Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
File:                     8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft (raw, json)
Hash identifier:          S/27SYac8ALdoTnMVMSkrfgq/Ah2c6pks9CZaPvCJjM=
Subject key identifier:   49:6D:29:21:F5:99:B6:A0:C4:0B:60:1A:1C:1E:E5:4D:69:03:9B:86
Authority key identifier: F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24
Certificate issuer:       /CN=f260075c0944fb1634b628bb10b67f12c873e424
Certificate serial:       019D9C99F5A5D9113E0E710487DF5E3DE12C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
Manifest number:          0219
Signing time:             Fri 17 Apr 2026 18:00:28 +0000
Manifest this update:     Fri 17 Apr 2026 18:00:28 +0000
Manifest next update:     Sat 18 Apr 2026 18:00:28 +0000
Files and hashes:         1: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl (hash: fOF8V+fEkeUhjR69NUwZTRV6coPOlPVGNVNB6hzNz7E=)
                          2: LS1I0LR07OhJxEEUNJqhn1-nNT0.roa (hash: 05VWudDvTZxRagJ/ZMpYgYcO8jy0CMReHlty6IA1+UM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:99:f5:a5:d9:11:3e:0e:71:04:87:df:5e:3d:e1:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f260075c0944fb1634b628bb10b67f12c873e424
        Validity
            Not Before: Apr 17 18:00:28 2026 GMT
            Not After : Apr 18 18:00:28 2026 GMT
        Subject: CN=496d2921f599b6a0c40b601a1c1ee54d69039b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:15:20:a5:8b:e1:b4:d1:78:66:17:93:80:69:
                    71:7b:d8:d3:fc:87:f0:c2:cb:df:85:c0:7d:05:5a:
                    fd:e0:c1:36:18:98:9d:47:9f:95:74:5c:3e:9a:09:
                    ac:6d:34:79:7b:96:ad:51:59:9a:31:78:01:3e:d0:
                    a1:ae:0f:b4:27:da:e8:3c:52:fb:6b:b7:e2:93:01:
                    2d:bd:3e:57:1a:e4:30:38:1e:3a:77:a6:c6:19:af:
                    cb:e6:77:82:69:29:68:89:6b:5a:e5:28:e0:f7:34:
                    12:a3:9d:d2:e2:2b:b5:5d:48:ff:06:4a:b6:90:75:
                    49:57:de:b1:2c:45:87:d1:04:b3:6b:f9:05:23:97:
                    27:e6:64:58:d4:8a:ba:16:76:53:a9:7d:eb:c1:cb:
                    03:43:1a:ed:54:db:68:03:64:fb:81:98:62:ac:a5:
                    57:c2:64:24:15:58:08:01:52:af:6c:c0:8f:3d:c5:
                    96:3d:10:a8:4f:20:0b:c4:13:97:82:ec:24:73:9c:
                    55:f8:0f:38:01:2d:31:8b:87:a3:bf:1a:a0:e8:cb:
                    67:36:74:ac:4d:b6:ce:40:d2:f1:80:1a:18:50:e8:
                    8f:4e:82:71:c2:bf:4d:58:e5:4a:4d:15:3e:e5:a1:
                    f4:59:1f:a9:9a:65:34:3a:1a:07:e4:17:1d:8e:c9:
                    b3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6D:29:21:F5:99:B6:A0:C4:0B:60:1A:1C:1E:E5:4D:69:03:9B:86
