Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
File:                     AYODB_eazcWa1uuC6Miq76PYgok.mft (raw, json)
Hash identifier:          iB1oqXYRPUI2ImmeLB3s+Y4YhKV12a7NxL3yr1dg36o=
Subject key identifier:   73:C3:53:34:7A:8E:2F:7A:C2:84:1B:F8:64:FD:79:16:E5:C1:9B:21
Authority key identifier: 01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
Certificate issuer:       /CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Certificate serial:       019D9A06E0BE8C20112787350EBA0F7506F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 06:00:35 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:35 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:35 +0000
Files and hashes:         1: AYODB_eazcWa1uuC6Miq76PYgok.crl (hash: VY8pL73LX2yAsKGvTvhbsCH4GJbPdTw/RdvVtbZqlIc=)
                          2: SBaxEKn6omM3IqhrS7K0Wod8GDA.roa (hash: SyVRYDfJpMcJBFiaCrbmVlK9aAfcGPsjIqUsOCOATQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:06:e0:be:8c:20:11:27:87:35:0e:ba:0f:75:06:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
        Validity
            Not Before: Apr 17 06:00:35 2026 GMT
            Not After : Apr 18 06:00:35 2026 GMT
        Subject: CN=73c353347a8e2f7ac2841bf864fd7916e5c19b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:da:fb:ac:7b:ae:b5:73:79:26:90:c8:ac:e5:
                    3e:fe:32:20:db:da:37:bc:6b:b1:33:e6:f3:0e:6f:
                    1d:b3:34:fb:12:a9:e4:e9:70:3a:c6:10:a5:4f:9b:
                    23:c1:0e:df:64:6c:4e:f2:b5:f8:5a:85:c4:d8:f1:
                    d8:d5:a2:cf:a6:3a:05:60:c1:22:ed:14:68:17:d7:
                    cc:04:9a:f9:64:43:67:75:4f:96:a5:22:e0:41:97:
                    a5:17:45:7b:ae:11:fb:6e:11:35:8f:14:05:1e:a9:
                    54:c7:0d:9a:ec:a5:85:8a:07:d2:ec:c0:15:7c:8b:
                    8c:d8:fc:21:df:45:c1:7b:7b:ad:4d:5b:c3:5e:6e:
                    ee:e7:12:d2:f9:12:26:61:35:8a:2a:a8:0a:3f:58:
                    a0:1e:d3:81:26:d8:1b:39:8c:18:a3:f3:7a:1e:c9:
                    66:3c:0c:98:8c:d4:e1:1c:46:90:9f:91:fb:a7:5b:
                    5f:e1:b7:59:85:fd:71:94:04:13:c5:37:de:61:f0:
                    65:27:75:12:08:61:5f:55:7a:87:93:e7:cd:9c:94:
                    ff:68:18:a8:10:3a:a7:1d:53:d2:d1:32:76:a4:26:
                    f7:92:1b:e6:92:87:dd:0c:2f:db:d9:62:85:ec:f9:
                    5c:e5:59:7c:2d:15:dd:2d:d3:45:68:b6:d3:36:46:
                    d6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C3:53:34:7A:8E:2F:7A:C2:84:1B:F8:64:FD:79:16:E5:C1:9B:21
            X509v3 Authority Key Identifier:
