Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
File:                     rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft (raw, json)
Hash identifier:          tknBzdgDLaJEN5maO0X+4sDnhOdjB8OWNInxPZUmZxc=
Subject key identifier:   21:68:BF:17:82:F2:D8:9C:6A:37:3F:E3:AF:0E:B5:DA:2A:38:30:03
Authority key identifier: AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02
Certificate issuer:       /CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
Certificate serial:       019D98508E6312DC0BFECF5101C52F9D061D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
Manifest number:          18C2
Signing time:             Thu 16 Apr 2026 22:01:49 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:49 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:49 +0000
Files and hashes:         1: JEVNwkBJGjPUCLbxmvoCLoGPZjs.roa (hash: ET03PFNNVrxiq4Y+fkFrz6tnsyAu93bMLHdSl5Q6kB8=)
                          2: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl (hash: 65QksVFECYx6t9xMTza4rzKieOSHOucnZGKyOr/qZOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:8e:63:12:dc:0b:fe:cf:51:01:c5:2f:9d:06:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
        Validity
            Not Before: Apr 16 22:01:49 2026 GMT
            Not After : Apr 17 22:01:49 2026 GMT
        Subject: CN=2168bf1782f2d89c6a373fe3af0eb5da2a383003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ad:ca:ce:4c:42:ae:14:f3:b9:8f:a4:45:3d:
                    ec:58:be:47:96:65:fa:07:84:f6:a8:81:03:03:5d:
                    9b:45:26:0d:50:2e:b0:e9:04:4c:09:94:19:ad:a5:
                    bb:3a:38:ae:2d:d2:c4:82:ce:ed:94:c8:f5:a3:14:
                    ba:7f:e0:20:97:20:92:84:14:69:f9:64:90:70:cf:
                    0f:cb:8d:e4:f6:d7:18:6f:f7:2a:20:91:5c:4e:5d:
                    51:b5:f4:3e:10:1a:df:54:ed:e1:37:65:dc:e0:45:
                    eb:7e:49:05:34:5e:e8:6d:02:7e:a9:e6:20:fd:21:
                    84:30:e8:78:35:b7:61:c4:d6:2b:df:fb:b3:b1:9f:
                    a0:67:1c:40:cf:a0:73:a5:ae:53:2c:63:65:f4:39:
                    5c:18:c3:96:df:20:77:34:ed:e8:d6:96:36:fe:86:
                    0a:10:76:d8:50:20:28:42:c1:e0:64:d5:35:32:a0:
                    56:2a:52:d4:1e:ac:03:11:aa:74:bd:7d:1f:f2:5a:
                    c2:86:92:b0:ed:d8:e5:7b:1a:94:67:6c:9f:0a:6a:
                    ea:d5:4f:1f:ce:74:c4:10:7e:a5:2f:27:7c:02:56:
                    d2:c4:45:6b:04:36:18:e8:56:31:6b:3b:cf:ef:d7:
                    9b:c9:31:84:4a:14:27:80:5e:d4:01:c2:55:e6:cc:
                    45:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:68:BF:17:82:F2:D8:9C:6A:37:3F:E3:AF:0E:B5:DA:2A:38:30:03
