Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
File:                     nkuBjJLE5paGs8KBAIVd-lA6BXo.mft (raw, json)
Hash identifier:          VVLsl/Od1Xy3RAFNVqm9WwPpWtFu2nvCZQLovnX0iOg=
Subject key identifier:   11:54:B2:08:3B:13:CA:2B:CC:03:B0:C2:E0:B8:B4:AF:87:B8:01:1D
Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
Certificate issuer:       /CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Certificate serial:       019DA41CCBA74329D28718510A828A291D90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
Manifest number:          18C4
Signing time:             Sun 19 Apr 2026 05:00:43 +0000
Manifest this update:     Sun 19 Apr 2026 05:00:43 +0000
Manifest next update:     Mon 20 Apr 2026 05:00:43 +0000
Files and hashes:         1: kX9kKPziKiDt_OCvG008KoPTi9Q.asa (hash: QcEXl0ZFekAFdl0Cjpyri2azBr3Ni8j/8WTxRRI8zf8=)
                          2: nkuBjJLE5paGs8KBAIVd-lA6BXo.crl (hash: W3l12VttL85Nvl9ziFDOvvTyqXfhcX/sZ+betPJZEVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:1c:cb:a7:43:29:d2:87:18:51:0a:82:8a:29:1d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a
        Validity
            Not Before: Apr 19 05:00:43 2026 GMT
            Not After : Apr 20 05:00:43 2026 GMT
        Subject: CN=1154b2083b13ca2bcc03b0c2e0b8b4af87b8011d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ba:26:a2:08:63:e5:6d:77:0e:a9:65:de:90:
                    8f:f4:0e:e7:d5:1e:c6:ee:d9:8e:a8:d6:02:10:c8:
                    eb:ee:30:ef:19:cb:dc:47:24:17:57:e1:f5:b8:46:
                    c2:1f:ac:5e:14:78:fc:58:c7:ed:b0:1c:e7:b8:45:
                    9f:98:84:96:b2:3f:16:7e:3a:f6:03:74:be:9f:a2:
                    33:7e:45:8b:24:46:61:91:49:f0:b3:36:1b:3e:0d:
                    3a:bf:b0:58:65:31:54:75:a0:cd:cd:80:d0:10:30:
                    69:3c:db:57:fb:ea:06:bc:0a:ba:9d:9a:d6:10:8b:
                    ba:8c:83:58:05:29:4e:37:5d:fc:75:47:fc:39:d5:
                    6a:61:59:12:75:e5:f6:c0:81:5b:78:60:22:0f:13:
                    52:6a:f9:c9:1c:ba:44:cd:dc:73:fd:23:a8:9e:3f:
                    09:59:4d:67:5c:3b:67:e1:1b:b0:39:a7:7e:06:5f:
                    a6:e9:a1:2e:c1:9e:99:07:f3:f5:ad:cf:8b:65:d6:
                    43:6d:7d:b1:73:4c:2a:cd:9a:26:95:da:4e:32:08:
                    b6:67:16:6e:f1:f7:85:89:a5:6c:76:e6:87:33:5b:
                    e7:b6:e6:d5:4a:29:d8:df:86:33:77:3b:00:ca:28:
                    60:43:c2:21:2d:d0:16:fa:3b:9e:ca:25:8f:ed:ab:
                    ac:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:54:B2:08:3B:13:CA:2B:CC:03:B0:C2:E0:B8:B4:AF:87:B8:01:1D
            X509v3 Authority Key Identifier:
                keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:14:dd:dd:41:9d:90:9b:f9:82:31:80:dc:40:98:b7:b9:17:
         8c:9c:19:ed:c5:32:26:fb:13:e7:3c:32:ef:41:c8:e7:e6:ac:
         bb:78:79:3d:55:40:49:5a:35:90:c8:3e:44:6d:e7:c1:e3:d6:
         fe:0d:ea:f0:9f:8e:cd:35:40:12:b4:6f:6f:f7:ce:cf:3e:8a:
         ad:e8:6b:f8:82:3c:9e:42:f3:26:7f:c9:e6:71:3d:43:4b:8f:
         e2:89:ec:20:a2:b5:ad:00:1c:8b:27:a4:c7:9e:0a:ee:b9:40:
         20:28:4c:f4:d9:fe:1b:1b:73:d4:f1:68:9b:ba:3a:ae:be:b7:
         34:e0:4d:d1:18:d0:29:66:40:44:2d:f9:aa:e6:90:3e:9d:c4:
         f7:66:42:3b:50:d4:6f:33:18:30:e9:b5:b3:d5:a9:cf:67:d8:
         28:a7:c6:7d:d8:29:19:6c:42:5d:1e:25:d3:23:a4:ef:14:d7:
         89:65:ee:d8:f5:e2:de:ae:71:36:22:65:0e:15:d4:8e:8f:aa:
         4d:12:a0:a6:bf:0b:cc:dc:99:d9:f2:ec:0e:6a:b7:08:6a:8c:
         85:5c:f1:ce:36:05:23:2a:8a:92:c4:d4:83:77:cf:6c:c2:dc:
         7c:3e:31:95:ef:41:b0:8f:f9:d3:38:77:c4:b4:e0:91:67:c0:
         98:3d:df:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kHMunQynShxhRCoKKKR2QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGI4MThjOTJjNGU2OTY4NmIzYzI4MTAwODU1ZGZhNTAz
YTA1N2EwHhcNMjYwNDE5MDUwMDQzWhcNMjYwNDIwMDUwMDQzWjAzMTEwLwYDVQQD
EygxMTU0YjIwODNiMTNjYTJiY2MwM2IwYzJlMGI4YjRhZjg3YjgwMTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7omoghj5W13Dqll3pCP9A7n1R7G
7tmOqNYCEMjr7jDvGcvcRyQXV+H1uEbCH6xeFHj8WMftsBznuEWfmISWsj8Wfjr2
A3S+n6IzfkWLJEZhkUnwszYbPg06v7BYZTFUdaDNzYDQEDBpPNtX++oGvAq6nZrW
EIu6jINYBSlON138dUf8OdVqYVkSdeX2wIFbeGAiDxNSavnJHLpEzdxz/SOonj8J
WU1nXDtn4RuwOad+Bl+m6aEuwZ6ZB/P1rc+LZdZDbX2xc0wqzZomldpOMgi2ZxZu
8feFiaVsduaHM1vntubVSinY34YzdzsAyihgQ8IhLdAW+jueyiWP7ausbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFUsgg7E8orzAOwwuC4tK+HuAEdMB8GA1UdIwQY
MBaAFJ5LgYySxOaWhrPCgQCFXfpQOgV6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmt1QmpKTEU1cGFHczhLQkFJVmQtbEE2QlhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lNGU4MWMtNGU4NC00NTI0LThkZGMt
NDAxMGEzNmQ5Y2RkLzEvbmt1QmpKTEU1cGFHczhLQkFJVmQtbEE2QlhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9lNGU4MWMtNGU4NC00NTI0LThkZGMtNDAxMGEzNmQ5Y2Rk
LzEvbmt1QmpKTEU1cGFHczhLQkFJVmQtbEE2QlhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAExTd3UGd
kJv5gjGA3ECYt7kXjJwZ7cUyJvsT5zwy70HI5+asu3h5PVVASVo1kMg+RG3nwePW
/g3q8J+OzTVAErRvb/fOzz6Krehr+II8nkLzJn/J5nE9Q0uP4onsIKK1rQAciyek
x54K7rlAIChM9Nn+Gxtz1PFom7o6rr63NOBN0RjQKWZARC35quaQPp3E92ZCO1DU
bzMYMOm1s9Wpz2fYKKfGfdgpGWxCXR4l0yOk7xTXiWXu2PXi3q5xNiJlDhXUjo+q
TRKgpr8LzNyZ2fLsDmq3CGqMhVzxzjYFIyqKksTUg3fPbMLcfD4xle9BsI/50zh3
xLTgkWfAmD3fgg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:23 2026 by rpki-client