Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft
File:                     j1Gq0OQUir4_KouNQxjzS0VrZfE.mft (raw, json)
Hash identifier:          LFZ1Yl2QIIXx5SrkolIx/ogL7dn6v4ti+ISimukyb78=
Subject key identifier:   30:66:EB:6A:E9:89:95:BF:9F:43:DB:00:98:B8:94:67:92:5D:51:F0
Authority key identifier: 8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1
Certificate issuer:       /CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1
Certificate serial:       019D9C62F86F1EF7A6527F2FD80C111E58F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft
Manifest number:          018B
Signing time:             Fri 17 Apr 2026 17:00:24 +0000
Manifest this update:     Fri 17 Apr 2026 17:00:24 +0000
Manifest next update:     Sat 18 Apr 2026 17:00:24 +0000
Files and hashes:         1: 17JRT-eliiqD0ZudhQwcd-RHoCY.roa (hash: rsCaM5usnSELR3Hid5CN2oWYMmohcr2pCEMxJm1TSn4=)
                          2: 5CYe2w6R8bIP53LSediQOkU8X6Y.roa (hash: 62hxmbI0Pt2Gc+kE97Qd4+IWL8YV1uOGUoBpSifMc4g=)
                          3: AiyDVffautqfmFw0-sHwLnrdi94.roa (hash: NqMMGxy1WwFAXktdmGqyVpQBfDu1vxm8tC/DWTYXqCg=)
                          4: KTAAuRsqmRld1n4ZdiqcKLG_hbI.roa (hash: Z/rqoZBNVfDm70QTbYQ7hfqHZXGsKtZpgexuaPzb1M4=)
                          5: j1Gq0OQUir4_KouNQxjzS0VrZfE.crl (hash: S5g0zV2ePq3QjLBMgxF2Ce8XRP/fjmBEzz1Ihn0fV5Y=)
                          6: lXUAxU6WVwpNoYD3PNJupX0IdnQ.roa (hash: 1IXDFDpAZ7cDUUd7sdHkzjt07vGwbPC7cOUCYW3+UFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:62:f8:6f:1e:f7:a6:52:7f:2f:d8:0c:11:1e:58:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1
        Validity
            Not Before: Apr 17 17:00:24 2026 GMT
            Not After : Apr 18 17:00:24 2026 GMT
        Subject: CN=3066eb6ae98995bf9f43db0098b89467925d51f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:53:ad:31:43:db:a0:69:7b:e7:ef:55:ea:b2:
                    2f:7e:62:07:9c:b1:a2:b3:24:1d:03:64:1d:90:3e:
                    a5:86:da:aa:2a:16:a4:1e:1a:5e:7f:5c:5d:7d:d4:
                    c4:e8:6a:62:dc:7f:7b:66:a3:75:89:ff:94:11:ac:
                    0b:5e:a8:c7:72:2d:d1:b0:f9:e3:54:a7:8b:02:09:
                    1d:15:9c:c3:d9:1b:cd:7f:f1:ae:3c:41:1f:be:fe:
                    93:f9:48:13:f7:93:90:eb:27:6b:3b:17:a3:f9:27:
                    ea:08:8d:0a:eb:85:13:1c:ed:15:45:c4:24:58:05:
                    20:04:af:68:ba:c7:52:b2:2b:42:ce:a5:f9:d6:d1:
                    86:2b:61:d7:0c:99:e5:c0:e2:b3:fa:17:3b:f2:bb:
                    dd:28:4e:3f:83:38:8a:fd:07:91:39:fe:9c:e3:8e:
                    c9:23:57:4a:03:9f:ec:11:39:5f:79:68:fb:b3:94:
                    ed:16:27:fa:2a:ef:07:bc:a4:2c:5d:36:78:20:a0:
                    60:6e:95:8b:90:cd:f1:49:75:ee:f4:f2:e1:30:b2:
                    12:7a:70:ef:29:1b:cb:6d:7a:b1:86:cb:c9:36:47:
                    4d:f9:ec:89:17:ef:76:b8:1f:e6:5c:a5:12:22:80:
