Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
File:                     jQtYT2A1_loofFZ_HjhUuPvCoMI.mft (raw, json)
Hash identifier:          lBVAkbG+9Qg2yOy6oj1VidxGga2p0ph/wo14tdKKGWQ=
Subject key identifier:   7C:1B:D3:8F:D9:2B:E9:1B:54:DF:CD:A0:97:0F:D4:79:22:1B:F1:88
Authority key identifier: 8D:0B:58:4F:60:35:FE:5A:28:7C:56:7F:1E:38:54:B8:FB:C2:A0:C2
Certificate issuer:       /CN=8d0b584f6035fe5a287c567f1e3854b8fbc2a0c2
Certificate serial:       019D9E1AFA7C344839651E603AC20D4DD3A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
Manifest number:          18C1
Signing time:             Sat 18 Apr 2026 01:01:01 +0000
Manifest this update:     Sat 18 Apr 2026 01:01:01 +0000
Manifest next update:     Sun 19 Apr 2026 01:01:01 +0000
Files and hashes:         1: DDF4rHCyTUZ_JMqtFhQdlljmwdA.roa (hash: Wq2lfDQVze8aM27jqQxiGGAz6kfK87E03BpeKAOD1OA=)
                          2: jQtYT2A1_loofFZ_HjhUuPvCoMI.crl (hash: 8dXN0Ip1Roem+h5q1XZiE6aIBsfRv9UZ6xIsTC8ADYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9e:1a:fa:7c:34:48:39:65:1e:60:3a:c2:0d:4d:d3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d0b584f6035fe5a287c567f1e3854b8fbc2a0c2
        Validity
            Not Before: Apr 18 01:01:01 2026 GMT
            Not After : Apr 19 01:01:01 2026 GMT
        Subject: CN=7c1bd38fd92be91b54dfcda0970fd479221bf188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:87:f0:db:c1:00:e5:b7:5b:5e:ea:99:54:c6:
                    80:11:72:d4:ad:db:26:79:81:96:42:0c:6d:b0:d5:
                    eb:34:62:62:60:18:63:6b:7b:35:8e:f0:1c:90:4e:
                    2e:82:d8:77:9c:4e:46:45:4e:14:ee:9a:0d:96:1c:
                    da:b6:64:1b:29:70:1e:b4:1c:e9:a4:52:eb:40:eb:
                    1c:d2:93:58:70:11:fd:b0:c8:cc:5c:35:fa:cc:71:
                    77:aa:9e:e5:70:c2:5e:00:7d:24:97:44:65:50:a9:
                    88:d8:70:7c:17:b5:93:0b:cb:db:fa:e9:85:f2:cd:
                    2f:de:fd:41:0b:7c:6d:58:81:b4:a3:2b:c7:98:bb:
                    56:2f:a7:e5:88:9d:49:8f:9a:97:4e:cc:cf:ce:2a:
                    bd:95:16:00:71:71:57:ca:17:1e:7f:c4:46:d3:66:
                    06:34:cf:ca:46:a9:4d:72:fd:eb:3b:20:ec:da:87:
                    84:8c:b4:33:68:07:d5:10:8a:b5:78:8a:51:8b:04:
                    cd:e1:b6:b1:53:58:2d:4b:83:7c:92:a5:ab:0a:5e:
                    88:24:15:25:d4:a0:42:77:94:75:95:cd:10:84:90:
                    a3:79:f2:4c:cd:06:50:99:6b:56:41:2f:d6:5e:f8:
                    da:00:27:0c:47:80:20:1e:ea:27:07:7c:9f:63:37:
                    57:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1B:D3:8F:D9:2B:E9:1B:54:DF:CD:A0:97:0F:D4:79:22:1B:F1:88
            X509v3 Authority Key Identifier:
