Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
File:                     1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft (raw, json)
Hash identifier:          qdkHBS1B3xC/mWqzW6ZM5HLMtB0k/gFSQcFGVVO35oI=
Subject key identifier:   0F:4B:8C:00:43:4A:30:99:D6:1E:85:73:60:86:56:D1:D5:8A:01:23
Authority key identifier: FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22
Certificate issuer:       /CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
Certificate serial:       019D9B19BA89C24D43454316093CE11CCB20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 11:00:47 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:47 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:47 +0000
Files and hashes:         1: 1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl (hash: DEIkJ4sGhdSisdOVKZKvREv4i1dplEVvbhX16qP/Cbk=)
                          2: a1yKgQiS1kQqWALGhb3azz9xPgM.roa (hash: QrlCwnjrUJMDarRIw4ovkDjdQhcibYW6n6I1xi7Yys8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:ba:89:c2:4d:43:45:43:16:09:3c:e1:1c:cb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
        Validity
            Not Before: Apr 17 11:00:47 2026 GMT
            Not After : Apr 18 11:00:47 2026 GMT
        Subject: CN=0f4b8c00434a3099d61e8573608656d1d58a0123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c6:ef:4e:e3:d1:cf:91:d1:93:c6:00:f7:7d:
                    49:ae:15:0b:12:77:6e:51:61:ae:33:2f:6b:85:7b:
                    9f:a4:a6:1a:f1:d6:a4:30:6f:47:e6:98:29:cc:90:
                    40:6b:69:30:3f:24:9a:af:23:8a:a6:bc:5e:50:c4:
                    2b:1e:a4:c1:b9:1c:f5:bb:64:40:c6:17:0a:81:05:
                    51:87:d5:2c:c8:de:91:04:c0:34:dd:c0:21:c1:9e:
                    ed:0f:bf:e9:fd:d7:3b:92:0e:29:d7:a8:92:54:9a:
                    b5:0b:5d:37:a7:1c:b0:76:c2:e3:fa:05:03:05:2f:
                    1a:70:93:2f:7b:12:83:43:99:ae:25:5b:34:c7:93:
                    cb:29:a0:70:5f:1f:d8:a8:62:78:b3:bb:16:a8:1a:
                    6b:e4:06:54:c3:b5:09:f5:fb:0b:8e:10:b4:60:bd:
                    a9:79:38:fa:cc:98:46:77:a2:af:83:a9:21:e8:a9:
                    43:6f:68:5a:01:01:05:e2:38:ec:58:30:07:c7:a6:
                    83:7d:6f:82:71:0e:b8:9c:31:6b:46:ee:7f:57:1b:
                    7e:57:b0:a8:cb:84:a0:71:b8:9a:90:31:9f:1c:be:
                    c7:a7:81:46:b9:f9:4d:a0:1a:c3:c9:a8:9b:e7:9c:
                    f1:ca:25:fb:5f:5d:23:ba:79:e7:d8:94:af:73:9c:
                    3b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4B:8C:00:43:4A:30:99:D6:1E:85:73:60:86:56:D1:D5:8A:01:23
            X509v3 Authority Key Identifier:
                keyid:FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:20:8d:4e:22:45:82:67:09:f0:64:bb:3d:0d:64:51:f9:b3:
         31:4b:7a:b1:e1:b1:6b:7c:83:96:b0:da:b7:0e:e7:13:2a:d0:
         a5:ed:1b:cc:87:68:ab:5f:a9:7a:6f:4a:b7:bb:c4:cd:a6:0b:
         09:7c:05:60:41:4e:d4:a5:8d:b2:89:3e:dc:33:86:e3:d4:c0:
         77:a5:ba:07:3b:9b:43:d6:7f:ef:8f:51:bb:eb:a1:09:b4:0c:
         0b:55:a8:9b:eb:18:c1:c8:c4:ef:05:66:a8:c5:20:2b:c8:07:
         09:ad:3b:3d:1d:24:11:94:5c:38:f0:92:5d:e1:29:99:e5:56:
         1b:fd:5e:99:c8:a7:ae:11:97:e4:0a:6c:dc:91:06:a6:76:ad:
         76:df:9a:e5:15:cd:ee:89:ec:da:18:d2:c8:ec:5d:41:f4:31:
         81:5b:76:d0:f6:46:a6:87:c9:93:bb:12:2d:25:14:c9:2e:65:
         a1:5b:e5:f6:99:4b:3e:88:a1:27:48:4a:fa:00:6c:f5:4e:b2:
         58:ca:0f:e4:03:5c:d0:2f:84:e6:82:5b:17:76:52:fb:9a:d6:
         cf:52:f7:18:9e:9d:72:e0:71:79:24:b6:a5:4a:60:60:9b:dd:
         fa:ad:b0:ae:f5:bd:d8:dd:93:7b:39:28:75:e7:94:bf:24:8c:
         54:9f:08:16
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2bGbqJwk1DRUMWCTzhHMsgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYjI2OTUyYjEyMTNmOWNiZDFkOGM5NjcxZmIyMjM1N2Fk
OGQzMjIwHhcNMjYwNDE3MTEwMDQ3WhcNMjYwNDE4MTEwMDQ3WjAzMTEwLwYDVQQD
EygwZjRiOGMwMDQzNGEzMDk5ZDYxZTg1NzM2MDg2NTZkMWQ1OGEwMTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMbvTuPRz5HRk8YA931JrhULEndu
UWGuMy9rhXufpKYa8dakMG9H5pgpzJBAa2kwPySaryOKprxeUMQrHqTBuRz1u2RA
xhcKgQVRh9UsyN6RBMA03cAhwZ7tD7/p/dc7kg4p16iSVJq1C103pxywdsLj+gUD
BS8acJMvexKDQ5muJVs0x5PLKaBwXx/YqGJ4s7sWqBpr5AZUw7UJ9fsLjhC0YL2p
eTj6zJhGd6Kvg6kh6KlDb2haAQEF4jjsWDAHx6aDfW+CcQ64nDFrRu5/Vxt+V7Co
y4SgcbiakDGfHL7Hp4FGuflNoBrDyaib55zxyiX7X10junnn2JSvc5w7lwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFA9LjABDSjCZ1h6Fc2CGVtHVigEjMB8GA1UdIwQY
MBaAFPuyaVKxIT+cvR2MlnH7IjV62NMiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS03SnBVckVoUDV5OUhZeVdjZnNpTlhyWTB5SS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvMjU5OThkLTRiN2EtNDJiMi1iNDZk
LWRkMjMyOTFmN2ExOS8xLzEtN0pwVXJFaFA1eTlIWXlXY2ZzaU5YclkweUkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2U1LzI1OTk4ZC00YjdhLTQyYjItYjQ2ZC1kZDIzMjkxZjdh
MTkvMS8xLTdKcFVyRWhQNXk5SFl5V2Nmc2lOWHJZMHlJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACiCN
TiJFgmcJ8GS7PQ1kUfmzMUt6seGxa3yDlrDatw7nEyrQpe0bzIdoq1+pem9Kt7vE
zaYLCXwFYEFO1KWNsok+3DOG49TAd6W6BzubQ9Z/749Ru+uhCbQMC1Wom+sYwcjE
7wVmqMUgK8gHCa07PR0kEZRcOPCSXeEpmeVWG/1emcinrhGX5Aps3JEGpnatdt+a
5RXN7ons2hjSyOxdQfQxgVt20PZGpofJk7sSLSUUyS5loVvl9plLPoihJ0hK+gBs
9U6yWMoP5ANc0C+E5oJbF3ZS+5rWz1L3GJ6dcuBxeSS2pUpgYJvd+q2wrvW92N2T
ezkodeeUvySMVJ8IFg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:50:18 2026 by rpki-client