Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
File:                     r-84RCk7rWUf_YV8ka8L5WCuzWE.mft (raw, json)
Hash identifier:          HAIspJnMtedEHiY8o7H/84QsCe2m3pJCzN0Ct9P6nHI=
Subject key identifier:   1D:EF:6C:08:6D:A1:D8:29:DD:9E:4F:64:E8:43:17:6A:9B:1E:EF:04
Authority key identifier: AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
Certificate issuer:       /CN=afef3844293bad651ffd857c91af0be560aecd61
Certificate serial:       019D9A74995227334588AA345A32DFFFA1B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
Manifest number:          18BE
Signing time:             Fri 17 Apr 2026 08:00:25 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:25 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:25 +0000
Files and hashes:         1: 0WpGctn3iHwcCfz1HyZ1-r-vlc8.roa (hash: FHZ/JIyqvLJTAVxRV45KR0WJzUtCxqF4aecsFoB2jfo=)
                          2: r-84RCk7rWUf_YV8ka8L5WCuzWE.crl (hash: OEhA5NcW3NbadW+7T9hBWtRm59ez3LOt3yU/+HDAv3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:99:52:27:33:45:88:aa:34:5a:32:df:ff:a1:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afef3844293bad651ffd857c91af0be560aecd61
        Validity
            Not Before: Apr 17 08:00:25 2026 GMT
            Not After : Apr 18 08:00:25 2026 GMT
        Subject: CN=1def6c086da1d829dd9e4f64e843176a9b1eef04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:29:bb:15:03:48:73:5c:00:da:35:67:98:22:
                    c6:70:ee:82:8b:24:35:51:26:1b:8f:34:da:79:27:
                    29:c8:51:6c:92:9e:e5:32:db:0c:2d:80:24:9c:7b:
                    81:34:6e:86:22:e6:00:8a:20:b8:79:aa:b4:03:20:
                    2d:9a:cb:2d:98:b9:67:a6:01:1d:84:de:d5:83:07:
                    9d:0f:fc:69:44:c9:60:2f:06:d7:a9:7d:4b:a8:21:
                    a4:52:77:d3:b2:c5:99:fa:94:34:46:28:46:d2:6a:
                    e7:cd:9a:41:f1:59:09:4a:31:71:7b:7f:83:94:2e:
                    17:e7:c4:db:da:af:e7:21:0d:eb:ae:e2:98:21:fc:
                    d9:8a:1e:31:bc:10:72:46:25:84:bf:8e:a8:52:81:
                    22:f7:29:4b:7d:ff:d4:c8:3d:48:7f:d1:3d:1b:04:
                    95:98:a7:4e:e1:f6:e0:b0:b1:c9:37:18:62:91:13:
                    57:fe:ca:e3:14:84:fd:39:f2:f5:b7:6e:47:ca:39:
                    c6:0c:79:52:69:62:31:17:61:d1:3c:0d:72:fa:35:
                    6b:8f:86:9e:7a:b0:b8:8b:b6:af:4d:ec:05:21:60:
                    16:eb:a3:2f:47:f6:9b:2f:79:2c:ec:7c:e7:23:83:
                    76:4c:46:29:1f:1a:94:75:a2:bb:92:57:e6:85:67:
                    ea:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EF:6C:08:6D:A1:D8:29:DD:9E:4F:64:E8:43:17:6A:9B:1E:EF:04
            X509v3 Authority Key Identifier:
