Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
File:                     EEXazIN3mMPmzzH00nlGozsN5mE.mft (raw, json)
Hash identifier:          gD++sRD8uQn1Me2QQthqyAo64R9tOJmU3xYuCAuM0es=
Subject key identifier:   67:F9:46:77:CF:6C:F9:19:80:18:9B:81:C4:D7:CA:C2:BA:58:9F:CD
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Certificate issuer:       /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial:       019D98508766862AD4402630A68E27CBDB99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
Manifest number:          18DE
Signing time:             Thu 16 Apr 2026 22:01:47 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:47 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:47 +0000
Files and hashes:         1: 005Bqn6EcQE2kRRYutDaRw8mbu4.roa (hash: Ya4LLXNAwjE1h+4Ix0wQYttNBpWpSYxEcBwtehuCJrU=)
                          2: Bsg46Hh18W2wtrBYU_MmVQa11_M.roa (hash: Wi9xpJM6gyN312GNJefY/RNhxBIItO+fm/kcAGluLLQ=)
                          3: EEXazIN3mMPmzzH00nlGozsN5mE.crl (hash: r7ljjBQfzt1f1LyZ+ZzCtCaSNdiv6vSNjDWYIw4CFzk=)
                          4: pnsSYMuSCnD02i5X7aNjfb6KV2Y.roa (hash: gAxKlvosqMdTFPRmtfb6Fr6F4VKWhUBjaqqguPZxYyQ=)
                          5: zVElElmNHqfMWbO7Mv_RAuDBQI8.roa (hash: fH2ooaFDH4XMWbMf68BiYaDtG2yS/k654MGObWqqQkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:87:66:86:2a:d4:40:26:30:a6:8e:27:cb:db:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
        Validity
            Not Before: Apr 16 22:01:47 2026 GMT
            Not After : Apr 17 22:01:47 2026 GMT
        Subject: CN=67f94677cf6cf91980189b81c4d7cac2ba589fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b2:38:d4:87:a3:58:f9:4a:19:68:e0:28:cb:
                    de:2d:c9:fe:d9:01:36:57:87:a4:50:73:c0:3b:f3:
                    98:22:a4:62:fc:5c:2a:99:aa:46:2b:ac:9a:cd:39:
                    ca:ed:59:b7:45:bd:07:2b:cf:4c:8f:94:c0:8e:e1:
                    d8:f8:67:9a:1d:9f:39:00:42:de:93:e8:50:0b:ea:
                    e7:84:37:66:e4:ec:42:74:6a:e2:44:26:c5:0a:6e:
                    d5:03:5c:fd:0e:f9:85:77:b6:d7:2a:75:3a:23:e2:
                    01:9c:38:1c:3b:b3:20:d2:7c:d1:b7:ab:95:2a:68:
                    66:62:2e:35:7d:ef:f9:39:a6:7a:79:01:4f:0c:d5:
                    69:67:1c:36:1d:0e:0b:5e:5b:79:7a:08:ab:92:bc:
                    99:69:d7:e2:5e:20:02:0e:f3:ef:22:2f:05:b1:59:
                    44:28:38:c9:e6:44:9f:4f:18:dd:ce:78:52:79:8a:
                    9c:e4:88:45:0b:01:eb:04:e1:de:2b:5d:ae:32:84:
                    0e:d6:30:0f:49:db:91:37:d6:1c:f1:e6:38:17:7a:
                    00:dc:df:1d:bf:a2:c6:64:08:cb:39:29:47:6a:1f:
                    e9:55:88:0f:b4:d2:cc:f3:7f:91:bc:3a:37:f7:e6:
