Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
File:                     kB-EOslEjLB3kZF7kDVAFf_iPbc.mft (raw, json)
Hash identifier:          7vzeDzCgWqGYWB1Q3U0BefivJ1qq4e6DVoV+gVPrhzo=
Subject key identifier:   C6:80:98:E4:51:BF:C5:95:09:0D:7B:C8:29:10:A8:FC:F1:A3:04:2F
Authority key identifier: 90:1F:84:3A:C9:44:8C:B0:77:91:91:7B:90:35:40:15:FF:E2:3D:B7
Certificate issuer:       /CN=901f843ac9448cb07791917b90354015ffe23db7
Certificate serial:       019D9962770C714E71AEE4AEBDB6AA3D976D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
Manifest number:          18C5
Signing time:             Fri 17 Apr 2026 03:01:00 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:00 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:00 +0000
Files and hashes:         1: kB-EOslEjLB3kZF7kDVAFf_iPbc.crl (hash: hGqsBAMvPT/IrUvBrRY5TLGvqcolZxgCet6woi6EYDg=)
                          2: sgkOUU34-98oBXZ_m0jBmS5vUec.roa (hash: E8ZXuT+H7colqnHoMLtcicaB+wl08+ImLIK4sH1PrIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:77:0c:71:4e:71:ae:e4:ae:bd:b6:aa:3d:97:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=901f843ac9448cb07791917b90354015ffe23db7
        Validity
            Not Before: Apr 17 03:01:00 2026 GMT
            Not After : Apr 18 03:01:00 2026 GMT
        Subject: CN=c68098e451bfc595090d7bc82910a8fcf1a3042f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:35:3b:40:5f:49:f3:dc:5d:fb:1f:89:1a:fb:
                    b2:44:09:41:b4:4a:18:8e:3b:58:fc:43:4f:59:f4:
                    59:51:0a:00:f7:39:15:4f:49:35:d1:79:3b:c9:8e:
                    38:a5:a1:8d:0e:28:84:be:02:d7:f8:a9:48:b8:90:
                    3a:ba:d3:c1:be:32:89:a3:8d:c3:16:91:ba:2a:ec:
                    99:69:95:2b:ae:a5:d7:8a:d5:1d:b1:a4:ff:b1:52:
                    cb:b0:7a:a9:ea:ae:b1:99:34:ad:7c:fb:46:dc:cb:
                    b4:70:20:8c:8c:85:ce:4c:10:7e:ff:a2:c6:1e:4f:
                    17:2c:ab:eb:52:8e:3b:ea:51:70:38:c0:29:a9:44:
                    91:a6:0e:a7:cb:e0:99:71:10:15:34:6d:5d:57:d4:
                    e3:4b:1d:cd:e8:80:2f:77:09:05:63:ba:61:d7:ba:
                    e1:4a:5b:6d:6f:37:28:15:95:0f:f7:b6:d8:ec:d4:
                    12:21:ae:a0:57:af:e5:5d:78:b2:92:e6:5c:d8:d4:
                    91:e5:c5:19:20:00:d5:2b:48:41:77:da:40:06:97:
                    f9:bc:bf:d0:6c:6a:0d:b6:bc:4e:92:2c:f5:6f:c0:
                    3e:e4:42:6e:da:b9:e1:d3:8e:68:e6:21:4f:8d:00:
                    6a:b5:5c:0f:13:9d:a4:c2:e3:76:73:34:bc:a9:7b:
                    8f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:80:98:E4:51:BF:C5:95:09:0D:7B:C8:29:10:A8:FC:F1:A3:04:2F
            X509v3 Authority Key Identifier:
