Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
File:                     9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft (raw, json)
Hash identifier:          4Cm22plZeuJZjN1c5Y7UAg0GFYGVd2jz692nkv2e+Bc=
Subject key identifier:   F6:D7:8D:C9:CF:1E:FE:88:B5:C5:0F:E2:FA:FC:74:F9:CD:4F:1D:03
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Certificate issuer:       /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial:       019D99624AA9DCB6B6F8585A3CBF0A7D5E69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
Manifest number:          18C9
Signing time:             Fri 17 Apr 2026 03:00:48 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:48 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:48 +0000
Files and hashes:         1: 8ki6p7N4UmEmV-0NazqEv7cAQKc.roa (hash: Q0BUMMV+0mfUnsBWl6XxVsO5hGuTsx5iHlZ2d9i6cbo=)
                          2: 9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl (hash: s4uOmXxwX3Ab8i+C3Hw6WX7C8/F7MJOA5Wq42Ri4vF4=)
                          3: Njus34_tWTQbMZlE1tRpeQUdH2I.roa (hash: 87ImyGsbG7v1MN92b3+FnhDyYHAWQQrZK7ULWDILgcQ=)
                          4: _DgxgPBMn4GEtr1HFV4lxED-jk0.roa (hash: 7MO54lxduq+XFWhLRW9Dq64qSqZFXeJN+DNM88s/Oz4=)
                          5: bSC7RVTqh-EvKl7Z-N-MYagSTB0.roa (hash: fXQllw8VZVYHGOPsqntwHwX5QpNIrlOnadEQ+JteA+I=)
                          6: jI_ogoD6SCROAfC2uF5kFRHPxqA.roa (hash: sveu3znN5dPwYIjmbfsqGbK76GO+Tvbu31qn7+7Nv0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:4a:a9:dc:b6:b6:f8:58:5a:3c:bf:0a:7d:5e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
        Validity
            Not Before: Apr 17 03:00:48 2026 GMT
            Not After : Apr 18 03:00:48 2026 GMT
        Subject: CN=f6d78dc9cf1efe88b5c50fe2fafc74f9cd4f1d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c8:33:d9:5b:80:77:3d:fb:96:44:b4:16:73:
                    0a:60:a9:b8:9f:b3:3d:df:09:93:4b:a8:57:86:b3:
                    3f:db:5f:ac:af:e4:61:63:a8:81:22:fa:31:f6:e9:
                    d0:64:bb:94:77:49:79:5b:ba:27:db:99:22:e6:fc:
                    ee:a2:40:a7:0b:2c:b5:a3:58:1e:48:4a:04:0c:44:
                    fd:9e:8e:45:87:fa:23:8a:42:9d:3a:6e:25:5e:ac:
                    c1:7b:5b:2c:58:bb:a1:b7:b6:f3:da:0d:46:ba:83:
                    86:df:d6:aa:55:4d:14:76:38:7c:f9:19:cc:9d:75:
                    64:d9:81:8b:fc:b0:3d:d4:ac:5a:a8:4f:c2:2f:79:
                    f4:59:c7:ce:2c:53:4c:ee:ce:13:e2:9f:78:e5:27:
                    bb:5a:e9:ab:9b:00:b2:aa:ca:89:c3:bb:32:e7:c2:
                    9e:a0:02:d5:3a:4b:85:7c:80:1f:f6:d0:ee:4b:95:
                    a3:cc:95:32:52:8e:e6:cd:c7:97:9f:6e:1d:cd:71:
                    28:2f:eb:70:d2:47:b9:d0:c1:b9:1a:17:d5:03:b9:
                    d4:57:a0:8d:93:f1:da:7a:71:4f:70:f7:57:c8:9b:
                    b7:9b:cb:77:3b:22:43:c0:da:7f:fd:0b:af:6b:42:
                    ea:98:d9:fd:4b:b9:90:26:1c:1a:9d:c5:70:50:7a:
                    c7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D7:8D:C9:CF:1E:FE:88:B5:C5:0F:E2:FA:FC:74:F9:CD:4F:1D:03
            X509v3 Authority Key Identifier:
                keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:de:b8:55:0e:4a:25:d7:f1:19:d0:eb:5d:d6:25:e6:76:b7:
         80:28:23:c3:5a:cc:c2:ad:6a:87:ba:2c:c1:0e:7f:ae:56:4c:
         b5:3b:3d:00:c1:7c:58:9b:a1:f8:6f:91:a4:28:3b:9e:0b:fe:
         c1:97:a5:b3:48:33:65:68:49:7f:53:64:03:86:c1:05:6a:19:
         00:79:fd:13:97:f2:df:c3:18:d2:d5:1e:c0:48:92:c5:09:94:
         25:b0:92:33:1f:4e:62:5e:0a:89:10:42:fb:37:99:82:4d:52:
         1f:26:d0:79:ed:c3:ff:5d:ce:d5:58:a9:0d:5f:39:99:47:95:
         ab:23:32:37:29:0c:43:8f:7c:ff:91:09:06:fb:bb:a0:20:0d:
         1c:f7:f7:61:d4:1e:f9:99:07:2c:7c:15:c8:d6:b9:75:ba:08:
         26:eb:cf:eb:e1:35:b1:fc:e8:a1:fc:b9:e0:15:a0:c1:2a:ec:
         b7:7c:c3:e2:cd:a6:1f:4f:46:fc:0e:02:f2:84:46:ad:56:8a:
         7f:67:0c:58:c4:a7:1d:22:69:1c:82:17:f1:3b:20:69:bf:05:
         be:74:3d:e6:4d:bd:b0:d7:b6:53:b7:d9:36:b6:1d:7f:9d:f6:
         59:87:7b:b9:23:c6:3c:ea:af:82:6e:16:fe:33:5a:bc:dc:97:
         5f:01:a2:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYkqp3La2+FhaPL8KfV5pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MTY1MzllNzQ5MzRkMjNhMDU3MmY2NjI1ZGJmZGI1NGU4
MjA4NzMwHhcNMjYwNDE3MDMwMDQ4WhcNMjYwNDE4MDMwMDQ4WjAzMTEwLwYDVQQD
EyhmNmQ3OGRjOWNmMWVmZTg4YjVjNTBmZTJmYWZjNzRmOWNkNGYxZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosgz2VuAdz37lkS0FnMKYKm4n7M9
3wmTS6hXhrM/21+sr+RhY6iBIvox9unQZLuUd0l5W7on25ki5vzuokCnCyy1o1ge
SEoEDET9no5Fh/ojikKdOm4lXqzBe1ssWLuht7bz2g1GuoOG39aqVU0Udjh8+RnM
nXVk2YGL/LA91KxaqE/CL3n0WcfOLFNM7s4T4p945Se7WumrmwCyqsqJw7sy58Ke
oALVOkuFfIAf9tDuS5WjzJUyUo7mzceXn24dzXEoL+tw0ke50MG5GhfVA7nUV6CN
k/HaenFPcPdXyJu3m8t3OyJDwNp//Quva0LqmNn9S7mQJhwancVwUHrHaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbXjcnPHv6ItcUP4vr8dPnNTx0DMB8GA1UdIwQY
MBaAFPQWU550k00joFcvZiXb/bVOgghzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUJaVG5uU1RUU09nVnk5bUpkdjl0VTZDQ0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81M2U0OTYtMDA5Ny00NjJhLWE5ODkt
ZDY3YTYxZDU0MTZkLzEvOUJaVG5uU1RUU09nVnk5bUpkdjl0VTZDQ0hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy81M2U0OTYtMDA5Ny00NjJhLWE5ODktZDY3YTYxZDU0MTZk
LzEvOUJaVG5uU1RUU09nVnk5bUpkdjl0VTZDQ0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjt64VQ5K
JdfxGdDrXdYl5na3gCgjw1rMwq1qh7oswQ5/rlZMtTs9AMF8WJuh+G+RpCg7ngv+
wZels0gzZWhJf1NkA4bBBWoZAHn9E5fy38MY0tUewEiSxQmUJbCSMx9OYl4KiRBC
+zeZgk1SHybQee3D/13O1VipDV85mUeVqyMyNykMQ498/5EJBvu7oCANHPf3YdQe
+ZkHLHwVyNa5dboIJuvP6+E1sfzoofy54BWgwSrst3zD4s2mH09G/A4C8oRGrVaK
f2cMWMSnHSJpHIIX8Tsgab8FvnQ95k29sNe2U7fZNrYdf532WYd7uSPGPOqvgm4W
/jNavNyXXwGiwA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:40 2026 by rpki-client