                    7c:a2:1d:bb:29:db:94:40:89:13:41:bb:5a:36:1f:
                    5f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F9:46:77:CF:6C:F9:19:80:18:9B:81:C4:D7:CA:C2:BA:58:9F:CD
            X509v3 Authority Key Identifier:
                keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:56:6c:08:a4:27:47:3f:5a:32:b4:49:28:9a:27:9d:37:61:
         a2:12:43:62:ea:92:f8:b2:de:85:91:4b:3c:24:ce:80:af:00:
         85:ed:74:bb:7a:bd:ba:28:0b:0d:a2:f5:ed:fd:29:c1:ee:d0:
         94:f4:bb:ef:0e:4a:2d:2e:e9:0f:17:a2:bd:ba:97:06:ac:b9:
         9f:0b:ae:42:39:61:3c:37:cc:f1:44:10:95:ae:e8:76:91:0f:
         be:50:c3:9b:3f:a1:6e:cd:17:c8:7c:a4:8b:19:b0:a4:c1:32:
         3b:c8:83:c9:c2:96:66:f5:0d:77:be:a0:a7:d1:8a:7f:40:52:
         dc:7f:e5:03:22:03:73:f7:d3:c1:67:55:ec:6f:44:51:ef:fa:
         2a:07:f8:8c:df:7c:bb:54:d4:05:ec:f4:e8:08:89:93:8e:2e:
         11:de:fd:a1:fc:9b:fd:6d:7c:0e:d6:b6:17:fe:b1:75:49:25:
         2c:cc:a5:35:48:5a:76:62:80:09:fb:48:d0:fb:4f:b3:89:2f:
         c9:33:3b:c8:b7:03:ce:1d:06:f6:2a:a8:fe:50:ea:b2:7c:7a:
         f0:2b:a4:aa:37:1f:83:27:09:1f:b2:b2:5d:cb:c2:ae:db:6b:
         ec:99:52:02:10:aa:77:46:a2:1f:d6:d1:1f:0d:63:af:5d:3a:
         68:82:90:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUIdmhirUQCYwpo4ny9uZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNDVkYWNjODM3Nzk4YzNlNmNmMzFmNGQyNzk0NmEzM2Iw
ZGU2NjEwHhcNMjYwNDE2MjIwMTQ3WhcNMjYwNDE3MjIwMTQ3WjAzMTEwLwYDVQQD
Eyg2N2Y5NDY3N2NmNmNmOTE5ODAxODliODFjNGQ3Y2FjMmJhNTg5ZmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbI41IejWPlKGWjgKMveLcn+2QE2
V4ekUHPAO/OYIqRi/FwqmapGK6yazTnK7Vm3Rb0HK89Mj5TAjuHY+GeaHZ85AELe
k+hQC+rnhDdm5OxCdGriRCbFCm7VA1z9DvmFd7bXKnU6I+IBnDgcO7Mg0nzRt6uV
KmhmYi41fe/5OaZ6eQFPDNVpZxw2HQ4LXlt5egirkryZadfiXiACDvPvIi8FsVlE
KDjJ5kSfTxjdznhSeYqc5IhFCwHrBOHeK12uMoQO1jAPSduRN9Yc8eY4F3oA3N8d
v6LGZAjLOSlHah/pVYgPtNLM83+RvDo39+Z8oh27KduUQIkTQbtaNh9flQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGf5RnfPbPkZgBibgcTXysK6WJ/NMB8GA1UdIwQY
MBaAFBBF2syDd5jD5s8x9NJ5RqM7DeZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8yNjZjYWYtM2I0My00OWUwLWI2ZTEt
OWMxNzRlNTNlNGZlLzEvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8yNjZjYWYtM2I0My00OWUwLWI2ZTEtOWMxNzRlNTNlNGZl
LzEvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2FZsCKQn
Rz9aMrRJKJonnTdhohJDYuqS+LLehZFLPCTOgK8Ahe10u3q9uigLDaL17f0pwe7Q
lPS77w5KLS7pDxeivbqXBqy5nwuuQjlhPDfM8UQQla7odpEPvlDDmz+hbs0XyHyk
ixmwpMEyO8iDycKWZvUNd76gp9GKf0BS3H/lAyIDc/fTwWdV7G9EUe/6Kgf4jN98
u1TUBez06AiJk44uEd79ofyb/W18Dta2F/6xdUklLMylNUhadmKACftI0PtPs4kv
yTM7yLcDzh0G9iqo/lDqsnx68CukqjcfgycJH7KyXcvCrttr7JlSAhCqd0aiH9bR
Hw1jr106aIKQ0Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:42 2026 by rpki-client