Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
File:                     XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft (raw, json)
Hash identifier:          3L777GgrSVh8nLlXkEBqG5HhTHuu0sD2v2Zb87oBIcQ=
Subject key identifier:   95:56:2B:F1:56:1D:A4:33:2E:08:F3:1E:9E:5B:25:B5:F8:10:3A:04
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Certificate issuer:       /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial:       019D99626561AB45CA47430CCC707B2440B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 03:00:55 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:55 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:55 +0000
Files and hashes:         1: 0m0w4NNU4NOo-8_y3zxSZs-Hcdw.roa (hash: d/QLJQ6M0z3RViK7W5MP6w1Y/VAa68ow0nmGzD8+98w=)
                          2: HKYjGRXbhcsbgj-zO-lhhp8iHf4.roa (hash: r0qRRb9G05Y3zjQIakuz14pzZ5PruwE51RJizxy5NMg=)
                          3: OXzsf9355x_Po1YlBAMmXxH7YfM.roa (hash: HyUx0AM/t82HDbhNTlK93mKwtwtfVGbEby4qtiM7vwI=)
                          4: SD-pJr4ttUBaZ1S20Tz4AuB6P1I.asa (hash: +ZZUrq34lcu1uY7HrOMrXNxK/Du8JITTl9RrFi410RY=)
                          5: XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl (hash: PtvRsGGdwEkUeZmwQ0PjBakX2izUjQ34GqiFdGPfV9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:65:61:ab:45:ca:47:43:0c:cc:70:7b:24:40:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
        Validity
            Not Before: Apr 17 03:00:55 2026 GMT
            Not After : Apr 18 03:00:55 2026 GMT
        Subject: CN=95562bf1561da4332e08f31e9e5b25b5f8103a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:81:96:0a:61:8d:2b:97:b9:88:16:eb:7c:23:
                    c3:ba:37:87:e2:7b:5e:28:93:0c:f8:3b:48:c6:48:
                    e2:e0:e8:b4:21:7a:90:3c:a6:35:03:65:00:2f:8d:
                    3a:c1:df:49:83:5a:b6:02:02:90:90:2e:52:ef:34:
                    8c:1a:80:b3:df:e6:31:f1:2e:4d:07:a5:39:0d:12:
                    10:9f:47:35:d5:07:fa:f6:c2:ce:54:6c:62:7b:dd:
                    1e:d0:34:b0:b1:bf:6e:ae:fe:e3:a7:e5:53:fc:05:
                    87:72:89:26:fe:e8:ec:0c:46:e6:0c:2f:78:65:f7:
                    d8:20:16:7b:61:c9:26:d1:72:1b:c1:25:94:8c:a0:
                    c8:79:b0:88:66:01:fe:a2:50:bb:d4:0b:f8:5c:9e:
                    ba:5d:7b:68:21:ca:14:89:55:77:02:63:7e:55:69:
                    05:9b:a3:0a:46:b5:b3:09:63:28:24:e3:9c:a8:4d:
                    b6:d2:65:98:d7:5f:a8:25:aa:bd:59:8a:3d:1b:b8:
                    d3:02:ca:5a:1b:4c:52:a9:e5:de:f6:f6:7e:de:ee:
                    cf:a9:09:0c:d9:62:ff:02:fa:01:fc:1e:e3:7b:2c:
                    b0:8b:e8:5a:78:97:14:d0:18:c8:68:7e:3f:51:26:
                    e7:7a:e5:da:47:90:ed:c0:1a:a9:f3:b3:17:20:2b:
                    cb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:56:2B:F1:56:1D:A4:33:2E:08:F3:1E:9E:5B:25:B5:F8:10:3A:04
            X509v3 Authority Key Identifier:
                keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:7b:f3:c6:3e:e4:b9:2f:ad:04:1f:ab:6b:a2:dc:c4:b2:df:
         2f:e2:c9:90:06:dc:73:49:7e:31:77:5c:fb:8a:ec:4f:5e:a8:
         08:ca:b7:03:0f:cb:27:da:f1:9b:19:90:e4:0b:06:c1:e6:a7:
         f6:70:8f:e8:1b:3d:9c:02:55:4b:f2:8e:e8:47:9f:3c:f0:92:
         1f:a4:8e:61:55:a4:f1:ba:bc:9b:4f:9c:2f:76:e3:24:8f:5a:
         ce:31:b9:6e:a8:81:16:d3:26:70:33:3b:10:fa:68:18:90:72:
         68:38:14:9b:33:9a:27:c1:b9:24:ed:83:e2:0e:d2:ba:6f:dd:
         48:d2:9d:8b:84:05:52:eb:6c:f9:b4:4a:04:27:c1:62:de:64:
         fb:d1:eb:81:b5:73:08:15:23:30:c1:17:34:be:b1:e5:03:93:
         2b:8b:1b:47:8f:47:b4:9c:2a:9b:9c:76:31:98:47:06:45:f7:
         fb:72:60:b0:61:a1:db:2d:85:9b:90:09:3b:b6:91:c4:1f:ef:
         36:c7:b0:e3:e2:0b:a8:70:cb:1b:6d:ff:4c:2f:c3:44:3b:01:
         39:90:ab:d5:c2:16:86:07:a2:f1:45:17:95:c0:1e:ac:b5:e3:
         8f:8c:20:66:1a:bf:1c:b1:4c:2c:fc:5c:35:e6:14:37:23:4f:
         a0:6a:8c:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYmVhq0XKR0MMzHB7JEC0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZDIzYzdhYzZlNjgyZmJjNTNiZTFhMGU5MzE4ZjZjY2Fl
NzE5M2QwHhcNMjYwNDE3MDMwMDU1WhcNMjYwNDE4MDMwMDU1WjAzMTEwLwYDVQQD
Eyg5NTU2MmJmMTU2MWRhNDMzMmUwOGYzMWU5ZTViMjViNWY4MTAzYTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4GWCmGNK5e5iBbrfCPDujeH4nte
KJMM+DtIxkji4Oi0IXqQPKY1A2UAL406wd9Jg1q2AgKQkC5S7zSMGoCz3+Yx8S5N
B6U5DRIQn0c11Qf69sLOVGxie90e0DSwsb9urv7jp+VT/AWHcokm/ujsDEbmDC94
ZffYIBZ7Yckm0XIbwSWUjKDIebCIZgH+olC71Av4XJ66XXtoIcoUiVV3AmN+VWkF
m6MKRrWzCWMoJOOcqE220mWY11+oJaq9WYo9G7jTAspaG0xSqeXe9vZ+3u7PqQkM
2WL/AvoB/B7jeyywi+haeJcU0BjIaH4/USbneuXaR5DtwBqp87MXICvL7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVWK/FWHaQzLgjzHp5bJbX4EDoEMB8GA1UdIwQY
MBaAFF3SPHrG5oL7xTvhoOkxj2zK5xk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGRJOGVzYm1ndnZGTy1HZzZUR1BiTXJuR1QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hNDJlOWMtZDkyZC00YjIwLWE1ZWIt
ZWJlMjMzMmNhZjFjLzEvWGRJOGVzYm1ndnZGTy1HZzZUR1BiTXJuR1QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9hNDJlOWMtZDkyZC00YjIwLWE1ZWItZWJlMjMzMmNhZjFj
LzEvWGRJOGVzYm1ndnZGTy1HZzZUR1BiTXJuR1QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXvzxj7k
uS+tBB+ra6LcxLLfL+LJkAbcc0l+MXdc+4rsT16oCMq3Aw/LJ9rxmxmQ5AsGwean
9nCP6Bs9nAJVS/KO6EefPPCSH6SOYVWk8bq8m0+cL3bjJI9azjG5bqiBFtMmcDM7
EPpoGJByaDgUmzOaJ8G5JO2D4g7Sum/dSNKdi4QFUuts+bRKBCfBYt5k+9HrgbVz
CBUjMMEXNL6x5QOTK4sbR49HtJwqm5x2MZhHBkX3+3JgsGGh2y2Fm5AJO7aRxB/v
Nsew4+ILqHDLG23/TC/DRDsBOZCr1cIWhgei8UUXlcAerLXjj4wgZhq/HLFMLPxc
NeYUNyNPoGqMTA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:32:16 2026 by rpki-client