Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
File:                     zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft (raw, json)
Hash identifier:          X8s1O4lhYTlXLUSL3lb2jqe6ykNytka6IBVunjGBLzs=
Subject key identifier:   94:70:F0:31:23:3C:7F:41:15:08:05:C9:C3:90:3D:D3:93:A2:C8:C7
Authority key identifier: CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B
Certificate issuer:       /CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
Certificate serial:       019D9886655D8D8613206E1E14C8D680D9DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
Manifest number:          18C4
Signing time:             Thu 16 Apr 2026 23:00:37 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:37 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:37 +0000
Files and hashes:         1: 1-MPmKwveaNevahCbJELRJOmxcEw.roa (hash: SJAbLycNC0JaVjQXy09rkhGA2yxjxemr+0WDUIZ9wv4=)
                          2: gOiN6DluQXSd3jleMbJxQUVj3SI.roa (hash: GYaC97wnCi+3xBKerwHYFT87pRuyzEPoseArfTTU9ys=)
                          3: rmssw7RMnHd1ZqcXua4Brefm154.roa (hash: fNpjAb4SqWl1UnQLJ2UF8i8M94XY4XErflTP+LbF0cQ=)
                          4: t6Cqn8bbFUBARYys1rSXQI-Qv_k.roa (hash: Qp3ObnIfU6K60CvbQfGVhKkJzOZmcYgVUzn5j0R02Vw=)
                          5: zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl (hash: lwIdIKLd7YIijOnvJin/OJ2tQMa2xKCULCQHbJ0tM5Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:65:5d:8d:86:13:20:6e:1e:14:c8:d6:80:d9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
        Validity
            Not Before: Apr 16 23:00:37 2026 GMT
            Not After : Apr 17 23:00:37 2026 GMT
        Subject: CN=9470f031233c7f41150805c9c3903dd393a2c8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:44:ec:c2:a2:39:cc:03:e1:6c:ee:f3:28:e7:
                    d8:a9:80:ea:5f:78:9c:8c:9e:ed:f3:51:89:da:4c:
                    57:58:84:a0:6a:6d:ad:b5:a2:73:7d:36:9e:b2:69:
                    33:09:84:de:48:9e:ca:5a:4b:6e:5e:44:c5:31:b1:
                    45:fa:47:fa:ff:ff:01:20:c2:1a:19:ea:d8:73:6a:
                    85:26:79:46:d7:29:d7:8a:e5:ed:bf:21:54:0f:fd:
                    56:d2:41:b4:31:22:75:1e:75:1d:e8:7f:21:29:65:
                    35:dc:01:d8:1f:af:93:f3:69:bc:f9:00:fb:12:10:
                    47:49:a6:92:9f:65:41:f5:6e:7e:52:0f:55:20:32:
                    53:99:f4:1e:69:88:b2:b1:6f:73:09:f4:02:ed:4e:
                    0e:85:83:de:0e:2e:cd:8e:8e:b8:47:2f:fd:b9:46:
                    11:0c:65:73:6f:ef:ad:0e:44:57:1f:5b:76:59:dc:
                    1c:5d:99:0f:62:5a:4e:ea:48:16:d3:ba:6d:34:ea:
                    33:d6:da:c4:2b:45:e8:c0:3c:1d:84:75:bf:06:1b:
                    44:a5:c3:a9:e3:09:be:72:7d:44:a1:1f:3f:d7:08:
                    70:14:30:e1:cb:44:95:bb:5c:24:68:38:a6:37:e1:
                    42:cc:63:28:cc:d1:9b:ee:d9:a6:a1:b0:f0:95:f4:
                    87:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:70:F0:31:23:3C:7F:41:15:08:05:C9:C3:90:3D:D3:93:A2:C8:C7
            X509v3 Authority Key Identifier:
                keyid:CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:ff:0d:2c:68:fb:30:b5:2a:71:3e:32:c5:d0:86:0b:53:b0:
         8a:09:8c:70:2a:ea:a6:d8:a6:c2:87:2e:2a:80:9e:19:19:ca:
         27:48:ed:dc:6c:03:d8:19:3b:0a:9b:ad:6e:01:65:3f:69:eb:
         b0:08:0e:8b:ae:82:f4:8c:51:21:80:fa:99:f2:32:93:ad:fb:
         a7:63:19:82:5a:29:a5:64:07:34:79:b2:7a:95:94:e7:01:8b:
         3d:57:7b:f4:cd:0c:3f:0e:06:86:ce:c4:7e:e7:e0:f6:97:f8:
         a4:f8:1f:e5:07:bd:fa:c9:f1:a5:46:1b:74:6d:56:c9:08:ab:
         80:8a:63:cf:f5:1a:f3:1d:5d:29:9b:63:2e:f4:d9:73:ff:8f:
         9b:ec:4d:e9:a3:78:ca:2f:21:3e:78:28:8e:c7:92:c8:e0:e2:
         2d:de:0b:eb:a2:ad:a4:36:bb:60:bc:fc:44:95:20:e1:99:0a:
         87:81:c2:9d:fd:33:3f:1f:73:18:6b:96:e7:61:54:93:03:83:
         de:63:bd:97:33:a0:72:08:28:b0:12:d4:38:f2:db:82:9f:25:
         d0:08:9c:74:3c:5f:bd:20:13:92:9b:45:19:23:df:c3:73:c3:
         d9:e7:bf:1f:ce:13:0f:67:47:8d:28:31:d4:01:a2:69:04:bc:
         a6:6d:d3:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YhmVdjYYTIG4eFMjWgNnfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYzNiMzQ3YTIxNmJjNDM3YjBiZDRjZjBiYzhjZGE2NWU4
YzJkM2IwHhcNMjYwNDE2MjMwMDM3WhcNMjYwNDE3MjMwMDM3WjAzMTEwLwYDVQQD
Eyg5NDcwZjAzMTIzM2M3ZjQxMTUwODA1YzljMzkwM2RkMzkzYTJjOGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkTswqI5zAPhbO7zKOfYqYDqX3ic
jJ7t81GJ2kxXWISgam2ttaJzfTaesmkzCYTeSJ7KWktuXkTFMbFF+kf6//8BIMIa
GerYc2qFJnlG1ynXiuXtvyFUD/1W0kG0MSJ1HnUd6H8hKWU13AHYH6+T82m8+QD7
EhBHSaaSn2VB9W5+Ug9VIDJTmfQeaYiysW9zCfQC7U4OhYPeDi7Njo64Ry/9uUYR
DGVzb++tDkRXH1t2WdwcXZkPYlpO6kgW07ptNOoz1trEK0XowDwdhHW/BhtEpcOp
4wm+cn1EoR8/1whwFDDhy0SVu1wkaDimN+FCzGMozNGb7tmmobDwlfSHlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRw8DEjPH9BFQgFycOQPdOTosjHMB8GA1UdIwQY
MBaAFM7Ds0eiFrxDewvUzwvIzaZejC07MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenNPelI2SVd2RU43QzlUUEM4ak5wbDZNTFRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83YTY4M2ItZmE3OC00MTEyLWI2YjYt
MTU1ZmIzZmUyODdlLzEvenNPelI2SVd2RU43QzlUUEM4ak5wbDZNTFRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny83YTY4M2ItZmE3OC00MTEyLWI2YjYtMTU1ZmIzZmUyODdl
LzEvenNPelI2SVd2RU43QzlUUEM4ak5wbDZNTFRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsv8NLGj7
MLUqcT4yxdCGC1OwigmMcCrqptimwocuKoCeGRnKJ0jt3GwD2Bk7CputbgFlP2nr
sAgOi66C9IxRIYD6mfIyk637p2MZgloppWQHNHmyepWU5wGLPVd79M0MPw4Ghs7E
fufg9pf4pPgf5Qe9+snxpUYbdG1WyQirgIpjz/Ua8x1dKZtjLvTZc/+Pm+xN6aN4
yi8hPngojseSyODiLd4L66KtpDa7YLz8RJUg4ZkKh4HCnf0zPx9zGGuW52FUkwOD
3mO9lzOgcggosBLUOPLbgp8l0AicdDxfvSATkptFGSPfw3PD2ee/H84TD2dHjSgx
1AGiaQS8pm3ToQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:38:54 2026 by rpki-client