjkt
MmIyMjZhMjM0MDZhLzEvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjktMmIyMjZhMjM0MDZh
LzEvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGzDyqHnH
seQRq1HtzPNZXf/XM6aIhR7MqU/+cIW9oyPTDUSXtIexX5letQR0bdXNacOvFh26
9ePIpfsrV+PH7j8gGPW8q10GVJvg8QVwiGHXXXpQ4GT/zrbQOGMhn9E3Lmso/wx9
davEnQGRWMfxlUYS/kxnbZ65biKlqmlvQAg9W2lmR1mJZhu/G8x0u8JL067By8rj
wUyjjqsHVqaX3RBPdUIe7ywuZc6Ri9HPpZ1i/lDYEnIn+CtFsETiu37icQmyjljm
9k6XNiCURI4QP/2/ZUHFREYkjkW68jbiewbG9/GnFXFwbG6Lhlg/kD3zZOEV9RyC
7jTR93P1kUq1sA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:14 2026 by rpki-client