                keyid:AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:82:ce:1c:80:a8:4c:95:0f:ba:67:12:f1:2c:67:e0:31:14:
         14:e5:7a:84:2a:c9:ca:4c:05:5f:a7:be:07:c0:af:1f:3c:21:
         1d:bc:f6:c0:f3:32:07:2c:5e:c8:8e:ac:66:c9:c3:9a:98:b1:
         e4:28:07:19:76:88:62:69:97:50:3e:ed:d2:c0:3f:30:ad:2a:
         85:2c:66:4e:42:58:1d:4a:a7:60:23:28:1b:81:08:6d:53:26:
         f4:ea:95:83:ed:2c:25:80:c8:e1:a2:15:af:40:66:da:7e:2e:
         bc:85:76:9d:09:6d:81:9d:ef:9e:97:20:67:92:b5:fa:3d:67:
         3e:f7:19:22:67:57:4f:d2:5e:a2:5e:f9:f9:b0:f0:47:6f:cc:
         41:58:5d:a0:53:04:1d:8e:27:3c:0d:96:57:3b:10:8e:dd:f5:
         74:98:8d:7c:0f:ce:7b:b5:1c:f9:5f:25:7a:31:64:7d:30:87:
         1d:bf:06:3f:dd:dc:22:d1:59:0e:db:84:98:95:b1:89:3d:80:
         4c:3d:e2:56:33:6e:f5:e7:9c:b4:8c:41:95:71:4f:2d:c9:f2:
         a3:84:5f:51:8c:0e:0a:86:7f:66:73:d8:90:64:37:6c:79:fd:
         09:22:0b:b3:6b:44:58:0b:bc:1d:1d:00:ec:0d:2a:6e:92:61:
         5a:dd:3d:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adJlSJzNFiKo0WjLf/6GzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZWYzODQ0MjkzYmFkNjUxZmZkODU3YzkxYWYwYmU1NjBh
ZWNkNjEwHhcNMjYwNDE3MDgwMDI1WhcNMjYwNDE4MDgwMDI1WjAzMTEwLwYDVQQD
EygxZGVmNmMwODZkYTFkODI5ZGQ5ZTRmNjRlODQzMTc2YTliMWVlZjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ym7FQNIc1wA2jVnmCLGcO6CiyQ1
USYbjzTaeScpyFFskp7lMtsMLYAknHuBNG6GIuYAiiC4eaq0AyAtmsstmLlnpgEd
hN7VgwedD/xpRMlgLwbXqX1LqCGkUnfTssWZ+pQ0RihG0mrnzZpB8VkJSjFxe3+D
lC4X58Tb2q/nIQ3rruKYIfzZih4xvBByRiWEv46oUoEi9ylLff/UyD1If9E9GwSV
mKdO4fbgsLHJNxhikRNX/srjFIT9OfL1t25HyjnGDHlSaWIxF2HRPA1y+jVrj4ae
erC4i7avTewFIWAW66MvR/abL3ks7HznI4N2TEYpHxqUdaK7klfmhWfqWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3vbAhtodgp3Z5PZOhDF2qbHu8EMB8GA1UdIwQY
MBaAFK/vOEQpO61lH/2FfJGvC+Vgrs1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci04NFJDazdyV1VmX1lWOGthOEw1V0N1eldFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iNGE0YzAtYzUzZi00NWJiLThlODUt
YTliNDYxNGYwNzQ0LzEvci04NFJDazdyV1VmX1lWOGthOEw1V0N1eldFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9iNGE0YzAtYzUzZi00NWJiLThlODUtYTliNDYxNGYwNzQ0
LzEvci04NFJDazdyV1VmX1lWOGthOEw1V0N1eldFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFoLOHICo
TJUPumcS8Sxn4DEUFOV6hCrJykwFX6e+B8CvHzwhHbz2wPMyByxeyI6sZsnDmpix
5CgHGXaIYmmXUD7t0sA/MK0qhSxmTkJYHUqnYCMoG4EIbVMm9OqVg+0sJYDI4aIV
r0Bm2n4uvIV2nQltgZ3vnpcgZ5K1+j1nPvcZImdXT9Jeol75+bDwR2/MQVhdoFME
HY4nPA2WVzsQjt31dJiNfA/Oe7Uc+V8lejFkfTCHHb8GP93cItFZDtuEmJWxiT2A
TD3iVjNu9eectIxBlXFPLcnyo4RfUYwOCoZ/ZnPYkGQ3bHn9CSILs2tEWAu8HR0A
7A0qbpJhWt09lA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:03:01 2026 by rpki-client