                    4d:cf:f1:d6:27:a2:10:eb:32:5d:e3:5e:07:2d:bb:
                    7d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:66:EB:6A:E9:89:95:BF:9F:43:DB:00:98:B8:94:67:92:5D:51:F0
            X509v3 Authority Key Identifier:
                keyid:8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ac:9a:38:6d:21:4c:bd:a7:d7:bb:e2:a3:70:45:e1:b8:f6:
         b4:d1:ca:e3:d5:5b:02:07:ea:92:7d:a2:ec:77:13:f4:fb:ed:
         19:e3:6c:7a:41:44:08:09:06:3e:3e:a8:3a:62:0c:0f:73:8b:
         58:00:57:46:40:b0:24:06:4a:5f:0b:6e:ad:f1:a6:da:02:e2:
         de:8f:84:c1:5d:a5:8f:18:2b:87:8f:97:17:42:29:a6:18:10:
         56:16:fb:1b:be:5c:ee:19:8c:7b:5b:c6:dd:fb:e7:db:14:7c:
         70:d6:20:a5:20:76:6d:f6:1c:f4:ba:97:f8:ba:1d:84:e6:4c:
         18:76:ef:31:73:3e:49:93:0a:74:83:24:d2:ad:17:ff:23:68:
         57:63:cd:d9:69:f6:f3:36:ab:ea:12:aa:fe:8f:3a:88:f3:fa:
         b0:38:68:db:ed:5d:67:35:e9:47:ac:fa:df:07:d6:a1:28:3b:
         73:0f:c3:e6:7d:44:65:76:10:31:0d:ed:5e:b3:72:fc:04:8c:
         61:f8:fe:57:da:d6:cd:af:c1:14:f0:f4:b4:fd:e2:8c:3c:30:
         78:b1:3c:f9:55:76:94:0d:28:60:83:e4:66:bc:2f:0e:32:02:
         6d:04:8f:6b:c9:4f:59:90:6e:1e:15:7f:76:90:bc:a1:0a:e7:
         71:f3:d7:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cYvhvHvemUn8v2AwRHlj5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNTFhYWQwZTQxNDhhYmUzZjJhOGI4ZDQzMThmMzRiNDU2
YjY1ZjEwHhcNMjYwNDE3MTcwMDI0WhcNMjYwNDE4MTcwMDI0WjAzMTEwLwYDVQQD
EygzMDY2ZWI2YWU5ODk5NWJmOWY0M2RiMDA5OGI4OTQ2NzkyNWQ1MWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+FOtMUPboGl75+9V6rIvfmIHnLGi
syQdA2QdkD6lhtqqKhakHhpef1xdfdTE6Gpi3H97ZqN1if+UEawLXqjHci3RsPnj
VKeLAgkdFZzD2RvNf/GuPEEfvv6T+UgT95OQ6ydrOxej+SfqCI0K64UTHO0VRcQk
WAUgBK9ousdSsitCzqX51tGGK2HXDJnlwOKz+hc78rvdKE4/gziK/QeROf6c447J
I1dKA5/sETlfeWj7s5TtFif6Ku8HvKQsXTZ4IKBgbpWLkM3xSXXu9PLhMLISenDv
KRvLbXqxhsvJNkdN+eyJF+92uB/mXKUSIoBNz/HWJ6IQ6zJd414HLbt9oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBm62rpiZW/n0PbAJi4lGeSXVHwMB8GA1UdIwQY
MBaAFI9RqtDkFIq+PyqLjUMY80tFa2XxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajFHcTBPUVVpcjRfS291TlF4anpTMFZyWmZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8zZTYxZDAtZjZjZS00YWFkLTk3NjQt
NzYyZDI3Mjc3NTkxLzEvajFHcTBPUVVpcjRfS291TlF4anpTMFZyWmZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8zZTYxZDAtZjZjZS00YWFkLTk3NjQtNzYyZDI3Mjc3NTkx
LzEvajFHcTBPUVVpcjRfS291TlF4anpTMFZyWmZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKyaOG0h
TL2n17vio3BF4bj2tNHK49VbAgfqkn2i7HcT9PvtGeNsekFECAkGPj6oOmIMD3OL
WABXRkCwJAZKXwturfGm2gLi3o+EwV2ljxgrh4+XF0IpphgQVhb7G75c7hmMe1vG
3fvn2xR8cNYgpSB2bfYc9LqX+LodhOZMGHbvMXM+SZMKdIMk0q0X/yNoV2PN2Wn2
8zar6hKq/o86iPP6sDho2+1dZzXpR6z63wfWoSg7cw/D5n1EZXYQMQ3tXrNy/ASM
Yfj+V9rWza/BFPD0tP3ijDwweLE8+VV2lA0oYIPkZrwvDjICbQSPa8lPWZBuHhV/
dpC8oQrncfPX1A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:06:24 2026 by rpki-client