                keyid:01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:12:9b:a5:72:c9:d9:9e:0b:fe:72:2a:23:fb:58:7b:77:90:
         54:a7:14:8f:18:83:44:52:b5:4a:84:29:59:17:cf:08:00:72:
         54:60:65:9c:11:a4:80:80:18:68:4d:a2:4b:20:78:6c:52:c9:
         d1:c5:da:8f:fe:4e:3a:d3:a9:7f:47:66:bc:0c:c8:5c:81:29:
         44:6a:2e:d1:07:5e:2a:0f:c6:ad:35:9e:ea:b5:d2:3a:c1:de:
         8d:8e:82:34:7b:42:2d:a6:f1:21:ad:68:6f:22:90:7f:a6:92:
         8e:25:1a:bb:1b:1b:36:ea:32:08:14:e8:d2:fa:69:50:3f:48:
         54:2c:06:8f:12:86:0c:8d:1b:26:be:8e:eb:ed:27:9a:a9:c5:
         cb:7d:e7:d9:b2:ee:dd:33:76:f8:9a:3a:f2:82:50:a3:b6:a8:
         d3:b9:c6:db:f2:03:e0:c5:1f:0b:75:1b:cf:2b:8b:e6:53:eb:
         60:a1:bb:de:cc:44:29:30:26:6e:2a:16:e7:0c:32:b1:8d:c4:
         05:f1:57:71:ad:c8:97:ce:25:56:a7:ff:ca:68:15:42:73:fc:
         ae:d2:7a:51:c0:a2:99:57:b4:f3:44:48:98:30:91:24:55:4c:
         9e:f7:d9:b2:90:88:ec:1f:2a:9b:9e:3a:e1:f3:eb:06:49:69:
         86:a8:c0:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBuC+jCARJ4c1DroPdQbxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxODM4MzA3Zjc5YWNkYzU5YWQ2ZWI4MmU4YzhhYWVmYTNk
ODgyODkwHhcNMjYwNDE3MDYwMDM1WhcNMjYwNDE4MDYwMDM1WjAzMTEwLwYDVQQD
Eyg3M2MzNTMzNDdhOGUyZjdhYzI4NDFiZjg2NGZkNzkxNmU1YzE5YjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9r7rHuutXN5JpDIrOU+/jIg29o3
vGuxM+bzDm8dszT7Eqnk6XA6xhClT5sjwQ7fZGxO8rX4WoXE2PHY1aLPpjoFYMEi
7RRoF9fMBJr5ZENndU+WpSLgQZelF0V7rhH7bhE1jxQFHqlUxw2a7KWFigfS7MAV
fIuM2Pwh30XBe3utTVvDXm7u5xLS+RImYTWKKqgKP1igHtOBJtgbOYwYo/N6Hslm
PAyYjNThHEaQn5H7p1tf4bdZhf1xlAQTxTfeYfBlJ3USCGFfVXqHk+fNnJT/aBio
EDqnHVPS0TJ2pCb3khvmkofdDC/b2WKF7Plc5Vl8LRXdLdNFaLbTNkbWjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPDUzR6ji96woQb+GT9eRblwZshMB8GA1UdIwQY
MBaAFAGDgwf3ms3FmtbrgujIqu+j2IKJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVlPREJfZWF6Y1dhMXV1QzZNaXE3NlBZZ29rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85ZjYxYmUtOGMzMS00OWJhLWI0MjQt
Y2EzZDRhYWU2ZjA5LzEvQVlPREJfZWF6Y1dhMXV1QzZNaXE3NlBZZ29rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85ZjYxYmUtOGMzMS00OWJhLWI0MjQtY2EzZDRhYWU2ZjA5
LzEvQVlPREJfZWF6Y1dhMXV1QzZNaXE3NlBZZ29rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxKbpXLJ
2Z4L/nIqI/tYe3eQVKcUjxiDRFK1SoQpWRfPCAByVGBlnBGkgIAYaE2iSyB4bFLJ
0cXaj/5OOtOpf0dmvAzIXIEpRGou0QdeKg/GrTWe6rXSOsHejY6CNHtCLabxIa1o
byKQf6aSjiUauxsbNuoyCBTo0vppUD9IVCwGjxKGDI0bJr6O6+0nmqnFy33n2bLu
3TN2+Jo68oJQo7ao07nG2/ID4MUfC3UbzyuL5lPrYKG73sxEKTAmbioW5wwysY3E
BfFXca3Il84lVqf/ymgVQnP8rtJ6UcCimVe080RImDCRJFVMnvfZspCI7B8qm546
4fPrBklphqjARQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:58:09 2026 by rpki-client