Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
File:                     egz9WlEBPl_WyvgJh4BHpgXunW0.mft (raw, json)
Hash identifier:          XxVPH7sxCpZ3h5qswd9R0jv70/joRSozIxtqx2aGsuI=
Subject key identifier:   32:8D:B9:9D:57:26:3F:83:A3:98:DA:78:34:1E:5B:B6:BD:A2:46:62
Authority key identifier: 7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D
Certificate issuer:       /CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
Certificate serial:       019D992B74AADAC39C615D8535FC334FF851
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 02:00:55 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:55 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:55 +0000
Files and hashes:         1: YzKdAdfCvvdPIE3XweETh9g_RFE.roa (hash: EgUeeu3aDHtFIVk2MBTs7H5c0TYshnD2NTKZbs5UU/Q=)
                          2: egz9WlEBPl_WyvgJh4BHpgXunW0.crl (hash: Uq0rczkD+cgaTYAuIHOelJg+w+tLCjCj1gFGklA5sT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:74:aa:da:c3:9c:61:5d:85:35:fc:33:4f:f8:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
        Validity
            Not Before: Apr 17 02:00:55 2026 GMT
            Not After : Apr 18 02:00:55 2026 GMT
        Subject: CN=328db99d57263f83a398da78341e5bb6bda24662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:09:90:04:a8:e9:34:35:6e:0f:7f:22:2e:b6:
                    85:a8:08:0c:5e:0c:cf:9b:95:4d:cc:75:b3:fb:a2:
                    c8:1c:be:a4:a0:69:8e:97:7c:49:80:26:09:43:97:
                    25:e9:83:11:96:ce:da:58:a2:d5:68:7e:e0:4c:7b:
                    1d:cc:f9:aa:02:30:b8:33:8b:f3:2c:0c:5d:dc:94:
                    be:68:a2:14:28:c9:7b:b6:d3:c1:82:44:6f:4c:a0:
                    92:d2:e4:a9:19:5a:99:ec:ee:bf:44:ae:fc:b3:a3:
                    b0:31:e9:43:6c:97:46:d2:8f:af:90:b8:c8:c9:38:
                    dc:3e:e8:40:b8:67:a1:32:f8:3c:e9:20:52:d8:0f:
                    ad:df:2c:7d:54:51:bc:94:b4:56:3b:de:0d:fe:e1:
                    ee:18:45:e9:2e:7d:72:a8:6d:8b:d2:8f:77:7b:50:
                    a7:4c:42:44:da:a7:45:23:81:45:05:23:dd:25:a2:
                    73:f2:d4:8c:00:62:9b:14:02:f6:fa:17:12:6e:4a:
                    83:c4:f4:53:ce:97:90:7b:5a:dd:2c:3e:c7:af:b5:
                    4c:81:95:3b:e8:e5:3d:c1:c9:94:28:a0:17:c2:1d:
                    ec:52:ee:11:6a:e1:0f:61:78:cd:b9:ff:b2:9c:ed:
                    9c:7c:70:f0:2b:df:98:cb:79:94:d0:17:f7:99:73:
                    32:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8D:B9:9D:57:26:3F:83:A3:98:DA:78:34:1E:5B:B6:BD:A2:46:62
            X509v3 Authority Key Identifier:
