Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
File:                     ljUcRzoWujj6tNUXBZIl4PEzyL8.mft (raw, json)
Hash identifier:          F6yrpn9McH+VtM3EMzTXxy6Taf3xpyX4rNMfg7BPXiE=
Subject key identifier:   3C:07:CC:80:93:D1:BA:4C:59:9D:CA:02:57:FC:07:5F:1A:2A:6E:FF
Authority key identifier: 96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
Certificate issuer:       /CN=96351c473a16ba38fab4d517059225e0f133c8bf
Certificate serial:       019D99D026BF82D6281A8274E24CB977D4FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
Manifest number:          184E
Signing time:             Fri 17 Apr 2026 05:00:48 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:48 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:48 +0000
Files and hashes:         1: VTlRcNnwp5gbAntgQ6nLMgU1MSA.roa (hash: ngugrS9FOqnMnHH73cGn9uhwoCPbokxFByaxLpb4tLY=)
                          2: WMqtzsECKWwXCJIg2DonPUbpFnw.roa (hash: 5GfXNj8pVFfA55H0iZRmskGZ4d2ccQFECebszaJAMv4=)
                          3: ljUcRzoWujj6tNUXBZIl4PEzyL8.crl (hash: UGSkdupc6pIpQuQi4g2U7ZjXOelOTm72FEOHm1t6q2M=)
                          4: moNBxLDkr7hyNWiWsQQXFSA8f68.roa (hash: Xbv2BjhxEJT++H7rJ3ZuNWYMKN46NfqnW7okEukq0/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:26:bf:82:d6:28:1a:82:74:e2:4c:b9:77:d4:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96351c473a16ba38fab4d517059225e0f133c8bf
        Validity
            Not Before: Apr 17 05:00:48 2026 GMT
            Not After : Apr 18 05:00:48 2026 GMT
        Subject: CN=3c07cc8093d1ba4c599dca0257fc075f1a2a6eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:68:01:b7:59:fd:60:fa:dd:68:ab:67:d8:af:
                    5b:74:23:e6:6e:b4:80:f8:65:7d:c6:58:69:76:2b:
                    b0:ec:99:b1:9a:d2:a0:47:fd:30:bf:04:42:96:14:
                    b5:99:d9:3a:3a:0f:85:88:c4:a0:24:28:0e:01:1f:
                    42:73:de:52:66:56:18:29:f7:03:63:35:e4:98:6a:
                    31:79:68:53:31:c3:7f:3c:c6:88:4e:1f:63:22:db:
                    82:5b:fc:32:cd:da:4d:47:d6:be:6a:a1:01:61:b6:
                    c1:42:14:f1:d9:de:9c:da:73:f7:19:06:04:49:88:
                    72:d4:1c:ff:39:35:ed:6d:1a:02:d3:7d:aa:e2:b9:
                    42:bf:1b:b0:d3:94:84:5e:6e:e9:3d:d5:2b:76:b0:
                    b4:49:b2:18:76:23:8b:d0:60:0f:a7:97:4b:5b:31:
                    b5:fb:94:28:e0:a0:a2:a0:fb:6f:80:6a:63:9b:09:
                    8c:0f:5d:f7:c4:ec:9c:1a:25:61:5e:99:20:29:ed:
                    58:05:6a:f3:11:23:07:2b:c0:54:4f:13:10:90:28:
                    58:62:07:48:fe:8d:7c:ca:ae:25:89:dd:af:c7:b8:
                    66:e9:e8:9b:67:82:d5:c6:2c:99:30:bf:14:c8:18:
                    a8:98:11:c6:c5:30:e1:4a:9e:70:a9:23:1b:f1:03:
