Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
File:                     h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft (raw, json)
Hash identifier:          cYWqRwsLqGB/vvhquZxcP+Abs5AF5NIXu264M6c2sjM=
Subject key identifier:   FD:1F:54:1E:46:4A:5B:50:2D:F7:40:90:34:15:3C:D8:ED:A5:54:44
Authority key identifier: 87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
Certificate issuer:       /CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Certificate serial:       019D98F50BE1BE3BAA5DB5373F9D36040DBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 01:01:28 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:28 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:28 +0000
Files and hashes:         1: FSldjgXBXjGAUbFoSQDG1x2p2L4.roa (hash: /VsBntJD9ML7jEL3eLR/WzuhrYccqcvoqHnzK+4UGMQ=)
                          2: GPHtNa1LkpB1FfVw6cVLTB-Gb4s.roa (hash: +gGd31Ly+y7j9QhhSu4Pmao5tnZqyFoc+P7uPTb1vzs=)
                          3: RsPq-Q75oYdBP6d7MT59xlgY-HQ.roa (hash: Hb85y/nsx1XdLTmRRWMyt3fqQ9P1nyZYPAXbyIk10J0=)
                          4: h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl (hash: 63cs78eSe0kU8Qde//ukMz0NdRKQ7XkM3y7aOcoR45k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:0b:e1:be:3b:aa:5d:b5:37:3f:9d:36:04:0d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
        Validity
            Not Before: Apr 17 01:01:28 2026 GMT
            Not After : Apr 18 01:01:28 2026 GMT
        Subject: CN=fd1f541e464a5b502df7409034153cd8eda55444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:09:3a:e5:5a:0e:80:1f:b2:2e:20:47:90:18:
                    78:1f:5e:32:44:24:de:f4:cf:b7:3d:20:aa:27:75:
                    7f:a4:4c:0d:af:1c:d7:78:86:87:22:69:31:01:ce:
                    39:43:a4:39:7a:e4:fb:b6:6b:75:f3:59:08:1d:93:
                    0e:aa:a7:18:8a:34:15:49:e6:d5:41:1d:44:45:d4:
                    5e:2b:6e:84:50:cf:2a:37:d1:fc:ab:2c:59:1a:3a:
                    34:7e:e9:09:05:47:4a:35:09:2c:77:04:7a:31:5c:
                    23:24:5f:fa:9a:b8:4e:b5:e9:8e:12:c2:ed:fe:9f:
                    81:bd:25:ea:d1:b7:ef:24:8a:39:c0:6b:f0:bf:56:
                    ed:f8:5e:c9:a1:32:41:0f:e9:83:24:cb:c8:91:b9:
                    c3:9e:ec:a4:34:74:61:f2:32:fa:99:e5:a5:73:cc:
                    bc:f4:bc:ec:d8:29:46:d9:26:40:64:3f:b0:bb:f2:
                    e6:0a:b3:29:f7:c6:6d:3b:94:97:60:f0:57:bc:4c:
                    11:c4:a2:e5:ae:fc:05:f7:24:b8:c2:f6:68:92:e3:
                    41:78:e9:f2:95:cf:d3:54:a1:96:2f:9e:04:fc:35:
                    e9:d9:20:6d:95:19:9d:70:fc:e6:ab:4d:2f:bf:c7:
                    a9:73:46:f4:d4:2d:b9:01:fd:71:df:81:dd:72:71:
                    85:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1F:54:1E:46:4A:5B:50:2D:F7:40:90:34:15:3C:D8:ED:A5:54:44
