Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
File:                     Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft (raw, json)
Hash identifier:          CpvKO4FLu/ENtU8z6bN2t9cy61m9dkheasizvo/vCUA=
Subject key identifier:   6E:D5:69:CC:2D:18:AA:1F:A5:7A:CB:3F:5B:82:39:DC:91:70:40:27
Authority key identifier: 4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28
Certificate issuer:       /CN=4edc689bb22d09475574f41c0e5d97c045930928
Certificate serial:       019D98864921B0C9A9602F5DC643518DCC8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
Manifest number:          18C2
Signing time:             Thu 16 Apr 2026 23:00:30 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:30 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:30 +0000
Files and hashes:         1: 1qel5UJvF0Nw_b-bGu5_QNoqlRk.roa (hash: dYaVAlWLEdmSPPhA4+BPhKB1MJDLY30AwRM+D7oK3SI=)
                          2: Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl (hash: J+AT+HD7OhLVLm+qxIW6xoJjM0SHQ9Yino7nx3pYSJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:49:21:b0:c9:a9:60:2f:5d:c6:43:51:8d:cc:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edc689bb22d09475574f41c0e5d97c045930928
        Validity
            Not Before: Apr 16 23:00:30 2026 GMT
            Not After : Apr 17 23:00:30 2026 GMT
        Subject: CN=6ed569cc2d18aa1fa57acb3f5b8239dc91704027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:31:6d:1b:9e:40:97:75:7f:da:52:1e:a5:9b:
                    69:b4:be:02:b7:c4:f6:7a:96:81:21:14:2e:27:a4:
                    f2:1b:80:b4:fb:b8:45:8b:b3:b1:d0:92:5f:44:3a:
                    fd:8e:c2:03:e2:0f:eb:f3:b9:84:9f:8c:1b:63:bd:
                    07:8a:1e:65:83:1c:76:74:9b:5f:1a:6c:25:a9:b3:
                    6e:db:a5:5f:bb:ce:52:e7:96:fd:9f:2b:03:24:d0:
                    f1:50:0a:81:a6:23:82:92:f5:fe:7c:0d:a8:8e:cd:
                    9f:d1:57:63:50:71:f5:af:31:22:1d:ae:ea:cb:8a:
                    22:a2:e6:65:68:a8:26:d1:a8:85:08:e9:5b:14:88:
                    9d:ad:20:5b:a3:fa:30:72:49:db:8c:88:39:85:a3:
                    bb:8a:f6:0b:34:20:f1:30:ef:d1:7c:0a:72:43:86:
                    9d:f7:46:c2:c3:5e:34:6c:a1:2c:26:b4:40:5c:b2:
                    3a:79:4f:2a:35:78:f4:7f:04:51:59:5b:03:7e:bf:
                    41:6c:5c:a7:98:c0:30:a9:e2:35:17:6b:5f:e3:0c:
                    28:26:db:e6:e4:30:c2:b8:e0:38:84:20:d6:3d:21:
                    6f:8e:68:c1:c2:63:a8:49:da:c2:5e:b7:9c:1e:1b:
                    30:bd:1c:2b:71:66:c6:af:39:1e:7f:28:5d:bc:b2:
                    5e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D5:69:CC:2D:18:AA:1F:A5:7A:CB:3F:5B:82:39:DC:91:70:40:27
