Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
File:                     0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft (raw, json)
Hash identifier:          LXQHnIO443B2cMI7zgccbdTR0bQvf7Th3pZsuYUREjI=
Subject key identifier:   70:7A:88:CE:58:9A:77:D1:4F:CA:73:F5:88:15:3C:DD:70:5C:53:AC
Authority key identifier: D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
Certificate issuer:       /CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Certificate serial:       019D9AABC83D754917BFD07FD96A53F6DC7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 09:00:42 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:42 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:42 +0000
Files and hashes:         1: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl (hash: bTD3R1nSYFv5DC09OoLpq8b18zsb76DndJ+45ntvQZ0=)
                          2: 18LvMJbaobz9RVoG3KwWtt6oPsk.roa (hash: U928xEWQEvSL1IP/0rVvcpbAEWqlTfBez50gOZPkoHY=)
                          3: 5jCnir6W6gAd6_EDtQEmsCT7w14.roa (hash: 0wvxGHojLuaQ4hENlIsY48YCfJ44p5EM0SkFd7dB+g4=)
                          4: bQqTZ3ArgViLCoqi3gs3VHHEcM8.roa (hash: aWk0i4GB/D7KkQJxNXNTSQ961hAd3k/+4U2XwwZMILk=)
                          5: vW2RW7QY1hflVRyn1_CDLNIOZtQ.roa (hash: M4ZBHT4dK/BF7Hs2UlU9Rb4uebu3FER628aOLG71DV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:c8:3d:75:49:17:bf:d0:7f:d9:6a:53:f6:dc:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
        Validity
            Not Before: Apr 17 09:00:42 2026 GMT
            Not After : Apr 18 09:00:42 2026 GMT
        Subject: CN=707a88ce589a77d14fca73f588153cdd705c53ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:65:63:fe:6b:98:e8:79:e0:6d:90:b9:d9:80:
                    f8:61:99:9d:41:7a:9e:66:f8:70:57:dd:53:c6:d7:
                    6d:20:dd:d0:fa:0c:3f:9d:b3:db:87:59:ce:9e:41:
                    48:a7:04:e2:c3:34:bd:94:0a:a7:03:0b:0c:bd:5a:
                    98:05:58:a4:d3:b6:62:ed:25:47:7e:7c:11:7a:65:
                    7c:50:5f:5a:42:9b:25:6b:46:ab:6e:db:b9:2a:20:
                    94:35:10:23:05:bc:fd:29:09:59:84:4e:6e:30:5a:
                    ee:20:41:90:58:6d:b1:4a:18:56:fe:fd:e9:a8:64:
                    86:55:a8:f3:62:37:3e:17:b4:bb:38:9f:74:a2:f0:
                    6e:60:e2:cf:e9:43:56:fc:cd:5f:da:e6:05:9f:3b:
                    33:3e:1f:1d:28:03:c0:57:14:9f:90:df:66:4a:d2:
                    5d:ed:d8:4f:4e:df:58:29:81:e4:e1:fd:bd:8d:e2:
                    79:e8:1a:9f:f8:05:6d:24:26:fd:72:b1:72:11:a3:
                    1f:34:fe:d6:bc:c5:00:91:a7:af:eb:49:67:93:ba:
                    a2:2a:1b:c7:5a:94:c6:d9:a1:49:0a:32:88:64:7d:
                    5c:2f:04:93:f5:76:4d:5e:26:c0:46:ee:6c:c2:5a:
                    5c:c7:ae:df:33:67:00:73:a7:ea:e8:6e:2b:a3:c4:
                    77:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7A:88:CE:58:9A:77:D1:4F:CA:73:F5:88:15:3C:DD:70:5C:53:AC
            X509v3 Authority Key Identifier:
                keyid:D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:88:11:06:10:ee:f8:55:31:7a:c9:2b:4b:62:a9:2e:cf:0c:
         29:d3:c6:01:64:3b:f9:4f:8d:57:34:23:a7:ab:cb:f7:6b:9d:
         42:7c:d1:14:76:7e:b8:3f:6d:94:cb:cf:33:25:2d:72:f5:e2:
         8c:ea:9d:05:7b:8a:fa:bc:a5:b7:48:6a:85:ee:e7:f6:b7:e0:
         07:83:07:de:c6:87:06:eb:df:8e:7e:f8:fd:4b:55:54:f5:59:
         81:a6:01:06:9a:a8:6c:9f:f4:c0:29:00:38:c7:f3:99:4b:4c:
         85:d8:db:83:6a:81:e2:a9:7b:55:27:e0:9a:57:9d:71:37:4b:
         a9:cc:87:56:76:27:a3:0f:ac:48:0c:07:19:78:6d:a4:da:2e:
         05:85:71:d4:64:ff:d5:28:c2:2f:2a:72:75:0f:14:51:bb:0e:
         e1:8c:44:69:35:eb:d1:45:58:fb:11:06:3d:cc:f8:95:95:f7:
         9a:25:a1:29:38:3f:6d:02:9e:2d:43:30:53:4e:8a:97:52:cd:
         4a:b9:9f:07:38:2b:c4:6b:44:97:30:60:b0:29:db:ea:ba:50:
         cd:58:a0:37:d0:ad:84:68:f8:bb:6e:50:34:0c:59:f9:8e:3e:
         e5:17:a4:57:9e:2f:f1:e6:49:cf:3f:68:78:32:b7:e2:da:0e:
         40:ee:8d:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq8g9dUkXv9B/2WpT9tx/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZGU2MTg4MjJiOGFmNmY5ZWNhZmZjZDdkNTQ1OWI3Y2Mx
MTQ0OWEwHhcNMjYwNDE3MDkwMDQyWhcNMjYwNDE4MDkwMDQyWjAzMTEwLwYDVQQD
Eyg3MDdhODhjZTU4OWE3N2QxNGZjYTczZjU4ODE1M2NkZDcwNWM1M2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WVj/muY6HngbZC52YD4YZmdQXqe
ZvhwV91TxtdtIN3Q+gw/nbPbh1nOnkFIpwTiwzS9lAqnAwsMvVqYBVik07Zi7SVH
fnwRemV8UF9aQpsla0arbtu5KiCUNRAjBbz9KQlZhE5uMFruIEGQWG2xShhW/v3p
qGSGVajzYjc+F7S7OJ90ovBuYOLP6UNW/M1f2uYFnzszPh8dKAPAVxSfkN9mStJd
7dhPTt9YKYHk4f29jeJ56Bqf+AVtJCb9crFyEaMfNP7WvMUAkaev60lnk7qiKhvH
WpTG2aFJCjKIZH1cLwST9XZNXibARu5swlpcx67fM2cAc6fq6G4ro8R3EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHB6iM5YmnfRT8pz9YgVPN1wXFOsMB8GA1UdIwQY
MBaAFNDeYYgiuK9vnsr/zX1UWbfMEUSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME41aGlDSzRyMi1leXZfTmZWUlp0OHdSUkpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81YWNkNzgtZDY3MC00MTkyLWI1NjQt
MDQwZTA2NDRmYmU4LzEvME41aGlDSzRyMi1leXZfTmZWUlp0OHdSUkpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81YWNkNzgtZDY3MC00MTkyLWI1NjQtMDQwZTA2NDRmYmU4
LzEvME41aGlDSzRyMi1leXZfTmZWUlp0OHdSUkpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4gRBhDu
+FUxeskrS2KpLs8MKdPGAWQ7+U+NVzQjp6vL92udQnzRFHZ+uD9tlMvPMyUtcvXi
jOqdBXuK+rylt0hqhe7n9rfgB4MH3saHBuvfjn74/UtVVPVZgaYBBpqobJ/0wCkA
OMfzmUtMhdjbg2qB4ql7VSfgmledcTdLqcyHVnYnow+sSAwHGXhtpNouBYVx1GT/
1SjCLypydQ8UUbsO4YxEaTXr0UVY+xEGPcz4lZX3miWhKTg/bQKeLUMwU06Kl1LN
SrmfBzgrxGtElzBgsCnb6rpQzVigN9CthGj4u25QNAxZ+Y4+5RekV54v8eZJzz9o
eDK34toOQO6N7w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:17 2026 by rpki-client