Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
File:                     ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft (raw, json)
Hash identifier:          UQ7q1sDvF2IsmRTc45s5dcBn38BUZ+78NgFNRPnVYEg=
Subject key identifier:   64:3D:12:B7:BE:3D:C9:BE:80:68:18:7A:2B:8A:A2:E9:66:EA:29:44
Authority key identifier: 11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60
Certificate issuer:       /CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
Certificate serial:       019D99D0278A030561A27A5EAE11989AE857
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 05:00:48 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:48 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:48 +0000
Files and hashes:         1: ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl (hash: k5bStrfktqliupSwUUmWpkot7oE55OQ6u70/QhQHC8A=)
                          2: e1jQd52gcA6yXLGjiuknB8JEOwo.roa (hash: XJANgx0hjgIGKYki1Gh7IwsZwbbuxC+ryDXFWZXhAuQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:27:8a:03:05:61:a2:7a:5e:ae:11:98:9a:e8:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
        Validity
            Not Before: Apr 17 05:00:48 2026 GMT
            Not After : Apr 18 05:00:48 2026 GMT
        Subject: CN=643d12b7be3dc9be8068187a2b8aa2e966ea2944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2e:f6:f1:13:79:0f:f4:4e:de:7c:b0:46:3b:
                    27:37:a6:c8:a1:d1:a0:25:76:2b:4c:20:a7:9d:4f:
                    79:96:4b:d1:2c:dd:ef:9f:49:93:fb:9a:80:ea:1e:
                    c5:35:36:ba:05:3f:fc:61:91:17:1e:00:23:34:dd:
                    c7:49:54:a5:df:d2:f8:2d:23:d6:8a:2e:34:41:a2:
                    8b:a5:57:be:30:e7:89:c7:f1:ed:cc:e8:21:b1:56:
                    1f:f7:0d:fe:ae:12:ee:20:cc:59:69:e4:3d:f2:1e:
                    3c:10:8a:37:74:74:01:94:94:02:fd:d0:e1:1b:85:
                    89:8c:95:93:b6:04:2c:3f:56:17:51:7c:ef:d5:3e:
                    b4:ae:a0:3f:c6:b8:c1:4d:16:65:dd:4e:4e:e4:2b:
                    6c:b3:31:f1:9b:ec:db:e8:a0:51:70:c6:01:0c:f0:
                    6a:e3:fa:bb:6b:5e:4f:c7:bd:3b:98:06:29:d0:28:
                    e7:4a:fa:4a:ab:1b:d2:8e:4a:e2:66:34:3b:5d:d8:
                    01:61:5e:03:3b:3f:96:5d:7d:f6:53:c3:9a:17:df:
                    86:cc:f4:ed:2e:4c:ae:70:17:b4:d7:2b:eb:0d:63:
                    28:ca:44:b0:ae:97:57:15:b1:95:21:e6:cf:7e:4d:
                    8c:9e:ba:2b:a0:23:33:96:ae:66:0b:53:3e:e8:fd:
                    3b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3D:12:B7:BE:3D:C9:BE:80:68:18:7A:2B:8A:A2:E9:66:EA:29:44
            X509v3 Authority Key Identifier:
                keyid:11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:4a:c3:cd:fe:e1:6a:68:d0:29:cd:9d:b2:3a:f2:49:48:a2:
         f2:9b:dd:3f:d5:5e:03:c0:a7:20:7f:fa:8e:9a:88:b5:5f:af:
         b5:36:6b:ec:4a:cb:d5:0a:78:f8:27:e9:37:e1:8d:c0:38:fd:
         12:00:57:3f:ac:7f:6f:f5:d7:17:a6:3e:10:7a:b4:d0:cd:16:
         e7:d1:73:05:9d:54:50:0a:90:52:63:60:4a:7d:ba:60:20:aa:
         76:8a:8b:89:71:e3:ca:6a:ea:9e:cf:57:50:db:e8:9e:46:84:
         ee:b5:1e:d5:32:09:b8:83:57:ee:85:91:37:4d:4b:4a:74:93:
         f6:1b:b3:21:0a:80:7d:80:b9:35:02:16:84:c3:19:cc:38:60:
         ec:81:7c:fc:af:72:84:74:7b:3b:22:51:b5:ad:44:d9:a6:8b:
         c2:62:9f:7b:31:92:11:f6:2a:93:c4:96:40:67:65:7b:d5:87:
         aa:67:11:55:55:f2:b4:50:4d:7a:38:01:d4:8c:90:8d:69:8d:
         f6:34:1a:d8:ae:d4:b7:19:74:33:27:be:c7:c8:e0:67:2d:95:
         97:09:a3:35:d5:c6:f3:9c:bc:16:da:b5:12:80:7e:ef:9c:02:
         32:ee:b7:f3:87:4c:20:34:e6:8e:59:fd:08:86:33:ff:0e:e1:
         ea:12:7e:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0CeKAwVhonperhGYmuhXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMzBhMWQ1ZTVjMDkwMWQxOWI0YjcwN2E3M2QxN2NhZTBl
M2I2NjAwHhcNMjYwNDE3MDUwMDQ4WhcNMjYwNDE4MDUwMDQ4WjAzMTEwLwYDVQQD
Eyg2NDNkMTJiN2JlM2RjOWJlODA2ODE4N2EyYjhhYTJlOTY2ZWEyOTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7S728RN5D/RO3nywRjsnN6bIodGg
JXYrTCCnnU95lkvRLN3vn0mT+5qA6h7FNTa6BT/8YZEXHgAjNN3HSVSl39L4LSPW
ii40QaKLpVe+MOeJx/HtzOghsVYf9w3+rhLuIMxZaeQ98h48EIo3dHQBlJQC/dDh
G4WJjJWTtgQsP1YXUXzv1T60rqA/xrjBTRZl3U5O5CtsszHxm+zb6KBRcMYBDPBq
4/q7a15Px707mAYp0CjnSvpKqxvSjkriZjQ7XdgBYV4DOz+WXX32U8OaF9+GzPTt
LkyucBe01yvrDWMoykSwrpdXFbGVIebPfk2MnroroCMzlq5mC1M+6P07hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQ9Ere+Pcm+gGgYeiuKoulm6ilEMB8GA1UdIwQY
MBaAFBEwodXlwJAdGbS3B6c9F8rg47ZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVRDaDFlWEFrQjBadExjSHB6MFh5dURqdG1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xN2ZiZjktMDlhZS00NmExLThmNjQt
NmQ0MTliNzE3ZDBhLzEvRVRDaDFlWEFrQjBadExjSHB6MFh5dURqdG1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8xN2ZiZjktMDlhZS00NmExLThmNjQtNmQ0MTliNzE3ZDBh
LzEvRVRDaDFlWEFrQjBadExjSHB6MFh5dURqdG1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUrDzf7h
amjQKc2dsjrySUii8pvdP9VeA8CnIH/6jpqItV+vtTZr7ErL1Qp4+CfpN+GNwDj9
EgBXP6x/b/XXF6Y+EHq00M0W59FzBZ1UUAqQUmNgSn26YCCqdoqLiXHjymrqns9X
UNvonkaE7rUe1TIJuINX7oWRN01LSnST9huzIQqAfYC5NQIWhMMZzDhg7IF8/K9y
hHR7OyJRta1E2aaLwmKfezGSEfYqk8SWQGdle9WHqmcRVVXytFBNejgB1IyQjWmN
9jQa2K7Utxl0Mye+x8jgZy2VlwmjNdXG85y8Ftq1EoB+75wCMu6384dMIDTmjln9
CIYz/w7h6hJ+PA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:05:18 2026 by rpki-client