Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
File:                     R2bG2a0hzUEYoESCZNb7NdVfFMA.mft (raw, json)
Hash identifier:          f1SB9YoJVTwtmDDMYwa7pIkrv06ET2kYjS+MiNXE+Cw=
Subject key identifier:   F8:ED:09:B2:4D:FB:00:A2:E3:CF:CE:F6:9A:AE:D1:C8:61:30:1A:BC
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Certificate issuer:       /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial:       019D984FCD6D082C6B380C6FF093291880DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
Manifest number:          18C9
Signing time:             Thu 16 Apr 2026 22:00:59 +0000
Manifest this update:     Thu 16 Apr 2026 22:00:59 +0000
Manifest next update:     Fri 17 Apr 2026 22:00:59 +0000
Files and hashes:         1: 8ackz0fBmxFoZ7n0UkyKUhyAWGI.roa (hash: dReBdXhq4rkthqNMyzhKqYiwm9PHmiXuhBuVK2nJI6A=)
                          2: HuqUSWno2Gq8ydDwJRx6QWJXGos.roa (hash: q4XX35euMg6p42HeT4nudKvSOjx2VhLuyQAvC+XXuNE=)
                          3: R2bG2a0hzUEYoESCZNb7NdVfFMA.crl (hash: f0mlJYACnlwwYItkqCOj7pNAoMACxn3zdVM6WEQ19fQ=)
                          4: VU_E5_vbKeph2ERkjiSVilUQng0.roa (hash: lXGCTM2iz6lR/iwrSeN1Dq111KxdOiG5eDm3IhwXCfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:cd:6d:08:2c:6b:38:0c:6f:f0:93:29:18:80:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
        Validity
            Not Before: Apr 16 22:00:59 2026 GMT
            Not After : Apr 17 22:00:59 2026 GMT
        Subject: CN=f8ed09b24dfb00a2e3cfcef69aaed1c861301abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8c:4b:3e:6d:ec:6b:02:5f:07:6c:36:9d:69:
                    8d:da:9f:d1:34:3f:37:d6:46:dc:50:ee:4d:a1:de:
                    29:3e:72:8e:ac:cb:c5:6d:b8:75:51:3b:fd:f3:5d:
                    ee:2c:27:b8:e1:96:c0:84:40:52:b0:26:61:52:7c:
                    cd:28:2f:36:77:b2:bc:78:5d:2e:d8:d1:ca:b7:44:
                    3f:55:38:3d:8e:c7:f7:5b:10:97:17:c4:06:c2:25:
                    ec:73:d1:26:91:8b:be:41:62:3c:90:43:0f:58:8b:
                    37:c8:32:e3:06:5b:a6:c6:4c:a2:61:52:b5:ab:f8:
                    92:0c:8a:91:be:4d:6d:bd:af:05:57:44:4d:95:6d:
                    8b:ad:a5:44:1c:31:6e:50:2d:bd:90:4e:a6:76:df:
                    da:ba:91:15:a1:84:d2:09:53:0f:aa:31:cb:f6:93:
                    c1:b0:6e:de:7c:4b:25:77:0c:63:35:99:b5:a1:2a:
                    5a:38:0a:67:3b:22:29:b5:40:f1:16:62:14:9a:18:
                    45:0a:a0:46:28:11:c3:ae:57:b8:b8:bc:63:98:c1:
                    95:d1:74:e6:92:6e:01:60:5b:6c:95:39:20:e9:49:
                    f0:24:a6:e5:3b:3a:32:41:d0:62:6c:a1:6e:60:95:
                    54:e7:d9:c3:42:b5:d8:f0:c2:f7:dd:18:cb:73:82:
