Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
File:                     t7wa3782Jkj8Y1wzMvODvLwB53Q.mft (raw, json)
Hash identifier:          1Ig0sbFdVsRJLshVGUjtQMFut3KNeTW+h6uVKHDF6+c=
Subject key identifier:   B0:0C:80:84:EB:3C:D8:AF:1E:FB:59:B5:33:3B:86:3A:D9:E7:6B:D1
Authority key identifier: B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74
Certificate issuer:       /CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
Certificate serial:       019D9BBE951A31D88838BD454FD4DAFEFC51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 14:00:51 +0000
Manifest this update:     Fri 17 Apr 2026 14:00:51 +0000
Manifest next update:     Sat 18 Apr 2026 14:00:51 +0000
Files and hashes:         1: 6KkpY3UMlsn4lmwRTfmLoXlCvZo.roa (hash: h6bDcvlLQ2oWH39OehL7j4jN9y68+hpsxgqt/2oRmFc=)
                          2: t7wa3782Jkj8Y1wzMvODvLwB53Q.crl (hash: bsIYFdUseI2f5xpXFpLCBcRGvZLxfg9x8nSaEalSuwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:95:1a:31:d8:88:38:bd:45:4f:d4:da:fe:fc:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
        Validity
            Not Before: Apr 17 14:00:51 2026 GMT
            Not After : Apr 18 14:00:51 2026 GMT
        Subject: CN=b00c8084eb3cd8af1efb59b5333b863ad9e76bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:67:c5:45:4f:08:ec:5c:55:4b:61:42:e9:d1:
                    63:34:c1:10:05:55:8f:9f:ae:1e:09:3d:b8:f9:dc:
                    00:ea:6c:e3:3f:4b:08:77:a2:cc:cf:97:6c:0f:48:
                    fe:50:17:89:99:aa:15:75:28:8b:9c:93:16:aa:b7:
                    1b:df:ee:10:db:c7:25:9c:34:21:22:c9:fc:fa:82:
                    bc:c8:3a:aa:d0:f8:23:d8:80:cb:8f:8a:b1:3b:f3:
                    c7:d7:0a:67:82:50:28:89:9a:66:c1:ed:e7:1d:79:
                    5b:56:04:b4:b1:a3:0b:fd:05:36:28:53:cf:82:df:
                    ca:b7:3e:76:31:57:bd:d2:b4:ae:83:91:10:d0:5f:
                    11:50:28:90:8a:c0:db:1b:ab:64:8f:db:60:97:34:
                    8b:17:48:d7:6d:d4:8a:ba:5b:8a:b8:67:9c:90:d1:
                    02:83:c6:65:03:32:63:a6:39:ae:c2:01:35:e3:29:
                    7d:d1:6e:18:c9:72:0b:f5:2c:66:15:ee:ea:1f:76:
                    fe:1e:2a:bd:2b:df:cf:3c:55:e5:53:dd:28:cc:dd:
                    c0:ef:8f:01:1b:a9:2e:47:e0:f6:36:85:23:50:55:
                    e4:31:3a:ac:bc:02:5c:43:3a:71:ed:5e:f4:c2:34:
                    ee:fc:51:a6:bd:a4:2c:07:fe:78:b5:55:1c:05:ac:
                    42:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0C:80:84:EB:3C:D8:AF:1E:FB:59:B5:33:3B:86:3A:D9:E7:6B:D1
            X509v3 Authority Key Identifier:
                keyid:B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:8f:cb:22:de:fe:f7:b0:18:60:70:b1:c9:29:48:30:d8:5e:
         a0:a5:7f:d6:2f:59:8f:bf:a4:ad:97:d3:f5:6d:08:a6:1f:02:
         50:d8:85:fa:23:b4:ad:7f:09:bd:06:6d:93:f0:72:ed:e0:f4:
         05:21:0e:03:ec:dd:41:81:ca:bb:1d:8e:78:13:58:55:01:03:
         8a:a5:93:79:52:2c:6b:7c:61:11:dc:c5:bd:23:6a:66:d4:c0:
         37:be:40:6e:3c:d8:f2:fb:ef:71:6a:b5:a0:44:42:bc:d0:28:
         2f:a3:03:51:b8:cc:ad:31:5f:c8:9f:fc:88:ee:26:39:4e:28:
         a0:bd:ad:c7:af:1f:d5:86:b8:c2:79:31:ff:66:58:1a:78:9a:
         4d:68:08:bc:53:9e:f7:2e:fb:52:e6:12:5a:63:bf:94:a3:9e:
         00:c8:fb:8e:2d:8f:c9:65:55:ce:8b:6d:e8:cc:49:46:d9:ec:
         9d:9a:b7:e7:05:bc:fd:41:2c:80:53:b5:c6:aa:16:2a:d8:40:
         b9:f3:f4:24:e1:78:46:2a:b3:f6:27:c3:42:84:e0:46:58:ba:
         60:19:d8:2b:aa:df:e7:09:63:57:1d:ff:e4:77:0e:9b:9a:e7:
         17:89:a4:18:68:2d:96:3d:76:73:da:b7:8a:a0:bd:df:cb:4c:
         d9:76:dc:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvpUaMdiIOL1FT9Ta/vxRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YmMxYWRmYmYzNjI2NDhmYzYzNWMzMzMyZjM4M2JjYmMw
MWU3NzQwHhcNMjYwNDE3MTQwMDUxWhcNMjYwNDE4MTQwMDUxWjAzMTEwLwYDVQQD
EyhiMDBjODA4NGViM2NkOGFmMWVmYjU5YjUzMzNiODYzYWQ5ZTc2YmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2fFRU8I7FxVS2FC6dFjNMEQBVWP
n64eCT24+dwA6mzjP0sId6LMz5dsD0j+UBeJmaoVdSiLnJMWqrcb3+4Q28clnDQh
Isn8+oK8yDqq0Pgj2IDLj4qxO/PH1wpnglAoiZpmwe3nHXlbVgS0saML/QU2KFPP
gt/Ktz52MVe90rSug5EQ0F8RUCiQisDbG6tkj9tglzSLF0jXbdSKuluKuGeckNEC
g8ZlAzJjpjmuwgE14yl90W4YyXIL9SxmFe7qH3b+Hiq9K9/PPFXlU90ozN3A748B
G6kuR+D2NoUjUFXkMTqsvAJcQzpx7V70wjTu/FGmvaQsB/54tVUcBaxCiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAMgITrPNivHvtZtTM7hjrZ52vRMB8GA1UdIwQY
MBaAFLe8Gt+/NiZI/GNcMzLzg7y8Aed0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDd3YTM3ODJKa2o4WTF3ek12T0R2THdCNTNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xYzlkYzctNzhhNS00ZDhhLWIxODUt
ZmQ2MDZiMDZhMDFhLzEvdDd3YTM3ODJKa2o4WTF3ek12T0R2THdCNTNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xYzlkYzctNzhhNS00ZDhhLWIxODUtZmQ2MDZiMDZhMDFh
LzEvdDd3YTM3ODJKa2o4WTF3ek12T0R2THdCNTNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4/LIt7+
97AYYHCxySlIMNheoKV/1i9Zj7+krZfT9W0Iph8CUNiF+iO0rX8JvQZtk/By7eD0
BSEOA+zdQYHKux2OeBNYVQEDiqWTeVIsa3xhEdzFvSNqZtTAN75AbjzY8vvvcWq1
oERCvNAoL6MDUbjMrTFfyJ/8iO4mOU4ooL2tx68f1Ya4wnkx/2ZYGniaTWgIvFOe
9y77UuYSWmO/lKOeAMj7ji2PyWVVzott6MxJRtnsnZq35wW8/UEsgFO1xqoWKthA
ufP0JOF4Riqz9ifDQoTgRli6YBnYK6rf5wljVx3/5HcOm5rnF4mkGGgtlj12c9q3
iqC938tM2XbcdA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:44:30 2026 by rpki-client