Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
File:                     Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json)
Hash identifier:          ujog8Bj1MXk63mj2zsYC36PEENkEnbNMympluFIFHlc=
Subject key identifier:   DE:EB:18:C0:A8:A5:3F:ED:2C:D7:52:A9:DF:C9:17:B8:9C:67:4B:C0
Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
Certificate issuer:       /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Certificate serial:       019D97E21630E917B0DD7B2FEC3E3F12343C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
Manifest number:          0E46
Signing time:             Thu 16 Apr 2026 20:01:09 +0000
Manifest this update:     Thu 16 Apr 2026 20:01:09 +0000
Manifest next update:     Fri 17 Apr 2026 20:01:09 +0000
Files and hashes:         1: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: C8XAWgJjdraAbilKmUvngu8Kw3MArKhGsTwSnJ9cuzQ=)
                          2: ioSKJKkF_4HM_F6u6RJnkLY1uWU.roa (hash: WbXNH1FTymiYyoPgw712is108gr5GM8N98thfxq0yjg=)
                          3: s7B9p4vTJAow4sBYhbnToQXwFKo.roa (hash: nHDCoe/MNgEdbVoOhEHnJFTP5BTnyS6pKwNLw3+w7aM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e2:16:30:e9:17:b0:dd:7b:2f:ec:3e:3f:12:34:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
        Validity
            Not Before: Apr 16 20:01:09 2026 GMT
            Not After : Apr 17 20:01:09 2026 GMT
        Subject: CN=deeb18c0a8a53fed2cd752a9dfc917b89c674bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0e:56:98:e5:a8:93:33:d2:ab:7c:50:3a:27:
                    2b:b9:f8:92:5a:88:22:d3:33:f5:b1:1a:9a:42:8e:
                    a0:d7:18:17:1c:5d:13:70:95:43:d9:36:7c:49:5c:
                    8c:78:7b:4f:ec:01:c7:cf:da:bf:63:56:48:63:91:
                    ab:75:70:1b:60:ac:f2:c7:77:ca:4d:7e:d3:d6:0f:
                    6f:41:5a:ae:9a:60:4f:34:00:be:b6:a5:2a:6b:a0:
                    76:17:86:fb:d2:c6:be:ae:e0:59:bc:98:16:04:55:
                    c3:a6:49:38:24:3b:68:e7:d3:ec:89:5d:4d:25:45:
                    0c:b3:88:3c:d0:cb:b1:f1:c8:71:20:9d:ce:c0:73:
                    fa:79:6e:d8:a8:f4:73:8c:9b:98:20:09:6e:2f:e3:
                    6f:3f:31:65:ae:97:11:6c:04:59:bb:26:c2:3a:38:
                    fa:f0:a2:28:1c:30:50:42:e0:e1:94:03:8d:fe:c0:
                    44:e9:1f:14:cc:cf:19:e4:f5:4d:90:83:b2:da:06:
                    86:1b:61:36:68:40:3b:fe:9f:4a:88:48:55:58:3e:
                    1c:c1:4e:67:92:fd:bb:31:ae:fc:d8:0c:e6:81:9c:
                    b5:58:d0:1a:88:9b:74:73:34:9d:c6:98:af:fa:e3:
                    34:14:42:00:9e:6d:5e:fe:d3:c5:ab:7d:aa:5f:41:
                    32:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:EB:18:C0:A8:A5:3F:ED:2C:D7:52:A9:DF:C9:17:B8:9C:67:4B:C0
            X509v3 Authority Key Identifier:
                keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:13:35:d6:32:24:55:5d:1c:3d:b1:97:5c:b7:fe:36:c5:bd:
         05:fa:a7:22:d2:8c:80:51:db:b1:6c:f3:99:12:98:7f:38:99:
         8f:05:58:15:4a:36:53:d9:32:40:eb:e5:d5:46:f1:66:d2:a9:
         66:88:c8:93:be:90:53:5b:3f:83:1e:46:0a:b2:6b:a3:76:f0:
         44:3d:10:f4:1f:e4:a1:d2:c9:70:b1:77:dd:20:42:7f:dc:40:
         87:33:28:df:6e:15:07:26:4b:b3:5c:bf:1b:65:3d:76:5e:33:
         be:26:48:63:ee:af:85:18:2a:16:fc:c8:a8:37:d0:41:de:c4:
         bc:a5:bf:11:43:8e:32:f0:47:71:71:7d:98:21:31:c0:9e:6f:
         48:78:23:86:a9:df:9f:de:8b:5d:05:65:b3:f1:93:24:c5:ca:
         2b:76:47:9b:11:49:0f:e9:1a:2e:76:1a:e6:a8:9b:d8:dc:f0:
         50:c4:81:32:9c:71:6f:82:25:0d:a5:5f:07:8e:e8:94:aa:e2:
         46:b9:81:18:e6:75:9a:27:17:84:9b:fb:99:35:71:73:a6:3e:
         00:1a:6a:9c:a6:d8:bc:db:c2:58:26:97:46:26:62:a4:87:20:
         19:cc:30:0b:ae:25:5f:e9:7d:04:01:0d:19:d4:1c:f8:ad:09:
         56:df:1d:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4hYw6Rew3Xsv7D4/EjQ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMWQyMTU0YjkzMjRlZmIzOWNhMzhiYTE5MzFiYTVkZmI1
OWU4ZmQwHhcNMjYwNDE2MjAwMTA5WhcNMjYwNDE3MjAwMTA5WjAzMTEwLwYDVQQD
EyhkZWViMThjMGE4YTUzZmVkMmNkNzUyYTlkZmM5MTdiODljNjc0YmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA5WmOWokzPSq3xQOicrufiSWogi
0zP1sRqaQo6g1xgXHF0TcJVD2TZ8SVyMeHtP7AHHz9q/Y1ZIY5GrdXAbYKzyx3fK
TX7T1g9vQVqummBPNAC+tqUqa6B2F4b70sa+ruBZvJgWBFXDpkk4JDto59PsiV1N
JUUMs4g80Mux8chxIJ3OwHP6eW7YqPRzjJuYIAluL+NvPzFlrpcRbARZuybCOjj6
8KIoHDBQQuDhlAON/sBE6R8UzM8Z5PVNkIOy2gaGG2E2aEA7/p9KiEhVWD4cwU5n
kv27Ma782AzmgZy1WNAaiJt0czSdxpiv+uM0FEIAnm1e/tPFq32qX0EyeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7rGMCopT/tLNdSqd/JF7icZ0vAMB8GA1UdIwQY
MBaAFBodIVS5Mk77Oco4uhkxul37Wej9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82MGY2MjMtZWQ3OS00MDMwLTg5ODAt
ODkwMWIwNTJiODZiLzEvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC82MGY2MjMtZWQ3OS00MDMwLTg5ODAtODkwMWIwNTJiODZi
LzEvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzxM11jIk
VV0cPbGXXLf+NsW9BfqnItKMgFHbsWzzmRKYfziZjwVYFUo2U9kyQOvl1UbxZtKp
ZojIk76QU1s/gx5GCrJro3bwRD0Q9B/kodLJcLF33SBCf9xAhzMo324VByZLs1y/
G2U9dl4zviZIY+6vhRgqFvzIqDfQQd7EvKW/EUOOMvBHcXF9mCExwJ5vSHgjhqnf
n96LXQVls/GTJMXKK3ZHmxFJD+kaLnYa5qib2NzwUMSBMpxxb4IlDaVfB47olKri
RrmBGOZ1micXhJv7mTVxc6Y+ABpqnKbYvNvCWCaXRiZipIcgGcwwC64lX+l9BAEN
GdQc+K0JVt8dgg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:56:41 2026 by rpki-client