                keyid:90:1F:84:3A:C9:44:8C:B0:77:91:91:7B:90:35:40:15:FF:E2:3D:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:e8:36:d0:5b:cd:30:72:98:19:76:c0:25:35:53:2b:b2:9b:
         c5:fe:b1:35:ab:64:ad:f2:12:0e:37:b9:b8:d6:bb:46:96:22:
         9f:48:54:6c:48:d5:6a:7a:eb:cb:ce:92:e7:51:d6:94:fd:b9:
         6b:7a:a9:2c:32:ae:2b:5d:f4:40:30:b0:73:98:54:0d:7b:5e:
         08:2e:b7:1f:1f:7a:d1:c7:3f:12:18:a4:13:79:98:dd:96:e9:
         95:d4:e8:98:19:86:8d:ce:4b:b0:8e:1d:7c:72:ca:53:47:e3:
         c8:4f:ad:b1:55:ef:df:82:bb:b9:af:3f:3a:35:12:27:a5:84:
         84:20:78:76:42:68:56:7f:bc:3f:84:c3:18:b2:77:08:16:71:
         3d:ed:db:ca:8f:3e:6d:b9:49:90:fc:82:77:20:d4:91:c2:7a:
         95:b3:9e:79:9d:2b:d8:74:99:37:2b:e6:13:7d:67:2a:4f:ae:
         4b:ab:a6:5a:87:8c:d3:f2:0d:76:e8:8f:3d:a1:b5:f8:89:47:
         96:26:59:58:ef:1c:1d:df:45:0e:0d:59:87:f7:0d:df:a9:57:
         88:1b:5f:b5:82:a7:3d:59:a0:1b:7e:b3:31:0d:77:c0:3d:7c:
         d8:a7:b0:f3:ea:18:01:fc:12:24:8c:3d:85:69:8b:3a:65:e2:
         2e:02:fe:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYncMcU5xruSuvbaqPZdtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwMWY4NDNhYzk0NDhjYjA3NzkxOTE3YjkwMzU0MDE1ZmZl
MjNkYjcwHhcNMjYwNDE3MDMwMTAwWhcNMjYwNDE4MDMwMTAwWjAzMTEwLwYDVQQD
EyhjNjgwOThlNDUxYmZjNTk1MDkwZDdiYzgyOTEwYThmY2YxYTMwNDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTU7QF9J89xd+x+JGvuyRAlBtEoY
jjtY/ENPWfRZUQoA9zkVT0k10Xk7yY44paGNDiiEvgLX+KlIuJA6utPBvjKJo43D
FpG6KuyZaZUrrqXXitUdsaT/sVLLsHqp6q6xmTStfPtG3Mu0cCCMjIXOTBB+/6LG
Hk8XLKvrUo476lFwOMApqUSRpg6ny+CZcRAVNG1dV9TjSx3N6IAvdwkFY7ph17rh
SlttbzcoFZUP97bY7NQSIa6gV6/lXXiykuZc2NSR5cUZIADVK0hBd9pABpf5vL/Q
bGoNtrxOkiz1b8A+5EJu2rnh045o5iFPjQBqtVwPE52kwuN2czS8qXuPiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMaAmORRv8WVCQ17yCkQqPzxowQvMB8GA1UdIwQY
MBaAFJAfhDrJRIywd5GRe5A1QBX/4j23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0ItRU9zbEVqTEIza1pGN2tEVkFGZl9pUGJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wM2M3MzQtNzU5OC00YmQ3LWFlMjEt
YjIwNGY5ZmNhZGI2LzEva0ItRU9zbEVqTEIza1pGN2tEVkFGZl9pUGJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8wM2M3MzQtNzU5OC00YmQ3LWFlMjEtYjIwNGY5ZmNhZGI2
LzEva0ItRU9zbEVqTEIza1pGN2tEVkFGZl9pUGJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+g20FvN
MHKYGXbAJTVTK7Kbxf6xNatkrfISDje5uNa7RpYin0hUbEjVanrry86S51HWlP25
a3qpLDKuK130QDCwc5hUDXteCC63Hx960cc/EhikE3mY3ZbpldTomBmGjc5LsI4d
fHLKU0fjyE+tsVXv34K7ua8/OjUSJ6WEhCB4dkJoVn+8P4TDGLJ3CBZxPe3byo8+
bblJkPyCdyDUkcJ6lbOeeZ0r2HSZNyvmE31nKk+uS6umWoeM0/INduiPPaG1+IlH
liZZWO8cHd9FDg1Zh/cN36lXiBtftYKnPVmgG36zMQ13wD182Kew8+oYAfwSJIw9
hWmLOmXiLgL+gg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:52:53 2026 by rpki-client