Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft
File:                     00J0yPw5e9vGx1haFcgyErBQIh8.mft (raw, json)
Hash identifier:          fHkicYUqOy7seff1Gc4anr6Hxgd5gmWYGuZvSJ/PmQw=
Subject key identifier:   ED:B3:45:A1:08:B9:28:3E:A0:B7:5D:F2:E9:D5:F2:87:B0:90:3D:72
Authority key identifier: D3:42:74:C8:FC:39:7B:DB:C6:C7:58:5A:15:C8:32:12:B0:50:22:1F
Certificate issuer:       /CN=d34274c8fc397bdbc6c7585a15c83212b050221f
Certificate serial:       019D9AE28ACF6FBA2563CCACB61EE291A84D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 10:00:31 +0000
Manifest this update:     Fri 17 Apr 2026 10:00:31 +0000
Manifest next update:     Sat 18 Apr 2026 10:00:31 +0000
Files and hashes:         1: 00J0yPw5e9vGx1haFcgyErBQIh8.crl (hash: ZeEA8TuBuuUAg1ypxAapuUCLtT7uo8c9hIMpHgsyJmk=)
                          2: i6kBtCsAIrjCwUpHjGwj5ys2Jrk.roa (hash: zMudQcER0t4uUPhQ5L2fTWT4s9Z4p0bv0wrDyCzzObY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 10:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e2:8a:cf:6f:ba:25:63:cc:ac:b6:1e:e2:91:a8:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34274c8fc397bdbc6c7585a15c83212b050221f
        Validity
            Not Before: Apr 17 10:00:31 2026 GMT
            Not After : Apr 18 10:00:31 2026 GMT
        Subject: CN=edb345a108b9283ea0b75df2e9d5f287b0903d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:56:c3:39:f2:16:7d:fd:74:8e:c6:32:97:78:
                    59:f7:0b:1d:da:9f:c3:cd:0f:49:53:0b:16:75:83:
                    13:8d:dc:d5:a7:d6:25:14:d0:fc:41:fb:6f:13:a1:
                    3a:22:26:24:93:8a:44:eb:09:60:f7:62:6c:60:b5:
                    ed:a0:e3:69:00:eb:aa:bb:91:5a:3f:18:c4:de:57:
                    4b:f3:8d:a4:1a:d4:b9:43:9a:ca:8d:97:75:6c:7f:
                    03:50:32:c3:68:fd:84:9c:39:65:a8:eb:73:b5:d9:
                    61:b8:c6:17:e2:38:10:30:3d:fd:01:d2:58:a7:ea:
                    15:0e:9f:c1:89:df:49:d6:35:aa:f6:46:3b:1f:b5:
                    de:34:7a:c7:ab:00:c5:1c:71:b5:27:63:f6:33:d4:
                    35:89:01:93:3a:db:bf:e7:a6:d6:e6:6a:99:fd:75:
                    f0:77:74:5c:f7:76:18:29:5d:72:6b:00:cd:96:58:
                    d4:ca:a7:71:c2:7e:1c:4d:8f:3e:78:43:32:38:4e:
                    92:a6:6e:31:ba:7b:ef:27:b0:7c:70:e3:3b:1e:f3:
                    61:7e:2e:5d:fe:71:9d:cf:5e:db:2a:0e:69:81:8a:
                    d1:d6:43:17:cb:f8:0c:86:d2:99:15:7c:fd:7c:ef:
                    18:84:06:94:c2:f8:af:ba:be:1b:05:88:0b:e0:8f:
                    4b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B3:45:A1:08:B9:28:3E:A0:B7:5D:F2:E9:D5:F2:87:B0:90:3D:72
            X509v3 Authority Key Identifier:
