Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
File:                     B-rSmInb9i85j2S8YUkWZzBW1F4.mft (raw, json)
Hash identifier:          oZpaDZL1t7Vm/jfx33yUmo/auveFQOZcbm7tf9RgORk=
Subject key identifier:   DF:AA:13:52:59:AF:09:F6:DF:66:6B:30:D8:25:D7:52:A2:E3:AF:6E
Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
Certificate issuer:       /CN=07ead29889dbf62f398f64bc614916673056d45e
Certificate serial:       019D992B24BBA472BFC2741F8062266A1753
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 02:00:34 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:34 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:34 +0000
Files and hashes:         1: B-rSmInb9i85j2S8YUkWZzBW1F4.crl (hash: sBmQfDkXChP6Yj0j4NM0a2Lf7TgNvx2y9iCoHIDmVE8=)
                          2: WD55UE5qlePOSI_a9oMyg8wcNhM.roa (hash: k6v6oyStwZCW3ua9CbvEUWEuQ//GR0Gueu0YUBIfqMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:24:bb:a4:72:bf:c2:74:1f:80:62:26:6a:17:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e
        Validity
            Not Before: Apr 17 02:00:34 2026 GMT
            Not After : Apr 18 02:00:34 2026 GMT
        Subject: CN=dfaa135259af09f6df666b30d825d752a2e3af6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b6:e7:4c:f7:d1:b5:78:d2:94:de:5c:73:1d:
                    38:d0:83:d8:e9:03:e4:d3:46:fe:03:e5:db:bd:4f:
                    9a:da:99:a8:b4:42:db:69:61:e2:d7:15:87:48:1b:
                    32:08:35:b5:3c:20:ef:f2:50:2c:cf:ec:bf:8a:65:
                    0d:73:40:82:b4:d2:e6:20:21:ef:6d:1a:dd:81:a2:
                    62:b0:67:0a:f7:38:2c:c5:3a:d3:07:17:aa:69:6f:
                    d8:52:70:2d:a2:a1:69:8b:19:d7:e1:48:7d:a9:af:
                    91:79:92:19:81:85:cf:ed:79:bb:20:c1:a6:92:e3:
                    5f:58:f5:dd:11:f0:37:6f:01:17:9e:59:45:f2:69:
                    d4:73:d5:0e:cf:a8:bf:d2:a1:d5:8a:05:63:26:b1:
                    bb:6a:d5:5c:b5:99:a4:11:d8:c2:24:f6:da:f1:8c:
                    7e:bb:ec:18:8f:d5:5a:a5:08:4e:75:52:96:e9:05:
                    28:2f:81:91:a9:97:0c:8e:ba:dc:84:2e:94:c9:f9:
                    7a:d8:3b:43:89:d2:f4:e9:2d:9f:b1:9b:2d:15:dd:
                    a7:cd:77:0a:d6:19:00:cf:d3:42:8d:90:ef:9c:1d:
                    43:25:07:d9:f3:ec:da:6f:ec:25:77:05:de:eb:cc:
                    d8:eb:97:cc:d1:d1:07:9a:dc:1b:48:e6:ed:66:6d:
                    d3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AA:13:52:59:AF:09:F6:DF:66:6B:30:D8:25:D7:52:A2:E3:AF:6E
            X509v3 Authority Key Identifier:
                keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:dc:61:9e:73:16:1f:20:e0:b4:c4:3e:7a:83:4c:9d:dc:bc:
         06:3a:0b:78:3d:6b:41:a5:15:4e:18:90:c6:82:5c:5f:c0:b7:
         67:f0:6b:4c:e3:8d:ba:fd:f5:5a:86:c4:76:23:de:eb:d8:2c:
         23:1f:a7:5f:06:33:b0:ac:ef:0d:af:77:1c:5d:95:2d:05:06:
         16:f8:48:4d:3b:fb:48:32:b5:3f:c5:da:cb:ef:12:d1:7a:33:
         a0:f1:75:0c:97:7d:58:8f:a5:10:09:8b:04:2a:34:a8:a0:97:
         84:62:fa:86:a5:d2:6f:05:86:ed:eb:58:96:09:56:b2:9c:c4:
         85:f7:2a:b7:b2:34:c1:76:bc:a5:d0:63:1b:6e:87:51:ed:eb:
         02:b6:e2:5f:8f:78:c7:81:c8:3c:7d:32:22:89:79:e9:2f:83:
         7c:a6:d4:a4:4d:55:5c:dc:28:0e:58:2d:5e:b9:e7:a7:1c:67:
         48:89:62:64:00:6c:29:34:99:40:c0:44:ed:9e:fa:b9:92:b6:
         99:68:75:a6:31:54:e9:d2:23:b7:14:e1:bc:fb:21:60:22:b3:
         13:2c:a1:52:a8:a7:1e:b6:7c:ce:a0:07:a1:7e:48:6b:c3:1d:
         14:94:73:e1:d9:23:d7:a4:61:d5:b5:90:05:43:21:5c:55:a7:
         e0:e6:19:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKyS7pHK/wnQfgGImahdTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZWFkMjk4ODlkYmY2MmYzOThmNjRiYzYxNDkxNjY3MzA1
NmQ0NWUwHhcNMjYwNDE3MDIwMDM0WhcNMjYwNDE4MDIwMDM0WjAzMTEwLwYDVQQD
EyhkZmFhMTM1MjU5YWYwOWY2ZGY2NjZiMzBkODI1ZDc1MmEyZTNhZjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbbnTPfRtXjSlN5ccx040IPY6QPk
00b+A+XbvU+a2pmotELbaWHi1xWHSBsyCDW1PCDv8lAsz+y/imUNc0CCtNLmICHv
bRrdgaJisGcK9zgsxTrTBxeqaW/YUnAtoqFpixnX4Uh9qa+ReZIZgYXP7Xm7IMGm
kuNfWPXdEfA3bwEXnllF8mnUc9UOz6i/0qHVigVjJrG7atVctZmkEdjCJPba8Yx+
u+wYj9VapQhOdVKW6QUoL4GRqZcMjrrchC6Uyfl62DtDidL06S2fsZstFd2nzXcK
1hkAz9NCjZDvnB1DJQfZ8+zab+wldwXe68zY65fM0dEHmtwbSObtZm3TyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+qE1JZrwn232ZrMNgl11Ki469uMB8GA1UdIwQY
MBaAFAfq0piJ2/YvOY9kvGFJFmcwVtReMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82YWJjZDEtZWVlZS00NmQ1LTlmNmMt
ZGY2ODcxZTJmNzM1LzEvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC82YWJjZDEtZWVlZS00NmQ1LTlmNmMtZGY2ODcxZTJmNzM1
LzEvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkNxhnnMW
HyDgtMQ+eoNMndy8BjoLeD1rQaUVThiQxoJcX8C3Z/BrTOONuv31WobEdiPe69gs
Ix+nXwYzsKzvDa93HF2VLQUGFvhITTv7SDK1P8Xay+8S0XozoPF1DJd9WI+lEAmL
BCo0qKCXhGL6hqXSbwWG7etYlglWspzEhfcqt7I0wXa8pdBjG26HUe3rArbiX494
x4HIPH0yIol56S+DfKbUpE1VXNwoDlgtXrnnpxxnSIliZABsKTSZQMBE7Z76uZK2
mWh1pjFU6dIjtxThvPshYCKzEyyhUqinHrZ8zqAHoX5Ia8MdFJRz4dkj16Rh1bWQ
BUMhXFWn4OYZhA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:52 2026 by rpki-client