Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
File:                     I3CEcS_euxv8WowCYtkZqKpEBgM.mft (raw, json)
Hash identifier:          cm/hDxjuGs9yGH//51R22CnpQxyhjLHL6DrqcKvqBdI=
Subject key identifier:   79:BC:49:8E:F4:15:F7:2C:17:A5:48:D3:3C:8F:7B:78:26:43:91:92
Authority key identifier: 23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
Certificate issuer:       /CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Certificate serial:       019D98865B645910CFDA2442D22B6AE07891
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
Manifest number:          18D2
Signing time:             Thu 16 Apr 2026 23:00:34 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:34 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:34 +0000
Files and hashes:         1: 8WhTqwvj7TDxbKG-QDRYuHQKXL4.roa (hash: t/Oe6Qxn1Q8l5QIgdUYlJOyiuVrQkJMwXy5rbKbKUCY=)
                          2: I3CEcS_euxv8WowCYtkZqKpEBgM.crl (hash: 72eFdBPs25cWQIYA1/ybz/7cfYiMp4t866+mkP0bm6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:5b:64:59:10:cf:da:24:42:d2:2b:6a:e0:78:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237084712fdebb1bfc5a8c0262d919a8aa440603
        Validity
            Not Before: Apr 16 23:00:34 2026 GMT
            Not After : Apr 17 23:00:34 2026 GMT
        Subject: CN=79bc498ef415f72c17a548d33c8f7b7826439192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e1:77:b3:51:a1:82:36:f3:98:ab:64:b8:67:
                    5b:95:15:a4:11:32:2e:06:9a:1a:65:01:7f:48:04:
                    13:32:7f:bb:f5:fe:ae:dd:b4:d8:70:06:2b:34:c1:
                    ca:32:fb:8d:68:15:cc:19:18:6d:09:25:e8:73:cc:
                    57:66:2d:da:e2:fe:64:0f:ee:5b:30:b8:a7:e3:da:
                    34:65:42:66:b0:8d:4e:d9:80:51:97:6b:3b:73:e4:
                    dc:ac:55:27:64:ed:94:e7:e5:92:87:19:8f:e1:89:
                    86:41:a5:05:19:37:9c:4d:54:21:d2:aa:7d:8c:5a:
                    8b:51:20:4f:46:bf:56:ee:e2:bc:30:69:d4:91:fc:
                    ea:b3:83:e6:42:4e:6e:b6:74:31:87:47:9e:5c:fa:
                    96:66:9e:aa:09:e0:b1:7e:0a:9c:7e:ff:cc:f3:23:
                    1b:5f:ea:7c:b9:f0:35:29:c5:de:3f:ee:a0:73:a1:
                    72:5c:02:07:81:06:82:e9:16:87:39:45:5c:1a:0f:
                    9b:f4:9c:1a:ec:30:40:39:ca:04:af:1a:e1:7d:0e:
                    14:ab:ad:04:2e:1d:6b:ad:da:24:4a:20:1d:3f:fc:
                    85:b8:bf:f6:7c:f8:37:bf:34:31:0f:9a:19:c6:b6:
                    83:01:6d:2f:96:94:5e:f8:a0:be:5b:cb:35:02:39:
                    52:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BC:49:8E:F4:15:F7:2C:17:A5:48:D3:3C:8F:7B:78:26:43:91:92
            X509v3 Authority Key Identifier:
                keyid:23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:82:21:e5:dc:ee:a7:b0:e1:fa:99:29:1b:48:6c:a3:30:92:
         5d:77:e9:d0:cc:76:f2:17:e2:6d:92:38:40:41:f2:40:b6:ca:
         6a:8c:46:cd:ef:ea:2e:08:e8:47:4a:55:93:08:9a:d6:75:d2:
         5e:bd:ab:c8:59:ed:ed:1e:b2:70:df:84:70:18:a9:24:96:a3:
         6e:0d:70:c5:88:31:ab:6b:90:2d:d3:eb:38:b6:f8:d5:e1:13:
         bd:30:12:3d:b7:d3:27:94:e1:37:33:e9:1b:2d:09:8a:b5:44:
         3c:d6:90:98:4e:4a:19:d4:b4:8b:89:5d:c1:27:90:cd:67:48:
         c9:03:14:2a:cb:02:1d:53:c4:c9:a4:a8:ae:46:08:25:13:3b:
         41:57:1d:43:da:5c:67:42:0b:b3:3c:8c:6b:c2:39:64:6d:a5:
         3d:5d:c7:14:22:cf:5a:f1:e5:c8:d4:3b:02:fa:ed:f9:e1:f2:
         5d:0f:d0:d4:f6:28:64:1b:66:fd:a7:78:3e:10:46:40:e4:a4:
         48:d3:49:5e:24:12:98:83:04:aa:98:80:e2:51:7c:18:42:dd:
         6c:8d:a8:55:89:1f:83:be:b0:bf:92:82:0f:1d:01:f7:6e:99:
         69:75:8b:fd:28:98:1e:08:d6:3f:89:26:ae:36:5f:9a:de:a0:
         85:b0:8a:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YhltkWRDP2iRC0itq4HiRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNzA4NDcxMmZkZWJiMWJmYzVhOGMwMjYyZDkxOWE4YWE0
NDA2MDMwHhcNMjYwNDE2MjMwMDM0WhcNMjYwNDE3MjMwMDM0WjAzMTEwLwYDVQQD
Eyg3OWJjNDk4ZWY0MTVmNzJjMTdhNTQ4ZDMzYzhmN2I3ODI2NDM5MTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluF3s1GhgjbzmKtkuGdblRWkETIu
BpoaZQF/SAQTMn+79f6u3bTYcAYrNMHKMvuNaBXMGRhtCSXoc8xXZi3a4v5kD+5b
MLin49o0ZUJmsI1O2YBRl2s7c+TcrFUnZO2U5+WShxmP4YmGQaUFGTecTVQh0qp9
jFqLUSBPRr9W7uK8MGnUkfzqs4PmQk5utnQxh0eeXPqWZp6qCeCxfgqcfv/M8yMb
X+p8ufA1KcXeP+6gc6FyXAIHgQaC6RaHOUVcGg+b9Jwa7DBAOcoErxrhfQ4Uq60E
Lh1rrdokSiAdP/yFuL/2fPg3vzQxD5oZxraDAW0vlpRe+KC+W8s1AjlSAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHm8SY70FfcsF6VI0zyPe3gmQ5GSMB8GA1UdIwQY
MBaAFCNwhHEv3rsb/FqMAmLZGaiqRAYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTNDRWNTX2V1eHY4V293Q1l0a1pxS3BFQmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lN2U5ZWUtMTdkOC00ZTdlLWJjMjgt
N2UxMzI5ZTA1ZmY0LzEvSTNDRWNTX2V1eHY4V293Q1l0a1pxS3BFQmdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9lN2U5ZWUtMTdkOC00ZTdlLWJjMjgtN2UxMzI5ZTA1ZmY0
LzEvSTNDRWNTX2V1eHY4V293Q1l0a1pxS3BFQmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYIh5dzu
p7Dh+pkpG0hsozCSXXfp0Mx28hfibZI4QEHyQLbKaoxGze/qLgjoR0pVkwia1nXS
Xr2ryFnt7R6ycN+EcBipJJajbg1wxYgxq2uQLdPrOLb41eETvTASPbfTJ5ThNzPp
Gy0JirVEPNaQmE5KGdS0i4ldwSeQzWdIyQMUKssCHVPEyaSorkYIJRM7QVcdQ9pc
Z0ILszyMa8I5ZG2lPV3HFCLPWvHlyNQ7Avrt+eHyXQ/Q1PYoZBtm/ad4PhBGQOSk
SNNJXiQSmIMEqpiA4lF8GELdbI2oVYkfg76wv5KCDx0B926ZaXWL/SiYHgjWP4km
rjZfmt6ghbCK4w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:40:57 2026 by rpki-client