Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
File:                     V1qbLylkIBK0cD0kDrweyD5H030.mft (raw, json)
Hash identifier:          /wTefF8B/bdA2SjXCIDH9pJUQJZ08n6gxKqseTvDDg8=
Subject key identifier:   27:79:E9:84:18:1B:5F:2E:18:B7:9E:CD:CB:61:4B:31:3A:EF:F9:82
Authority key identifier: 57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
Certificate issuer:       /CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Certificate serial:       019D9AE342546D67A413B2F7F6B01CA60E23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
Manifest number:          18C0
Signing time:             Fri 17 Apr 2026 10:01:17 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:17 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:17 +0000
Files and hashes:         1: V1qbLylkIBK0cD0kDrweyD5H030.crl (hash: LxnXs8LLOEJF1okcP4JRK2cZYhIDrEXAtSokdXneQNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:42:54:6d:67:a4:13:b2:f7:f6:b0:1c:a6:0e:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
        Validity
            Not Before: Apr 17 10:01:17 2026 GMT
            Not After : Apr 18 10:01:17 2026 GMT
        Subject: CN=2779e984181b5f2e18b79ecdcb614b313aeff982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:75:35:95:8f:cd:c4:a8:c6:62:b0:d4:62:3f:
                    3b:fe:ac:23:19:c4:90:15:48:da:aa:4c:8c:2d:fc:
                    d4:86:03:51:2e:69:94:d7:23:ec:07:ae:66:c6:04:
                    c2:a9:61:a0:2e:58:18:c2:56:b9:e9:b6:6b:5d:7d:
                    84:b0:50:42:fe:c7:8b:f3:1c:a7:53:6a:89:f7:1c:
                    8d:ec:43:bb:32:3c:4d:03:4f:11:f9:02:50:5b:b8:
                    8b:0e:1e:67:84:78:a2:7b:1e:b8:88:13:88:a3:c5:
                    44:88:ee:db:4f:f4:fc:3d:2e:27:d6:ee:fc:b2:80:
                    ee:e5:73:3a:f8:6f:7c:a4:1b:d2:4a:16:b8:57:97:
                    c6:ee:dd:90:ec:af:d6:45:40:c7:c1:10:90:f9:f7:
                    0e:d2:ba:27:5f:2f:1f:2e:0c:a7:df:7f:c2:ac:d7:
                    87:fd:60:35:85:6c:37:3f:cd:2b:d6:fb:f0:c3:e9:
                    2f:e3:14:e7:f1:6b:4a:91:de:8e:39:1e:4b:06:e2:
                    cf:11:fb:48:c0:06:19:b5:22:0c:35:a1:9a:d3:df:
                    9c:c8:eb:96:5e:3d:04:6c:4f:79:dd:82:df:4e:f9:
                    a7:aa:b2:90:27:58:7a:41:43:05:a1:86:a0:92:1b:
                    95:01:dc:4c:64:45:99:e6:df:c4:4d:ee:b2:ac:32:
                    3f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:79:E9:84:18:1B:5F:2E:18:B7:9E:CD:CB:61:4B:31:3A:EF:F9:82
            X509v3 Authority Key Identifier:
