Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
File:                     7a8O0eMJHntcmc5DysEDEFWw84U.mft (raw, json)
Hash identifier:          AcL2tfKS44QPo/VMLL5u+MomPYTYJZ7AULkA92eD5L4=
Subject key identifier:   15:A8:CC:63:2F:0B:75:7C:59:2F:A4:18:9F:03:1D:34:E7:D6:7B:7D
Authority key identifier: ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85
Certificate issuer:       /CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385
Certificate serial:       019D9962791C991D15D1F5C3232567854761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
Manifest number:          1853
Signing time:             Fri 17 Apr 2026 03:01:00 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:00 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:00 +0000
Files and hashes:         1: 7a8O0eMJHntcmc5DysEDEFWw84U.crl (hash: 3OOF8tG+3pXqTE/KVVgDKRpxSK+qaTUGH9edLPi6Tzc=)
                          2: zlNsdLQAtO6TKIpveiYDahXGOtc.roa (hash: zWs8jQOETQ5X0XyX4yP+smjLWA31kMqZBSgEABnieXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:79:1c:99:1d:15:d1:f5:c3:23:25:67:85:47:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385
        Validity
            Not Before: Apr 17 03:01:00 2026 GMT
            Not After : Apr 18 03:01:00 2026 GMT
        Subject: CN=15a8cc632f0b757c592fa4189f031d34e7d67b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:95:71:0d:8e:48:27:7c:fa:ee:24:c2:e3:58:
                    43:8b:b1:33:25:c3:eb:fa:b3:90:27:01:71:40:9d:
                    ed:c9:a8:6d:e5:cd:9a:54:2c:de:27:d0:9b:f3:b3:
                    f9:54:d7:df:f4:be:18:1d:54:23:48:81:51:96:d7:
                    52:11:ac:80:6d:b9:a0:cd:65:92:89:7b:57:b0:6a:
                    42:e9:58:89:21:a9:43:53:5d:10:83:c1:ab:21:29:
                    00:e2:f4:36:3c:d6:e2:40:12:2a:58:df:da:e6:2f:
                    c0:c1:c0:35:3c:14:22:d4:b9:33:38:70:64:6c:0b:
                    6a:36:cf:d8:7c:be:ee:06:cd:31:dc:72:b5:8c:40:
                    15:ab:e1:88:cd:53:6c:7e:c1:97:4b:54:4e:28:a7:
                    e3:93:40:6a:66:66:f5:9f:44:c6:e7:2b:30:79:66:
                    71:cd:78:6f:96:6d:4c:ff:00:e8:50:45:21:17:1c:
                    89:c0:b3:77:24:80:3f:13:be:06:ef:79:5c:47:38:
                    d8:09:31:ec:77:eb:29:f3:7d:e5:fe:01:55:f7:4a:
                    b2:90:5c:0f:fc:91:13:59:b0:93:e0:e9:32:0a:35:
                    60:34:c6:ea:24:d0:84:01:5a:ed:01:c6:1a:4d:31:
                    ea:1b:62:d7:71:87:e4:f9:3f:5d:2c:fc:7c:f0:77:
                    81:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A8:CC:63:2F:0B:75:7C:59:2F:A4:18:9F:03:1D:34:E7:D6:7B:7D
            X509v3 Authority Key Identifier:
                keyid:ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:9a:48:4d:6f:be:66:8d:fb:79:bd:f0:62:f0:0e:ab:b7:a9:
         3b:59:fe:07:63:01:dc:c4:27:a3:42:2e:db:81:4c:ca:6d:16:
         8e:cf:e5:51:50:18:31:3d:8e:0c:cf:70:f8:36:d6:cf:bc:d7:
         a5:82:b7:09:ef:f9:3f:9f:c9:3b:8e:5c:b9:77:3f:65:42:29:
         b1:14:59:c5:fe:e0:6f:62:15:2d:67:47:17:aa:d4:d8:9e:21:
         9e:4f:f6:ae:a8:e4:49:29:27:87:ec:81:ff:26:60:7f:39:89:
         b5:f1:2c:9a:ac:f8:6c:6b:f8:04:d4:ee:9f:1b:94:e5:31:e6:
         2d:29:d7:f6:98:4d:bc:5d:d7:5b:96:62:4a:b5:be:a8:fb:20:
         2f:cd:2c:14:28:0d:0a:ff:1a:f3:1e:e8:39:f1:78:4b:f0:c4:
         fd:00:98:18:3d:b2:2c:a8:d8:e7:34:ba:4a:92:5a:12:28:06:
         64:57:34:0f:ca:67:1e:c1:b8:40:5b:6a:7b:a8:28:87:42:e9:
         45:6e:59:ce:3d:b1:81:85:2f:93:c0:f6:ce:8f:3e:d2:6d:05:
         c4:fc:c8:84:a1:30:63:cb:58:ab:a6:3b:45:29:ba:e1:4e:27:
         73:f5:08:9d:6e:bf:8e:7c:1c:9e:21:49:a4:7b:8e:bf:8f:db:
         2e:e3:1f:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYnkcmR0V0fXDIyVnhUdhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYWYwZWQxZTMwOTFlN2I1Yzk5Y2U0M2NhYzEwMzEwNTVi
MGYzODUwHhcNMjYwNDE3MDMwMTAwWhcNMjYwNDE4MDMwMTAwWjAzMTEwLwYDVQQD
EygxNWE4Y2M2MzJmMGI3NTdjNTkyZmE0MTg5ZjAzMWQzNGU3ZDY3YjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5VxDY5IJ3z67iTC41hDi7EzJcPr
+rOQJwFxQJ3tyaht5c2aVCzeJ9Cb87P5VNff9L4YHVQjSIFRltdSEayAbbmgzWWS
iXtXsGpC6ViJIalDU10Qg8GrISkA4vQ2PNbiQBIqWN/a5i/AwcA1PBQi1LkzOHBk
bAtqNs/YfL7uBs0x3HK1jEAVq+GIzVNsfsGXS1ROKKfjk0BqZmb1n0TG5ysweWZx
zXhvlm1M/wDoUEUhFxyJwLN3JIA/E74G73lcRzjYCTHsd+sp833l/gFV90qykFwP
/JETWbCT4OkyCjVgNMbqJNCEAVrtAcYaTTHqG2LXcYfk+T9dLPx88HeBxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWozGMvC3V8WS+kGJ8DHTTn1nt9MB8GA1UdIwQY
MBaAFO2vDtHjCR57XJnOQ8rBAxBVsPOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2E4TzBlTUpIbnRjbWM1RHlzRURFRld3ODRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84ZTQzZmEtZTkxZi00ODE4LWI4M2Yt
MTdhMWY4NmM2ODA0LzEvN2E4TzBlTUpIbnRjbWM1RHlzRURFRld3ODRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi84ZTQzZmEtZTkxZi00ODE4LWI4M2YtMTdhMWY4NmM2ODA0
LzEvN2E4TzBlTUpIbnRjbWM1RHlzRURFRld3ODRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtJpITW++
Zo37eb3wYvAOq7epO1n+B2MB3MQno0Iu24FMym0Wjs/lUVAYMT2ODM9w+DbWz7zX
pYK3Ce/5P5/JO45cuXc/ZUIpsRRZxf7gb2IVLWdHF6rU2J4hnk/2rqjkSSknh+yB
/yZgfzmJtfEsmqz4bGv4BNTunxuU5THmLSnX9phNvF3XW5ZiSrW+qPsgL80sFCgN
Cv8a8x7oOfF4S/DE/QCYGD2yLKjY5zS6SpJaEigGZFc0D8pnHsG4QFtqe6goh0Lp
RW5Zzj2xgYUvk8D2zo8+0m0FxPzIhKEwY8tYq6Y7RSm64U4nc/UInW6/jnwcniFJ
pHuOv4/bLuMfVw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:21:02 2026 by rpki-client