            X509v3 Authority Key Identifier:
                keyid:87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:53:f1:72:bf:f3:43:ce:18:f3:83:4b:f9:e7:96:81:5e:cb:
         5c:86:df:30:3b:67:4e:a3:27:7a:1c:f9:03:01:9f:5c:1f:d2:
         0d:de:46:1a:b4:2a:80:40:45:53:88:56:50:b5:21:d5:2d:cd:
         27:99:3a:bf:90:ca:5e:84:fa:bf:8e:e3:b5:24:e0:6d:d2:85:
         c4:92:98:19:bc:67:3d:31:1f:d7:ff:ca:07:fa:db:14:e4:33:
         86:13:d9:33:78:b6:5a:93:75:22:ed:bb:56:40:e3:58:04:07:
         b8:41:58:ed:f3:f2:11:10:26:e0:94:7b:c9:e8:c0:74:4b:c0:
         86:0d:08:eb:e0:7a:5c:0d:a5:06:5e:98:cf:60:b3:63:00:2e:
         06:3e:8c:4d:d4:25:a0:7e:5b:fd:ec:d2:65:50:9a:a7:42:fd:
         41:13:1d:c2:66:22:1a:cb:e9:d1:f2:74:ae:5f:ba:f9:32:04:
         bf:79:b5:5c:81:db:1b:fd:cb:49:4e:88:79:d9:84:2a:87:7c:
         3c:7f:d3:cf:15:69:ca:f7:de:28:10:09:f7:34:09:fe:08:65:
         56:e5:90:3d:99:96:67:c2:dc:f1:9a:1c:a3:f4:1f:44:58:dd:
         67:90:dc:f3:47:5d:c2:59:1c:db:b6:2f:2d:c2:79:06:a1:7f:
         ee:af:86:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9QvhvjuqXbU3P502BA2/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YzM3ZDAzNWQ5NWZlZmJhMWQ0N2Y5OGI5ZmY0OTczZjE3
ZGY2Y2QwHhcNMjYwNDE3MDEwMTI4WhcNMjYwNDE4MDEwMTI4WjAzMTEwLwYDVQQD
EyhmZDFmNTQxZTQ2NGE1YjUwMmRmNzQwOTAzNDE1M2NkOGVkYTU1NDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gk65VoOgB+yLiBHkBh4H14yRCTe
9M+3PSCqJ3V/pEwNrxzXeIaHImkxAc45Q6Q5euT7tmt181kIHZMOqqcYijQVSebV
QR1ERdReK26EUM8qN9H8qyxZGjo0fukJBUdKNQksdwR6MVwjJF/6mrhOtemOEsLt
/p+BvSXq0bfvJIo5wGvwv1bt+F7JoTJBD+mDJMvIkbnDnuykNHRh8jL6meWlc8y8
9Lzs2ClG2SZAZD+wu/LmCrMp98ZtO5SXYPBXvEwRxKLlrvwF9yS4wvZokuNBeOny
lc/TVKGWL54E/DXp2SBtlRmdcPzmq00vv8epc0b01C25Af1x34HdcnGFUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0fVB5GSltQLfdAkDQVPNjtpVREMB8GA1UdIwQY
MBaAFIfDfQNdlf77odR/mLn/SXPxffbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDhOOUExMlZfdnVoMUgtWXVmOUpjX0Y5OXMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS81ZWYwNjAtZjQ3My00MDQzLWI4YTIt
ZTFiN2M3NjQ5ZmEzLzEvaDhOOUExMlZfdnVoMUgtWXVmOUpjX0Y5OXMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS81ZWYwNjAtZjQ3My00MDQzLWI4YTItZTFiN2M3NjQ5ZmEz
LzEvaDhOOUExMlZfdnVoMUgtWXVmOUpjX0Y5OXMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElPxcr/z
Q84Y84NL+eeWgV7LXIbfMDtnTqMnehz5AwGfXB/SDd5GGrQqgEBFU4hWULUh1S3N
J5k6v5DKXoT6v47jtSTgbdKFxJKYGbxnPTEf1//KB/rbFOQzhhPZM3i2WpN1Iu27
VkDjWAQHuEFY7fPyERAm4JR7yejAdEvAhg0I6+B6XA2lBl6Yz2CzYwAuBj6MTdQl
oH5b/ezSZVCap0L9QRMdwmYiGsvp0fJ0rl+6+TIEv3m1XIHbG/3LSU6IedmEKod8
PH/TzxVpyvfeKBAJ9zQJ/ghlVuWQPZmWZ8Lc8Zoco/QfRFjdZ5Dc80ddwlkc27Yv
LcJ5BqF/7q+G2Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:45:14 2026 by rpki-client