Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
File:                     qdvUwWus1i0mMqoeF7LozQEA1oQ.mft (raw, json)
Hash identifier:          cEARFSeu4Oin4f4P6e0aIacQcq886D2C41O4zFwdxRg=
Subject key identifier:   C8:3A:E3:B1:F3:27:5C:62:F7:E5:DB:99:97:D0:BF:AA:54:B3:5D:AE
Authority key identifier: A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84
Certificate issuer:       /CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684
Certificate serial:       019D9774385F360E39D7643453DA556D8520
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
Manifest number:          18CA
Signing time:             Thu 16 Apr 2026 18:01:09 +0000
Manifest this update:     Thu 16 Apr 2026 18:01:09 +0000
Manifest next update:     Fri 17 Apr 2026 18:01:09 +0000
Files and hashes:         1: qdvUwWus1i0mMqoeF7LozQEA1oQ.crl (hash: CGvD/QyZhtLwxQjMAEfwkevQPIy9HhLeNZL3+KUwp+o=)
                          2: z_aohf0nvgrxwGRTbVmz5aObwgs.roa (hash: uED0obTkRG8cxn/WVBRgbTdBw3zAOTzzg1FW8rl0WuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 18:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:74:38:5f:36:0e:39:d7:64:34:53:da:55:6d:85:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684
        Validity
            Not Before: Apr 16 18:01:09 2026 GMT
            Not After : Apr 17 18:01:09 2026 GMT
        Subject: CN=c83ae3b1f3275c62f7e5db9997d0bfaa54b35dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:d1:98:75:40:36:00:1c:d2:d4:3b:10:bc:
                    1c:90:5a:45:bb:65:e0:32:1e:31:6e:33:bc:68:13:
                    0d:20:91:ce:33:6b:04:c6:29:22:ca:3d:14:cf:65:
                    30:0f:20:83:fb:3f:30:6f:d7:db:50:4e:61:46:18:
                    a8:97:8b:0f:d9:ca:f2:3c:15:62:78:97:de:0c:91:
                    d0:7c:5a:1f:3d:df:ae:dc:38:5a:b9:55:11:d7:d4:
                    bc:c8:c8:21:d2:2f:b8:ed:bf:5a:74:61:62:c9:96:
                    2c:bf:a5:87:08:0e:eb:13:2e:46:99:60:9b:dc:03:
                    47:e4:20:10:01:ca:63:11:73:4e:cd:39:20:67:ad:
                    60:c4:ff:c4:0d:75:a6:04:47:29:d5:57:2e:b0:de:
                    6c:27:df:a9:4d:08:97:b8:ee:c7:36:45:89:91:5b:
                    f4:f4:66:f0:df:bd:47:78:2b:3c:8e:e5:90:88:f0:
                    79:c4:27:00:4d:c1:7a:d5:18:a6:eb:05:a2:5d:0f:
                    61:e1:b3:dd:2e:e6:a5:48:6c:98:73:95:aa:c6:71:
                    1c:54:e8:63:cb:1c:4e:9c:11:bf:23:d1:bf:fe:13:
                    68:fa:88:02:72:02:91:d1:5e:d8:c0:5e:15:5f:5c:
                    d9:d2:33:2e:ed:24:94:31:54:22:37:15:0c:ff:4e:
                    32:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3A:E3:B1:F3:27:5C:62:F7:E5:DB:99:97:D0:BF:AA:54:B3:5D:AE
