Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
File:                     cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft (raw, json)
Hash identifier:          bkq/j/mRaSbQgII0/73h4VDCP9DMJyfFoyBkUmXkx9Y=
Subject key identifier:   F7:86:AF:05:C4:DF:96:5A:3F:B9:24:B9:1D:AE:92:4D:3E:1D:30:E7
Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
Certificate issuer:       /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Certificate serial:       019D9B19C67063A1C7CCACB7851BE37C3DFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
Manifest number:          18D5
Signing time:             Fri 17 Apr 2026 11:00:50 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:50 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:50 +0000
Files and hashes:         1: 1-xRRF6t6KGdWMUcKGA94gVVYBt4.roa (hash: Ha8Q7daEnMbbFyY/dxOcBlU2bNw+1RH5tta+lgnhb9k=)
                          2: J7nxHJR2q_5-XSxPJIIrOEd_2qM.roa (hash: rk9skdq4jJ58Yezr/EGSdkIl0oNJ4Rc1ouYxvWKZPx4=)
                          3: Snl5qCrO18GvoZkBCNag-_FCvXQ.roa (hash: boOmLIzLkXM0jR5/AjohjFmN5/TCVfh/j8d7LjiBERk=)
                          4: WInZSLnnGSQiu1WNXz8M2PoWvVY.roa (hash: fvhBez0/rVC+YOWpQ3YX0TtdpMREsi6UE/qQfQbepu0=)
                          5: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl (hash: 6YICWnxabpU2iD/jcC+vEmtq1AZO9lyl/t0V8QSyaj4=)
                          6: lcsEIDZ8kCR9rhkUlN9uCzqWyGk.roa (hash: lV4Xq524SycxtnX+ET+22iLBNWE46Mr/vlQVFjNh0m0=)
                          7: r8QQa0KeKI1GL64nr5wN_b7RP5c.roa (hash: VPjTppJbG0cInafRi0EuzWNFWUjNr+CGPb1+lvJ/FIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:c6:70:63:a1:c7:cc:ac:b7:85:1b:e3:7c:3d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
        Validity
            Not Before: Apr 17 11:00:50 2026 GMT
            Not After : Apr 18 11:00:50 2026 GMT
        Subject: CN=f786af05c4df965a3fb924b91dae924d3e1d30e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ad:af:0d:fe:3b:11:57:ac:05:f3:fa:58:f1:
                    98:f0:4c:cf:0b:9b:04:1a:c3:c9:72:08:8f:88:ff:
                    7d:7d:5a:e2:66:3b:51:dc:12:2b:0a:05:2e:af:59:
                    15:35:6b:d9:d6:c0:da:3f:41:b8:48:20:da:83:dd:
                    a5:e0:78:0b:f5:30:1f:7a:dc:00:4a:bb:06:82:b6:
                    29:c2:a9:a1:e6:bb:bd:48:34:cd:3c:56:7c:37:92:
                    9d:73:e7:97:dd:fb:bb:8a:94:9f:4e:fc:a1:5a:f3:
                    2c:d6:01:2a:5e:65:ea:08:2c:bc:3c:f5:46:67:9b:
                    f8:7c:49:cb:16:af:b6:9c:09:2b:1f:22:f8:f3:38:
                    5b:64:08:a5:2a:6c:a9:b1:e3:96:71:82:e0:c2:a9:
                    34:34:14:4c:9b:73:d0:99:8b:bd:f2:ec:27:bf:37:
                    24:ef:db:83:0c:cf:cd:be:9b:9e:b6:bc:1c:7d:e1:
                    95:39:4c:fb:e0:fa:f1:86:dd:d4:68:98:01:9f:a3:
                    5e:df:ab:4d:a4:59:1e:c1:e6:f4:31:73:21:1e:20:
