Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
File:                     sglyH0VIwmzzYulEqBsazueyS1M.mft (raw, json)
Hash identifier:          gG6uDNx4K4UmB1K+ZKIaNW0OAEMpIJZwnkl3LGsyAGY=
Subject key identifier:   1B:11:06:38:41:0E:D8:62:DF:78:61:77:D9:8F:20:AF:A3:16:32:7A
Authority key identifier: B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
Certificate issuer:       /CN=b209721f4548c26cf362e944a81b1acee7b24b53
Certificate serial:       019D9DAD64090BFD26C50D4534681D9EA1C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
Manifest number:          18C8
Signing time:             Fri 17 Apr 2026 23:01:19 +0000
Manifest this update:     Fri 17 Apr 2026 23:01:19 +0000
Manifest next update:     Sat 18 Apr 2026 23:01:19 +0000
Files and hashes:         1: DKBfBL9XpscAyTb6lcg_xLvLalk.roa (hash: 5NSHLTPIALI5PbSBvcpHj5DJzxIv6VgrTSWBYbfeE9M=)
                          2: FSwkeIpTkviwow4rp67ki1ll7vA.roa (hash: BiP8/RjkfCgTWSMXpx0VR4qahxKI7hYQ74iepcYZ9P8=)
                          3: LNUgrHeJH8_twF9tU9VX_RCIzvg.roa (hash: GLcXAgYTgm5r7GaYDlqmsk5yeyHe1dPhOHxa2XGFx2k=)
                          4: sglyH0VIwmzzYulEqBsazueyS1M.crl (hash: pvwt2uo/AJyiP/NWvqR13YvvJI3W/BadE/nvKAPGO84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 23:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:ad:64:09:0b:fd:26:c5:0d:45:34:68:1d:9e:a1:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b209721f4548c26cf362e944a81b1acee7b24b53
        Validity
            Not Before: Apr 17 23:01:19 2026 GMT
            Not After : Apr 18 23:01:19 2026 GMT
        Subject: CN=1b110638410ed862df786177d98f20afa316327a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:44:18:ca:26:93:4b:2f:37:bb:6e:6a:94:93:
                    28:a0:d6:bf:25:15:6e:59:18:58:74:37:e0:bf:af:
                    84:14:c5:1c:cd:63:5d:07:50:84:e5:d2:07:11:cd:
                    41:a6:13:ea:34:35:15:09:44:85:ee:71:ab:81:95:
                    3a:8f:59:f7:eb:1c:f7:97:40:19:22:b3:cd:bf:4f:
                    3d:a0:7e:25:42:51:23:f3:cd:31:52:b9:38:44:bc:
                    64:a6:e2:3f:ed:20:86:42:b5:d3:97:0c:49:af:77:
                    1e:69:ca:a6:4a:8e:21:c6:84:d7:20:7d:c2:e8:03:
                    32:07:53:c6:89:78:ba:2e:ec:a3:3a:54:cd:e3:00:
                    06:00:e2:19:02:cc:b1:c5:12:5d:a7:95:3c:3b:24:
                    cb:bd:0b:af:3d:7b:34:cd:89:83:79:7d:a3:d8:87:
                    e8:74:b6:ed:ff:65:68:0e:89:dc:d0:89:36:5f:c6:
                    45:0c:48:34:d2:d8:00:50:67:a4:1e:ce:3e:26:82:
                    88:4a:52:36:59:a4:09:ae:83:0c:f9:b7:7e:9a:5b:
                    c8:09:e6:e3:6e:9e:e8:00:4b:61:11:16:68:62:d7:
                    f1:02:2e:3f:8a:ec:5f:b0:c7:8d:cf:67:60:f9:5e:
                    66:bf:39:20:bb:53:42:61:ce:60:5c:95:83:ab:f2:
                    6c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:11:06:38:41:0E:D8:62:DF:78:61:77:D9:8F:20:AF:A3:16:32:7A
            X509v3 Authority Key Identifier:
                keyid:B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:76:91:10:f5:ad:b8:4e:e5:12:08:b6:1f:1f:78:23:58:29:
         7a:08:08:2c:2f:52:78:9f:f2:01:c4:ba:45:f4:90:fb:34:1b:
         db:bb:c7:c3:69:6d:2a:f5:08:b3:42:ac:15:88:42:f5:9b:90:
         77:19:69:10:9b:fe:57:78:6a:77:8c:86:b1:d4:26:0c:f3:12:
         ff:02:9a:40:e0:56:68:1b:d0:82:b5:d7:87:ff:9d:b9:80:ce:
         d0:15:3d:5a:7c:25:35:50:66:86:44:c9:f2:41:f1:96:10:3a:
         4b:0a:79:c6:2c:22:f0:3d:1f:f1:e2:dd:65:d8:a8:5e:b1:61:
         06:74:2b:87:cb:21:d5:c2:5d:ef:75:ba:2d:14:d7:28:cb:2e:
         0d:02:30:82:93:78:7d:59:87:53:e6:15:6f:69:cd:e2:0e:12:
         3f:7d:76:d4:16:81:9b:3c:97:fa:2b:60:89:93:81:e1:27:52:
         67:7e:12:31:06:6b:1e:96:46:1c:a6:25:6c:3e:76:1c:cc:e7:
         cb:91:77:8d:d2:4a:ae:dd:9f:db:2d:78:50:09:cb:50:2a:ac:
         e0:57:5b:95:63:98:78:ce:c0:03:f9:b5:6e:f4:94:db:02:bf:
         aa:4e:fa:e6:c6:54:34:19:24:95:2f:a8:f5:a3:54:b4:78:47:
         1c:f8:da:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2drWQJC/0mxQ1FNGgdnqHBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMDk3MjFmNDU0OGMyNmNmMzYyZTk0NGE4MWIxYWNlZTdi
MjRiNTMwHhcNMjYwNDE3MjMwMTE5WhcNMjYwNDE4MjMwMTE5WjAzMTEwLwYDVQQD
EygxYjExMDYzODQxMGVkODYyZGY3ODYxNzdkOThmMjBhZmEzMTYzMjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EQYyiaTSy83u25qlJMooNa/JRVu
WRhYdDfgv6+EFMUczWNdB1CE5dIHEc1BphPqNDUVCUSF7nGrgZU6j1n36xz3l0AZ
IrPNv089oH4lQlEj880xUrk4RLxkpuI/7SCGQrXTlwxJr3ceacqmSo4hxoTXIH3C
6AMyB1PGiXi6LuyjOlTN4wAGAOIZAsyxxRJdp5U8OyTLvQuvPXs0zYmDeX2j2Ifo
dLbt/2VoDonc0Ik2X8ZFDEg00tgAUGekHs4+JoKISlI2WaQJroMM+bd+mlvICebj
bp7oAEthERZoYtfxAi4/iuxfsMeNz2dg+V5mvzkgu1NCYc5gXJWDq/JsoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsRBjhBDthi33hhd9mPIK+jFjJ6MB8GA1UdIwQY
MBaAFLIJch9FSMJs82LpRKgbGs7nsktTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2dseUgwVkl3bXp6WXVsRXFCc2F6dWV5UzFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9hNjc0MzItYzA2Ny00Y2RiLWI1YWQt
ZGJhNWMxODM0NjAxLzEvc2dseUgwVkl3bXp6WXVsRXFCc2F6dWV5UzFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9hNjc0MzItYzA2Ny00Y2RiLWI1YWQtZGJhNWMxODM0NjAx
LzEvc2dseUgwVkl3bXp6WXVsRXFCc2F6dWV5UzFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3aREPWt
uE7lEgi2Hx94I1gpeggILC9SeJ/yAcS6RfSQ+zQb27vHw2ltKvUIs0KsFYhC9ZuQ
dxlpEJv+V3hqd4yGsdQmDPMS/wKaQOBWaBvQgrXXh/+duYDO0BU9WnwlNVBmhkTJ
8kHxlhA6Swp5xiwi8D0f8eLdZdioXrFhBnQrh8sh1cJd73W6LRTXKMsuDQIwgpN4
fVmHU+YVb2nN4g4SP3121BaBmzyX+itgiZOB4SdSZ34SMQZrHpZGHKYlbD52HMzn
y5F3jdJKrt2f2y14UAnLUCqs4FdblWOYeM7AA/m1bvSU2wK/qk765sZUNBkklS+o
9aNUtHhHHPja9w==
-----END CERTIFICATE-----
Generated at Sat Apr 18 08:07:52 2026 by rpki-client