            X509v3 Authority Key Identifier:
                keyid:A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:6a:94:ad:35:c9:42:86:ea:68:cd:95:fa:72:ee:7c:bd:f5:
         d5:04:93:b9:98:62:dd:db:0c:88:d7:14:75:cf:92:75:42:18:
         10:d7:cb:5b:fb:0b:34:09:31:fe:ee:62:df:8a:48:4f:ee:91:
         9e:64:79:d1:61:75:3a:be:d6:12:42:72:3b:05:d7:ed:4e:98:
         7a:27:47:9a:8c:eb:fe:a8:21:b1:a1:66:8c:13:4b:75:7f:86:
         7a:ab:60:0d:43:e7:6c:d6:6a:0c:fb:bd:61:f1:89:7f:5d:9d:
         3a:e5:a0:b4:42:82:2b:69:81:62:f4:76:e0:48:0d:88:ea:60:
         3d:fb:c3:2d:40:22:9e:a3:3d:69:39:51:ff:54:20:e3:db:2a:
         7e:45:a7:9d:65:64:f7:68:d2:f9:ad:fc:3b:19:a2:e1:0b:e0:
         96:2b:20:b9:81:97:68:c0:b3:f1:88:07:b0:33:84:a3:b2:86:
         3a:7f:bf:34:d3:89:fb:93:e5:33:ba:5a:24:5f:57:65:1f:79:
         26:03:1e:41:fa:3d:a2:11:e8:3d:a4:07:e1:5f:2d:12:79:8d:
         7a:9c:2b:45:96:39:8e:14:af:01:d1:bb:d4:78:25:81:75:5b:
         a1:de:e1:a5:7d:2b:77:ac:24:e8:4f:df:f1:89:36:61:4f:39:
         d5:5f:d9:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2XdDhfNg4512Q0U9pVbYUgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZGJkNGMxNmJhY2Q2MmQyNjMyYWExZTE3YjJlOGNkMDEw
MGQ2ODQwHhcNMjYwNDE2MTgwMTA5WhcNMjYwNDE3MTgwMTA5WjAzMTEwLwYDVQQD
EyhjODNhZTNiMWYzMjc1YzYyZjdlNWRiOTk5N2QwYmZhYTU0YjM1ZGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9TRmHVANgAc0tQ7ELwckFpFu2Xg
Mh4xbjO8aBMNIJHOM2sExikiyj0Uz2UwDyCD+z8wb9fbUE5hRhiol4sP2cryPBVi
eJfeDJHQfFofPd+u3DhauVUR19S8yMgh0i+47b9adGFiyZYsv6WHCA7rEy5GmWCb
3ANH5CAQAcpjEXNOzTkgZ61gxP/EDXWmBEcp1VcusN5sJ9+pTQiXuO7HNkWJkVv0
9Gbw371HeCs8juWQiPB5xCcATcF61Rim6wWiXQ9h4bPdLualSGyYc5WqxnEcVOhj
yxxOnBG/I9G//hNo+ogCcgKR0V7YwF4VX1zZ0jMu7SSUMVQiNxUM/04yHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMg647HzJ1xi9+XbmZfQv6pUs12uMB8GA1UdIwQY
MBaAFKnb1MFrrNYtJjKqHhey6M0BANaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWR2VXdXdXMxaTBtTXFvZUY3TG96UUVBMW9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jZDQ2ZDYtNDU3YS00MTIyLThhNzMt
YjZjMjgzNTExZDA4LzEvcWR2VXdXdXMxaTBtTXFvZUY3TG96UUVBMW9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9jZDQ2ZDYtNDU3YS00MTIyLThhNzMtYjZjMjgzNTExZDA4
LzEvcWR2VXdXdXMxaTBtTXFvZUY3TG96UUVBMW9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGqUrTXJ
QobqaM2V+nLufL311QSTuZhi3dsMiNcUdc+SdUIYENfLW/sLNAkx/u5i34pIT+6R
nmR50WF1Or7WEkJyOwXX7U6YeidHmozr/qghsaFmjBNLdX+GeqtgDUPnbNZqDPu9
YfGJf12dOuWgtEKCK2mBYvR24EgNiOpgPfvDLUAinqM9aTlR/1Qg49sqfkWnnWVk
92jS+a38Oxmi4QvglisguYGXaMCz8YgHsDOEo7KGOn+/NNOJ+5PlM7paJF9XZR95
JgMeQfo9ohHoPaQH4V8tEnmNepwrRZY5jhSvAdG71HglgXVbod7hpX0rd6wk6E/f
8Yk2YU851V/ZUQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:56:34 2026 by rpki-client