Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
File:                     ysIWQb28-sJMVLakhZSDxeQWQLY.mft (raw, json)
Hash identifier:          D8dUSajUvoRDuSeh0FJgaQm3jxMb2wJHX7c2olCf/zc=
Subject key identifier:   2A:BA:80:28:59:BF:B3:8F:77:32:E8:A4:8B:61:7A:54:C5:E2:72:C1
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Certificate issuer:       /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial:       019D992B73AD0D74841F22AF34771A3888BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
Manifest number:          18C8
Signing time:             Fri 17 Apr 2026 02:00:54 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:54 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:54 +0000
Files and hashes:         1: 3I0ccbWDDm2AJ0Og3v2UYgTm0kU.roa (hash: vjrwzp/zqZBxc6wOSE5N6kztkRal6ScIrhGe+5Xi3bI=)
                          2: MEjN6NiBRUno6jMiVrI76qBgUXE.roa (hash: s2vQYXj0w7LOeK8L7upi2AL1yMhCtXme3TjzeGEM0n8=)
                          3: ZknLlp2vh9WJk0H7iXXLOw9c2pU.roa (hash: S6ynW8hTvcrSOBVEp2ULNqC2ZlGWhPVxKi1FBjbkc4c=)
                          4: ysIWQb28-sJMVLakhZSDxeQWQLY.crl (hash: w7VSdSSYpdJyhGEJS6UD4wzXjRlXKVaTIZxXBQprCVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:73:ad:0d:74:84:1f:22:af:34:77:1a:38:88:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
        Validity
            Not Before: Apr 17 02:00:54 2026 GMT
            Not After : Apr 18 02:00:54 2026 GMT
        Subject: CN=2aba802859bfb38f7732e8a48b617a54c5e272c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d0:d9:0d:ac:51:04:f0:d6:1b:b8:3b:41:4a:
                    ad:50:ec:8b:d7:ec:7a:a7:d4:31:67:58:2d:bd:6d:
                    28:12:50:52:f3:8e:b8:6c:ec:57:48:61:9c:be:e7:
                    39:01:94:c0:57:1e:fd:0d:e9:0a:36:70:79:fa:44:
                    7a:40:ba:db:aa:f7:06:ba:87:7f:68:49:6a:f1:fb:
                    23:34:06:2e:da:85:d7:df:db:56:ad:69:b1:81:7c:
                    94:91:7d:8e:78:30:7f:32:6d:a7:aa:5e:22:3a:63:
                    6f:61:5c:74:49:43:f3:b3:9c:dd:56:17:3c:85:8e:
                    98:ba:63:ef:25:02:40:00:44:f8:ae:3d:ad:fd:25:
                    2c:98:af:4d:df:f6:97:37:72:6d:ec:6b:90:5d:87:
                    38:c6:10:77:af:68:bb:d5:3f:bd:df:b4:c2:bf:49:
                    28:1e:d2:51:e0:ca:e8:2a:9a:05:38:99:e3:3e:73:
                    f9:d1:00:4a:41:56:ab:b1:2f:1a:9a:dc:ea:1d:97:
                    ec:45:d4:ce:58:da:58:ef:a8:bc:bc:1e:a8:14:40:
                    5d:10:29:61:b8:ed:c4:5e:c9:1f:27:01:03:b7:dc:
                    8f:3f:4e:a4:cc:7e:0b:51:2e:6b:9d:c9:bb:12:ab:
                    05:00:6a:37:b7:91:ac:db:3f:59:a2:f0:f3:da:e2:
                    88:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BA:80:28:59:BF:B3:8F:77:32:E8:A4:8B:61:7A:54:C5:E2:72:C1
            X509v3 Authority Key Identifier:
                keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:51:b9:7f:86:c4:f7:07:97:90:c2:9f:76:09:cf:80:10:98:
         f7:97:54:5c:38:84:a7:4e:0b:35:e2:fc:23:53:72:38:e6:48:
         e0:0d:d3:db:49:b6:ea:c8:98:5d:b5:a4:26:83:c9:fa:68:69:
         99:a5:5a:c9:a5:da:63:ae:71:45:b8:1e:3d:c2:67:32:1f:26:
         47:a2:b8:81:5b:13:a6:a9:fb:f6:3b:f2:0b:76:fb:3d:ee:bf:
         7e:f9:b4:7c:5a:1d:37:97:9c:a3:1f:99:c5:0a:35:7b:27:7f:
         c5:39:55:b9:28:ae:cd:72:5b:09:2b:9a:a2:cb:c3:6c:f6:c6:
         b5:c9:0c:b2:e7:e6:12:ce:67:c1:95:f1:c8:9c:c1:b1:8a:0e:
         26:fc:51:4c:46:d4:e3:c5:4c:9a:a5:d4:95:83:70:d6:bb:97:
         29:ed:f2:8c:f8:7c:90:66:a0:59:04:7c:b4:35:ac:e0:5d:83:
         80:a0:f8:b2:5c:e5:f2:5f:f4:ab:23:a7:07:16:52:0e:d4:47:
         9e:37:d8:97:0c:b4:8d:63:4d:f1:81:ac:99:e4:21:b9:ee:52:
         3d:f9:43:b9:a2:68:12:98:08:bd:cf:3c:a0:35:5f:2c:77:de:
         c7:b6:5c:d8:57:31:b5:d4:14:02:24:28:46:e8:67:fc:de:18:
         ea:42:fa:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK3OtDXSEHyKvNHcaOIi/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYzIxNjQxYmRiY2ZhYzI0YzU0YjZhNDg1OTQ4M2M1ZTQx
NjQwYjYwHhcNMjYwNDE3MDIwMDU0WhcNMjYwNDE4MDIwMDU0WjAzMTEwLwYDVQQD
EygyYWJhODAyODU5YmZiMzhmNzczMmU4YTQ4YjYxN2E1NGM1ZTI3MmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdDZDaxRBPDWG7g7QUqtUOyL1+x6
p9QxZ1gtvW0oElBS8464bOxXSGGcvuc5AZTAVx79DekKNnB5+kR6QLrbqvcGuod/
aElq8fsjNAYu2oXX39tWrWmxgXyUkX2OeDB/Mm2nql4iOmNvYVx0SUPzs5zdVhc8
hY6YumPvJQJAAET4rj2t/SUsmK9N3/aXN3Jt7GuQXYc4xhB3r2i71T+937TCv0ko
HtJR4MroKpoFOJnjPnP50QBKQVarsS8amtzqHZfsRdTOWNpY76i8vB6oFEBdEClh
uO3EXskfJwEDt9yPP06kzH4LUS5rncm7EqsFAGo3t5Gs2z9ZovDz2uKIQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCq6gChZv7OPdzLopIthelTF4nLBMB8GA1UdIwQY
MBaAFMrCFkG9vPrCTFS2pIWUg8XkFkC2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUt
OGFiZjVlZTZjNGFkLzEveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUtOGFiZjVlZTZjNGFk
LzEveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiVG5f4bE
9weXkMKfdgnPgBCY95dUXDiEp04LNeL8I1NyOOZI4A3T20m26siYXbWkJoPJ+mhp
maVayaXaY65xRbgePcJnMh8mR6K4gVsTpqn79jvyC3b7Pe6/fvm0fFodN5ecox+Z
xQo1eyd/xTlVuSiuzXJbCSuaosvDbPbGtckMsufmEs5nwZXxyJzBsYoOJvxRTEbU
48VMmqXUlYNw1ruXKe3yjPh8kGagWQR8tDWs4F2DgKD4slzl8l/0qyOnBxZSDtRH
njfYlwy0jWNN8YGsmeQhue5SPflDuaJoEpgIvc88oDVfLHfex7Zc2FcxtdQUAiQo
Ruhn/N4Y6kL6Nw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:56:29 2026 by rpki-client