Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
File:                     bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft (raw, json)
Hash identifier:          9Lm15r8yHl94dGfZ+CDgILxP7w1nyvaoHa/H2PH4tjs=
Subject key identifier:   D0:21:4A:82:86:54:9D:80:AA:12:DE:B1:98:25:91:D2:ED:F7:24:12
Authority key identifier: 6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
Certificate issuer:       /CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Certificate serial:       019D9850AC65F75BBA3AB0047AA2B4359417
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
Manifest number:          18C1
Signing time:             Thu 16 Apr 2026 22:01:56 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:56 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:56 +0000
Files and hashes:         1: STaAwjJw5o5YD77UFMiE3P3OF-8.roa (hash: ZyDnnvOoabqOZyAYi7oZ+XdKWhqE0mG6Qq6YUwDEsw0=)
                          2: bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl (hash: QxndKAd3kQgRms2hqT3R+4jrjzo3qXb+1KU0JpxZut0=)
                          3: bscFx-8WZDo1BLtY9Qu-MWUUme0.roa (hash: +4tdj917MYxkU3jVhML6xKHXxs+Te1nlf+Ukm7WotRQ=)
                          4: s4d1WKYP4Jxij26Bj_2PiI6IzLU.roa (hash: DVgyuxaELvhEOBhDUYXg4JM856u4ROpCMZfu6veKFDA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:ac:65:f7:5b:ba:3a:b0:04:7a:a2:b4:35:94:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
        Validity
            Not Before: Apr 16 22:01:56 2026 GMT
            Not After : Apr 17 22:01:56 2026 GMT
        Subject: CN=d0214a8286549d80aa12deb1982591d2edf72412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7a:43:72:4e:6b:9a:45:ff:27:84:eb:fe:3b:
                    9f:8c:b5:9f:2d:d5:6e:f6:ab:77:1e:3a:78:cf:b8:
                    ea:4a:4b:2c:b5:eb:23:60:9d:93:b5:39:0b:30:b3:
                    c2:53:11:9d:03:cc:1f:fc:d3:2b:c5:3e:61:bc:1c:
                    a7:69:3e:5d:60:1b:2e:d7:88:9e:7e:8e:73:c6:4c:
                    37:b1:10:08:2d:48:f7:d4:93:38:8e:5d:4b:ad:a1:
                    75:13:c8:25:15:70:c5:07:f1:98:0c:f7:24:31:05:
                    a6:4a:8b:a0:16:55:3a:1a:f7:1f:f2:90:30:2d:52:
                    02:a8:a7:a1:44:6a:6f:01:fa:52:2f:59:11:e3:fa:
                    09:5c:2a:6d:5e:c8:05:d0:02:ca:04:b6:7d:a9:e7:
                    5d:f2:a3:34:64:21:06:ca:cb:bc:bd:8e:45:d9:dc:
                    01:91:17:3f:da:95:87:15:16:b4:31:a2:11:14:fc:
                    b2:a4:9a:f2:e7:df:71:9f:4c:98:4c:bf:6f:2c:8d:
                    fd:50:1d:26:23:c6:d5:c1:6c:ed:79:19:9b:38:a3:
                    c7:99:ca:95:35:2e:df:c0:b8:bc:f8:62:34:f5:7c:
                    93:06:ae:38:50:fb:ae:46:1c:f3:4d:a1:cc:d1:9c:
                    1d:ea:ee:33:de:91:d5:ef:8b:11:2e:fd:b3:25:4b:
                    ba:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:21:4A:82:86:54:9D:80:AA:12:DE:B1:98:25:91:D2:ED:F7:24:12
            X509v3 Authority Key Identifier:
                keyid:6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e4:69:b7:f3:e2:fa:d4:74:9f:78:16:8e:52:39:23:2e:e6:
         c0:27:90:34:13:20:85:1d:ee:a5:74:83:8e:78:d6:0c:15:7a:
         72:19:d3:56:5d:0f:06:a2:dc:02:76:2c:e9:83:b3:e7:d7:2e:
         6e:f9:b7:3b:06:41:9b:80:4d:9b:d0:00:68:6b:ad:f0:55:1f:
         2d:72:38:94:ca:c7:64:62:ab:e1:56:38:a1:a8:da:74:c6:56:
         e0:c7:3c:db:5e:89:7f:00:06:7c:af:c2:65:68:be:fa:44:53:
         af:d7:c7:ad:03:61:93:d3:f7:cb:25:dc:d6:94:2e:86:63:0c:
         3b:53:07:ef:2c:c2:58:0d:bd:10:ed:ce:d4:b0:cd:1b:02:df:
         18:99:44:73:42:5b:d9:91:e1:11:e1:06:a1:10:07:4e:f1:81:
         7a:aa:e9:d9:76:c0:0e:14:62:a1:30:73:c9:94:57:0d:f1:34:
         a1:22:f7:d6:e3:5d:d8:af:58:65:0d:81:88:28:26:ad:2d:ae:
         d1:ef:f5:32:85:e4:7d:70:c8:a5:ee:d8:e5:78:a2:92:8c:36:
         d7:4e:78:36:1d:fd:ce:f5:e4:92:fd:ba:dc:d5:fc:bb:53:41:
         e5:e2:c9:7a:23:2c:cd:f8:7b:de:b7:21:8d:40:2b:f9:c0:7c:
         30:82:d4:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUKxl91u6OrAEeqK0NZQXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZjJmYjBmYTUyZGUxM2MzMzY2ODljZjNmNDgyOWQ2MzUw
Njc1MGYwHhcNMjYwNDE2MjIwMTU2WhcNMjYwNDE3MjIwMTU2WjAzMTEwLwYDVQQD
EyhkMDIxNGE4Mjg2NTQ5ZDgwYWExMmRlYjE5ODI1OTFkMmVkZjcyNDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHpDck5rmkX/J4Tr/jufjLWfLdVu
9qt3Hjp4z7jqSksstesjYJ2TtTkLMLPCUxGdA8wf/NMrxT5hvBynaT5dYBsu14ie
fo5zxkw3sRAILUj31JM4jl1LraF1E8glFXDFB/GYDPckMQWmSougFlU6Gvcf8pAw
LVICqKehRGpvAfpSL1kR4/oJXCptXsgF0ALKBLZ9qedd8qM0ZCEGysu8vY5F2dwB
kRc/2pWHFRa0MaIRFPyypJry599xn0yYTL9vLI39UB0mI8bVwWzteRmbOKPHmcqV
NS7fwLi8+GI09XyTBq44UPuuRhzzTaHM0Zwd6u4z3pHV74sRLv2zJUu6TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAhSoKGVJ2AqhLesZglkdLt9yQSMB8GA1UdIwQY
MBaAFGzy+w+lLeE8M2aJzz9IKdY1BnUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZjA3MTUtYjk5My00MzQ4LTk3ZTkt
NmVjOTgyOTUxY2Y3LzEvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jZjA3MTUtYjk5My00MzQ4LTk3ZTktNmVjOTgyOTUxY2Y3
LzEvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgORpt/Pi
+tR0n3gWjlI5Iy7mwCeQNBMghR3upXSDjnjWDBV6chnTVl0PBqLcAnYs6YOz59cu
bvm3OwZBm4BNm9AAaGut8FUfLXI4lMrHZGKr4VY4oajadMZW4Mc8216JfwAGfK/C
ZWi++kRTr9fHrQNhk9P3yyXc1pQuhmMMO1MH7yzCWA29EO3O1LDNGwLfGJlEc0Jb
2ZHhEeEGoRAHTvGBeqrp2XbADhRioTBzyZRXDfE0oSL31uNd2K9YZQ2BiCgmrS2u
0e/1MoXkfXDIpe7Y5Xiikow21054Nh39zvXkkv263NX8u1NB5eLJeiMszfh73rch
jUAr+cB8MILUpQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:17 2026 by rpki-client