                    d5:1a:f2:3e:a4:eb:8f:fb:21:eb:8b:17:5b:8e:47:
                    71:5d:b4:47:a8:19:b0:9d:80:53:21:0d:4f:df:cf:
                    2a:81:96:7a:fe:43:22:39:b0:20:c9:a6:0e:ac:31:
                    10:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:86:AF:05:C4:DF:96:5A:3F:B9:24:B9:1D:AE:92:4D:3E:1D:30:E7
            X509v3 Authority Key Identifier:
                keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e3:5e:ce:ac:d1:2a:5d:73:d0:6a:82:bb:dd:13:30:79:b3:
         8f:8d:45:a1:75:9a:fc:5c:8e:08:9d:a8:0d:9c:fe:2a:8e:89:
         c8:0f:11:5e:ff:e0:6f:17:45:c5:64:63:4c:39:a3:27:82:a1:
         19:c6:b1:79:03:87:33:eb:e6:80:fd:8e:7f:ba:3d:4d:9b:7f:
         eb:12:cd:f1:47:3e:16:4c:69:7c:3b:93:c9:19:e0:01:3b:9e:
         9d:f1:d4:20:58:da:17:f0:10:5f:fe:e6:64:3a:5d:5a:b3:57:
         c3:b9:7e:8b:9c:fa:3b:d6:0a:92:6b:ca:db:6d:b5:ed:8f:45:
         65:d1:8f:58:35:b5:45:10:55:21:0b:4a:05:63:13:03:3c:8f:
         cc:c1:9d:84:04:31:2c:2b:86:76:4e:c9:08:78:fe:9d:87:2b:
         a6:90:9c:eb:69:6f:62:67:07:12:fd:c6:57:3f:22:56:d9:9a:
         d6:0b:12:53:83:09:95:ba:22:14:af:3e:79:e8:7a:48:82:49:
         a9:c6:cf:82:5e:e6:87:a5:76:87:70:15:d7:4d:c5:34:3c:80:
         65:e9:f9:fc:7e:3e:f1:a8:b0:fd:14:73:3b:43:ee:41:a7:6b:
         c4:ba:b1:ce:62:1d:47:a3:67:76:ad:57:57:d5:f5:49:96:14:
         6c:71:60:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGcZwY6HHzKy3hRvjfD37MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMDFlNDIyMjI3ZmE0NGNjNWNiOTVkMmE5ZGNjZTBmYTVi
ODljMDcwHhcNMjYwNDE3MTEwMDUwWhcNMjYwNDE4MTEwMDUwWjAzMTEwLwYDVQQD
EyhmNzg2YWYwNWM0ZGY5NjVhM2ZiOTI0YjkxZGFlOTI0ZDNlMWQzMGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0q2vDf47EVesBfP6WPGY8EzPC5sE
GsPJcgiPiP99fVriZjtR3BIrCgUur1kVNWvZ1sDaP0G4SCDag92l4HgL9TAfetwA
SrsGgrYpwqmh5ru9SDTNPFZ8N5Kdc+eX3fu7ipSfTvyhWvMs1gEqXmXqCCy8PPVG
Z5v4fEnLFq+2nAkrHyL48zhbZAilKmypseOWcYLgwqk0NBRMm3PQmYu98uwnvzck
79uDDM/NvpuetrwcfeGVOUz74Prxht3UaJgBn6Ne36tNpFkeweb0MXMhHiDVGvI+
pOuP+yHrixdbjkdxXbRHqBmwnYBTIQ1P388qgZZ6/kMiObAgyaYOrDEQBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeGrwXE35ZaP7kkuR2ukk0+HTDnMB8GA1UdIwQY
MBaAFHAB5CIif6RMxcuV0qnczg+luJwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85OTJkMDMtODgzYi00MDRkLTg4N2Ut
ZjI0MzVkNWNmMzdiLzEvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My85OTJkMDMtODgzYi00MDRkLTg4N2UtZjI0MzVkNWNmMzdi
LzEvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuNezqzR
Kl1z0GqCu90TMHmzj41FoXWa/FyOCJ2oDZz+Ko6JyA8RXv/gbxdFxWRjTDmjJ4Kh
GcaxeQOHM+vmgP2Of7o9TZt/6xLN8Uc+FkxpfDuTyRngATuenfHUIFjaF/AQX/7m
ZDpdWrNXw7l+i5z6O9YKkmvK22217Y9FZdGPWDW1RRBVIQtKBWMTAzyPzMGdhAQx
LCuGdk7JCHj+nYcrppCc62lvYmcHEv3GVz8iVtma1gsSU4MJlboiFK8+eeh6SIJJ
qcbPgl7mh6V2h3AV103FNDyAZen5/H4+8aiw/RRzO0PuQadrxLqxzmIdR6Nndq1X
V9X1SZYUbHFgOw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:34:31 2026 by rpki-client