                keyid:7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f1:da:c5:c8:75:f6:60:f2:5b:a5:49:9b:e7:32:56:0a:a9:
         61:ab:f0:98:d2:27:14:e2:b6:d2:e0:f9:26:2f:c5:44:0e:b5:
         a4:0a:fd:58:0e:d3:d7:e6:a7:ec:c4:17:a3:47:85:4e:e2:af:
         dc:5b:1d:1b:f3:1d:9b:c2:f5:cf:cf:1a:74:91:95:17:96:e5:
         58:d4:a5:ee:cb:6b:31:ca:52:3e:81:e0:1a:60:ea:12:d7:59:
         64:d6:e0:86:3d:7d:d6:b5:65:c9:18:83:09:30:2d:da:1d:ea:
         f6:14:42:44:67:58:f9:0d:bf:e7:51:19:65:2a:8c:96:e0:6d:
         da:de:25:25:2a:74:a9:b6:09:08:4d:5b:af:2e:b1:0d:16:6a:
         f1:e2:89:40:95:e2:2a:76:3a:c8:4c:20:6f:80:87:8e:96:e1:
         3b:a2:bf:0d:9b:12:1c:e9:1f:d4:f6:9e:c0:a9:c3:cc:5e:3c:
         5b:ce:5d:71:a0:66:fd:ed:b1:ee:d2:5c:a7:64:b4:da:49:d2:
         29:ce:9b:dd:35:e5:2d:d4:30:41:19:7d:e8:ff:69:bb:25:10:
         09:66:bd:52:95:9c:cd:53:c0:c2:94:ba:ae:dc:ea:ac:37:0c:
         1b:b5:cc:a3:21:57:be:5b:d6:8d:ce:37:72:7c:7d:02:41:00:
         95:50:2b:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK3Sq2sOcYV2FNfwzT/hRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMGNmZDVhNTEwMTNlNWZkNmNhZjgwOTg3ODA0N2E2MDVl
ZTlkNmQwHhcNMjYwNDE3MDIwMDU1WhcNMjYwNDE4MDIwMDU1WjAzMTEwLwYDVQQD
EygzMjhkYjk5ZDU3MjYzZjgzYTM5OGRhNzgzNDFlNWJiNmJkYTI0NjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AmQBKjpNDVuD38iLraFqAgMXgzP
m5VNzHWz+6LIHL6koGmOl3xJgCYJQ5cl6YMRls7aWKLVaH7gTHsdzPmqAjC4M4vz
LAxd3JS+aKIUKMl7ttPBgkRvTKCS0uSpGVqZ7O6/RK78s6OwMelDbJdG0o+vkLjI
yTjcPuhAuGehMvg86SBS2A+t3yx9VFG8lLRWO94N/uHuGEXpLn1yqG2L0o93e1Cn
TEJE2qdFI4FFBSPdJaJz8tSMAGKbFAL2+hcSbkqDxPRTzpeQe1rdLD7Hr7VMgZU7
6OU9wcmUKKAXwh3sUu4RauEPYXjNuf+ynO2cfHDwK9+Yy3mU0Bf3mXMydQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKNuZ1XJj+Do5jaeDQeW7a9okZiMB8GA1UdIwQY
MBaAFHoM/VpRAT5f1sr4CYeAR6YF7p1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWd6OVdsRUJQbF9XeXZnSmg0QkhwZ1h1blcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZTA0ZDgtNDlkYy00MDlmLTkyZmMt
ZGQ1NjIzMDQ4ZWEyLzEvZWd6OVdsRUJQbF9XeXZnSmg0QkhwZ1h1blcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lZTA0ZDgtNDlkYy00MDlmLTkyZmMtZGQ1NjIzMDQ4ZWEy
LzEvZWd6OVdsRUJQbF9XeXZnSmg0QkhwZ1h1blcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/Haxch1
9mDyW6VJm+cyVgqpYavwmNInFOK20uD5Ji/FRA61pAr9WA7T1+an7MQXo0eFTuKv
3FsdG/Mdm8L1z88adJGVF5blWNSl7strMcpSPoHgGmDqEtdZZNbghj191rVlyRiD
CTAt2h3q9hRCRGdY+Q2/51EZZSqMluBt2t4lJSp0qbYJCE1bry6xDRZq8eKJQJXi
KnY6yEwgb4CHjpbhO6K/DZsSHOkf1PaewKnDzF48W85dcaBm/e2x7tJcp2S02knS
Kc6b3TXlLdQwQRl96P9puyUQCWa9UpWczVPAwpS6rtzqrDcMG7XMoyFXvlvWjc43
cnx9AkEAlVArbQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:01 2026 by rpki-client