Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
File:                     _HlIirThrA9L1GfStNNiHGsY7qA.mft (raw, json)
Hash identifier:          QWwomNonVxID6VpHWUw7EfHiLrqdDqfIwyU7kjsUumc=
Subject key identifier:   06:33:E2:45:2F:A4:E8:F5:F0:84:55:31:D7:DE:B2:17:F9:59:0E:89
Authority key identifier: FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0
Certificate issuer:       /CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0
Certificate serial:       019D98186C4FA36730C2AF3511343B6A049B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
Manifest number:          18BF
Signing time:             Thu 16 Apr 2026 21:00:30 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:30 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:30 +0000
Files and hashes:         1: _HlIirThrA9L1GfStNNiHGsY7qA.crl (hash: ryKL8fCuTtXR1SRXjcJcDxzYp0lBGgevHdqatxdgcZw=)
                          2: zXpI_ZkMZjomMfSewt7eA9Kg9dk.roa (hash: AKFEqvG1w5Wb8V0Q0PMXn0i+G8aiBs1A75NxMO1M+zY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:6c:4f:a3:67:30:c2:af:35:11:34:3b:6a:04:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0
        Validity
            Not Before: Apr 16 21:00:30 2026 GMT
            Not After : Apr 17 21:00:30 2026 GMT
        Subject: CN=0633e2452fa4e8f5f0845531d7deb217f9590e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:37:e2:27:15:bb:9b:7f:1f:6a:8a:1f:51:72:
                    e6:57:42:0f:ad:f8:77:e7:3d:c0:97:41:29:20:54:
                    14:56:92:30:4d:66:78:11:f6:4b:18:02:f6:8f:84:
                    4d:4b:44:05:06:7e:55:32:91:f0:96:99:19:a6:f3:
                    70:1b:d7:85:4b:44:e3:26:20:e4:f3:a8:64:55:3c:
                    52:ed:6a:d7:40:44:0c:8d:a5:b8:32:b1:1c:35:6b:
                    cb:6a:80:24:1e:d3:38:ff:98:5b:fb:e0:70:71:f6:
                    79:cc:16:c8:0e:aa:02:37:cc:85:95:22:dd:36:63:
                    e2:30:ff:6a:15:66:58:e5:8c:53:3b:a1:d3:36:dc:
                    3a:ae:8a:f1:fb:dc:7c:14:71:ab:6c:f8:44:8d:50:
                    69:77:70:fb:82:74:f8:ce:0a:71:ac:b4:37:8b:fe:
                    46:3d:14:06:c7:d9:d8:82:5f:7f:22:fb:85:1b:54:
                    82:65:10:d1:99:f5:79:b3:19:7f:c9:df:1e:ff:7e:
                    47:6c:7b:f5:36:75:95:a7:05:c1:0c:90:06:49:d4:
                    6d:68:ff:47:91:c4:e2:4b:c9:09:92:05:3d:16:f0:
                    af:ea:24:9d:c4:e6:35:83:f6:f1:80:f3:e2:ac:f6:
                    0a:0b:ee:30:38:6b:2f:a9:a5:c5:fa:9d:cc:ab:a5:
                    cd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:33:E2:45:2F:A4:E8:F5:F0:84:55:31:D7:DE:B2:17:F9:59:0E:89
            X509v3 Authority Key Identifier:
                keyid:FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:6e:ba:fc:41:01:0f:8b:fd:53:09:6d:20:d4:6b:d0:d0:e0:
         53:11:db:1f:ad:95:2c:9f:4a:53:e2:4c:0c:fa:f6:11:56:d0:
         8f:3b:8d:4a:1e:c9:6c:f5:97:78:d2:0d:06:2f:96:bc:2d:ab:
         4b:4d:31:a5:13:c9:17:9c:10:7e:bb:03:b8:30:26:31:39:62:
         24:63:ef:35:98:49:b4:5d:b8:75:c1:0e:b7:a9:46:62:33:6a:
         9f:da:b8:cb:68:c3:81:14:f0:04:20:13:cc:7b:54:0d:9b:d5:
         ac:60:f3:17:9d:0d:97:de:be:76:80:38:ad:19:4a:4d:71:5b:
         f7:9f:e8:13:bd:d3:bd:2f:db:88:65:61:0c:20:ec:80:04:41:
         f9:a0:7c:b8:c6:70:2e:16:d0:36:69:ef:85:1d:62:ed:1f:a5:
         f6:53:83:79:66:b9:7c:8a:75:65:0e:6a:46:cf:b1:8f:c2:c4:
         ef:80:cc:d8:9f:7d:ac:a8:d0:02:0c:95:41:6c:8d:ab:3e:3e:
         02:02:7a:51:08:8d:2e:ce:e6:b3:e9:aa:45:0b:5f:c3:d6:0e:
         b3:c7:48:d7:8e:22:29:b0:5e:06:7e:47:46:3f:50:08:03:03:
         8f:c6:8f:1e:9d:0d:a5:61:b9:94:b5:5d:d9:94:3f:a9:f9:57:
         6d:83:86:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGGxPo2cwwq81ETQ7agSbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNzk0ODhhYjRlMWFjMGY0YmQ0NjdkMmI0ZDM2MjFjNmIx
OGVlYTAwHhcNMjYwNDE2MjEwMDMwWhcNMjYwNDE3MjEwMDMwWjAzMTEwLwYDVQQD
EygwNjMzZTI0NTJmYTRlOGY1ZjA4NDU1MzFkN2RlYjIxN2Y5NTkwZTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TfiJxW7m38faoofUXLmV0IPrfh3
5z3Al0EpIFQUVpIwTWZ4EfZLGAL2j4RNS0QFBn5VMpHwlpkZpvNwG9eFS0TjJiDk
86hkVTxS7WrXQEQMjaW4MrEcNWvLaoAkHtM4/5hb++BwcfZ5zBbIDqoCN8yFlSLd
NmPiMP9qFWZY5YxTO6HTNtw6rorx+9x8FHGrbPhEjVBpd3D7gnT4zgpxrLQ3i/5G
PRQGx9nYgl9/IvuFG1SCZRDRmfV5sxl/yd8e/35HbHv1NnWVpwXBDJAGSdRtaP9H
kcTiS8kJkgU9FvCv6iSdxOY1g/bxgPPirPYKC+4wOGsvqaXF+p3Mq6XNHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYz4kUvpOj18IRVMdfeshf5WQ6JMB8GA1UdIwQY
MBaAFPx5SIq04awPS9Rn0rTTYhxrGO6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0hsSWlyVGhyQTlMMUdmU3ROTmlIR3NZN3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hOTBkYmYtODZkNi00OGNlLThhNmMt
ODZhYTAwZTEzNzQ2LzEvX0hsSWlyVGhyQTlMMUdmU3ROTmlIR3NZN3FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9hOTBkYmYtODZkNi00OGNlLThhNmMtODZhYTAwZTEzNzQ2
LzEvX0hsSWlyVGhyQTlMMUdmU3ROTmlIR3NZN3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdW66/EEB
D4v9UwltINRr0NDgUxHbH62VLJ9KU+JMDPr2EVbQjzuNSh7JbPWXeNINBi+WvC2r
S00xpRPJF5wQfrsDuDAmMTliJGPvNZhJtF24dcEOt6lGYjNqn9q4y2jDgRTwBCAT
zHtUDZvVrGDzF50Nl96+doA4rRlKTXFb95/oE73TvS/biGVhDCDsgARB+aB8uMZw
LhbQNmnvhR1i7R+l9lODeWa5fIp1ZQ5qRs+xj8LE74DM2J99rKjQAgyVQWyNqz4+
AgJ6UQiNLs7ms+mqRQtfw9YOs8dI144iKbBeBn5HRj9QCAMDj8aPHp0NpWG5lLVd
2ZQ/qflXbYOGRQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:20:30 2026 by rpki-client