            X509v3 Authority Key Identifier:
                keyid:4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:de:41:bf:4e:31:23:5a:97:0f:b9:b4:37:fd:02:7c:46:fb:
         f4:88:fc:89:de:89:e2:eb:20:d9:07:87:2f:36:ce:27:9f:7a:
         49:86:92:74:a6:61:71:ea:a7:2a:25:ff:87:68:50:25:34:21:
         5f:02:ee:d9:4e:aa:9b:80:5a:24:83:e7:1c:d7:cb:10:32:49:
         b2:94:bc:bd:59:3e:7f:18:ae:bf:bd:56:63:db:54:f1:ee:a9:
         04:8e:b7:73:dd:4b:44:4f:5b:09:c6:65:43:1f:3b:c4:33:df:
         01:ec:47:d0:2f:7e:7e:52:89:f5:95:4c:1f:be:9b:5d:d7:2f:
         dc:41:e7:80:7f:30:bb:40:10:22:f6:c8:d5:90:7e:1d:81:24:
         07:15:ea:a7:18:3b:a3:68:3c:3f:cb:30:01:5b:80:4f:e5:b1:
         99:69:25:fd:54:bb:4b:e6:7a:e8:d6:3c:af:92:b0:bc:dd:4d:
         0a:1c:f4:4b:09:bf:e8:4a:64:7c:0f:c3:a0:da:29:6a:c9:f3:
         aa:3e:37:0b:8c:ea:36:17:68:ef:b0:36:1d:c7:82:5a:77:55:
         57:c1:86:c3:82:3c:ad:82:05:a7:69:bf:40:54:03:f1:0e:f6:
         56:6c:e8:3c:76:bd:94:fb:a1:39:76:77:3e:bf:ff:6c:be:65:
         ce:12:be:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YhkkhsMmpYC9dxkNRjcyNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZGM2ODliYjIyZDA5NDc1NTc0ZjQxYzBlNWQ5N2MwNDU5
MzA5MjgwHhcNMjYwNDE2MjMwMDMwWhcNMjYwNDE3MjMwMDMwWjAzMTEwLwYDVQQD
Eyg2ZWQ1NjljYzJkMThhYTFmYTU3YWNiM2Y1YjgyMzlkYzkxNzA0MDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjFtG55Al3V/2lIepZtptL4Ct8T2
epaBIRQuJ6TyG4C0+7hFi7Ox0JJfRDr9jsID4g/r87mEn4wbY70Hih5lgxx2dJtf
GmwlqbNu26Vfu85S55b9nysDJNDxUAqBpiOCkvX+fA2ojs2f0VdjUHH1rzEiHa7q
y4oiouZlaKgm0aiFCOlbFIidrSBbo/owcknbjIg5haO7ivYLNCDxMO/RfApyQ4ad
90bCw140bKEsJrRAXLI6eU8qNXj0fwRRWVsDfr9BbFynmMAwqeI1F2tf4wwoJtvm
5DDCuOA4hCDWPSFvjmjBwmOoSdrCXrecHhswvRwrcWbGrzkefyhdvLJexQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7VacwtGKofpXrLP1uCOdyRcEAnMB8GA1UdIwQY
MBaAFE7caJuyLQlHVXT0HA5dl8BFkwkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHR4b203SXRDVWRWZFBRY0RsMlh3RVdUQ1NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi83YmJiOTEtYzViMC00ZDBiLTkyNWIt
MDliZTU5ODlkMGFjLzEvVHR4b203SXRDVWRWZFBRY0RsMlh3RVdUQ1NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi83YmJiOTEtYzViMC00ZDBiLTkyNWItMDliZTU5ODlkMGFj
LzEvVHR4b203SXRDVWRWZFBRY0RsMlh3RVdUQ1NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAud5Bv04x
I1qXD7m0N/0CfEb79Ij8id6J4usg2QeHLzbOJ596SYaSdKZhceqnKiX/h2hQJTQh
XwLu2U6qm4BaJIPnHNfLEDJJspS8vVk+fxiuv71WY9tU8e6pBI63c91LRE9bCcZl
Qx87xDPfAexH0C9+flKJ9ZVMH76bXdcv3EHngH8wu0AQIvbI1ZB+HYEkBxXqpxg7
o2g8P8swAVuAT+WxmWkl/VS7S+Z66NY8r5KwvN1NChz0Swm/6EpkfA/DoNopasnz
qj43C4zqNhdo77A2HceCWndVV8GGw4I8rYIFp2m/QFQD8Q72VmzoPHa9lPuhOXZ3
Pr//bL5lzhK+5Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:12:41 2026 by rpki-client