Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
File:                     K5X2grxtV338PBDs7icYOB_uOyM.mft (raw, json)
Hash identifier:          op3kkoztYNLkwKKhRbtqLDIaxl1hLRwP33Nqce+AEt0=
Subject key identifier:   26:BD:1F:4D:5F:BE:94:2B:4E:73:A3:18:09:8D:39:61:91:A8:D0:7D
Authority key identifier: 2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
Certificate issuer:       /CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Certificate serial:       019D996273B34B1FF86C41A2356ADB2D528D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 03:00:59 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:59 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:59 +0000
Files and hashes:         1: K5X2grxtV338PBDs7icYOB_uOyM.crl (hash: CenVG0Kqe+n/YGkrAfnqlxdbnHdf8mVpqR+LKcUEY40=)
                          2: c289qpn3kfSqkxAic7Rhdy4xyoM.roa (hash: JY4yDIwrrSAVR6qr9xMoxwUu8BhoP0KRD9HYde2M8sU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:73:b3:4b:1f:f8:6c:41:a2:35:6a:db:2d:52:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
        Validity
            Not Before: Apr 17 03:00:59 2026 GMT
            Not After : Apr 18 03:00:59 2026 GMT
        Subject: CN=26bd1f4d5fbe942b4e73a318098d396191a8d07d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d5:37:51:02:ec:93:ea:0f:8d:2d:21:0e:4c:
                    94:f9:f2:05:f4:40:40:d2:e7:00:6e:7d:12:be:61:
                    04:b6:10:06:8d:29:bc:ca:ea:ef:de:7a:59:cc:69:
                    06:2a:58:9e:0b:d6:7b:3a:53:13:8e:32:ea:3f:31:
                    ca:64:87:1b:8b:09:a5:73:f4:88:4a:ee:36:cc:ea:
                    a9:29:de:e7:5e:09:e6:d3:f9:25:a1:b6:c5:14:ca:
                    25:3f:30:2b:97:2b:f2:84:f6:c6:bd:89:48:86:70:
                    ff:bd:fb:fa:fb:c3:5b:02:73:c4:18:f6:d4:88:30:
                    3c:ef:c3:c6:92:fb:60:97:2d:e7:28:22:fc:7f:d2:
                    da:13:c5:80:e0:52:16:26:ce:ba:e7:fc:fc:eb:39:
                    cd:5a:05:f7:dc:7a:11:66:bc:e7:52:21:94:a6:bc:
                    32:7d:91:80:72:3c:ec:05:b3:fe:21:4b:21:1a:7a:
                    88:bf:bb:d3:5f:63:b9:25:d3:e4:4a:af:92:d8:6a:
                    f4:19:27:0e:5f:24:3c:76:92:10:2b:7a:db:40:c6:
                    20:d4:ec:3a:33:31:4b:ea:e0:7e:d4:66:ea:a3:e7:
                    55:25:0a:58:65:b8:19:22:42:8f:5c:e9:8a:b2:cb:
                    c4:f9:90:55:92:7f:fe:30:b1:84:d3:ef:ca:5c:5e:
                    1f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BD:1F:4D:5F:BE:94:2B:4E:73:A3:18:09:8D:39:61:91:A8:D0:7D
            X509v3 Authority Key Identifier:
                keyid:2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:46:29:2e:13:8b:67:0c:15:76:20:6e:99:73:64:b4:2a:65:
         94:56:93:dc:87:80:f0:32:96:00:a1:b2:6c:cc:df:a0:65:99:
         42:e5:84:fb:9a:04:a1:ef:8d:dd:86:af:06:46:5a:ca:82:01:
         d9:0a:23:14:d6:c0:21:69:eb:c2:36:f6:70:50:db:ce:30:5d:
         c8:3b:6e:32:3a:22:a6:c8:0e:73:ad:29:e6:e8:1a:4c:e2:96:
         f1:1c:f6:8e:cd:7f:20:17:66:9e:93:db:c1:fa:46:64:9a:3c:
         9a:3c:b8:f3:d9:6c:91:59:01:82:09:21:03:f6:e1:2f:e7:61:
         f8:33:a1:66:74:0a:cc:7a:49:48:6f:4b:3d:a4:d2:85:5a:2c:
         37:e8:00:50:d3:1c:3a:c4:e2:e6:ad:90:28:3c:4b:ed:f2:8e:
         04:5c:c0:91:8f:58:3c:ef:7d:f0:a8:56:51:82:43:66:42:4f:
         96:a7:c2:f9:01:7a:81:46:df:72:a8:de:ef:71:d5:f2:a1:84:
         c3:0e:63:eb:87:61:ad:89:13:8a:a0:40:9d:d5:2c:c3:3d:11:
         90:92:cc:53:5d:2f:7e:f4:f7:bc:de:0d:d5:c0:ab:c3:ce:70:
         e7:95:53:74:41:74:22:44:5e:7c:37:73:7d:2d:73:6d:6a:cd:
         b6:64:9d:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYnOzSx/4bEGiNWrbLVKNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOTVmNjgyYmM2ZDU3N2RmYzNjMTBlY2VlMjcxODM4MWZl
ZTNiMjMwHhcNMjYwNDE3MDMwMDU5WhcNMjYwNDE4MDMwMDU5WjAzMTEwLwYDVQQD
EygyNmJkMWY0ZDVmYmU5NDJiNGU3M2EzMTgwOThkMzk2MTkxYThkMDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9U3UQLsk+oPjS0hDkyU+fIF9EBA
0ucAbn0SvmEEthAGjSm8yurv3npZzGkGKlieC9Z7OlMTjjLqPzHKZIcbiwmlc/SI
Su42zOqpKd7nXgnm0/klobbFFMolPzArlyvyhPbGvYlIhnD/vfv6+8NbAnPEGPbU
iDA878PGkvtgly3nKCL8f9LaE8WA4FIWJs665/z86znNWgX33HoRZrznUiGUprwy
fZGAcjzsBbP+IUshGnqIv7vTX2O5JdPkSq+S2Gr0GScOXyQ8dpIQK3rbQMYg1Ow6
MzFL6uB+1Gbqo+dVJQpYZbgZIkKPXOmKssvE+ZBVkn/+MLGE0+/KXF4fTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCa9H01fvpQrTnOjGAmNOWGRqNB9MB8GA1UdIwQY
MBaAFCuV9oK8bVd9/DwQ7O4nGDgf7jsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVYMmdyeHRWMzM4UEJEczdpY1lPQl91T3lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS83ODBlMGItNGYwMi00Y2QyLWE0ZTMt
ZTAxYTU2ZjU4ZDM3LzEvSzVYMmdyeHRWMzM4UEJEczdpY1lPQl91T3lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS83ODBlMGItNGYwMi00Y2QyLWE0ZTMtZTAxYTU2ZjU4ZDM3
LzEvSzVYMmdyeHRWMzM4UEJEczdpY1lPQl91T3lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakYpLhOL
ZwwVdiBumXNktCpllFaT3IeA8DKWAKGybMzfoGWZQuWE+5oEoe+N3YavBkZayoIB
2QojFNbAIWnrwjb2cFDbzjBdyDtuMjoipsgOc60p5ugaTOKW8Rz2js1/IBdmnpPb
wfpGZJo8mjy489lskVkBggkhA/bhL+dh+DOhZnQKzHpJSG9LPaTShVosN+gAUNMc
OsTi5q2QKDxL7fKOBFzAkY9YPO998KhWUYJDZkJPlqfC+QF6gUbfcqje73HV8qGE
ww5j64dhrYkTiqBAndUswz0RkJLMU10vfvT3vN4N1cCrw85w55VTdEF0IkRefDdz
fS1zbWrNtmSd0Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:59:36 2026 by rpki-client