Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
File:                     0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft (raw, json)
Hash identifier:          9w6t8BSsfwiZHxzGrCnRrPoUbtAGPwe/Wg/tkD8xRoE=
Subject key identifier:   8A:DC:FA:A6:AF:4B:BA:74:15:A9:11:97:D1:6F:62:70:B5:B3:33:ED
Authority key identifier: D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
Certificate issuer:       /CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Certificate serial:       019D9818775B263ED19799C419AD904915EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
Manifest number:          18C3
Signing time:             Thu 16 Apr 2026 21:00:33 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:33 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:33 +0000
Files and hashes:         1: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl (hash: b6Ou+o4xB3UEfiG3JJ4ti9trN03e6NSmUUxGzCDyjUE=)
                          2: knQYsypbRhqwvEH3fTnKrdPWqWY.roa (hash: WNEtwLYJf9qeEVFV6iUsuz+sfad0kenK8BH3vda/2QA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:77:5b:26:3e:d1:97:99:c4:19:ad:90:49:15:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
        Validity
            Not Before: Apr 16 21:00:33 2026 GMT
            Not After : Apr 17 21:00:33 2026 GMT
        Subject: CN=8adcfaa6af4bba7415a91197d16f6270b5b333ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5c:7d:ef:76:a7:a5:ed:73:f9:0f:19:ba:03:
                    4b:a8:20:2e:c7:9a:69:77:e1:66:d3:c9:b2:f9:cf:
                    ff:11:67:4e:d4:85:4a:ad:1c:5e:a4:d6:08:4d:c5:
                    4b:5e:cc:28:9c:9e:31:fc:93:aa:96:c3:22:64:8c:
                    14:80:ab:d5:c2:8d:16:61:68:3d:02:e7:ec:d5:b5:
                    b2:52:a8:4d:1a:04:aa:f6:6d:b4:c6:90:96:e6:dd:
                    0f:5f:72:48:c7:58:5f:72:e4:98:32:57:14:43:97:
                    94:05:42:12:79:7a:1e:7c:8f:5f:09:54:56:26:0d:
                    d8:7f:2e:ad:9d:60:50:8d:4b:d9:fd:98:22:24:b8:
                    23:72:c3:fc:98:60:08:9a:a8:5a:88:8a:99:31:74:
                    27:5e:04:25:12:1a:2c:36:33:8e:34:80:7f:3b:00:
                    e3:df:f1:70:64:ff:3f:47:dc:dc:e2:d7:28:e2:5c:
                    47:d4:f4:ec:20:a1:ac:88:7c:69:fd:73:ce:f9:9a:
                    2e:2d:80:d1:d4:4f:92:c5:21:15:29:80:1f:95:26:
                    1e:cb:f0:7d:87:f7:aa:de:b9:6a:e9:e2:73:91:9e:
                    eb:e6:a8:d7:3c:63:82:ea:3a:96:0e:b4:dd:ed:20:
                    08:0b:0c:27:3d:8c:c7:f8:f2:79:57:ef:e9:c3:b2:
                    99:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DC:FA:A6:AF:4B:BA:74:15:A9:11:97:D1:6F:62:70:B5:B3:33:ED
