Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
File:                     sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft (raw, json)
Hash identifier:          OAXp8jkqjXP0ws92AZQQRvTPsSP2dBo5XptbeLnCBnM=
Subject key identifier:   C6:79:C5:11:49:07:E7:75:80:05:30:45:65:05:1B:D0:D4:B5:62:B4
Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
Certificate issuer:       /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Certificate serial:       019D9998DA3C6AD8C994E2CA2DA631FCB9A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 04:00:24 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:24 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:24 +0000
Files and hashes:         1: M5qVt7ae34kVphAk4iYjA_sXTVA.roa (hash: DNenw0maSTGL31Gai50q1uXUB6YmtJsec2G1+61e/LM=)
                          2: sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl (hash: pS2eBRm0FoPgwQed5Mgi+HM4ThnLFZ4JXCHaTHxKgo0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:98:da:3c:6a:d8:c9:94:e2:ca:2d:a6:31:fc:b9:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
        Validity
            Not Before: Apr 17 04:00:24 2026 GMT
            Not After : Apr 18 04:00:24 2026 GMT
        Subject: CN=c679c5114907e7758005304565051bd0d4b562b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1c:9b:46:81:c9:68:b7:c8:4e:c2:a9:04:f5:
                    33:48:2b:ac:fe:16:a0:cd:60:54:d1:5d:66:a2:87:
                    8b:d3:00:c4:26:ec:be:de:d8:ed:59:26:e8:89:d1:
                    cb:06:e7:17:b4:d6:40:b5:cb:be:51:ad:c4:ec:05:
                    a1:f8:3a:90:2d:82:bd:3b:ee:0a:67:a7:b9:13:e6:
                    13:b7:26:43:43:95:05:1c:34:31:b6:33:56:b4:27:
                    6e:1d:56:10:59:bf:2c:a0:11:ac:ca:ac:74:1b:73:
                    cf:d7:15:ca:a8:05:48:12:36:09:84:e9:10:d4:cc:
                    06:8a:e9:e6:ce:27:f4:be:2e:56:e1:20:74:97:49:
                    94:49:a9:50:24:91:db:4d:78:a4:b0:bb:bd:8b:e9:
                    a4:d7:0b:92:2d:ba:c1:17:62:9f:eb:51:2b:6a:54:
                    af:88:81:2b:5d:f9:ba:58:6f:65:60:c4:21:78:42:
                    6e:61:7f:9e:40:1d:b0:1f:74:83:b3:fe:fd:d6:80:
                    5d:5f:25:81:9c:9e:ff:2d:a4:0f:87:8c:42:7a:4e:
                    b0:42:eb:c2:ac:11:9e:5e:a9:22:e6:dd:89:eb:d4:
                    f3:92:82:2c:f8:e4:ad:55:ae:3f:97:6d:1f:70:99:
                    9a:e7:71:51:0f:0a:7b:36:21:2b:0e:db:5e:44:59:
                    02:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:79:C5:11:49:07:E7:75:80:05:30:45:65:05:1B:D0:D4:B5:62:B4
            X509v3 Authority Key Identifier:
                keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:28:3c:a8:66:4a:ee:9f:96:0e:fb:57:46:e5:7f:5a:9e:4f:
         16:05:4f:47:5f:e9:3e:33:dd:63:71:27:89:1a:5a:8c:4b:5b:
         1b:fa:63:0d:7e:d6:a8:99:71:e4:85:04:93:4c:71:15:d9:9e:
         1a:c5:e0:75:38:c3:03:26:e2:fc:c1:e8:ca:9f:2e:76:8b:f9:
         ce:a8:15:04:97:0a:9c:d7:5a:3b:31:29:2f:ec:c5:86:61:21:
         43:32:11:75:4a:06:0a:19:71:31:3b:e2:3e:82:c2:bd:af:f9:
         5e:e0:36:d8:50:b7:4d:dc:b1:a1:45:1d:11:07:15:1e:5e:0a:
         75:3b:2d:11:70:eb:46:ef:fc:97:f2:c5:9f:39:1a:29:83:ee:
         8f:67:89:c4:6c:e9:5f:fa:26:f1:b3:f1:a7:ff:ff:7b:3a:6c:
         4f:00:6d:6d:55:77:dc:9e:7f:f3:a3:87:81:38:04:f5:ce:f5:
         83:32:8f:8e:60:1d:49:15:fc:da:bc:17:21:19:6d:7e:06:44:
         23:b7:af:35:39:bf:b4:1d:64:d1:ed:03:42:01:51:2c:7c:3b:
         fe:88:4d:8d:f7:43:ed:f3:7b:67:d2:3e:d1:b3:1f:ed:3c:1c:
         89:02:57:2a:cd:ce:f6:5c:b7:07:f2:48:34:94:b7:c2:e2:14:
         06:21:04:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmNo8atjJlOLKLaYx/LmmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMmYwYzJhMmE1MTI3NWJlZTI0OTNhNTY1NmVjZjFiNjEy
ZjEyMjYwHhcNMjYwNDE3MDQwMDI0WhcNMjYwNDE4MDQwMDI0WjAzMTEwLwYDVQQD
EyhjNjc5YzUxMTQ5MDdlNzc1ODAwNTMwNDU2NTA1MWJkMGQ0YjU2MmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRybRoHJaLfITsKpBPUzSCus/hag
zWBU0V1mooeL0wDEJuy+3tjtWSboidHLBucXtNZAtcu+Ua3E7AWh+DqQLYK9O+4K
Z6e5E+YTtyZDQ5UFHDQxtjNWtCduHVYQWb8soBGsyqx0G3PP1xXKqAVIEjYJhOkQ
1MwGiunmzif0vi5W4SB0l0mUSalQJJHbTXiksLu9i+mk1wuSLbrBF2Kf61EralSv
iIErXfm6WG9lYMQheEJuYX+eQB2wH3SDs/791oBdXyWBnJ7/LaQPh4xCek6wQuvC
rBGeXqki5t2J69TzkoIs+OStVa4/l20fcJma53FRDwp7NiErDtteRFkCkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZ5xRFJB+d1gAUwRWUFG9DUtWK0MB8GA1UdIwQY
MBaAFLAvDCoqUSdb7iSTpWVuzxthLxImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNTkxNjItN2JkMS00YjhhLWE5ZTMt
MjFmZjExMjBmYjcyLzEvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jNTkxNjItN2JkMS00YjhhLWE5ZTMtMjFmZjExMjBmYjcy
LzEvc0M4TUtpcFJKMXZ1SkpPbFpXN1BHMkV2RWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyg8qGZK
7p+WDvtXRuV/Wp5PFgVPR1/pPjPdY3EniRpajEtbG/pjDX7WqJlx5IUEk0xxFdme
GsXgdTjDAybi/MHoyp8udov5zqgVBJcKnNdaOzEpL+zFhmEhQzIRdUoGChlxMTvi
PoLCva/5XuA22FC3TdyxoUUdEQcVHl4KdTstEXDrRu/8l/LFnzkaKYPuj2eJxGzp
X/om8bPxp///ezpsTwBtbVV33J5/86OHgTgE9c71gzKPjmAdSRX82rwXIRltfgZE
I7evNTm/tB1k0e0DQgFRLHw7/ohNjfdD7fN7Z9I+0bMf7TwciQJXKs3O9ly3B/JI
NJS3wuIUBiEExg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:50:54 2026 by rpki-client