                    cb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:07:CC:80:93:D1:BA:4C:59:9D:CA:02:57:FC:07:5F:1A:2A:6E:FF
            X509v3 Authority Key Identifier:
                keyid:96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:3e:e7:f5:0f:4b:00:41:92:22:39:e4:99:d4:88:01:6a:15:
         ec:ed:f4:73:fc:1a:61:55:8f:e9:02:64:38:a5:95:98:48:4d:
         5c:8a:06:2c:da:4f:38:40:8b:42:e6:27:11:2a:82:eb:56:ad:
         3a:c1:18:78:ec:4d:3c:16:af:f0:14:47:c0:1e:d9:a0:49:8e:
         8e:3b:a9:c5:b5:88:90:dc:9a:85:e5:41:96:61:f2:8a:a0:c7:
         40:05:cf:f7:cb:30:96:8d:51:2f:59:d2:cb:fb:2e:43:90:39:
         b5:43:b5:38:73:b6:b7:d8:33:36:c6:b5:68:80:a9:40:d1:cc:
         93:ab:60:78:61:23:66:2c:c4:fc:12:68:3c:82:59:80:f8:c0:
         98:9c:6c:07:44:f4:cd:a1:12:1c:a3:28:d5:93:16:9a:84:2d:
         d9:5d:55:14:b1:ad:5b:36:30:7b:1d:5f:a2:b6:ff:dd:0f:cd:
         88:f9:3e:15:46:bd:8f:af:7d:94:a1:13:8b:b8:82:20:09:16:
         83:dd:0e:d3:45:0d:8f:dc:55:04:14:ed:4e:27:93:c8:b7:4a:
         dd:26:24:d0:9b:ad:db:ba:7c:75:75:f9:e0:f1:8a:ef:e2:f4:
         96:8b:9f:4c:5e:e9:f9:99:b9:64:2d:04:78:52:35:6b:27:ab:
         ea:39:b8:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0Ca/gtYoGoJ04ky5d9T/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MzUxYzQ3M2ExNmJhMzhmYWI0ZDUxNzA1OTIyNWUwZjEz
M2M4YmYwHhcNMjYwNDE3MDUwMDQ4WhcNMjYwNDE4MDUwMDQ4WjAzMTEwLwYDVQQD
EygzYzA3Y2M4MDkzZDFiYTRjNTk5ZGNhMDI1N2ZjMDc1ZjFhMmE2ZWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2gBt1n9YPrdaKtn2K9bdCPmbrSA
+GV9xlhpdiuw7JmxmtKgR/0wvwRClhS1mdk6Og+FiMSgJCgOAR9Cc95SZlYYKfcD
YzXkmGoxeWhTMcN/PMaITh9jItuCW/wyzdpNR9a+aqEBYbbBQhTx2d6c2nP3GQYE
SYhy1Bz/OTXtbRoC032q4rlCvxuw05SEXm7pPdUrdrC0SbIYdiOL0GAPp5dLWzG1
+5Qo4KCioPtvgGpjmwmMD133xOycGiVhXpkgKe1YBWrzESMHK8BUTxMQkChYYgdI
/o18yq4lid2vx7hm6eibZ4LVxiyZML8UyBiomBHGxTDhSp5wqSMb8QPLbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwHzICT0bpMWZ3KAlf8B18aKm7/MB8GA1UdIwQY
MBaAFJY1HEc6Fro4+rTVFwWSJeDxM8i/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGpVY1J6b1d1amo2dE5VWEJaSWw0UEV6eUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9hNTM3YzAtZmQ0Yi00M2I2LTg4OTEt
ZDU3MzczYmY1MTYyLzEvbGpVY1J6b1d1amo2dE5VWEJaSWw0UEV6eUw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9hNTM3YzAtZmQ0Yi00M2I2LTg4OTEtZDU3MzczYmY1MTYy
LzEvbGpVY1J6b1d1amo2dE5VWEJaSWw0UEV6eUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfz7n9Q9L
AEGSIjnkmdSIAWoV7O30c/waYVWP6QJkOKWVmEhNXIoGLNpPOECLQuYnESqC61at
OsEYeOxNPBav8BRHwB7ZoEmOjjupxbWIkNyaheVBlmHyiqDHQAXP98swlo1RL1nS
y/suQ5A5tUO1OHO2t9gzNsa1aICpQNHMk6tgeGEjZizE/BJoPIJZgPjAmJxsB0T0
zaESHKMo1ZMWmoQt2V1VFLGtWzYwex1forb/3Q/NiPk+FUa9j699lKETi7iCIAkW
g90O00UNj9xVBBTtTieTyLdK3SYk0Jut27p8dXX54PGK7+L0loufTF7p+Zm5ZC0E
eFI1ayer6jm43g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:36:55 2026 by rpki-client