            X509v3 Authority Key Identifier:
                keyid:D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:64:06:0b:b8:1f:6e:13:92:34:22:26:9b:86:40:ff:f9:6d:
         e5:0e:85:f8:4f:0f:a7:cc:d9:59:9c:f2:54:d6:83:ea:de:15:
         fa:5f:9b:ad:83:d7:8b:54:3a:f6:b4:76:d0:2e:b8:c6:2d:b9:
         5b:c5:98:6e:c4:d5:1c:13:2e:fe:39:d7:d2:36:4f:48:a9:85:
         19:5c:44:7d:18:86:55:d2:c1:8c:c6:1f:2a:ed:e4:1c:38:aa:
         eb:47:b8:7b:a4:45:6f:58:8d:f2:b0:ec:b9:f6:cb:bb:0b:a3:
         dd:3b:65:d0:85:92:e4:9b:6a:32:f7:bd:81:60:b2:fe:e4:20:
         3b:a7:35:6d:40:fe:46:79:86:fa:c1:1f:7e:42:2b:eb:9a:29:
         63:9c:64:10:5d:59:55:2d:9f:d9:f0:6e:0d:93:6f:8d:30:07:
         8c:32:a4:d1:fa:7a:33:af:e5:b6:ef:2c:f3:9b:e4:a0:eb:11:
         d4:cb:e9:1f:d5:96:93:e1:9f:07:83:65:e3:ad:5e:82:d9:46:
         61:3b:f6:ea:1b:14:21:38:00:7f:5a:7d:af:9f:6a:ad:ac:b3:
         2b:63:57:16:67:41:b5:b2:6a:67:9f:d5:20:32:fc:bf:ff:f0:
         31:27:ba:08:f2:ff:ab:cc:cd:95:40:94:f9:67:aa:21:37:db:
         6e:73:90:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGHdbJj7Rl5nEGa2QSRXrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYzE1ZjBhZWMwZTMzNjY2MmRlOWY2MzcxNTIxY2UyNWU4
ZGUxMGYwHhcNMjYwNDE2MjEwMDMzWhcNMjYwNDE3MjEwMDMzWjAzMTEwLwYDVQQD
Eyg4YWRjZmFhNmFmNGJiYTc0MTVhOTExOTdkMTZmNjI3MGI1YjMzM2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lx973anpe1z+Q8ZugNLqCAux5pp
d+Fm08my+c//EWdO1IVKrRxepNYITcVLXswonJ4x/JOqlsMiZIwUgKvVwo0WYWg9
Aufs1bWyUqhNGgSq9m20xpCW5t0PX3JIx1hfcuSYMlcUQ5eUBUISeXoefI9fCVRW
Jg3Yfy6tnWBQjUvZ/ZgiJLgjcsP8mGAImqhaiIqZMXQnXgQlEhosNjOONIB/OwDj
3/FwZP8/R9zc4tco4lxH1PTsIKGsiHxp/XPO+ZouLYDR1E+SxSEVKYAflSYey/B9
h/eq3rlq6eJzkZ7r5qjXPGOC6jqWDrTd7SAICwwnPYzH+PJ5V+/pw7KZVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrc+qavS7p0FakRl9FvYnC1szPtMB8GA1UdIwQY
MBaAFNHBXwrsDjNmYt6fY3FSHOJejeEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGNGZkN1d09NMlppM3A5amNWSWM0bDZONFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jZDIzMWItZmYxZS00YjkzLWE1Yjct
ODVkNjM0YzViZDUwLzEvMGNGZkN1d09NMlppM3A5amNWSWM0bDZONFE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9jZDIzMWItZmYxZS00YjkzLWE1YjctODVkNjM0YzViZDUw
LzEvMGNGZkN1d09NMlppM3A5amNWSWM0bDZONFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADGQGC7gf
bhOSNCImm4ZA//lt5Q6F+E8Pp8zZWZzyVNaD6t4V+l+brYPXi1Q69rR20C64xi25
W8WYbsTVHBMu/jnX0jZPSKmFGVxEfRiGVdLBjMYfKu3kHDiq60e4e6RFb1iN8rDs
ufbLuwuj3Ttl0IWS5JtqMve9gWCy/uQgO6c1bUD+RnmG+sEffkIr65opY5xkEF1Z
VS2f2fBuDZNvjTAHjDKk0fp6M6/ltu8s85vkoOsR1MvpH9WWk+GfB4Nl461egtlG
YTv26hsUITgAf1p9r59qrayzK2NXFmdBtbJqZ5/VIDL8v//wMSe6CPL/q8zNlUCU
+WeqITfbbnOQkg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:29 2026 by rpki-client