Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
File:                     se4yDfBGSHfVF0XjFCMbVcg7aEU.mft (raw, json)
Hash identifier:          QpvC/ETGJRQn8lFe389Xpej2UnscWVG3QnCBxWYz7EU=
Subject key identifier:   67:F3:19:15:F7:97:00:9D:F9:1F:F0:BF:BC:CA:EC:3E:26:26:78:49
Authority key identifier: B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45
Certificate issuer:       /CN=b1ee320df0464877d51745e314231b55c83b6845
Certificate serial:       019D9A073ED0E60BAC98A10BF040BE123AC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
Manifest number:          1855
Signing time:             Fri 17 Apr 2026 06:00:59 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:59 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:59 +0000
Files and hashes:         1: ZJ6WRtkzwu8v_Ad_XX8o7gcNNmU.roa (hash: H8SukrLououOm9b8DOSj2scPjyGTdIoNUh4OD9s1VW4=)
                          2: se4yDfBGSHfVF0XjFCMbVcg7aEU.crl (hash: ktuAvUS0xS2rAqAFDdObqrtPPK2j3eXa5T3YwNO11DY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:3e:d0:e6:0b:ac:98:a1:0b:f0:40:be:12:3a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1ee320df0464877d51745e314231b55c83b6845
        Validity
            Not Before: Apr 17 06:00:59 2026 GMT
            Not After : Apr 18 06:00:59 2026 GMT
        Subject: CN=67f31915f797009df91ff0bfbccaec3e26267849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:e0:63:40:be:cf:74:6e:17:47:6c:5e:93:
                    fe:fe:48:b9:cd:98:c7:cf:bb:f4:42:e1:13:96:1a:
                    79:7b:96:26:5f:cb:20:9e:2b:79:51:6d:20:a6:df:
                    06:65:4b:f8:d8:fb:cd:20:e5:ad:15:38:f2:6d:9f:
                    8d:6a:f0:58:0d:ae:a4:7a:d8:ff:b7:c3:5b:6d:17:
                    fe:9e:d2:c9:4c:11:ea:64:c2:fc:65:99:13:86:a1:
                    e0:e9:65:87:60:c0:c9:39:33:fd:7a:3f:b9:64:43:
                    8f:48:9e:95:26:c4:d9:15:d9:81:25:68:f4:5d:4d:
                    8e:e7:8f:5b:70:21:be:46:7f:e2:ac:f5:1f:dd:d5:
                    09:a5:9a:94:25:35:91:0e:8a:78:0c:af:03:b9:5f:
                    0c:db:02:40:29:ee:d8:db:22:3c:4a:c5:d8:1f:7d:
                    3f:71:89:05:67:3a:1c:2e:2e:57:9c:cc:b2:8e:54:
                    c8:69:92:4f:47:cf:0a:63:92:4b:a7:71:d6:97:4e:
                    a0:b9:ae:80:94:ed:ce:3c:5d:ae:de:72:90:ce:71:
                    27:aa:4d:0b:15:df:36:3b:39:e6:91:2e:e0:ef:02:
                    4d:37:d3:1f:63:98:06:49:9f:8b:10:00:ac:31:82:
                    55:7b:b1:56:01:27:14:53:22:8a:a6:ee:56:ee:a0:
                    ab:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F3:19:15:F7:97:00:9D:F9:1F:F0:BF:BC:CA:EC:3E:26:26:78:49
            X509v3 Authority Key Identifier:
                keyid:B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:14:66:d2:45:6b:35:4e:72:54:cf:ba:4f:f9:e8:32:2e:b9:
         02:f5:91:e6:84:24:dc:9b:c3:50:05:58:22:87:86:a7:bc:9d:
         c2:75:77:d2:ef:90:88:eb:8c:36:96:96:44:83:5d:4b:1b:d3:
         14:89:c0:3f:8c:83:7b:5b:46:84:d0:d1:a5:11:a9:fb:9d:8b:
         3c:59:97:f1:64:33:fd:35:ba:24:87:be:f2:84:2b:af:bb:a8:
         c6:50:ac:db:04:7e:d9:f9:0b:51:60:38:a4:a7:07:78:66:c8:
         74:98:f0:52:6e:56:c5:d6:0a:90:a3:55:f8:b6:b3:62:6b:cb:
         f7:c7:fe:c4:07:82:80:b2:bc:5a:4e:82:3a:76:3b:5d:af:c5:
         36:54:f6:07:b4:a6:c8:4e:5a:ca:77:bb:5d:12:bb:bf:af:db:
         20:82:3d:40:26:bc:03:9f:5c:ea:17:8b:f2:f2:f7:87:17:99:
         64:93:88:e4:7e:a5:37:30:ad:8a:a9:1c:b6:52:ce:b6:a4:62:
         67:66:c6:e8:37:f7:e8:34:b9:c5:88:7f:51:0a:1b:a0:b4:fc:
         79:aa:88:e0:c3:55:fe:30:3a:fa:86:c5:c6:02:9d:0f:9f:71:
         59:df:f5:b3:78:55:68:27:81:82:82:f7:50:2a:e1:46:27:6c:
         bf:c9:d2:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBz7Q5gusmKEL8EC+EjrFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZWUzMjBkZjA0NjQ4NzdkNTE3NDVlMzE0MjMxYjU1Yzgz
YjY4NDUwHhcNMjYwNDE3MDYwMDU5WhcNMjYwNDE4MDYwMDU5WjAzMTEwLwYDVQQD
Eyg2N2YzMTkxNWY3OTcwMDlkZjkxZmYwYmZiY2NhZWMzZTI2MjY3ODQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn/gY0C+z3RuF0dsXpP+/ki5zZjH
z7v0QuETlhp5e5YmX8sgnit5UW0gpt8GZUv42PvNIOWtFTjybZ+NavBYDa6ketj/
t8NbbRf+ntLJTBHqZML8ZZkThqHg6WWHYMDJOTP9ej+5ZEOPSJ6VJsTZFdmBJWj0
XU2O549bcCG+Rn/irPUf3dUJpZqUJTWRDop4DK8DuV8M2wJAKe7Y2yI8SsXYH30/
cYkFZzocLi5XnMyyjlTIaZJPR88KY5JLp3HWl06gua6AlO3OPF2u3nKQznEnqk0L
Fd82OznmkS7g7wJNN9MfY5gGSZ+LEACsMYJVe7FWAScUUyKKpu5W7qCr8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfzGRX3lwCd+R/wv7zK7D4mJnhJMB8GA1UdIwQY
MBaAFLHuMg3wRkh31RdF4xQjG1XIO2hFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2U0eURmQkdTSGZWRjBYakZDTWJWY2c3YUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wM2I0MDQtMmY2NC00YzdjLWFjNmMt
MjZlYjBjNjI5MGJhLzEvc2U0eURmQkdTSGZWRjBYakZDTWJWY2c3YUVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wM2I0MDQtMmY2NC00YzdjLWFjNmMtMjZlYjBjNjI5MGJh
LzEvc2U0eURmQkdTSGZWRjBYakZDTWJWY2c3YUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohRm0kVr
NU5yVM+6T/noMi65AvWR5oQk3JvDUAVYIoeGp7ydwnV30u+QiOuMNpaWRINdSxvT
FInAP4yDe1tGhNDRpRGp+52LPFmX8WQz/TW6JIe+8oQrr7uoxlCs2wR+2fkLUWA4
pKcHeGbIdJjwUm5WxdYKkKNV+LazYmvL98f+xAeCgLK8Wk6COnY7Xa/FNlT2B7Sm
yE5ayne7XRK7v6/bIII9QCa8A59c6heL8vL3hxeZZJOI5H6lNzCtiqkctlLOtqRi
Z2bG6Df36DS5xYh/UQoboLT8eaqI4MNV/jA6+obFxgKdD59xWd/1s3hVaCeBgoL3
UCrhRidsv8nSMA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:14 2026 by rpki-client