Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
File:                     YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft (raw, json)
Hash identifier:          0Fh/NqZNzIj89YWjTW794etpwnvMmKlmCDsjjcOroqw=
Subject key identifier:   DA:F5:7E:BE:0A:31:72:87:6D:4B:A1:AF:99:AA:EA:14:55:49:69:8D
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Certificate issuer:       /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial:       019D97E2202A0A0C219BA71D8AB038D915EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
Manifest number:          18C8
Signing time:             Thu 16 Apr 2026 20:01:12 +0000
Manifest this update:     Thu 16 Apr 2026 20:01:12 +0000
Manifest next update:     Fri 17 Apr 2026 20:01:12 +0000
Files and hashes:         1: 8Q0Zf_p2yrZ0sNHZrjCdOSKVFH0.roa (hash: yTf6BtJWlrsaOEBrk5U/warCLRXhsKvIf1U8hGm0E84=)
                          2: Dch7ul5aVnL_m2XEZjfUT9TlzKI.roa (hash: dY0WBC4mPaz5+Exli1KBR1KbgYfTH82golhb7jbBUj0=)
                          3: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl (hash: 4aAO0qI2P4SQpAAQPeuuZ+3JsZflOedGAEzAgEVnkbs=)
                          4: ZcwqCFu-ugccIfT-C61LOqP6Rms.roa (hash: zUv7VdLIHUw6+UwEQbFc7BcKwkxW2AOANbLeMf0i6t0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e2:20:2a:0a:0c:21:9b:a7:1d:8a:b0:38:d9:15:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
        Validity
            Not Before: Apr 16 20:01:12 2026 GMT
            Not After : Apr 17 20:01:12 2026 GMT
        Subject: CN=daf57ebe0a3172876d4ba1af99aaea145549698d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:81:35:a7:c0:75:9a:39:14:15:5c:ed:21:3c:
                    6a:37:23:57:41:02:cc:c6:43:1c:f9:2b:fe:92:50:
                    49:ae:86:db:21:87:90:69:32:49:4e:28:a0:ad:26:
                    59:fd:be:4e:94:a4:a6:56:c7:d9:b0:75:30:e2:0b:
                    b7:18:af:aa:8f:80:65:9d:39:03:e0:73:0b:24:18:
                    7c:3b:24:e7:e3:91:f3:a3:fd:e6:e0:66:0b:39:23:
                    29:56:8d:30:70:b3:59:cc:a0:b3:4a:48:bf:92:54:
                    92:9f:b6:71:9a:0a:94:05:d6:bd:62:43:79:85:f4:
                    b8:3e:52:60:b8:76:22:83:55:c5:f0:cd:35:64:80:
                    9c:f9:a3:c6:b1:36:a9:70:13:fa:aa:5d:96:f4:03:
                    d4:9d:78:f1:76:e6:c7:21:f8:40:40:4f:8f:d3:76:
                    dc:b8:fc:e6:89:fb:b4:d3:18:1a:72:1b:ef:4f:93:
                    86:9c:b0:e5:35:aa:69:55:3d:f0:c8:f2:c6:29:c1:
                    c8:b3:c9:12:9a:ce:8c:8c:8f:14:53:0b:1f:c3:6d:
                    70:fa:d6:bc:cb:50:92:06:1e:b6:24:1f:fb:61:b5:
                    22:9c:e9:1e:67:b5:62:b7:93:8b:54:1e:ce:f4:b5:
                    09:2e:3e:4b:ef:86:fd:e9:3f:b3:bc:98:dd:70:47:
                    e6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F5:7E:BE:0A:31:72:87:6D:4B:A1:AF:99:AA:EA:14:55:49:69:8D
            X509v3 Authority Key Identifier:
                keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:bf:3b:a6:75:28:d6:21:57:60:3d:01:ec:2f:1f:3f:89:6f:
         d3:3d:69:65:9e:52:92:0b:f1:79:3f:8f:fd:75:0d:d3:fe:bb:
         b0:48:18:95:54:25:a3:ed:33:c7:c2:c9:8b:06:23:5e:d1:06:
         6b:a4:76:f1:01:93:71:a4:1b:85:7d:89:3f:ea:a6:45:e0:04:
         41:e9:99:e9:ab:b9:de:79:af:1d:74:70:4c:66:4e:06:d9:f0:
         00:50:2b:96:ef:ef:e0:b1:18:bd:24:4b:6e:fa:3d:1f:92:bd:
         57:06:50:0d:d1:7b:0f:4e:be:1b:ff:36:4f:f8:93:4f:36:17:
         8d:0c:ad:7d:27:04:a9:84:71:15:4a:46:f5:d9:e8:c1:5b:1b:
         80:ff:a6:d0:16:63:cc:b7:d8:d6:84:f7:74:60:fc:8d:84:18:
         b8:23:8c:eb:0b:1a:60:a1:f0:1d:bc:8a:34:2b:54:65:37:46:
         1b:a0:76:ab:5f:76:bd:4a:1e:85:c9:ea:2f:ee:11:37:bd:2f:
         80:17:fd:52:10:e5:86:df:7c:33:e4:0d:be:78:9b:d2:15:e4:
         9a:7c:2c:95:77:0e:4b:67:65:cb:c0:08:a2:d9:cb:63:62:b4:
         38:97:24:be:a2:9e:e4:1b:cb:6e:d3:06:a2:b1:5f:db:8c:15:
         c5:a9:1a:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4iAqCgwhm6cdirA42RXsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxN2NkOGQ0OGI1ZDE1NjY3YmYxMzEzOTZkNGE2YzU5ZDdk
MTY3YzAwHhcNMjYwNDE2MjAwMTEyWhcNMjYwNDE3MjAwMTEyWjAzMTEwLwYDVQQD
EyhkYWY1N2ViZTBhMzE3Mjg3NmQ0YmExYWY5OWFhZWExNDU1NDk2OThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YE1p8B1mjkUFVztITxqNyNXQQLM
xkMc+Sv+klBJrobbIYeQaTJJTiigrSZZ/b5OlKSmVsfZsHUw4gu3GK+qj4BlnTkD
4HMLJBh8OyTn45Hzo/3m4GYLOSMpVo0wcLNZzKCzSki/klSSn7ZxmgqUBda9YkN5
hfS4PlJguHYig1XF8M01ZICc+aPGsTapcBP6ql2W9APUnXjxdubHIfhAQE+P03bc
uPzmifu00xgachvvT5OGnLDlNappVT3wyPLGKcHIs8kSms6MjI8UUwsfw21w+ta8
y1CSBh62JB/7YbUinOkeZ7Vit5OLVB7O9LUJLj5L74b96T+zvJjdcEfmgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr1fr4KMXKHbUuhr5mq6hRVSWmNMB8GA1UdIwQY
MBaAFGF82NSLXRVme/ExOW1KbFnX0WfAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVh6WTFJdGRGV1o3OFRFNWJVcHNXZGZSWjhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8xMDVlMjMtNmNlNi00Y2UwLTkzZmEt
YmY2ZTk3ZGRkMDc5LzEvWVh6WTFJdGRGV1o3OFRFNWJVcHNXZGZSWjhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8xMDVlMjMtNmNlNi00Y2UwLTkzZmEtYmY2ZTk3ZGRkMDc5
LzEvWVh6WTFJdGRGV1o3OFRFNWJVcHNXZGZSWjhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPr87pnUo
1iFXYD0B7C8fP4lv0z1pZZ5SkgvxeT+P/XUN0/67sEgYlVQlo+0zx8LJiwYjXtEG
a6R28QGTcaQbhX2JP+qmReAEQemZ6au53nmvHXRwTGZOBtnwAFArlu/v4LEYvSRL
bvo9H5K9VwZQDdF7D06+G/82T/iTTzYXjQytfScEqYRxFUpG9dnowVsbgP+m0BZj
zLfY1oT3dGD8jYQYuCOM6wsaYKHwHbyKNCtUZTdGG6B2q192vUoehcnqL+4RN70v
gBf9UhDlht98M+QNvnib0hXkmnwslXcOS2dly8AIotnLY2K0OJckvqKe5BvLbtMG
orFf24wVxakavQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:06 2026 by rpki-client