                keyid:57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:18:aa:1a:f4:d7:86:e9:0b:55:f5:87:e9:02:b8:58:df:58:
         90:8f:64:a8:c1:6e:b9:19:ca:a2:18:f1:8c:c1:f8:0f:83:1f:
         46:8b:92:de:cb:80:31:60:5b:b2:0a:8b:71:a2:2e:b1:3d:19:
         79:e4:ba:b6:38:86:32:5c:1c:84:e9:52:db:06:d6:a0:74:64:
         3b:f7:dd:2d:2d:56:50:7e:d0:04:23:ea:cd:04:2b:51:c4:4f:
         9a:76:47:da:ea:d3:f9:0d:82:0f:55:ee:92:92:ee:89:34:24:
         b5:4b:59:1f:0b:64:70:87:99:6a:21:5e:80:a4:e4:78:4c:6a:
         65:ef:8f:0c:d6:fb:e5:ef:a1:eb:cb:6d:d2:fd:fe:2e:8e:e5:
         12:a9:2c:c9:3c:07:87:f7:91:48:b2:5d:0e:42:54:0e:37:01:
         36:43:fe:6b:3e:c9:4f:7f:fa:b6:b2:31:57:81:5b:2b:ec:b6:
         b1:b3:c0:1c:90:df:db:3e:b0:91:1b:84:71:0f:8c:c3:c9:c2:
         c0:8b:78:39:b2:e9:71:98:da:57:d2:8e:a4:ad:11:51:59:a6:
         3c:b3:5d:cf:53:fb:f0:6f:da:b7:d5:0e:50:11:54:6e:02:94:
         9f:09:26:b6:2a:5c:66:1e:ca:d3:53:c0:8a:06:b8:6f:9e:db:
         42:d6:75:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a40JUbWekE7L39rAcpg4jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NWE5YjJmMjk2NDIwMTJiNDcwM2QyNDBlYmMxZWM4M2U0
N2QzN2QwHhcNMjYwNDE3MTAwMTE3WhcNMjYwNDE4MTAwMTE3WjAzMTEwLwYDVQQD
EygyNzc5ZTk4NDE4MWI1ZjJlMThiNzllY2RjYjYxNGIzMTNhZWZmOTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HU1lY/NxKjGYrDUYj87/qwjGcSQ
FUjaqkyMLfzUhgNRLmmU1yPsB65mxgTCqWGgLlgYwla56bZrXX2EsFBC/seL8xyn
U2qJ9xyN7EO7MjxNA08R+QJQW7iLDh5nhHiiex64iBOIo8VEiO7bT/T8PS4n1u78
soDu5XM6+G98pBvSSha4V5fG7t2Q7K/WRUDHwRCQ+fcO0ronXy8fLgyn33/CrNeH
/WA1hWw3P80r1vvww+kv4xTn8WtKkd6OOR5LBuLPEftIwAYZtSIMNaGa09+cyOuW
Xj0EbE953YLfTvmnqrKQJ1h6QUMFoYagkhuVAdxMZEWZ5t/ETe6yrDI/7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCd56YQYG18uGLeezcthSzE67/mCMB8GA1UdIwQY
MBaAFFdamy8pZCAStHA9JA68Hsg+R9N9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFxYkx5bGtJQkswY0Qwa0Ryd2V5RDVIMDMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNzVmN2UtOGNkZC00YzM2LWEwOTYt
M2M0YzA1ZjE4NzMwLzEvVjFxYkx5bGtJQkswY0Qwa0Ryd2V5RDVIMDMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNzVmN2UtOGNkZC00YzM2LWEwOTYtM2M0YzA1ZjE4NzMw
LzEvVjFxYkx5bGtJQkswY0Qwa0Ryd2V5RDVIMDMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRiqGvTX
hukLVfWH6QK4WN9YkI9kqMFuuRnKohjxjMH4D4MfRouS3suAMWBbsgqLcaIusT0Z
eeS6tjiGMlwchOlS2wbWoHRkO/fdLS1WUH7QBCPqzQQrUcRPmnZH2urT+Q2CD1Xu
kpLuiTQktUtZHwtkcIeZaiFegKTkeExqZe+PDNb75e+h68tt0v3+Lo7lEqksyTwH
h/eRSLJdDkJUDjcBNkP+az7JT3/6trIxV4FbK+y2sbPAHJDf2z6wkRuEcQ+Mw8nC
wIt4ObLpcZjaV9KOpK0RUVmmPLNdz1P78G/at9UOUBFUbgKUnwkmtipcZh7K01PA
iga4b57bQtZ1gQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:06:13 2026 by rpki-client