Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
File:                     vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft (raw, json)
Hash identifier:          eSTCv0X0ehi/8QsV8nE9sd/fvLPDeWFRlKnlLt7TYhM=
Subject key identifier:   7E:84:C3:50:7C:A5:AC:DE:CC:03:55:47:72:19:CA:D5:9A:F7:FF:C5
Authority key identifier: BC:9F:5A:AE:9A:37:67:6E:E0:A7:71:2F:F3:10:DD:0B:0A:6F:22:C6
Certificate issuer:       /CN=bc9f5aae9a37676ee0a7712ff310dd0b0a6f22c6
Certificate serial:       019D98BDAAECCAC098CDD5E5769343ADEE4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
Manifest number:          18BD
Signing time:             Fri 17 Apr 2026 00:01:00 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:00 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:00 +0000
Files and hashes:         1: vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl (hash: 6BTKUGk9SJgsZ14s/pY+YQSLZ+v4jlf68jVFoZN0ojY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:aa:ec:ca:c0:98:cd:d5:e5:76:93:43:ad:ee:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9f5aae9a37676ee0a7712ff310dd0b0a6f22c6
        Validity
            Not Before: Apr 17 00:01:00 2026 GMT
            Not After : Apr 18 00:01:00 2026 GMT
        Subject: CN=7e84c3507ca5acdecc0355477219cad59af7ffc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:81:95:b2:03:9b:ce:82:2e:3f:27:74:7b:54:
                    ff:b7:50:3e:8f:5b:48:e9:18:fc:9c:47:a4:6d:0b:
                    fb:a1:8e:c8:7c:e4:6a:15:57:4d:05:cc:69:7d:7b:
                    da:bd:66:b1:e6:f9:d5:9e:17:2d:ae:58:32:7c:76:
                    d5:85:5d:58:9c:c3:60:41:0f:26:04:79:ba:6f:22:
                    a8:dd:61:dc:7e:7c:ac:89:bc:eb:b8:49:1b:b0:7e:
                    b8:fa:2d:dd:70:90:38:e6:93:46:11:82:44:3e:b5:
                    b4:49:b1:f7:99:e8:51:1e:82:ac:1d:06:cb:55:a7:
                    a2:96:87:a3:eb:60:dd:dd:26:a7:4b:1b:6c:ac:8b:
                    10:e2:b6:23:1b:70:c4:96:81:da:79:43:36:1d:38:
                    bc:6e:3f:87:7e:69:c7:44:18:c0:97:cf:b6:53:3a:
                    df:b7:18:fd:6a:a8:bb:f4:77:7b:b9:9a:6a:d2:49:
                    f2:05:90:41:1e:c7:94:6f:a6:47:3c:30:0d:28:a7:
                    62:b7:16:7b:b8:07:e2:39:e1:4c:49:1d:18:ec:4d:
                    20:53:33:bf:e5:e5:e9:75:88:7c:54:05:46:49:41:
                    12:fe:34:bc:7e:24:03:20:78:9e:1b:76:4a:6e:8e:
                    a3:51:80:ef:ac:26:83:2c:3d:22:9c:5f:2e:74:c9:
                    30:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:84:C3:50:7C:A5:AC:DE:CC:03:55:47:72:19:CA:D5:9A:F7:FF:C5
            X509v3 Authority Key Identifier:
                keyid:BC:9F:5A:AE:9A:37:67:6E:E0:A7:71:2F:F3:10:DD:0B:0A:6F:22:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:05:f9:c8:86:26:9b:89:98:92:a9:a5:5c:8d:0e:41:1a:af:
         ed:42:18:8b:16:27:d7:bd:70:23:00:68:a4:2a:0b:a6:cf:a3:
         87:24:8b:40:dc:23:33:c2:3c:7e:40:f8:c9:f9:8e:d9:25:11:
         40:a7:83:93:9d:f2:80:c0:9a:70:c1:dc:3a:c7:d2:2d:e9:34:
         a2:79:5e:bc:1f:4e:4b:ed:73:37:30:f5:00:cf:56:f2:f2:92:
         e0:73:0a:aa:d0:6a:fb:ab:c7:89:d3:27:12:f5:8e:03:17:b0:
         f8:7d:e2:17:76:6d:aa:46:18:27:a7:59:ac:22:d7:8d:a4:cc:
         e8:db:9f:d6:23:1f:7e:27:db:07:2c:5a:d5:7d:1d:e8:d3:46:
         a0:22:5c:20:7b:8b:80:fc:3b:2a:0d:6b:83:c0:4a:49:f3:e0:
         27:bc:67:c0:46:de:e1:23:a5:d4:16:9c:fd:10:ef:04:13:4f:
         3b:48:e5:be:da:bd:98:af:a0:7a:8e:91:87:de:a2:48:d3:4b:
         a1:3e:e7:e3:c7:69:4b:e0:9f:cf:f6:62:12:8c:0b:e8:b9:01:
         73:75:4b:d2:b9:57:b7:4f:28:d3:a5:c9:28:a5:4f:1e:8b:92:
         d2:c9:a1:c7:ce:1d:3e:a7:dd:34:4d:53:1b:0e:99:64:3d:e9:
         7c:63:05:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvarsysCYzdXldpNDre5MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOWY1YWFlOWEzNzY3NmVlMGE3NzEyZmYzMTBkZDBiMGE2
ZjIyYzYwHhcNMjYwNDE3MDAwMTAwWhcNMjYwNDE4MDAwMTAwWjAzMTEwLwYDVQQD
Eyg3ZTg0YzM1MDdjYTVhY2RlY2MwMzU1NDc3MjE5Y2FkNTlhZjdmZmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4GVsgObzoIuPyd0e1T/t1A+j1tI
6Rj8nEekbQv7oY7IfORqFVdNBcxpfXvavWax5vnVnhctrlgyfHbVhV1YnMNgQQ8m
BHm6byKo3WHcfnysibzruEkbsH64+i3dcJA45pNGEYJEPrW0SbH3mehRHoKsHQbL
Vaeiloej62Dd3SanSxtsrIsQ4rYjG3DEloHaeUM2HTi8bj+HfmnHRBjAl8+2Uzrf
txj9aqi79Hd7uZpq0knyBZBBHseUb6ZHPDANKKditxZ7uAfiOeFMSR0Y7E0gUzO/
5eXpdYh8VAVGSUES/jS8fiQDIHieG3ZKbo6jUYDvrCaDLD0inF8udMkw0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6Ew1B8pazezANVR3IZytWa9//FMB8GA1UdIwQY
MBaAFLyfWq6aN2du4KdxL/MQ3QsKbyLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdko5YXJwbzNaMjdncDNFdjh4RGRDd3B2SXNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82Y2IwODEtOGE3ZC00MDI0LWFlODUt
OWM0Y2IzYmQ5MjVlLzEvdko5YXJwbzNaMjdncDNFdjh4RGRDd3B2SXNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS82Y2IwODEtOGE3ZC00MDI0LWFlODUtOWM0Y2IzYmQ5MjVl
LzEvdko5YXJwbzNaMjdncDNFdjh4RGRDd3B2SXNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzQX5yIYm
m4mYkqmlXI0OQRqv7UIYixYn171wIwBopCoLps+jhySLQNwjM8I8fkD4yfmO2SUR
QKeDk53ygMCacMHcOsfSLek0onlevB9OS+1zNzD1AM9W8vKS4HMKqtBq+6vHidMn
EvWOAxew+H3iF3ZtqkYYJ6dZrCLXjaTM6Nuf1iMffifbByxa1X0d6NNGoCJcIHuL
gPw7Kg1rg8BKSfPgJ7xnwEbe4SOl1Bac/RDvBBNPO0jlvtq9mK+geo6Rh96iSNNL
oT7n48dpS+Cfz/ZiEowL6LkBc3VL0rlXt08o06XJKKVPHouS0smhx84dPqfdNE1T
Gw6ZZD3pfGMFOQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:48:25 2026 by rpki-client