Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
File:                     IxIMamyM8XJufUjjFKFszQXvhgc.mft (raw, json)
Hash identifier:          fJ878HBQG+mVn9uQ+MA1OWkBh04l0eTX9TpnTaP3rHs=
Subject key identifier:   DE:7E:BA:2B:A1:B3:80:E6:BC:C7:08:21:2F:CD:F5:55:E0:4A:4E:41
Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
Certificate issuer:       /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Certificate serial:       019D9886627C9A1F8F6D11402EAF9CCFBD53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
Manifest number:          18C6
Signing time:             Thu 16 Apr 2026 23:00:37 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:37 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:37 +0000
Files and hashes:         1: CQE3Ua-6p5IOmLVZBdiochWyjps.roa (hash: gNg92KVIAocfXOKmJRK5kb9MA5JxKznIoERJBi3d7ws=)
                          2: IeF5X1a3aG1itamyPWDSY8JYd_s.roa (hash: y2AA0T0iuCLSj/XH3EgJGp5sX2Tv0JE6WQ9K2PDxxXQ=)
                          3: IxIMamyM8XJufUjjFKFszQXvhgc.crl (hash: JkYQHd97kkeMbV1LEoKjhF9H+Egjf/LWMZqt2X7KcIo=)
                          4: KATv9TIszgZ-B1Uoi7DkR6JPCXQ.roa (hash: /5lbXOjfh+/6SdaUgfM3MyOsJ/JBXtRsEqHn8qkyRLY=)
                          5: a_bZi_JF-htWi2WNdUEbarLHqjE.roa (hash: 2XF8puYADeEdrWHojv63xz3QjBToR9sg7lU4Wxe4W+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:62:7c:9a:1f:8f:6d:11:40:2e:af:9c:cf:bd:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
        Validity
            Not Before: Apr 16 23:00:37 2026 GMT
            Not After : Apr 17 23:00:37 2026 GMT
        Subject: CN=de7eba2ba1b380e6bcc708212fcdf555e04a4e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:38:17:e2:23:26:03:50:67:67:00:44:55:e7:
                    c6:5d:00:2f:c9:b3:2a:25:21:15:a4:9b:f2:3e:a3:
                    17:02:0a:b5:2a:cb:fe:4e:01:00:d6:67:51:38:b4:
                    41:3d:a9:e0:0d:04:c6:c7:b5:ac:9c:c4:55:b5:f7:
                    2e:0a:60:9c:c1:5a:b1:90:47:52:0b:30:92:f0:21:
                    ca:b5:a0:68:f3:9e:99:f8:ca:5c:d4:ed:92:4b:d7:
                    ff:79:64:59:4a:60:d5:b5:a7:26:da:42:6b:ab:d1:
                    66:15:c7:23:6e:45:ed:f1:3f:47:f4:6a:c4:54:4a:
                    33:85:5c:b6:fc:1c:f1:2d:12:a1:25:82:aa:a8:82:
                    29:6c:b7:82:96:4a:54:ce:a3:52:1b:98:57:c9:f5:
                    e8:90:07:f6:7e:ce:a8:25:50:8d:c1:df:24:f7:af:
                    93:d6:f5:e5:d0:04:96:b1:8e:28:7b:4e:54:4e:d6:
                    af:30:34:b0:23:a1:a7:ad:c0:e9:d9:52:f9:8a:4d:
                    1e:73:fc:23:6b:6f:0d:50:6d:38:f9:23:62:55:bd:
                    71:25:07:19:01:96:46:b0:ec:e2:04:ed:e8:c9:04:
                    16:5b:99:b2:99:fc:6b:0b:12:e6:f5:f6:17:6f:5d:
                    b2:94:2e:9a:5e:ad:f8:f4:55:55:3c:52:ed:5d:1a:
                    c1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7E:BA:2B:A1:B3:80:E6:BC:C7:08:21:2F:CD:F5:55:E0:4A:4E:41
            X509v3 Authority Key Identifier:
                keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:c0:c2:32:cb:22:5e:54:4b:9e:0d:89:ef:c3:cf:27:d7:96:
         06:c3:5d:4e:6b:8d:bf:2a:ec:21:44:8a:18:75:ad:0d:7f:77:
         b9:20:fa:26:4b:3a:b9:29:e0:70:b6:36:71:a7:79:5c:0d:62:
         06:24:ae:d8:cf:7a:d6:f5:4d:d0:37:d9:67:3f:b4:85:7b:eb:
         03:ea:a6:8e:a2:f2:d0:b9:6d:15:85:f4:3b:65:59:53:50:4e:
         41:70:af:bb:a1:87:63:63:89:5f:3f:59:68:22:bc:6c:ad:13:
         c1:4d:2c:1e:bf:10:9c:4a:81:01:82:2a:63:ef:f8:e3:30:50:
         64:fa:a4:28:0f:a7:62:53:45:f1:f1:3b:e1:36:0c:3c:4b:97:
         a3:37:e2:b5:d8:d3:b4:28:9f:a4:cc:a5:05:d0:be:f1:9f:00:
         45:b9:54:91:3d:1f:40:34:6e:43:e2:4c:8b:1b:19:a6:06:bf:
         cc:43:b3:f2:15:9d:b8:e9:94:a9:d2:7c:9f:92:8b:b2:7b:9e:
         45:10:5e:34:d0:38:7b:c7:5a:cc:e4:12:08:6f:0e:30:a8:8d:
         58:1a:31:c0:f1:c3:f8:c3:12:ab:19:63:cf:7e:65:94:10:ef:
         2e:ab:c3:14:e8:cd:a8:76:37:e0:e3:78:06:ed:ea:4c:82:ab:
         50:13:6a:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YhmJ8mh+PbRFALq+cz71TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMTIwYzZhNmM4Y2YxNzI2ZTdkNDhlMzE0YTE2Y2NkMDVl
Zjg2MDcwHhcNMjYwNDE2MjMwMDM3WhcNMjYwNDE3MjMwMDM3WjAzMTEwLwYDVQQD
EyhkZTdlYmEyYmExYjM4MGU2YmNjNzA4MjEyZmNkZjU1NWUwNGE0ZTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTgX4iMmA1BnZwBEVefGXQAvybMq
JSEVpJvyPqMXAgq1Ksv+TgEA1mdROLRBPangDQTGx7WsnMRVtfcuCmCcwVqxkEdS
CzCS8CHKtaBo856Z+Mpc1O2SS9f/eWRZSmDVtacm2kJrq9FmFccjbkXt8T9H9GrE
VEozhVy2/BzxLRKhJYKqqIIpbLeClkpUzqNSG5hXyfXokAf2fs6oJVCNwd8k96+T
1vXl0ASWsY4oe05UTtavMDSwI6GnrcDp2VL5ik0ec/wja28NUG04+SNiVb1xJQcZ
AZZGsOziBO3oyQQWW5mymfxrCxLm9fYXb12ylC6aXq349FVVPFLtXRrBoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5+uiuhs4DmvMcIIS/N9VXgSk5BMB8GA1UdIwQY
MBaAFCMSDGpsjPFybn1I4xShbM0F74YHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXhJTWFteU04WEp1ZlVqakZLRnN6UVh2aGdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xZmFkY2UtN2ZhNy00YzRjLWJkZWQt
ZTRiNzAyZjE2MTE2LzEvSXhJTWFteU04WEp1ZlVqakZLRnN6UVh2aGdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8xZmFkY2UtN2ZhNy00YzRjLWJkZWQtZTRiNzAyZjE2MTE2
LzEvSXhJTWFteU04WEp1ZlVqakZLRnN6UVh2aGdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8DCMssi
XlRLng2J78PPJ9eWBsNdTmuNvyrsIUSKGHWtDX93uSD6Jks6uSngcLY2cad5XA1i
BiSu2M961vVN0DfZZz+0hXvrA+qmjqLy0LltFYX0O2VZU1BOQXCvu6GHY2OJXz9Z
aCK8bK0TwU0sHr8QnEqBAYIqY+/44zBQZPqkKA+nYlNF8fE74TYMPEuXozfitdjT
tCifpMylBdC+8Z8ARblUkT0fQDRuQ+JMixsZpga/zEOz8hWduOmUqdJ8n5KLsnue
RRBeNNA4e8dazOQSCG8OMKiNWBoxwPHD+MMSqxljz35llBDvLqvDFOjNqHY34ON4
Bu3qTIKrUBNqeA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:06 2026 by rpki-client