Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft
File:                     eL0cbGiKF1q8jVmPvNEH_KUlS94.mft (raw, json)
Hash identifier:          4yo9eeXjhtHpQHfmLDXOSdzgPwFhNHfb5kkYpX3IX6g=
Subject key identifier:   F0:D9:F1:E4:4A:F8:F8:D4:79:6B:A5:6D:76:16:8E:43:CE:60:FC:C2
Authority key identifier: 78:BD:1C:6C:68:8A:17:5A:BC:8D:59:8F:BC:D1:07:FC:A5:25:4B:DE
Certificate issuer:       /CN=78bd1c6c688a175abc8d598fbcd107fca5254bde
Certificate serial:       019D984FEAF2C7578BE8B719D9112380C5F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft
Manifest number:          18C1
Signing time:             Thu 16 Apr 2026 22:01:07 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:07 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:07 +0000
Files and hashes:         1: QLrva8cnLmPH0hjKUEwdPyYxrik.roa (hash: ZbeD2fd9caY5fcARM6Ra4GSlJm2ocmtIyBY6lWiGmwc=)
                          2: eL0cbGiKF1q8jVmPvNEH_KUlS94.crl (hash: 6tngI/m3GPmTzqb9kN9/2r4QQybXAHMjmnbbsFr4vFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:ea:f2:c7:57:8b:e8:b7:19:d9:11:23:80:c5:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78bd1c6c688a175abc8d598fbcd107fca5254bde
        Validity
            Not Before: Apr 16 22:01:07 2026 GMT
            Not After : Apr 17 22:01:07 2026 GMT
        Subject: CN=f0d9f1e44af8f8d4796ba56d76168e43ce60fcc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:75:cb:47:f1:d1:18:fd:f8:18:22:00:47:a2:
                    09:4d:ae:b6:78:05:de:e3:61:d2:18:90:c5:85:b8:
                    33:33:0a:45:d1:5c:39:8c:a6:9f:9f:84:a0:1e:e3:
                    e9:0c:e9:b8:1f:09:7a:e4:c4:e8:56:1d:32:9f:1a:
                    d3:bc:58:70:0c:32:40:2e:80:8d:05:d4:a1:79:ad:
                    a8:20:0a:ac:27:45:4b:12:8a:80:a2:7c:37:60:68:
                    82:cd:d8:7f:29:e2:f6:10:cb:00:73:34:98:d9:e3:
                    c8:12:29:76:1a:56:87:92:aa:ca:3f:20:08:ba:9a:
                    e4:a1:70:04:19:96:b9:ce:50:13:e7:b6:bf:39:35:
                    95:69:c0:9b:04:54:55:26:35:b3:81:06:da:86:f5:
                    67:70:b2:47:de:fe:19:6a:e9:68:ad:4c:70:df:8c:
                    a4:1f:16:65:6c:de:8a:16:fb:3d:85:fd:0e:45:52:
                    38:f2:44:5f:b8:c9:f8:f1:71:3a:36:28:9c:68:88:
                    b6:32:29:45:81:f1:33:5f:b1:49:71:2f:d8:ce:6d:
                    d1:e5:fd:be:7a:e2:ce:f2:54:22:cf:38:48:1b:b3:
                    2b:07:83:4b:39:dd:0a:db:34:51:89:bc:80:5b:84:
                    a0:27:72:7c:2c:4c:c3:4e:3b:9c:6b:b0:38:61:7c:
                    06:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D9:F1:E4:4A:F8:F8:D4:79:6B:A5:6D:76:16:8E:43:CE:60:FC:C2
            X509v3 Authority Key Identifier:
                keyid:78:BD:1C:6C:68:8A:17:5A:BC:8D:59:8F:BC:D1:07:FC:A5:25:4B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:08:e5:60:36:16:45:6c:9b:0a:c0:d2:ad:43:cf:11:2c:7e:
         9e:46:4f:d3:87:a0:67:94:b0:e8:e1:21:bb:75:ca:ce:aa:cf:
         41:7a:bc:76:86:a8:78:8c:3a:fc:32:8e:e2:93:21:46:43:cd:
         3a:fa:b5:10:b8:47:d6:0f:11:b6:7d:eb:b0:d6:69:e4:ec:43:
         fb:b6:9a:de:08:39:cd:32:c8:1f:9b:e1:3c:24:0d:f6:95:15:
         71:f1:f3:75:1c:99:b5:ff:78:b6:67:bd:43:52:48:07:aa:fd:
         f6:3d:db:bd:b8:5f:e1:0e:16:91:b2:5c:e8:79:f4:da:c7:2b:
         72:c4:5d:8a:e7:3a:08:7a:1f:90:28:2b:5a:3a:24:4a:ea:b6:
         0b:05:57:ee:d6:9b:e8:0f:26:c6:10:e4:7f:f4:31:05:c8:19:
         cf:ea:7c:a9:05:18:bc:52:d2:b9:65:e9:54:15:7a:b7:a9:07:
         e3:ca:a5:e6:3e:5f:11:50:2c:f2:69:d0:1d:a2:d6:38:39:d0:
         8a:c7:b0:91:72:12:4a:2f:ed:5c:ea:8a:99:25:0a:f9:2e:60:
         6e:ea:e3:ef:a4:a8:be:d0:f4:1e:1a:27:2a:17:68:d8:46:c1:
         87:9e:6b:ad:00:da:80:2e:a1:73:b5:dc:ef:f7:1b:6f:67:a9:
         a7:06:04:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YT+ryx1eL6LcZ2REjgMXxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YmQxYzZjNjg4YTE3NWFiYzhkNTk4ZmJjZDEwN2ZjYTUy
NTRiZGUwHhcNMjYwNDE2MjIwMTA3WhcNMjYwNDE3MjIwMTA3WjAzMTEwLwYDVQQD
EyhmMGQ5ZjFlNDRhZjhmOGQ0Nzk2YmE1NmQ3NjE2OGU0M2NlNjBmY2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XXLR/HRGP34GCIAR6IJTa62eAXe
42HSGJDFhbgzMwpF0Vw5jKafn4SgHuPpDOm4Hwl65MToVh0ynxrTvFhwDDJALoCN
BdShea2oIAqsJ0VLEoqAonw3YGiCzdh/KeL2EMsAczSY2ePIEil2GlaHkqrKPyAI
uprkoXAEGZa5zlAT57a/OTWVacCbBFRVJjWzgQbahvVncLJH3v4ZaulorUxw34yk
HxZlbN6KFvs9hf0ORVI48kRfuMn48XE6NiicaIi2MilFgfEzX7FJcS/Yzm3R5f2+
euLO8lQizzhIG7MrB4NLOd0K2zRRibyAW4SgJ3J8LEzDTjuca7A4YXwGbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDZ8eRK+PjUeWulbXYWjkPOYPzCMB8GA1UdIwQY
MBaAFHi9HGxoihdavI1Zj7zRB/ylJUveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUwwY2JHaUtGMXE4alZtUHZORUhfS1VsUzk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMmI0YTItMmIyZi00ZjZhLTliNDgt
YzFmM2I5ZWRlNGRiLzEvZUwwY2JHaUtGMXE4alZtUHZORUhfS1VsUzk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMmI0YTItMmIyZi00ZjZhLTliNDgtYzFmM2I5ZWRlNGRi
LzEvZUwwY2JHaUtGMXE4alZtUHZORUhfS1VsUzk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggjlYDYW
RWybCsDSrUPPESx+nkZP04egZ5Sw6OEhu3XKzqrPQXq8doaoeIw6/DKO4pMhRkPN
Ovq1ELhH1g8Rtn3rsNZp5OxD+7aa3gg5zTLIH5vhPCQN9pUVcfHzdRyZtf94tme9
Q1JIB6r99j3bvbhf4Q4WkbJc6Hn02scrcsRdiuc6CHofkCgrWjokSuq2CwVX7tab
6A8mxhDkf/QxBcgZz+p8qQUYvFLSuWXpVBV6t6kH48ql5j5fEVAs8mnQHaLWODnQ
isewkXISSi/tXOqKmSUK+S5gburj76SovtD0HhonKhdo2EbBh55rrQDagC6hc7Xc
7/cbb2eppwYEKA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:41:46 2026 by rpki-client