                    11:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:ED:09:B2:4D:FB:00:A2:E3:CF:CE:F6:9A:AE:D1:C8:61:30:1A:BC
            X509v3 Authority Key Identifier:
                keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:0b:3b:60:57:15:a9:7e:89:a8:a1:bb:4d:16:1c:c6:60:70:
         5e:f5:65:02:9f:32:ef:ce:c7:1b:ee:72:50:98:29:a6:1f:58:
         1c:e8:7d:97:e6:52:b8:00:75:22:98:45:92:70:3d:f6:11:e4:
         2e:00:c4:ec:26:b7:5c:16:8a:a7:f3:67:f1:cd:95:63:30:9b:
         e4:00:bd:30:e7:61:c5:a6:16:08:89:b1:d1:79:12:01:0a:83:
         bb:17:4f:ee:23:bf:5f:6f:f5:21:d7:4e:c4:3a:46:9b:3b:87:
         38:fb:68:f5:9f:28:06:6d:21:c9:41:6c:76:63:eb:b0:64:7e:
         eb:e3:e5:c0:30:4b:1f:59:7d:1c:8c:b3:66:e6:28:a4:10:b3:
         f8:2f:48:93:50:4d:67:e1:ae:1f:d3:c6:3c:1a:3f:f1:62:42:
         49:91:75:2d:f5:9c:f3:e5:61:cf:4f:4b:c6:a4:8b:ca:db:b6:
         84:0a:18:15:f6:4b:61:05:93:6d:c0:19:f0:9b:74:9f:e9:83:
         7f:3c:ab:17:74:70:54:f9:92:07:81:ef:9e:ad:34:21:6e:35:
         ac:be:35:ae:6c:0a:63:9d:88:3e:e7:48:34:e3:25:2f:07:38:
         56:19:2c:30:6b:83:9d:89:25:c4:19:96:95:58:50:e3:e2:10:
         42:82:ff:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YT81tCCxrOAxv8JMpGIDcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NjZjNmQ5YWQyMWNkNDExOGEwNDQ4MjY0ZDZmYjM1ZDU1
ZjE0YzAwHhcNMjYwNDE2MjIwMDU5WhcNMjYwNDE3MjIwMDU5WjAzMTEwLwYDVQQD
EyhmOGVkMDliMjRkZmIwMGEyZTNjZmNlZjY5YWFlZDFjODYxMzAxYWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIxLPm3sawJfB2w2nWmN2p/RND83
1kbcUO5Nod4pPnKOrMvFbbh1UTv9813uLCe44ZbAhEBSsCZhUnzNKC82d7K8eF0u
2NHKt0Q/VTg9jsf3WxCXF8QGwiXsc9EmkYu+QWI8kEMPWIs3yDLjBlumxkyiYVK1
q/iSDIqRvk1tva8FV0RNlW2LraVEHDFuUC29kE6mdt/aupEVoYTSCVMPqjHL9pPB
sG7efEsldwxjNZm1oSpaOApnOyIptUDxFmIUmhhFCqBGKBHDrle4uLxjmMGV0XTm
km4BYFtslTkg6UnwJKblOzoyQdBibKFuYJVU59nDQrXY8ML33RjLc4IRvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjtCbJN+wCi48/O9pqu0chhMBq8MB8GA1UdIwQY
MBaAFEdmxtmtIc1BGKBEgmTW+zXVXxTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80MWRjNzUtMWYzMi00ZWRkLWE5NGMt
ZjVlYzQwM2ZkYWNmLzEvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi80MWRjNzUtMWYzMi00ZWRkLWE5NGMtZjVlYzQwM2ZkYWNm
LzEvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjgs7YFcV
qX6JqKG7TRYcxmBwXvVlAp8y787HG+5yUJgpph9YHOh9l+ZSuAB1IphFknA99hHk
LgDE7Ca3XBaKp/Nn8c2VYzCb5AC9MOdhxaYWCImx0XkSAQqDuxdP7iO/X2/1IddO
xDpGmzuHOPto9Z8oBm0hyUFsdmPrsGR+6+PlwDBLH1l9HIyzZuYopBCz+C9Ik1BN
Z+GuH9PGPBo/8WJCSZF1LfWc8+Vhz09LxqSLytu2hAoYFfZLYQWTbcAZ8Jt0n+mD
fzyrF3RwVPmSB4Hvnq00IW41rL41rmwKY52IPudINOMlLwc4VhksMGuDnYklxBmW
lVhQ4+IQQoL/gA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 00:03:01 2026 by rpki-client