Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
File:                     vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft (raw, json)
Hash identifier:          WGd0pQvvth+/hLhY8MCuwdNv+MukWPgGq9Uc9DfPNbY=
Subject key identifier:   88:34:87:53:AC:0A:2D:23:50:F4:6E:34:76:38:C7:E9:CC:02:5D:65
Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
Certificate issuer:       /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Certificate serial:       019D9BBEDE677309FA141CD34C7D986FFFBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 14:01:10 +0000
Manifest this update:     Fri 17 Apr 2026 14:01:10 +0000
Manifest next update:     Sat 18 Apr 2026 14:01:10 +0000
Files and hashes:         1: DJb3q9QP0vjgpfyVEHNjpwFGK0o.roa (hash: J9f3+3+bZCVO4pdaXJk73MjSTfHDh7PUS0/X3EifbYI=)
                          2: FVHHHiStYazQcaMR-6kWtYOxbzs.roa (hash: pJULO84lcrM/sFgnoFFGZDLPLbAu3bVxvObeTRPi3ds=)
                          3: H8dMsf8QtugmggF2iMoFflOsZM8.roa (hash: PZPW581Oe5q4Dva6P0wu0eLhLStSSj+Ttl8NhZ/xkvU=)
                          4: Y4k6hZFhvCoHiB7h05680H5APKM.roa (hash: BGmp+q30ZAASUmPPXR43EIv6VKKM1vrOmCdZ6rG6eeg=)
                          5: ZX0valTvB4XUFb2t2MvkLevuS6o.roa (hash: mqjFEPpJKWkFc8eYY9RB4MA5DD2L0uPMPEokQ0eKgy4=)
                          6: eGujzhF-Jb5JLWOfYhW-VM1JmXk.roa (hash: S3PsF2cp96qNKXQpWngG/gA+/rgdkiompOBnIfGv5D8=)
                          7: vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl (hash: mSMINX5G0MuLcqEdWSFfOCJtjCKcN/D1kTEvPACBLro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:de:67:73:09:fa:14:1c:d3:4c:7d:98:6f:ff:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
        Validity
            Not Before: Apr 17 14:01:10 2026 GMT
            Not After : Apr 18 14:01:10 2026 GMT
        Subject: CN=88348753ac0a2d2350f46e347638c7e9cc025d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:83:b4:39:e6:a8:34:b3:fe:42:2e:1d:6c:9f:
                    16:3d:ad:65:3d:7d:09:b1:4f:f2:d6:95:77:b4:6e:
                    e6:4e:19:38:5c:0e:fe:6f:91:5c:63:23:5c:fe:4b:
                    79:8a:b2:8d:83:7c:9c:5d:89:6e:7f:47:58:fe:ff:
                    23:94:64:b5:3e:9c:63:19:57:e6:c8:80:f6:db:39:
                    27:d0:9a:70:99:25:42:09:65:d4:81:06:50:77:4a:
                    e0:64:64:de:b7:e9:c9:a5:3f:e5:68:1e:db:1a:42:
                    d1:7d:dd:5d:43:1d:c9:d2:39:7a:52:96:a6:08:8b:
                    cb:79:d5:3a:9f:52:f9:b6:3f:8c:b5:b7:d2:86:6c:
                    d0:1a:b8:b8:4b:9f:95:16:3f:ff:82:4f:33:29:3b:
                    78:7d:e0:49:da:85:75:12:85:87:20:98:23:94:7c:
                    71:15:32:81:f8:17:d5:86:ce:1f:0f:94:bb:1d:c8:
                    a0:4b:2a:6e:eb:79:d6:46:71:31:3b:c8:46:cf:a6:
                    67:fe:62:66:45:1b:0a:93:f9:24:d4:3f:b4:6f:37:
                    fa:ba:d0:61:81:22:96:1c:1a:f8:4a:fe:71:c3:e4:
                    db:36:cd:eb:94:a0:5a:05:5c:cb:8d:7d:5d:f6:a4:
                    33:64:4d:ec:43:bb:87:3a:2b:42:86:c0:7a:33:15:
                    7c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:34:87:53:AC:0A:2D:23:50:F4:6E:34:76:38:C7:E9:CC:02:5D:65
            X509v3 Authority Key Identifier:
                keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:25:9a:56:52:9c:ec:22:cc:bb:83:b0:67:8d:5c:89:eb:54:
         ec:a0:5f:fe:dc:28:a8:12:6e:f1:74:5a:fd:a2:ee:3d:70:d3:
         aa:b6:10:54:27:2e:7b:58:27:46:df:14:f4:47:5d:40:6d:5b:
         ae:b6:27:8e:0b:c3:0e:fb:eb:05:af:e9:e9:cc:7d:ab:46:54:
         78:3d:ae:49:ff:c6:0c:82:df:18:b1:19:ec:76:38:ff:85:93:
         b7:1b:7e:44:ca:37:65:77:ab:4c:a6:91:59:45:2a:25:f6:cf:
         e8:00:43:31:20:fd:18:1c:73:27:7a:14:b3:78:22:4e:0e:b1:
         13:d4:31:d0:07:6e:2e:1e:f9:a9:83:7d:35:20:85:19:e8:a9:
         60:09:57:b9:59:10:31:6c:a6:e1:f8:c0:db:47:dd:7a:ca:74:
         ae:35:13:01:84:e6:02:a0:ec:30:0f:88:48:98:5a:fe:70:38:
         b7:35:4b:43:78:c4:1a:80:b3:21:57:1f:94:37:13:45:6d:3e:
         51:f7:d0:9f:3d:2d:81:5a:51:0e:5f:9e:2e:4d:76:90:6a:b3:
         36:2b:4e:34:c4:95:bc:d7:71:ce:63:13:e7:15:ab:a3:6b:06:
         96:19:50:38:d1:46:a4:ba:11:e9:ba:73:f0:01:44:9e:c3:f3:
         94:6f:ef:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvt5ncwn6FBzTTH2Yb/+8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjY2U1OTA3MTFhZTdmY2IwMTZlZWI3Mzc2YjBhN2ZjNzY2
MWNiMTMwHhcNMjYwNDE3MTQwMTEwWhcNMjYwNDE4MTQwMTEwWjAzMTEwLwYDVQQD
Eyg4ODM0ODc1M2FjMGEyZDIzNTBmNDZlMzQ3NjM4YzdlOWNjMDI1ZDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIO0OeaoNLP+Qi4dbJ8WPa1lPX0J
sU/y1pV3tG7mThk4XA7+b5FcYyNc/kt5irKNg3ycXYluf0dY/v8jlGS1PpxjGVfm
yID22zkn0JpwmSVCCWXUgQZQd0rgZGTet+nJpT/laB7bGkLRfd1dQx3J0jl6Upam
CIvLedU6n1L5tj+MtbfShmzQGri4S5+VFj//gk8zKTt4feBJ2oV1EoWHIJgjlHxx
FTKB+BfVhs4fD5S7HcigSypu63nWRnExO8hGz6Zn/mJmRRsKk/kk1D+0bzf6utBh
gSKWHBr4Sv5xw+TbNs3rlKBaBVzLjX1d9qQzZE3sQ7uHOitChsB6MxV88QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIg0h1OsCi0jUPRuNHY4x+nMAl1lMB8GA1UdIwQY
MBaAFLzOWQcRrn/LAW7rc3awp/x2YcsTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk01WkJ4R3VmOHNCYnV0emRyQ25fSFpoeXhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9hYzZiOTEtZWRhZi00NDg2LTkzNGUt
MDVkYjQ5N2FjNDU1LzEvdk01WkJ4R3VmOHNCYnV0emRyQ25fSFpoeXhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9hYzZiOTEtZWRhZi00NDg2LTkzNGUtMDVkYjQ5N2FjNDU1
LzEvdk01WkJ4R3VmOHNCYnV0emRyQ25fSFpoeXhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIiWaVlKc
7CLMu4OwZ41cietU7KBf/twoqBJu8XRa/aLuPXDTqrYQVCcue1gnRt8U9EddQG1b
rrYnjgvDDvvrBa/p6cx9q0ZUeD2uSf/GDILfGLEZ7HY4/4WTtxt+RMo3ZXerTKaR
WUUqJfbP6ABDMSD9GBxzJ3oUs3giTg6xE9Qx0AduLh75qYN9NSCFGeipYAlXuVkQ
MWym4fjA20fdesp0rjUTAYTmAqDsMA+ISJha/nA4tzVLQ3jEGoCzIVcflDcTRW0+
UffQnz0tgVpRDl+eLk12kGqzNitONMSVvNdxzmMT5xWro2sGlhlQONFGpLoR6bpz
8AFEnsPzlG/vtA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:57:48 2026 by rpki-client