Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
File:                     eDdfthaLNUhBuR0wX50M3AyxUB0.mft (raw, json)
Hash identifier:          pgJhQAxhasXHSWvFmInlHfG18FbUSkHv7kbDSmDcS0o=
Subject key identifier:   4C:44:9A:F3:9F:F8:77:FA:48:5C:B2:D6:FB:8E:20:2B:3D:EB:FA:1C
Authority key identifier: 78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D
Certificate issuer:       /CN=78375fb6168b354841b91d305f9d0cdc0cb1501d
Certificate serial:       019D9961F00212516F8E490B2C6B6990747C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 03:00:25 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:25 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:25 +0000
Files and hashes:         1: SVRG13qKLtkzZ7xaiN4uxzkXNhs.roa (hash: VPDmIAQy3HDkJPWlWJozVLwRBhg5jx5dxfsVwJCTd0I=)
                          2: eDdfthaLNUhBuR0wX50M3AyxUB0.crl (hash: LNzs1JgXWff9E2hU9bQolydqvnMgV+RIthNOND5Gv4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:61:f0:02:12:51:6f:8e:49:0b:2c:6b:69:90:74:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78375fb6168b354841b91d305f9d0cdc0cb1501d
        Validity
            Not Before: Apr 17 03:00:25 2026 GMT
            Not After : Apr 18 03:00:25 2026 GMT
        Subject: CN=4c449af39ff877fa485cb2d6fb8e202b3debfa1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:39:12:29:6a:99:78:5f:82:fc:b5:1a:f2:1e:
                    6b:bd:39:59:33:07:38:d0:b0:4d:c5:da:1d:db:df:
                    ad:06:c3:fc:db:36:72:1b:93:bd:c4:66:cc:d9:22:
                    75:19:f0:d8:07:a6:bb:bb:9c:1f:aa:4b:13:ba:89:
                    1c:8c:95:6f:1e:54:44:20:c9:4c:13:21:b7:e2:dc:
                    f9:06:45:e5:81:76:da:4a:3c:7e:94:47:41:31:d0:
                    bf:64:6c:10:6c:d8:c3:38:91:f0:a6:c7:10:b8:25:
                    d1:ac:5f:56:90:6a:f7:74:82:e1:ef:a9:60:85:bc:
                    68:d1:b9:dd:32:41:9f:f3:c9:2e:7a:59:24:30:7e:
                    58:d8:43:c2:a9:a7:8b:7f:9f:8d:45:2d:1b:07:b5:
                    9c:f4:10:c0:f1:30:71:14:e5:4d:73:56:04:82:a9:
                    3e:6f:5a:ff:cd:fb:5f:65:df:6c:f0:96:69:85:33:
                    d0:b2:4b:c2:a1:63:32:80:d0:f4:75:05:69:61:db:
                    9c:f3:be:18:2b:52:df:b2:0f:36:9d:4e:32:14:a0:
                    ef:72:a1:e1:d9:fe:75:41:0a:dd:d7:f8:6a:6e:a3:
                    5e:e4:e3:1a:7d:ea:d7:34:ab:11:95:d2:2e:8b:4a:
                    56:86:0f:43:60:df:a5:0f:ac:ed:c2:52:cc:78:7d:
                    0e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:44:9A:F3:9F:F8:77:FA:48:5C:B2:D6:FB:8E:20:2B:3D:EB:FA:1C
            X509v3 Authority Key Identifier:
                keyid:78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:74:63:fb:22:be:25:20:44:48:f2:1f:17:10:c6:9a:27:13:
         06:f7:e4:a2:f0:6b:1b:53:61:d9:d3:a4:da:77:d6:e9:50:e9:
         42:06:82:11:16:d4:d6:34:44:70:a5:7c:19:5d:f9:59:f9:d3:
         26:de:d6:a3:d3:3b:2b:ba:4c:96:2a:21:6e:28:11:89:f9:ed:
         6b:30:af:e6:ed:23:16:0d:3b:93:89:6e:5a:3e:c8:b7:c3:c9:
         09:f1:6b:18:d3:30:f1:23:26:94:cc:4d:93:0a:4b:5a:d0:27:
         9f:4a:47:8a:bd:4f:1b:56:cb:d7:7d:0e:d0:84:63:41:35:c2:
         7f:1a:9c:ad:29:e6:1a:2b:ec:ed:60:fe:25:ef:21:ee:14:b9:
         51:4c:67:19:8d:23:0d:3f:40:f9:eb:3f:f0:14:50:4b:29:ce:
         a2:e7:6c:60:09:79:73:cf:05:af:dd:74:86:5d:66:44:fd:57:
         43:a0:70:be:0c:58:4a:6d:52:0d:5f:94:e2:f9:2f:a2:a4:cf:
         4c:47:7a:23:62:88:33:ee:b7:ba:8e:61:83:d1:bb:13:fa:e0:
         ed:a2:e2:8e:c9:d1:90:13:a1:ac:4a:78:7d:d1:46:6b:5a:53:
         83:ac:e0:81:f0:3e:cb:0c:16:49:10:0d:bc:da:07:cd:28:bd:
         e1:f7:70:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYfACElFvjkkLLGtpkHR8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4Mzc1ZmI2MTY4YjM1NDg0MWI5MWQzMDVmOWQwY2RjMGNi
MTUwMWQwHhcNMjYwNDE3MDMwMDI1WhcNMjYwNDE4MDMwMDI1WjAzMTEwLwYDVQQD
Eyg0YzQ0OWFmMzlmZjg3N2ZhNDg1Y2IyZDZmYjhlMjAyYjNkZWJmYTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzkSKWqZeF+C/LUa8h5rvTlZMwc4
0LBNxdod29+tBsP82zZyG5O9xGbM2SJ1GfDYB6a7u5wfqksTuokcjJVvHlREIMlM
EyG34tz5BkXlgXbaSjx+lEdBMdC/ZGwQbNjDOJHwpscQuCXRrF9WkGr3dILh76lg
hbxo0bndMkGf88kuelkkMH5Y2EPCqaeLf5+NRS0bB7Wc9BDA8TBxFOVNc1YEgqk+
b1r/zftfZd9s8JZphTPQskvCoWMygND0dQVpYduc874YK1Lfsg82nU4yFKDvcqHh
2f51QQrd1/hqbqNe5OMaferXNKsRldIui0pWhg9DYN+lD6ztwlLMeH0O5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExEmvOf+Hf6SFyy1vuOICs96/ocMB8GA1UdIwQY
MBaAFHg3X7YWizVIQbkdMF+dDNwMsVAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZURkZnRoYUxOVWhCdVIwd1g1ME0zQXl4VUIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iNThiYmUtYjUwZi00ODU3LTg3MWMt
MWMwZTMxZGUzMWM3LzEvZURkZnRoYUxOVWhCdVIwd1g1ME0zQXl4VUIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9iNThiYmUtYjUwZi00ODU3LTg3MWMtMWMwZTMxZGUzMWM3
LzEvZURkZnRoYUxOVWhCdVIwd1g1ME0zQXl4VUIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsHRj+yK+
JSBESPIfFxDGmicTBvfkovBrG1Nh2dOk2nfW6VDpQgaCERbU1jREcKV8GV35WfnT
Jt7Wo9M7K7pMliohbigRifntazCv5u0jFg07k4luWj7It8PJCfFrGNMw8SMmlMxN
kwpLWtAnn0pHir1PG1bL130O0IRjQTXCfxqcrSnmGivs7WD+Je8h7hS5UUxnGY0j
DT9A+es/8BRQSynOoudsYAl5c88Fr910hl1mRP1XQ6BwvgxYSm1SDV+U4vkvoqTP
TEd6I2KIM+63uo5hg9G7E/rg7aLijsnRkBOhrEp4fdFGa1pTg6zggfA+ywwWSRAN
vNoHzSi94fdwSQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:09:59 2026 by rpki-client