Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
File:                     ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft (raw, json)
Hash identifier:          vD4Nh3Ukfi5L8ZWuTjq7TuJdTYo+wTsBJFyQlfgeo9E=
Subject key identifier:   E2:24:51:9A:75:4F:2D:26:49:7E:ED:92:8B:01:E0:73:62:ED:0E:45
Authority key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
Certificate issuer:       /CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Certificate serial:       019D98189B37FD9A741BA8E0E5B28C4A1FBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
Manifest number:          18C6
Signing time:             Thu 16 Apr 2026 21:00:42 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:42 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:42 +0000
Files and hashes:         1: 5dpJwurmjcNweBL1k9CqEM749HA.roa (hash: TM/ss4Bk5R6W5257quO9m83xy+4qnqaZUXN12oiEFzU=)
                          2: 7hzhMaHYuL-7BSKPyCuK9LYB9ts.roa (hash: Uix2TsomGcH7KlSyaSm6ItgQxCc3dO2ePCxbE9zpBHQ=)
                          3: GREeqZaODQe_pjDOkl9K06yc2fM.roa (hash: 9+xjCnaLjGsg7N2WRsPTLMdY0ESrGSWfOEeNfY4jOkE=)
                          4: Sw71YjaNP_rQ4woPVfkpIKYk-vY.roa (hash: V8sucqvBo1htAnsnFCbVGLqUSg9yHEvrbxQkCxUkXZc=)
                          5: ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl (hash: JtbNIjKKz1kdBV9d7dx3lSGjjm+VubDSwG0GVZz0pNk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:9b:37:fd:9a:74:1b:a8:e0:e5:b2:8c:4a:1f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6665dd97665a23b1b183e223822b66b5ae536a2f
        Validity
            Not Before: Apr 16 21:00:42 2026 GMT
            Not After : Apr 17 21:00:42 2026 GMT
        Subject: CN=e224519a754f2d26497eed928b01e07362ed0e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:44:dd:12:69:85:e1:df:d7:ab:a6:d2:3a:af:
                    c2:09:74:a0:02:1c:29:57:c8:46:b5:55:5b:78:08:
                    1f:d5:8a:76:78:d7:01:66:50:c9:89:f4:d3:43:56:
                    9b:95:d1:9c:0e:02:59:c1:04:4b:70:83:b4:4a:1d:
                    3c:65:6f:b3:4f:15:7a:b3:57:0f:39:7f:58:e8:8d:
                    b6:36:26:be:01:e3:02:ca:d5:f5:2d:f5:1b:c9:1f:
                    4a:13:2f:27:42:f6:d9:ae:16:83:7d:da:f6:63:80:
                    80:63:0d:79:49:81:9b:04:9f:2b:1f:dc:70:13:d4:
                    6d:5e:59:3f:82:10:78:08:25:d8:d5:06:2f:ae:25:
                    6d:95:71:82:22:c6:6b:4b:4d:b8:db:ea:e0:7d:1d:
                    c9:f5:1e:27:94:36:f9:e0:35:5d:b7:f6:82:68:b2:
                    b1:2b:27:7f:0e:9c:50:fc:0c:92:6b:4c:5f:5d:22:
                    c3:23:8e:e4:34:73:a5:9a:35:d4:23:49:c4:70:24:
                    06:1c:07:68:5b:9c:c7:7a:81:a7:8c:c2:74:ba:53:
                    b5:bc:25:36:b4:fc:a0:8d:e5:f3:ed:a9:90:49:27:
                    3d:b6:9c:a1:16:e4:ea:df:8b:c4:aa:7e:c0:1d:9d:
                    c0:3f:13:f8:c1:04:ea:55:96:f3:50:b8:2c:c1:39:
                    43:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:24:51:9A:75:4F:2D:26:49:7E:ED:92:8B:01:E0:73:62:ED:0E:45
            X509v3 Authority Key Identifier:
                keyid:66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:fa:9d:2d:13:68:78:f3:f9:06:f2:bc:05:cf:38:a1:90:94:
         49:3a:7b:f0:43:d8:00:bd:9a:4f:38:af:be:9b:82:29:ef:0c:
         f4:91:a8:f8:45:0d:09:69:12:08:fe:6b:8b:7c:6e:9e:24:ff:
         3f:34:86:ed:31:1a:04:8b:0e:9e:92:be:ad:68:d5:a6:ab:9f:
         cc:25:e4:fb:a8:6a:5a:2a:bf:7a:8f:98:c8:b0:ac:8a:76:c2:
         b8:af:f9:2e:56:38:ee:5c:84:0e:43:b5:64:83:d9:73:59:3c:
         8d:09:4b:cd:68:72:62:9b:2f:0f:36:78:95:0b:d6:bf:32:8a:
         3d:0c:c7:7a:af:bd:0a:8d:1b:b2:cf:66:22:a4:05:80:c4:18:
         d1:57:88:30:e2:6f:77:f5:0a:fc:32:05:c6:5b:b2:0c:c9:6a:
         e5:c4:96:c1:02:6e:f6:67:b3:0c:dd:6b:2c:a3:06:d0:d9:4e:
         c1:1b:bc:61:57:c9:0a:83:0c:b0:7c:a5:eb:7a:b9:60:ce:3b:
         e3:e0:ee:28:ac:05:06:c1:85:e5:14:e0:d7:76:a5:1a:8e:04:
         22:8a:60:90:e9:76:45:81:c5:ec:bf:05:7c:22:93:13:c0:09:
         a8:3e:ab:ae:a6:28:33:99:50:14:0a:d5:d5:a8:a6:56:b8:e3:
         d8:3c:8b:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGJs3/Zp0G6jg5bKMSh+9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NjVkZDk3NjY1YTIzYjFiMTgzZTIyMzgyMmI2NmI1YWU1
MzZhMmYwHhcNMjYwNDE2MjEwMDQyWhcNMjYwNDE3MjEwMDQyWjAzMTEwLwYDVQQD
EyhlMjI0NTE5YTc1NGYyZDI2NDk3ZWVkOTI4YjAxZTA3MzYyZWQwZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUTdEmmF4d/Xq6bSOq/CCXSgAhwp
V8hGtVVbeAgf1Yp2eNcBZlDJifTTQ1abldGcDgJZwQRLcIO0Sh08ZW+zTxV6s1cP
OX9Y6I22Nia+AeMCytX1LfUbyR9KEy8nQvbZrhaDfdr2Y4CAYw15SYGbBJ8rH9xw
E9RtXlk/ghB4CCXY1QYvriVtlXGCIsZrS0242+rgfR3J9R4nlDb54DVdt/aCaLKx
Kyd/DpxQ/AySa0xfXSLDI47kNHOlmjXUI0nEcCQGHAdoW5zHeoGnjMJ0ulO1vCU2
tPygjeXz7amQSSc9tpyhFuTq34vEqn7AHZ3APxP4wQTqVZbzULgswTlDWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIkUZp1Ty0mSX7tkosB4HNi7Q5FMB8GA1UdIwQY
MBaAFGZl3ZdmWiOxsYPiI4IrZrWuU2ovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWIt
ZThkNzA3MTdmZjhhLzEvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWItZThkNzA3MTdmZjhh
LzEvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPqdLRNo
ePP5BvK8Bc84oZCUSTp78EPYAL2aTzivvpuCKe8M9JGo+EUNCWkSCP5ri3xuniT/
PzSG7TEaBIsOnpK+rWjVpqufzCXk+6hqWiq/eo+YyLCsinbCuK/5LlY47lyEDkO1
ZIPZc1k8jQlLzWhyYpsvDzZ4lQvWvzKKPQzHeq+9Co0bss9mIqQFgMQY0VeIMOJv
d/UK/DIFxluyDMlq5cSWwQJu9mezDN1rLKMG0NlOwRu8YVfJCoMMsHyl63q5YM47
4+DuKKwFBsGF5RTg13alGo4EIopgkOl2RYHF7L8FfCKTE8AJqD6rrqYoM5lQFArV
1aimVrjj2DyLLw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:49 2026 by rpki-client