            X509v3 Authority Key Identifier:
                keyid:AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:03:c1:d7:2b:8a:68:a7:c8:d3:6e:d9:35:26:e2:d3:26:94:
         85:ef:63:5c:77:9d:7f:0a:b4:64:be:66:81:6e:81:ed:4a:bc:
         f3:8b:ba:73:1e:df:f5:d8:3a:20:f0:92:2f:1f:cd:ab:de:e0:
         bd:fe:1d:8f:8d:03:1a:b0:c7:8e:70:17:7a:57:1b:6f:68:e3:
         28:63:ce:7d:14:07:49:97:9b:26:d2:7a:85:12:c9:d8:60:dc:
         07:9f:eb:43:94:db:4a:28:a1:9a:f2:7b:b3:86:24:be:e5:56:
         9b:54:c7:56:bb:3e:c4:c7:b9:ed:6c:cf:a0:ea:09:9f:ef:a5:
         c8:66:62:58:05:b4:55:0f:3e:4c:a7:11:17:4d:70:d9:89:e0:
         1c:71:0c:af:13:9d:6e:7f:61:53:ac:56:ff:9c:ad:9e:09:61:
         0c:75:3b:f3:2f:c5:d9:03:e3:82:8e:7f:8e:53:cf:d7:c3:38:
         20:53:d0:7b:94:98:73:58:f9:6e:44:e1:78:81:78:94:3f:50:
         a7:3f:0c:c0:7f:a0:cf:0c:8a:04:76:c9:27:db:ec:62:d1:9a:
         cb:b4:40:35:e1:bd:52:d0:0e:7a:99:a9:b1:06:a3:ca:39:d7:
         a8:40:b9:ba:d0:b6:1e:c5:7b:52:44:69:03:c3:e0:4d:8e:40:
         02:ad:7b:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUI5jEtwL/s9RAcUvnQYdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMTBjZGQwYjhiNzMzMDRjOTg1ZmRlMWIxMGU0MDE4MmJm
MTM5MDIwHhcNMjYwNDE2MjIwMTQ5WhcNMjYwNDE3MjIwMTQ5WjAzMTEwLwYDVQQD
EygyMTY4YmYxNzgyZjJkODljNmEzNzNmZTNhZjBlYjVkYTJhMzgzMDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp63KzkxCrhTzuY+kRT3sWL5HlmX6
B4T2qIEDA12bRSYNUC6w6QRMCZQZraW7OjiuLdLEgs7tlMj1oxS6f+AglyCShBRp
+WSQcM8Py43k9tcYb/cqIJFcTl1RtfQ+EBrfVO3hN2Xc4EXrfkkFNF7obQJ+qeYg
/SGEMOh4NbdhxNYr3/uzsZ+gZxxAz6Bzpa5TLGNl9DlcGMOW3yB3NO3o1pY2/oYK
EHbYUCAoQsHgZNU1MqBWKlLUHqwDEap0vX0f8lrChpKw7djlexqUZ2yfCmrq1U8f
znTEEH6lLyd8AlbSxEVrBDYY6FYxazvP79ebyTGEShQngF7UAcJV5sxFEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFovxeC8ticajc/468OtdoqODADMB8GA1UdIwQY
MBaAFK0QzdC4tzMEyYX94bEOQBgr8TkCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclJETjBMaTNNd1RKaGYzaHNRNUFHQ3Z4T1FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9kZWI4NzQtZjkwYi00MmM0LWJjZDIt
NDdiYmYyMWVhYzlmLzEvclJETjBMaTNNd1RKaGYzaHNRNUFHQ3Z4T1FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9kZWI4NzQtZjkwYi00MmM0LWJjZDItNDdiYmYyMWVhYzlm
LzEvclJETjBMaTNNd1RKaGYzaHNRNUFHQ3Z4T1FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPgPB1yuK
aKfI027ZNSbi0yaUhe9jXHedfwq0ZL5mgW6B7Uq884u6cx7f9dg6IPCSLx/Nq97g
vf4dj40DGrDHjnAXelcbb2jjKGPOfRQHSZebJtJ6hRLJ2GDcB5/rQ5TbSiihmvJ7
s4YkvuVWm1THVrs+xMe57WzPoOoJn++lyGZiWAW0VQ8+TKcRF01w2YngHHEMrxOd
bn9hU6xW/5ytnglhDHU78y/F2QPjgo5/jlPP18M4IFPQe5SYc1j5bkTheIF4lD9Q
pz8MwH+gzwyKBHbJJ9vsYtGay7RANeG9UtAOepmpsQajyjnXqEC5utC2HsV7UkRp
A8PgTY5AAq17Ww==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:04 2026 by rpki-client