Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
File:                     oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft (raw, json)
Hash identifier:          gM5HRnyJ9Qxmrk2RqLPeOSunPnUAk4HJ8w4XBpzySIw=
Subject key identifier:   6D:6F:B0:BE:9A:C4:52:89:BF:10:4F:73:E9:0A:D1:50:EF:51:86:57
Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
Certificate issuer:       /CN=a10c73530bb684fd569dfc432704675704183429
Certificate serial:       019D9BBE2139257F9C54424965F627FE7BE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 14:00:21 +0000
Manifest this update:     Fri 17 Apr 2026 14:00:21 +0000
Manifest next update:     Sat 18 Apr 2026 14:00:21 +0000
Files and hashes:         1: 9qy5igh9qX4Uci7bRZZV_psOu7w.roa (hash: Tnhc5d5aGwpLgFhdFa9P4ZDIL3T2P5zMzH6turPE6uU=)
                          2: fOlQP3-PfpjSE6EMsORwi3KiU_0.roa (hash: 9xJNvssU8LW9KKQFyieBw8RskBII5JpvnR6eOew6NAc=)
                          3: oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl (hash: pxPskZqot2GoOCdKcJqq2laGYAGFtIYC2XZoZMvQ3jU=)
                          4: y_vM2bxFeu3R2ZRJCgBGtdVcJNE.roa (hash: 1lKjAhubbXr/HU27nWYgH1iiL0s0e2dhdfsbjU73q04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:21:39:25:7f:9c:54:42:49:65:f6:27:fe:7b:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a10c73530bb684fd569dfc432704675704183429
        Validity
            Not Before: Apr 17 14:00:21 2026 GMT
            Not After : Apr 18 14:00:21 2026 GMT
        Subject: CN=6d6fb0be9ac45289bf104f73e90ad150ef518657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fc:00:7e:0d:3f:b9:50:e8:54:26:fe:fe:54:
                    e1:0b:7e:c6:5b:54:7a:fa:ac:6a:0c:49:79:06:c8:
                    8a:83:9e:39:dd:26:8d:e2:72:79:88:4d:49:00:82:
                    b5:b9:c6:91:7f:57:4b:5d:59:a2:f5:ca:21:32:d0:
                    a6:9d:f8:93:f7:10:8e:a9:5e:13:b3:80:a5:15:44:
                    e0:26:18:f8:bc:28:aa:51:56:f7:c8:11:53:d8:29:
                    17:98:2e:35:b2:e7:34:3e:30:ce:c5:6a:a6:6d:53:
                    b7:18:8c:8c:55:3d:e4:b8:51:c8:58:8a:2a:9b:26:
                    a8:ad:05:83:8d:1e:ff:14:03:38:4d:58:c2:d4:3c:
                    ba:f0:c0:36:0e:ba:74:cd:e9:09:99:d0:22:8b:47:
                    d5:13:57:af:60:dc:83:1f:fe:9d:33:2e:4f:9e:a7:
                    be:18:c4:68:90:d8:d7:21:58:9b:7b:74:0b:a3:dd:
                    b3:74:aa:67:2a:52:55:e3:b5:40:6b:87:23:4d:e3:
                    8d:d0:0a:f8:25:65:7b:f6:75:03:cb:72:aa:66:b7:
                    ae:27:3b:17:8e:d0:b6:32:98:7f:7c:99:a7:69:ce:
                    f3:26:bb:90:a6:90:9e:ba:3b:41:de:a8:b5:32:e1:
                    61:6f:43:7c:1f:da:e3:1a:44:76:38:98:ac:5f:cd:
                    bd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6F:B0:BE:9A:C4:52:89:BF:10:4F:73:E9:0A:D1:50:EF:51:86:57
            X509v3 Authority Key Identifier:
                keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:02:31:89:b7:42:20:9c:e9:f0:64:0f:40:19:19:b2:b4:7d:
         41:f3:9e:6a:7c:35:33:9f:0d:18:89:5f:44:f0:1a:1c:49:b6:
         a1:00:77:c4:d0:23:88:f6:f9:4c:15:47:68:9d:10:84:61:80:
         50:ca:6a:61:76:bf:92:f6:92:2d:8b:9c:49:7a:da:4e:36:fb:
         1f:4b:2d:47:a5:2a:cd:14:a7:a5:b8:6c:8a:1e:ce:12:01:4a:
         82:26:a1:3a:44:53:fd:15:29:09:86:a4:62:a3:ad:c3:7f:6f:
         56:64:60:26:fd:2d:18:99:79:f6:c9:7b:30:7a:32:87:16:10:
         4b:e0:21:53:75:d1:86:4a:5e:84:c0:b3:73:48:1b:4f:2b:a3:
         cf:f1:e9:f9:dd:0d:75:7c:b6:61:04:ec:f2:f2:b0:72:59:a3:
         2b:d3:f3:78:1b:c7:3c:ed:f7:c1:a5:72:24:56:7e:cb:6a:7f:
         14:36:73:7b:9e:ed:48:f4:5f:b0:f9:e2:0c:d4:a4:00:5c:38:
         27:15:ff:52:83:5e:da:66:c5:0c:91:66:f4:24:25:e8:cd:17:
         22:36:44:14:0a:e2:d8:42:4e:03:89:a4:34:26:d3:67:ec:c2:
         2a:f5:83:4b:0d:45:ba:e5:2d:c6:6a:4b:a1:64:88:ff:72:24:
         a9:7d:af:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bviE5JX+cVEJJZfYn/nviMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMGM3MzUzMGJiNjg0ZmQ1NjlkZmM0MzI3MDQ2NzU3MDQx
ODM0MjkwHhcNMjYwNDE3MTQwMDIxWhcNMjYwNDE4MTQwMDIxWjAzMTEwLwYDVQQD
Eyg2ZDZmYjBiZTlhYzQ1Mjg5YmYxMDRmNzNlOTBhZDE1MGVmNTE4NjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfwAfg0/uVDoVCb+/lThC37GW1R6
+qxqDEl5BsiKg5453SaN4nJ5iE1JAIK1ucaRf1dLXVmi9cohMtCmnfiT9xCOqV4T
s4ClFUTgJhj4vCiqUVb3yBFT2CkXmC41suc0PjDOxWqmbVO3GIyMVT3kuFHIWIoq
myaorQWDjR7/FAM4TVjC1Dy68MA2Drp0zekJmdAii0fVE1evYNyDH/6dMy5Pnqe+
GMRokNjXIVibe3QLo92zdKpnKlJV47VAa4cjTeON0Ar4JWV79nUDy3KqZreuJzsX
jtC2Mph/fJmnac7zJruQppCeujtB3qi1MuFhb0N8H9rjGkR2OJisX829AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1vsL6axFKJvxBPc+kK0VDvUYZXMB8GA1UdIwQY
MBaAFKEMc1MLtoT9Vp38QycEZ1cEGDQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lZDE3YzgtYWJkNC00MTRmLWJjMzAt
N2QwODI5MWE3NjYyLzEvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9lZDE3YzgtYWJkNC00MTRmLWJjMzAtN2QwODI5MWE3NjYy
LzEvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQIxibdC
IJzp8GQPQBkZsrR9QfOeanw1M58NGIlfRPAaHEm2oQB3xNAjiPb5TBVHaJ0QhGGA
UMpqYXa/kvaSLYucSXraTjb7H0stR6UqzRSnpbhsih7OEgFKgiahOkRT/RUpCYak
YqOtw39vVmRgJv0tGJl59sl7MHoyhxYQS+AhU3XRhkpehMCzc0gbTyujz/Hp+d0N
dXy2YQTs8vKwclmjK9PzeBvHPO33waVyJFZ+y2p/FDZze57tSPRfsPniDNSkAFw4
JxX/UoNe2mbFDJFm9CQl6M0XIjZEFAri2EJOA4mkNCbTZ+zCKvWDSw1FuuUtxmpL
oWSI/3IkqX2vyg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:23:40 2026 by rpki-client