Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
File:                     pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft (raw, json)
Hash identifier:          UoK9O28Y1L5BoOW7SvdHJ3gCcwpFx65cx/taLkj23eE=
Subject key identifier:   6D:68:7F:39:B7:4E:D0:F2:58:7B:F9:29:EA:93:CD:06:FA:40:8C:BE
Authority key identifier: A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A
Certificate issuer:       /CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
Certificate serial:       019D98BD78A21D5FF0DA11716F034FDF9456
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 00:00:46 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:46 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:46 +0000
Files and hashes:         1: NMnvxW-fHpjvFBsGgVuK7nkogkE.roa (hash: cyPa61O40P16PWh/kNq0rEwVyVEH58xoXbBkkVu4NPA=)
                          2: c2vxh0TJId25IsYoKf4qE5r7y4c.roa (hash: rH400KAscIABX5VYsTzTY3UvtHPOb5oawftmDDbVwS4=)
                          3: hLSO_O6xaM7r05r3MxZf6SqUUFs.roa (hash: P+jaY+n9bXozEzc3ZwpWv16cXEXSmsjH0j6LoAlbUSc=)
                          4: pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl (hash: jzy00dkUQVFpM5WLm6joAv7Pg6+da/x/HLfnD6/bcZA=)
                          5: q_qYpFhmBQ8lhb7G0ETsROyhKrE.roa (hash: b/eMO0NX0hh7yZAOvwUKNYnJNdSAmYoYt5B3IlaWmes=)
                          6: zaGrkqbu8Gll08VVFhOdNAVBodQ.roa (hash: 5RXV1x3djGzhsIabpdBba1lsONVKoOFtpXCmtC7NEnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 00:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:78:a2:1d:5f:f0:da:11:71:6f:03:4f:df:94:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
        Validity
            Not Before: Apr 17 00:00:46 2026 GMT
            Not After : Apr 18 00:00:46 2026 GMT
        Subject: CN=6d687f39b74ed0f2587bf929ea93cd06fa408cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0f:35:bb:07:3c:99:9e:82:b4:eb:41:ed:a1:
                    ef:a9:17:a2:ef:b8:72:d0:d0:85:9c:2d:82:1a:13:
                    6a:62:5d:6f:b2:6f:92:11:08:b3:e2:0d:a8:88:a2:
                    9d:b3:42:55:d1:02:3c:34:9e:81:16:37:c7:f8:88:
                    34:bc:2f:67:11:45:49:21:09:bb:91:92:fc:50:27:
                    53:4a:a3:11:4d:59:fd:68:e8:13:c9:06:2b:85:ac:
                    93:cb:c3:b5:3e:66:a6:94:05:13:c2:12:c3:2d:96:
                    56:23:fc:83:50:c8:c9:71:bc:5d:e9:0f:63:4c:ae:
                    91:58:0a:7c:b7:63:29:ff:19:bf:e1:a2:91:6c:c2:
                    b3:60:a6:13:35:62:bf:98:4d:6a:00:77:54:61:0a:
                    df:46:ac:a8:d7:80:16:e4:fb:c4:3e:dd:84:1e:e5:
                    df:07:8e:90:0c:59:2c:d1:88:de:63:c0:16:ac:e5:
                    a4:93:63:89:01:e6:83:68:ab:e2:13:94:f5:a2:4c:
                    29:e0:93:62:e4:6f:eb:8a:7a:61:c3:5d:07:c2:ea:
                    c2:e7:ec:6e:12:ab:23:3f:68:eb:40:12:ca:8e:c0:
                    e6:fb:aa:84:6a:7c:ba:5b:51:64:e2:8d:8b:c8:5c:
                    fe:b0:7b:44:a3:9f:26:2b:b7:19:86:1d:88:aa:e1:
                    b3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:68:7F:39:B7:4E:D0:F2:58:7B:F9:29:EA:93:CD:06:FA:40:8C:BE
            X509v3 Authority Key Identifier:
                keyid:A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:cd:56:ec:90:7c:8c:9d:f4:27:59:9c:04:79:93:eb:18:65:
         ed:4f:89:1c:16:8a:a9:23:c7:ee:5f:c0:f0:2d:00:aa:0e:13:
         36:43:ac:92:cb:32:15:c5:bf:74:75:2a:b9:cc:f8:1a:cd:c0:
         b5:07:08:81:db:de:f6:48:36:5a:b4:d6:cb:32:35:32:3f:32:
         1e:6f:ec:5a:53:d4:ab:1c:4b:d4:c9:f3:25:2e:32:4c:41:e7:
         ef:39:a1:1b:ae:f3:1e:af:e2:48:c1:bc:56:5f:26:dd:b4:d1:
         d6:42:33:20:ae:41:95:b4:98:1b:50:48:ed:5d:f4:9a:03:ae:
         2b:74:de:63:e8:e7:38:e3:7e:e3:e7:df:8a:ba:2a:57:42:e3:
         ee:c6:cb:5f:ce:58:de:ba:fa:63:5a:64:40:d5:c6:07:ae:c2:
         93:43:4c:f8:f9:2f:70:e3:43:b7:5d:9b:83:22:83:ad:9a:20:
         b0:03:60:57:3d:8a:d5:6e:4a:1e:40:70:48:75:70:a0:a7:34:
         a1:c7:0f:5c:52:20:64:4e:7f:0f:ab:c2:02:4c:03:b3:60:a9:
         0c:7f:7a:c6:8c:13:10:4c:1b:91:38:d5:08:b7:57:0d:f6:31:
         1f:3b:66:7c:5b:25:e8:8c:2a:f5:9b:3c:ca:ce:21:56:fc:4c:
         26:5d:e1:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvXiiHV/w2hFxbwNP35RWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ODI0MzA4YmM4M2I0ZWU1NmYxYzBjMWI5ZmJmYzMxMWIw
Y2Q0NGEwHhcNMjYwNDE3MDAwMDQ2WhcNMjYwNDE4MDAwMDQ2WjAzMTEwLwYDVQQD
Eyg2ZDY4N2YzOWI3NGVkMGYyNTg3YmY5MjllYTkzY2QwNmZhNDA4Y2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA81uwc8mZ6CtOtB7aHvqRei77hy
0NCFnC2CGhNqYl1vsm+SEQiz4g2oiKKds0JV0QI8NJ6BFjfH+Ig0vC9nEUVJIQm7
kZL8UCdTSqMRTVn9aOgTyQYrhayTy8O1PmamlAUTwhLDLZZWI/yDUMjJcbxd6Q9j
TK6RWAp8t2Mp/xm/4aKRbMKzYKYTNWK/mE1qAHdUYQrfRqyo14AW5PvEPt2EHuXf
B46QDFks0YjeY8AWrOWkk2OJAeaDaKviE5T1okwp4JNi5G/rinphw10HwurC5+xu
EqsjP2jrQBLKjsDm+6qEany6W1Fk4o2LyFz+sHtEo58mK7cZhh2IquGzRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1ofzm3TtDyWHv5KeqTzQb6QIy+MB8GA1UdIwQY
MBaAFKSCQwi8g7TuVvHAwbn7/DEbDNRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcElKRENMeUR0TzVXOGNEQnVmdjhNUnNNMUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81ZmViMTMtOWU0My00MzI1LTg1Yzkt
MTk2ZTZmMzc1ZmQ2LzEvcElKRENMeUR0TzVXOGNEQnVmdjhNUnNNMUVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81ZmViMTMtOWU0My00MzI1LTg1YzktMTk2ZTZmMzc1ZmQ2
LzEvcElKRENMeUR0TzVXOGNEQnVmdjhNUnNNMUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASs1W7JB8
jJ30J1mcBHmT6xhl7U+JHBaKqSPH7l/A8C0Aqg4TNkOskssyFcW/dHUqucz4Gs3A
tQcIgdve9kg2WrTWyzI1Mj8yHm/sWlPUqxxL1MnzJS4yTEHn7zmhG67zHq/iSMG8
Vl8m3bTR1kIzIK5BlbSYG1BI7V30mgOuK3TeY+jnOON+4+ffiroqV0Lj7sbLX85Y
3rr6Y1pkQNXGB67Ck0NM+PkvcONDt12bgyKDrZogsANgVz2K1W5KHkBwSHVwoKc0
occPXFIgZE5/D6vCAkwDs2CpDH96xowTEEwbkTjVCLdXDfYxHztmfFsl6Iwq9Zs8
ys4hVvxMJl3huA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:12:36 2026 by rpki-client