Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
File:                     xWwoao20vSFr9kx1szhRsARaF18.mft (raw, json)
Hash identifier:          3mViLnd12p5+mqSIDValpxGGmP+sDXS2i/MxwSgjBiY=
Subject key identifier:   57:6A:D1:9B:72:23:4A:02:44:A9:62:28:22:FA:48:EF:0A:02:CC:EE
Authority key identifier: C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F
Certificate issuer:       /CN=c56c286a8db4bd216bf64c75b33851b0045a175f
Certificate serial:       019D99621906DF465CC38EA1C5D697B84369
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
Manifest number:          0D25
Signing time:             Fri 17 Apr 2026 03:00:36 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:36 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:36 +0000
Files and hashes:         1: fzBvwE7sX01y4kB6SSgdE7n9ysI.roa (hash: qCcHE+EY0A9msSwDHW5P3s9hKxDDBKeiCJ6eljce7Pg=)
                          2: xWwoao20vSFr9kx1szhRsARaF18.crl (hash: SznQs7qqfS05IihqEABrZHavyRNxTt3PHdL0xUdMlFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:19:06:df:46:5c:c3:8e:a1:c5:d6:97:b8:43:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c56c286a8db4bd216bf64c75b33851b0045a175f
        Validity
            Not Before: Apr 17 03:00:36 2026 GMT
            Not After : Apr 18 03:00:36 2026 GMT
        Subject: CN=576ad19b72234a0244a9622822fa48ef0a02ccee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f3:85:70:06:4e:87:99:d6:a0:47:b3:ab:cf:
                    39:52:03:c8:a6:b2:b0:3d:df:ce:41:e3:bc:b0:2d:
                    b6:c8:5a:76:83:16:84:f3:38:5c:e3:bd:f5:80:30:
                    ce:99:5c:d7:69:7d:87:b3:d8:58:e8:b8:19:c2:dc:
                    da:3b:99:f5:91:f4:f9:c4:8c:be:94:00:81:48:76:
                    4b:1e:f3:30:a2:4a:6e:7b:8b:d1:42:28:58:be:77:
                    9c:94:63:00:e3:4c:ed:13:1a:ed:7b:71:42:09:a8:
                    c4:4e:dc:63:f7:de:5c:ef:6d:46:be:79:1d:65:54:
                    19:30:57:54:66:9a:f5:39:88:28:1a:41:74:33:43:
                    d3:13:14:5e:84:de:7d:09:82:95:f4:06:b2:44:5a:
                    ff:04:4b:ca:f1:7b:d2:a8:3c:66:dc:c5:b3:c6:84:
                    a0:0c:b5:5a:3d:d2:7e:c4:01:f0:f7:af:db:75:88:
                    e3:0e:b9:e8:ba:c6:6f:1a:e1:11:ee:e3:c1:b2:f4:
                    82:07:a3:d0:b6:ea:f2:3f:5a:8b:34:f2:a9:d2:6b:
                    65:e0:f0:71:6a:29:05:0c:01:5c:dd:d0:be:72:34:
                    09:43:64:ca:15:d4:31:35:7c:6a:6a:de:54:e2:0a:
                    9a:86:c6:76:ce:17:78:b0:0c:51:4e:17:63:d9:a7:
                    ba:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6A:D1:9B:72:23:4A:02:44:A9:62:28:22:FA:48:EF:0A:02:CC:EE
            X509v3 Authority Key Identifier:
                keyid:C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:28:33:fb:62:56:9a:d5:9b:93:b3:ab:45:09:76:f0:46:f9:
         5f:73:fc:dd:b4:f0:fe:fb:e4:84:7a:49:f1:43:60:ce:91:23:
         bb:94:1d:18:cd:7b:88:ed:45:8e:9f:fa:c5:a2:2e:d3:9b:b7:
         5f:a0:e3:d8:34:56:e4:77:81:24:f4:44:34:ff:4d:4e:be:33:
         61:50:5a:35:92:a8:43:0d:3a:4f:a3:75:f6:e6:4a:13:c2:05:
         5c:37:a8:47:7d:c4:70:26:f4:5b:f8:dc:b9:70:16:0a:46:b2:
         9f:7a:33:7e:4c:a8:f4:23:f6:cb:5d:b3:51:39:24:8b:c5:41:
         ce:eb:58:fe:db:45:b8:d3:26:96:e8:05:5a:26:8a:1b:ec:c2:
         03:d2:75:87:b3:f3:b1:25:ea:73:fb:d6:de:55:d0:7a:14:bb:
         bb:e5:b4:0f:29:e8:7f:d5:9a:e4:c3:50:3c:ea:31:a7:41:e1:
         7c:c9:fd:bf:09:6e:c3:ac:e8:8a:5c:36:96:c4:d8:bf:45:0a:
         75:c7:37:5d:07:60:da:96:84:13:6d:da:90:74:04:21:84:87:
         6f:03:47:96:e4:7f:7c:38:16:b4:60:d1:af:91:88:84:52:be:
         e4:36:e4:ff:53:8d:0d:d7:b2:dd:5a:aa:58:65:c1:29:0e:9f:
         3d:d3:35:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYhkG30Zcw46hxdaXuENpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NmMyODZhOGRiNGJkMjE2YmY2NGM3NWIzMzg1MWIwMDQ1
YTE3NWYwHhcNMjYwNDE3MDMwMDM2WhcNMjYwNDE4MDMwMDM2WjAzMTEwLwYDVQQD
Eyg1NzZhZDE5YjcyMjM0YTAyNDRhOTYyMjgyMmZhNDhlZjBhMDJjY2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPOFcAZOh5nWoEezq885UgPIprKw
Pd/OQeO8sC22yFp2gxaE8zhc4731gDDOmVzXaX2Hs9hY6LgZwtzaO5n1kfT5xIy+
lACBSHZLHvMwokpue4vRQihYvneclGMA40ztExrte3FCCajETtxj995c721Gvnkd
ZVQZMFdUZpr1OYgoGkF0M0PTExRehN59CYKV9AayRFr/BEvK8XvSqDxm3MWzxoSg
DLVaPdJ+xAHw96/bdYjjDrnousZvGuER7uPBsvSCB6PQturyP1qLNPKp0mtl4PBx
aikFDAFc3dC+cjQJQ2TKFdQxNXxqat5U4gqahsZ2zhd4sAxRThdj2ae6wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdq0ZtyI0oCRKliKCL6SO8KAszuMB8GA1UdIwQY
MBaAFMVsKGqNtL0ha/ZMdbM4UbAEWhdfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFd3b2FvMjB2U0ZyOWt4MXN6aFJzQVJhRjE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85YzA5MTMtMDMwMS00YWQ0LWI5Mzkt
ODEzNDliMDJhMmQ5LzEveFd3b2FvMjB2U0ZyOWt4MXN6aFJzQVJhRjE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC85YzA5MTMtMDMwMS00YWQ0LWI5MzktODEzNDliMDJhMmQ5
LzEveFd3b2FvMjB2U0ZyOWt4MXN6aFJzQVJhRjE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADSgz+2JW
mtWbk7OrRQl28Eb5X3P83bTw/vvkhHpJ8UNgzpEju5QdGM17iO1Fjp/6xaIu05u3
X6Dj2DRW5HeBJPRENP9NTr4zYVBaNZKoQw06T6N19uZKE8IFXDeoR33EcCb0W/jc
uXAWCkayn3ozfkyo9CP2y12zUTkki8VBzutY/ttFuNMmlugFWiaKG+zCA9J1h7Pz
sSXqc/vW3lXQehS7u+W0Dynof9Wa5MNQPOoxp0HhfMn9vwluw6zoilw2lsTYv0UK
dcc3XQdg2paEE23akHQEIYSHbwNHluR/fDgWtGDRr5GIhFK+5Dbk/1ONDdey3Vqq
WGXBKQ6fPdM16g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:31:17 2026 by rpki-client