                keyid:8D:0B:58:4F:60:35:FE:5A:28:7C:56:7F:1E:38:54:B8:FB:C2:A0:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:ef:b1:d5:26:d4:d3:dd:51:57:f1:bd:ae:68:ee:26:55:df:
         89:33:ac:a0:45:19:23:1c:d4:f9:e9:b8:3d:c5:db:6f:a8:af:
         df:df:95:d9:4d:31:fa:d8:a0:bd:43:af:46:34:d1:dd:14:bd:
         f9:12:19:e8:5e:c4:c8:c6:73:26:b1:ef:70:5f:b0:5f:ce:16:
         db:1f:96:9e:3c:df:8f:ab:77:5f:dd:70:3f:1d:12:da:94:6e:
         28:0c:0a:6c:8d:04:52:f1:46:c9:c1:61:fd:69:1c:23:56:28:
         11:8b:14:16:c8:77:07:8f:e8:33:59:72:4d:25:f2:bb:c2:50:
         de:a2:4c:c0:2a:fa:d8:6f:c3:60:53:71:42:ed:19:80:c4:3c:
         a6:89:33:b3:a0:ac:47:76:72:4a:4d:5f:ce:1c:61:13:4a:20:
         b2:da:cd:8f:df:e4:66:f8:9d:32:34:21:db:71:99:42:fc:c7:
         fa:91:ff:14:e4:0b:17:80:42:b9:a0:ef:af:ea:7e:ab:8d:fa:
         7d:3a:c3:51:a6:57:7c:3b:7e:3d:b3:0f:e4:51:0b:fc:ec:2c:
         5c:19:f3:6e:31:a1:ff:85:39:c2:0a:74:1c:75:24:55:94:4a:
         c4:44:15:e7:68:80:f6:99:d8:91:61:45:45:22:91:32:c4:1f:
         8b:2f:ff:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2eGvp8NEg5ZR5gOsINTdOgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMGI1ODRmNjAzNWZlNWEyODdjNTY3ZjFlMzg1NGI4ZmJj
MmEwYzIwHhcNMjYwNDE4MDEwMTAxWhcNMjYwNDE5MDEwMTAxWjAzMTEwLwYDVQQD
Eyg3YzFiZDM4ZmQ5MmJlOTFiNTRkZmNkYTA5NzBmZDQ3OTIyMWJmMTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4fw28EA5bdbXuqZVMaAEXLUrdsm
eYGWQgxtsNXrNGJiYBhja3s1jvAckE4ugth3nE5GRU4U7poNlhzatmQbKXAetBzp
pFLrQOsc0pNYcBH9sMjMXDX6zHF3qp7lcMJeAH0kl0RlUKmI2HB8F7WTC8vb+umF
8s0v3v1BC3xtWIG0oyvHmLtWL6fliJ1Jj5qXTszPziq9lRYAcXFXyhcef8RG02YG
NM/KRqlNcv3rOyDs2oeEjLQzaAfVEIq1eIpRiwTN4baxU1gtS4N8kqWrCl6IJBUl
1KBCd5R1lc0QhJCjefJMzQZQmWtWQS/WXvjaACcMR4AgHuonB3yfYzdX3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwb04/ZK+kbVN/NoJcP1HkiG/GIMB8GA1UdIwQY
MBaAFI0LWE9gNf5aKHxWfx44VLj7wqDCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalF0WVQyQTFfbG9vZkZaX0hqaFV1UHZDb01JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8zOTMxMzEtMTc0My00OGU1LWFlNTQt
YTliZjNhNzY5Mzc3LzEvalF0WVQyQTFfbG9vZkZaX0hqaFV1UHZDb01JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8zOTMxMzEtMTc0My00OGU1LWFlNTQtYTliZjNhNzY5Mzc3
LzEvalF0WVQyQTFfbG9vZkZaX0hqaFV1UHZDb01JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAte+x1SbU
091RV/G9rmjuJlXfiTOsoEUZIxzU+em4PcXbb6iv39+V2U0x+tigvUOvRjTR3RS9
+RIZ6F7EyMZzJrHvcF+wX84W2x+Wnjzfj6t3X91wPx0S2pRuKAwKbI0EUvFGycFh
/WkcI1YoEYsUFsh3B4/oM1lyTSXyu8JQ3qJMwCr62G/DYFNxQu0ZgMQ8pokzs6Cs
R3ZySk1fzhxhE0ogstrNj9/kZvidMjQh23GZQvzH+pH/FOQLF4BCuaDvr+p+q436
fTrDUaZXfDt+PbMP5FEL/OwsXBnzbjGh/4U5wgp0HHUkVZRKxEQV52iA9pnYkWFF
RSKRMsQfiy//vw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:06:05 2026 by rpki-client