            X509v3 Authority Key Identifier:
                keyid:F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:0a:cd:f8:e5:19:3c:9c:b5:aa:2d:00:6e:6c:25:27:dc:33:
         65:3d:b5:76:02:b6:38:c8:97:64:5b:7c:68:b7:aa:13:06:4b:
         d9:04:54:4b:bd:a8:95:9f:14:8b:4c:72:5c:99:f6:12:a4:e4:
         d0:ae:20:b1:a6:86:ce:89:98:fb:d1:f5:c7:85:30:df:0f:67:
         80:df:24:90:7e:07:3b:a8:47:c4:79:8f:69:1a:43:48:84:5f:
         c5:b1:c0:ee:58:e4:a6:87:25:31:6a:9e:71:b8:d2:a7:7a:e2:
         7c:2a:73:0f:ac:1a:21:ff:fd:b7:35:21:ec:6a:a0:22:18:0a:
         d2:e3:32:bc:43:a4:49:32:cb:54:bd:a2:eb:01:5a:33:f5:fe:
         d4:48:15:91:9f:c2:74:bb:f0:1c:d9:52:e1:f4:20:50:be:91:
         00:6a:a8:21:50:6e:ab:67:81:9c:6e:1e:c7:43:e6:eb:ae:2c:
         27:46:0e:8f:7a:2e:64:62:55:2b:20:1a:e3:2c:fd:f5:9c:1a:
         c2:45:23:6f:bd:86:b8:ad:5f:b8:11:42:c0:51:56:2a:6e:55:
         dd:b3:ad:88:ee:e7:a8:50:da:a5:34:7b:45:3c:11:f8:4e:21:
         b7:d5:34:94:a0:f0:d6:b7:f3:f9:fe:a1:eb:3a:e6:6c:3d:6d:
         b2:f4:5b:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cmfWl2RE+DnEEh99ePeEsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjAwNzVjMDk0NGZiMTYzNGI2MjhiYjEwYjY3ZjEyYzg3
M2U0MjQwHhcNMjYwNDE3MTgwMDI4WhcNMjYwNDE4MTgwMDI4WjAzMTEwLwYDVQQD
Eyg0OTZkMjkyMWY1OTliNmEwYzQwYjYwMWExYzFlZTU0ZDY5MDM5Yjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBUgpYvhtNF4ZheTgGlxe9jT/Ifw
wsvfhcB9BVr94ME2GJidR5+VdFw+mgmsbTR5e5atUVmaMXgBPtChrg+0J9roPFL7
a7fikwEtvT5XGuQwOB46d6bGGa/L5neCaSloiWta5Sjg9zQSo53S4iu1XUj/Bkq2
kHVJV96xLEWH0QSza/kFI5cn5mRY1Iq6FnZTqX3rwcsDQxrtVNtoA2T7gZhirKVX
wmQkFVgIAVKvbMCPPcWWPRCoTyALxBOXguwkc5xV+A84AS0xi4ejvxqg6MtnNnSs
TbbOQNLxgBoYUOiPToJxwr9NWOVKTRU+5aH0WR+pmmU0OhoH5Bcdjsmz+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEltKSH1mbagxAtgGhwe5U1pA5uGMB8GA1UdIwQY
MBaAFPJgB1wJRPsWNLYouxC2fxLIc+QkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1BSFhBbEUteFkwdGlpN0VMWl9Fc2h6NUNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85ZDVjZTUtYjZjOS00OGRhLThlOGEt
NmEzYmI5MjQ0M2ZjLzEvOG1BSFhBbEUteFkwdGlpN0VMWl9Fc2h6NUNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy85ZDVjZTUtYjZjOS00OGRhLThlOGEtNmEzYmI5MjQ0M2Zj
LzEvOG1BSFhBbEUteFkwdGlpN0VMWl9Fc2h6NUNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVArN+OUZ
PJy1qi0AbmwlJ9wzZT21dgK2OMiXZFt8aLeqEwZL2QRUS72olZ8Ui0xyXJn2EqTk
0K4gsaaGzomY+9H1x4Uw3w9ngN8kkH4HO6hHxHmPaRpDSIRfxbHA7ljkpoclMWqe
cbjSp3rifCpzD6waIf/9tzUh7GqgIhgK0uMyvEOkSTLLVL2i6wFaM/X+1EgVkZ/C
dLvwHNlS4fQgUL6RAGqoIVBuq2eBnG4ex0Pm664sJ0YOj3ouZGJVKyAa4yz99Zwa
wkUjb72GuK1fuBFCwFFWKm5V3bOtiO7nqFDapTR7RTwR+E4ht9U0lKDw1rfz+f6h
6zrmbD1tsvRbNQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:00:33 2026 by rpki-client