Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
File:                     3E5FOv_olbZFK4QCdDfFwA_TcGc.mft (raw, json)
Hash identifier:          OIWYGQC6L56weABIOkpgoJ6JKgfnvRUQhkmppFp/pgA=
Subject key identifier:   C4:34:FD:CB:3C:7D:F9:02:A4:2A:E5:74:CD:9E:CE:36:4C:EF:BA:4F
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Certificate issuer:       /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial:       019D9B19590FE64815060ABBFEF2419C3C1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
Manifest number:          18DC
Signing time:             Fri 17 Apr 2026 11:00:22 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:22 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:22 +0000
Files and hashes:         1: 3E5FOv_olbZFK4QCdDfFwA_TcGc.crl (hash: pq8d8DCoaAInBT04+8XuKMhjII+do7Z3gno/lf99BwU=)
                          2: 4SNFp6iYtBMi4zD2eo7t1Q8ufcI.roa (hash: 0dpWI2PXhik+N7S7lz0H4gx+qXCOtuPMoys6zPW4AAE=)
                          3: EB7WqqxXodos-Bnfwa3U1V_EWyk.roa (hash: mUbVMHBEzz3yLOktyc5V1n031Bt7w2ivVLElxz97H04=)
                          4: LR-gOJTdtI8bzPduiQVCYwkMZFA.roa (hash: bVwiIJwDd0Bu+uS+HlMtLfyphNhcg2aLcVX98Jb8Wj8=)
                          5: Ub8GbvDA35aTIzVecXGmXtHsXEc.roa (hash: elt6C1OboYliVZXwfhYgZV3fxNGiHeY3wGhmbW2ynL4=)
                          6: yW8TWZLrtFaFqiAuiN0m0gWF_fI.roa (hash: 9L+sA1TE/tnPgnqt0eplM+GhjWLDs24P3usFFtq4BoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:59:0f:e6:48:15:06:0a:bb:fe:f2:41:9c:3c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
        Validity
            Not Before: Apr 17 11:00:22 2026 GMT
            Not After : Apr 18 11:00:22 2026 GMT
        Subject: CN=c434fdcb3c7df902a42ae574cd9ece364cefba4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b9:5c:2f:50:cf:e6:e7:6a:e9:7b:f9:f9:b5:
                    de:b9:11:fe:e1:3f:46:24:ed:7c:1f:dc:07:d3:63:
                    87:8c:7d:83:52:05:20:9f:c8:37:f9:c9:5a:16:45:
                    a8:e5:30:00:26:c2:a9:2b:91:74:8b:39:1b:9a:f4:
                    1b:52:4f:51:4f:2f:d7:82:7f:2f:f4:1b:e8:1e:cc:
                    e4:a0:fb:1b:6f:06:ee:da:35:3f:32:b9:cc:34:ee:
                    98:38:76:3f:cb:d8:f1:40:ca:a9:73:77:00:b0:7b:
                    0d:a7:c6:17:1a:9a:6e:69:6c:31:8d:64:38:1d:b4:
                    2d:00:ae:2f:f2:51:16:4e:ff:f4:39:93:30:fc:cb:
                    8c:61:16:fd:10:96:3e:6d:ed:1a:af:04:43:ec:80:
                    3f:8f:6d:dc:5d:f7:9b:00:7a:52:e0:99:8c:c4:98:
                    cc:9c:e4:6a:e5:d1:72:28:64:c0:ae:fd:66:e7:16:
                    bb:fb:87:ec:57:e3:05:e9:bb:4e:ac:34:f2:b4:80:
                    db:99:75:03:89:3d:57:af:92:0d:af:35:21:03:f3:
                    5d:e5:b5:1f:be:a0:c2:c8:f6:83:76:83:6e:f9:d1:
                    56:5e:b4:88:aa:f8:22:a7:4d:43:4a:fb:d2:a2:48:
                    b4:40:84:34:27:95:2a:b0:56:50:77:aa:57:03:63:
                    8b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:34:FD:CB:3C:7D:F9:02:A4:2A:E5:74:CD:9E:CE:36:4C:EF:BA:4F
            X509v3 Authority Key Identifier:
                keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:63:c8:b8:eb:81:f5:31:51:66:7d:cc:7c:63:f2:1c:15:54:
         e3:d2:66:75:a1:1b:33:90:e4:23:cb:4a:bd:5a:82:f9:23:bd:
         9f:f3:fd:e5:2f:66:4c:4c:d9:6c:a1:11:8b:ff:9a:a8:d1:92:
         63:c1:05:59:f8:f5:96:d2:24:65:c2:85:bd:61:8b:19:cc:46:
         e7:a2:dc:be:37:28:5c:f5:c8:59:35:95:cf:ad:27:72:1b:7b:
         3b:a3:b2:c5:26:2b:f0:3a:3c:54:46:ea:dd:36:fc:69:0b:f6:
         ba:b2:40:c6:c5:09:34:25:28:54:71:a0:45:1b:6f:88:12:e2:
         08:17:25:8d:8a:e2:f5:03:7b:45:ee:a8:07:e6:7a:10:95:80:
         13:90:7f:8e:a5:e0:d3:67:f0:74:87:3a:cf:97:57:90:59:e6:
         44:19:a3:fd:45:1f:e0:89:e5:2f:ea:03:6c:af:23:4b:af:b6:
         61:93:5e:0e:e3:62:2b:e3:38:ce:b6:61:2b:19:97:eb:0f:cb:
         00:96:e0:fa:b4:a8:9c:0a:04:fa:5c:ac:a7:d8:84:3f:9f:6b:
         09:cd:78:ae:3b:94:2c:f6:fb:a4:47:85:74:a8:e3:ac:c4:78:
         a1:49:0e:b8:9a:9d:40:fb:ea:9c:9f:a3:98:bd:26:ac:20:69:
         6c:3d:85:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGVkP5kgVBgq7/vJBnDweMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNGU0NTNhZmZlODk1YjY0NTJiODQwMjc0MzdjNWMwMGZk
MzcwNjcwHhcNMjYwNDE3MTEwMDIyWhcNMjYwNDE4MTEwMDIyWjAzMTEwLwYDVQQD
EyhjNDM0ZmRjYjNjN2RmOTAyYTQyYWU1NzRjZDllY2UzNjRjZWZiYTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7lcL1DP5udq6Xv5+bXeuRH+4T9G
JO18H9wH02OHjH2DUgUgn8g3+claFkWo5TAAJsKpK5F0izkbmvQbUk9RTy/Xgn8v
9BvoHszkoPsbbwbu2jU/MrnMNO6YOHY/y9jxQMqpc3cAsHsNp8YXGppuaWwxjWQ4
HbQtAK4v8lEWTv/0OZMw/MuMYRb9EJY+be0arwRD7IA/j23cXfebAHpS4JmMxJjM
nORq5dFyKGTArv1m5xa7+4fsV+MF6btOrDTytIDbmXUDiT1Xr5INrzUhA/Nd5bUf
vqDCyPaDdoNu+dFWXrSIqvgip01DSvvSoki0QIQ0J5UqsFZQd6pXA2OLgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQ0/cs8ffkCpCrldM2ezjZM77pPMB8GA1UdIwQY
MBaAFNxORTr/6JW2RSuEAnQ3xcAP03BnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEt
MTgyMjg2N2UxNTk2LzEvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEtMTgyMjg2N2UxNTk2
LzEvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGPIuOuB
9TFRZn3MfGPyHBVU49JmdaEbM5DkI8tKvVqC+SO9n/P95S9mTEzZbKERi/+aqNGS
Y8EFWfj1ltIkZcKFvWGLGcxG56LcvjcoXPXIWTWVz60ncht7O6OyxSYr8Do8VEbq
3Tb8aQv2urJAxsUJNCUoVHGgRRtviBLiCBcljYri9QN7Re6oB+Z6EJWAE5B/jqXg
02fwdIc6z5dXkFnmRBmj/UUf4InlL+oDbK8jS6+2YZNeDuNiK+M4zrZhKxmX6w/L
AJbg+rSonAoE+lysp9iEP59rCc14rjuULPb7pEeFdKjjrMR4oUkOuJqdQPvqnJ+j
mL0mrCBpbD2Fbg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:31:58 2026 by rpki-client