                keyid:D3:42:74:C8:FC:39:7B:DB:C6:C7:58:5A:15:C8:32:12:B0:50:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:4e:7b:42:5e:5f:87:47:e5:d1:87:eb:dc:ad:8d:a3:56:6c:
         25:b5:6e:8f:26:29:0e:0f:fb:4a:49:d4:90:1d:27:c7:ba:d3:
         bb:aa:a0:d5:25:4b:b5:77:85:5e:f7:48:1f:d3:2c:2e:eb:f3:
         10:aa:e8:bf:71:06:73:3d:ac:75:a4:95:2b:13:21:62:b7:2f:
         e0:f7:21:f0:8d:4d:f6:12:df:7f:8a:b6:6d:d4:05:aa:8c:62:
         46:f1:ce:df:d8:7d:2a:73:49:63:e9:31:11:cc:40:1a:95:5f:
         e9:83:f7:54:6f:27:ad:3d:18:47:80:ff:60:c0:2d:49:a9:ea:
         0d:3d:7e:e3:07:80:fe:eb:f4:b3:26:1a:9d:bd:ff:21:56:8e:
         2f:f1:32:66:bf:75:71:c0:b8:5c:c3:1f:35:ea:7d:18:d6:14:
         c9:28:b4:45:ef:e7:5c:b4:77:bb:ab:a2:fa:89:13:58:a1:d2:
         bc:c4:3f:9b:7a:73:26:5a:84:6c:47:40:b9:b0:9c:5f:05:7f:
         d2:2f:b3:04:30:77:c4:28:8a:11:3b:e2:60:5c:d6:15:c9:d6:
         67:00:58:37:e8:8f:55:36:58:52:3a:57:eb:78:c1:c9:44:76:
         2c:23:41:f9:a1:5a:1b:18:b0:05:d6:9b:c1:53:40:ac:83:83:
         97:fb:10:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4orPb7olY8ysth7ikahNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNDI3NGM4ZmMzOTdiZGJjNmM3NTg1YTE1YzgzMjEyYjA1
MDIyMWYwHhcNMjYwNDE3MTAwMDMxWhcNMjYwNDE4MTAwMDMxWjAzMTEwLwYDVQQD
EyhlZGIzNDVhMTA4YjkyODNlYTBiNzVkZjJlOWQ1ZjI4N2IwOTAzZDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVbDOfIWff10jsYyl3hZ9wsd2p/D
zQ9JUwsWdYMTjdzVp9YlFND8QftvE6E6IiYkk4pE6wlg92JsYLXtoONpAOuqu5Fa
PxjE3ldL842kGtS5Q5rKjZd1bH8DUDLDaP2EnDllqOtztdlhuMYX4jgQMD39AdJY
p+oVDp/Bid9J1jWq9kY7H7XeNHrHqwDFHHG1J2P2M9Q1iQGTOtu/56bW5mqZ/XXw
d3Rc93YYKV1yawDNlljUyqdxwn4cTY8+eEMyOE6Spm4xunvvJ7B8cOM7HvNhfi5d
/nGdz17bKg5pgYrR1kMXy/gMhtKZFXz9fO8YhAaUwvivur4bBYgL4I9LiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2zRaEIuSg+oLdd8unV8oewkD1yMB8GA1UdIwQY
MBaAFNNCdMj8OXvbxsdYWhXIMhKwUCIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDBKMHlQdzVlOXZHeDFoYUZjZ3lFckJRSWg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8xZmZmYmItZmYyNC00ZmFiLWE3NjMt
NTBhZGJlYWM4Y2I0LzEvMDBKMHlQdzVlOXZHeDFoYUZjZ3lFckJRSWg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8xZmZmYmItZmYyNC00ZmFiLWE3NjMtNTBhZGJlYWM4Y2I0
LzEvMDBKMHlQdzVlOXZHeDFoYUZjZ3lFckJRSWg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWk57Ql5f
h0fl0Yfr3K2No1ZsJbVujyYpDg/7SknUkB0nx7rTu6qg1SVLtXeFXvdIH9MsLuvz
EKrov3EGcz2sdaSVKxMhYrcv4Pch8I1N9hLff4q2bdQFqoxiRvHO39h9KnNJY+kx
EcxAGpVf6YP3VG8nrT0YR4D/YMAtSanqDT1+4weA/uv0syYanb3/IVaOL/EyZr91
ccC4XMMfNep9GNYUySi0Re/nXLR3u6ui+okTWKHSvMQ/m3pzJlqEbEdAubCcXwV/
0i+zBDB3xCiKETviYFzWFcnWZwBYN+iPVTZYUjpX63jByUR2LCNB+aFaGxiwBdab
wVNArIODl/sQYQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:20:44 2026 by rpki-client