Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
File:                     p4wD9FkI30xFw_B9KkssQCRdUTI.mft (raw, json)
Hash identifier:          9w1MNZCWtXNleLcr4W8lJL0cHizXUFUA/z8M+4nCmv4=
Subject key identifier:   43:0C:9B:FE:6E:E7:1D:FE:29:8A:E4:DF:31:13:1F:6A:70:AC:F1:10
Authority key identifier: A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32
Certificate issuer:       /CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
Certificate serial:       019D9A070C1017516AEF3B7BB420FD8C6D70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
Manifest number:          18C5
Signing time:             Fri 17 Apr 2026 06:00:46 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:46 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:46 +0000
Files and hashes:         1: mNwkS1qi0XHbCO-C3fAjXeIuQSo.roa (hash: 76qYQmBj5fTGwqCZ0h8a/Bab0EeZxD7iG9TSaybvW9s=)
                          2: p4wD9FkI30xFw_B9KkssQCRdUTI.crl (hash: 1NW4siQY2Jp+IEeKt2MzsDwdO+e1YAGUjdiK1+Vpwkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:0c:10:17:51:6a:ef:3b:7b:b4:20:fd:8c:6d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
        Validity
            Not Before: Apr 17 06:00:46 2026 GMT
            Not After : Apr 18 06:00:46 2026 GMT
        Subject: CN=430c9bfe6ee71dfe298ae4df31131f6a70acf110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:55:5d:05:88:dc:c3:44:20:c5:6a:95:7b:58:
                    c7:7a:cc:9d:45:3a:1e:88:bb:31:d6:b8:65:54:f3:
                    c1:28:f6:36:54:5e:c0:ff:ad:ee:2b:ad:18:81:10:
                    29:9b:d3:4d:6c:11:81:36:a6:6c:8c:da:55:45:93:
                    a1:19:4c:22:08:02:22:7a:ac:16:93:66:e3:1b:b4:
                    7c:da:1c:64:91:4c:ed:60:c0:73:99:f7:8f:1f:cb:
                    e8:0d:92:7c:c6:91:f7:d4:e0:6a:b9:8b:90:19:d5:
                    42:c9:ff:a2:f1:df:f4:a4:3a:d9:e3:48:cb:32:92:
                    ec:14:f5:9b:cd:9b:87:04:c1:5c:b3:2a:fa:66:d5:
                    0b:06:ca:e0:e5:e6:2e:28:fc:1c:d5:a8:0b:c1:b6:
                    8f:ea:ca:a6:22:59:c9:a6:79:e2:aa:7b:4a:1f:09:
                    4b:1e:63:fd:03:d1:f9:50:cc:46:35:b0:cb:82:02:
                    eb:06:7b:af:3a:9b:43:22:2d:5f:ee:a0:df:64:f9:
                    ee:50:c1:3c:b6:4c:df:ad:42:cb:32:cf:68:2e:45:
                    48:d6:a5:96:75:8f:73:e0:d9:53:28:5b:c3:fa:f1:
                    44:53:49:b1:1d:e8:bb:88:fd:89:5e:84:ab:d7:83:
                    0f:ef:5c:ee:6e:42:ec:77:af:bf:8e:ef:d9:1b:fd:
                    5a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0C:9B:FE:6E:E7:1D:FE:29:8A:E4:DF:31:13:1F:6A:70:AC:F1:10
            X509v3 Authority Key Identifier:
                keyid:A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:7e:1c:77:5a:13:3e:ed:77:83:f7:03:2d:b7:84:4f:58:b9:
         6e:64:60:fa:dc:fc:30:a4:8c:7f:9e:aa:59:34:94:7c:9a:5d:
         e5:62:dc:96:be:e4:1b:ff:62:c9:c9:59:2e:48:a2:12:65:42:
         09:7a:4b:82:2f:7d:45:39:ad:d8:5c:b9:41:be:3e:e0:9e:8a:
         64:ab:28:94:9a:89:50:87:1c:e0:9a:75:93:f3:81:34:8c:14:
         2f:cc:a5:12:7a:68:59:9b:cb:6b:fc:38:08:63:02:a3:cc:72:
         cb:3c:93:b1:9b:47:ff:87:a2:7a:fe:14:85:83:af:22:f0:77:
         dd:c2:ff:b7:cd:24:a9:cc:4d:2a:48:1f:8e:d1:70:a3:a6:0c:
         28:82:ca:6a:34:9f:48:ab:da:ad:1a:e8:e1:cd:9b:e1:98:10:
         77:ef:cc:90:b3:84:b6:31:fd:d0:0d:7f:bb:05:e4:31:b2:cb:
         be:aa:29:fc:15:45:c6:99:00:1d:49:14:72:f6:64:05:6c:3a:
         fb:cf:51:4a:23:31:d6:2d:0e:b8:7e:3a:99:34:bb:1e:36:98:
         03:c7:65:54:6a:76:30:c0:6e:26:87:65:d2:fb:a2:c4:cf:99:
         a3:b6:e4:69:f8:7d:77:18:83:e4:19:8f:0c:2a:0a:11:1a:3a:
         e0:d9:ab:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBwwQF1Fq7zt7tCD9jG1wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3OGMwM2Y0NTkwOGRmNGM0NWMzZjA3ZDJhNGIyYzQwMjQ1
ZDUxMzIwHhcNMjYwNDE3MDYwMDQ2WhcNMjYwNDE4MDYwMDQ2WjAzMTEwLwYDVQQD
Eyg0MzBjOWJmZTZlZTcxZGZlMjk4YWU0ZGYzMTEzMWY2YTcwYWNmMTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolVdBYjcw0QgxWqVe1jHesydRToe
iLsx1rhlVPPBKPY2VF7A/63uK60YgRApm9NNbBGBNqZsjNpVRZOhGUwiCAIieqwW
k2bjG7R82hxkkUztYMBzmfePH8voDZJ8xpH31OBquYuQGdVCyf+i8d/0pDrZ40jL
MpLsFPWbzZuHBMFcsyr6ZtULBsrg5eYuKPwc1agLwbaP6sqmIlnJpnniqntKHwlL
HmP9A9H5UMxGNbDLggLrBnuvOptDIi1f7qDfZPnuUME8tkzfrULLMs9oLkVI1qWW
dY9z4NlTKFvD+vFEU0mxHei7iP2JXoSr14MP71zubkLsd6+/ju/ZG/1ahwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMMm/5u5x3+KYrk3zETH2pwrPEQMB8GA1UdIwQY
MBaAFKeMA/RZCN9MRcPwfSpLLEAkXVEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDR3RDlGa0kzMHhGd19COUtrc3NRQ1JkVVRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9lNWM2OTctY2M5My00ZDcxLWI5NDAt
OWJhODViZTNiZjA5LzEvcDR3RDlGa0kzMHhGd19COUtrc3NRQ1JkVVRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9lNWM2OTctY2M5My00ZDcxLWI5NDAtOWJhODViZTNiZjA5
LzEvcDR3RDlGa0kzMHhGd19COUtrc3NRQ1JkVVRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbH4cd1oT
Pu13g/cDLbeET1i5bmRg+tz8MKSMf56qWTSUfJpd5WLclr7kG/9iyclZLkiiEmVC
CXpLgi99RTmt2Fy5Qb4+4J6KZKsolJqJUIcc4Jp1k/OBNIwUL8ylEnpoWZvLa/w4
CGMCo8xyyzyTsZtH/4eiev4UhYOvIvB33cL/t80kqcxNKkgfjtFwo6YMKILKajSf
SKvarRro4c2b4ZgQd+/MkLOEtjH90A1/uwXkMbLLvqop/BVFxpkAHUkUcvZkBWw6
+89RSiMx1i0OuH46mTS7HjaYA8dlVGp2MMBuJodl0vuixM+Zo7bkafh9dxiD5BmP
DCoKERo64NmrHw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:09 2026 by rpki-client