Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
File:                     9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft (raw, json)
Hash identifier:          s3SwI8ISRe8Iml/FWHidX2n6Rh/c/ZlIE5Q4UHW8sR8=
Subject key identifier:   4C:4E:6E:16:D1:23:BA:6C:7C:3B:02:17:AA:D6:DB:72:C7:82:4B:82
Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
Certificate issuer:       /CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Certificate serial:       019D9A3E2C3779BA94DD4799696D11F3ABCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
Manifest number:          18C5
Signing time:             Fri 17 Apr 2026 07:00:58 +0000
Manifest this update:     Fri 17 Apr 2026 07:00:58 +0000
Manifest next update:     Sat 18 Apr 2026 07:00:58 +0000
Files and hashes:         1: 9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl (hash: AYTEWx/zvq6trAYGw70gBSUjTaS98g9s0vOPaWyb5mk=)
                          2: N5fVoCVJatkBr9HD3lEC3qJcVm4.roa (hash: +gtsovlf25wXEpp6+Ig2oa80di25wrgdYStBihsirkQ=)
                          3: OHhiAeYr_lPpJG4ElFSYvT9QaKg.roa (hash: okWIP8UHkkOy4kiOXB5kYOZ+ieyxEU9RuYl0RT/ofhs=)
                          4: dCUiT81Vaet-9SHbpBx8w7tyJ7c.roa (hash: /Xlo9LK8qMOcKnWSF81eE0SjEcTSjPNFikykaWlHLh8=)
                          5: pOIHGUUuOPs9gK6e1Y9l7RwpvMs.roa (hash: SqTKikGbpOYjqCy/UCM9pe/PLZqFgP5MSdKpR876lUg=)
                          6: vMy8_qPow1_oOv83hdNqlP2PfRI.roa (hash: kd+7ZLZl3l6JtCbEUK+6GN4dP0dO+nAVwWVXURI3BzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:2c:37:79:ba:94:dd:47:99:69:6d:11:f3:ab:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a
        Validity
            Not Before: Apr 17 07:00:58 2026 GMT
            Not After : Apr 18 07:00:58 2026 GMT
        Subject: CN=4c4e6e16d123ba6c7c3b0217aad6db72c7824b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:42:56:df:a6:fc:68:ed:29:9a:08:ca:72:d9:
                    ce:7a:c8:c3:6c:5f:a8:0f:c0:54:a2:8e:b1:86:53:
                    e7:11:7c:fd:40:19:70:54:d3:46:55:91:d1:9e:d1:
                    53:29:6f:52:e3:e3:14:65:e7:58:a7:90:b6:86:d0:
                    49:ea:26:e4:e1:a4:c6:41:25:d5:49:b9:22:74:6c:
                    52:a0:b4:b6:78:fa:b3:6f:4b:6b:f5:0f:2c:6b:ff:
                    e1:40:13:d7:55:ac:bc:18:59:31:32:bb:be:ff:a9:
                    18:ce:5f:d2:a1:50:84:17:48:db:11:38:cb:e2:2c:
                    06:c8:02:b8:0c:0a:2d:60:66:15:6f:85:e4:6e:55:
                    9b:7c:57:e9:d9:86:9d:d4:68:fe:02:97:89:87:a8:
                    e7:87:60:b2:95:34:83:fe:6c:c6:11:e1:9a:d8:2f:
                    1b:60:2f:b1:16:25:15:42:70:fb:b9:37:79:f3:29:
                    59:b3:c8:c4:2a:f8:81:3a:74:23:38:d1:73:15:d5:
                    c1:fe:31:8c:61:b5:9e:b6:2c:04:d5:c8:f7:6a:70:
                    ea:78:3e:0a:ee:b0:da:85:c5:16:f0:fe:c9:32:76:
                    3d:fc:d8:a5:ec:65:6f:02:7e:5e:f2:e0:d5:e6:59:
                    94:ef:34:d2:07:5b:9e:19:fe:85:66:2a:a2:f0:bd:
                    a5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4E:6E:16:D1:23:BA:6C:7C:3B:02:17:AA:D6:DB:72:C7:82:4B:82
            X509v3 Authority Key Identifier:
                keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:92:03:46:f3:68:ea:a0:16:b2:4c:fb:d5:8a:fb:a5:e9:9b:
         4d:b0:6f:51:7b:7d:af:e4:99:56:18:ed:ab:b4:f9:49:01:45:
         17:e6:93:58:bb:ef:0b:81:0d:51:37:21:37:bb:07:1a:4a:12:
         4b:c0:e3:04:9d:ca:c9:1f:a1:85:d9:26:c0:6f:f4:89:05:57:
         3d:eb:76:3b:a7:ea:c5:6f:37:5c:ee:03:14:bc:94:3b:ba:01:
         98:e5:d4:c6:64:b3:1d:04:32:01:9f:af:1c:74:6c:fa:da:3b:
         d1:b2:f4:6f:6a:93:64:42:cf:46:e2:58:2c:2c:d0:24:b8:f7:
         c2:b5:7e:a9:97:47:b6:c2:1a:7f:96:6b:39:a6:fd:72:a9:07:
         b9:06:96:ff:6b:03:64:d4:49:05:e8:ae:b2:b3:a9:30:fc:03:
         25:cb:73:f2:7b:17:93:d3:8d:12:f5:d0:48:8d:7a:56:3c:be:
         e3:8e:04:57:73:51:45:9c:c7:0d:a3:e4:7f:a6:34:20:60:1f:
         c9:9c:b3:f6:9d:8a:b7:64:a2:97:2e:80:94:5a:e7:38:28:03:
         2b:5e:99:21:1e:cf:47:89:27:60:85:9d:a9:65:fc:d7:8d:db:
         0f:45:5d:47:2d:73:c3:a9:cf:f9:20:59:de:5f:7a:94:7b:f6:
         a2:3d:bc:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPiw3ebqU3UeZaW0R86vNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MDkwYjRkYjA2YTRkNjU5MzUxNDFiYWM5ODA5ODEyN2E4
YjhmNWEwHhcNMjYwNDE3MDcwMDU4WhcNMjYwNDE4MDcwMDU4WjAzMTEwLwYDVQQD
Eyg0YzRlNmUxNmQxMjNiYTZjN2MzYjAyMTdhYWQ2ZGI3MmM3ODI0YjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EJW36b8aO0pmgjKctnOesjDbF+o
D8BUoo6xhlPnEXz9QBlwVNNGVZHRntFTKW9S4+MUZedYp5C2htBJ6ibk4aTGQSXV
SbkidGxSoLS2ePqzb0tr9Q8sa//hQBPXVay8GFkxMru+/6kYzl/SoVCEF0jbETjL
4iwGyAK4DAotYGYVb4XkblWbfFfp2Yad1Gj+ApeJh6jnh2CylTSD/mzGEeGa2C8b
YC+xFiUVQnD7uTd58ylZs8jEKviBOnQjONFzFdXB/jGMYbWetiwE1cj3anDqeD4K
7rDahcUW8P7JMnY9/Nil7GVvAn5e8uDV5lmU7zTSB1ueGf6FZiqi8L2l3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExObhbRI7psfDsCF6rW23LHgkuCMB8GA1UdIwQY
MBaAFPYJC02wak1lk1FBusmAmBJ6i49aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWdrTFRiQnFUV1dUVVVHNnlZQ1lFbnFMajFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZGM3YWYtMmM4Yy00NTdiLWFlYjAt
NGUxZGMxNTA1MjYwLzEvOWdrTFRiQnFUV1dUVVVHNnlZQ1lFbnFMajFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yZGM3YWYtMmM4Yy00NTdiLWFlYjAtNGUxZGMxNTA1MjYw
LzEvOWdrTFRiQnFUV1dUVVVHNnlZQ1lFbnFMajFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZIDRvNo
6qAWskz71Yr7pembTbBvUXt9r+SZVhjtq7T5SQFFF+aTWLvvC4ENUTchN7sHGkoS
S8DjBJ3KyR+hhdkmwG/0iQVXPet2O6fqxW83XO4DFLyUO7oBmOXUxmSzHQQyAZ+v
HHRs+to70bL0b2qTZELPRuJYLCzQJLj3wrV+qZdHtsIaf5ZrOab9cqkHuQaW/2sD
ZNRJBeiusrOpMPwDJctz8nsXk9ONEvXQSI16Vjy+444EV3NRRZzHDaPkf6Y0IGAf
yZyz9p2Kt2Sily6AlFrnOCgDK16ZIR7PR4knYIWdqWX8143bD0VdRy1zw6nP+SBZ
3l96lHv2oj28/g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:11 2026 by rpki-client