Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft
File:                     ImidD5E9Kcxj1skmy0Yssn8YRAg.mft (raw, json)
Hash identifier:          rwb8WS8z6FDpUA1o0bXLkfll0uq8D17Mh8IituTaq8I=
Subject key identifier:   78:05:76:65:F1:09:A7:55:76:23:33:26:B1:4E:73:8E:F9:96:1E:2F
Authority key identifier: 22:68:9D:0F:91:3D:29:CC:63:D6:C9:26:CB:46:2C:B2:7F:18:44:08
Certificate issuer:       /CN=22689d0f913d29cc63d6c926cb462cb27f184408
Certificate serial:       019DA52F5E884A8AA22DA700200EB95D4964
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft
Manifest number:          18C7
Signing time:             Sun 19 Apr 2026 10:00:38 +0000
Manifest this update:     Sun 19 Apr 2026 10:00:38 +0000
Manifest next update:     Mon 20 Apr 2026 10:00:38 +0000
Files and hashes:         1: 1-SAETGTeaUOj1XdkqRLUPF6Q-1g.roa (hash: J6jUaufkYMrjM7ww1ErRboScW6ZHhG3Zu67b1RodNlQ=)
                          2: ImidD5E9Kcxj1skmy0Yssn8YRAg.crl (hash: skT/FZK04fQDVa8tnyxtsgBKEBeMnGPhkerHNwqbgDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a5:2f:5e:88:4a:8a:a2:2d:a7:00:20:0e:b9:5d:49:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22689d0f913d29cc63d6c926cb462cb27f184408
        Validity
            Not Before: Apr 19 10:00:38 2026 GMT
            Not After : Apr 20 10:00:38 2026 GMT
        Subject: CN=78057665f109a75576233326b14e738ef9961e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0c:d7:18:60:e1:57:f4:b1:87:e3:0e:3f:83:
                    13:0d:02:88:43:c3:f3:c8:62:45:b0:6e:44:67:a9:
                    15:8b:8a:b5:94:34:de:f7:6c:2b:ad:b5:49:b5:3a:
                    ac:82:35:7f:53:3d:ac:69:e5:f8:a0:67:cd:c1:62:
                    47:15:5d:74:a1:aa:95:bf:88:16:2f:7a:96:8e:00:
                    6a:45:1d:b5:64:73:41:7f:8c:bf:03:9b:3c:b7:99:
                    a8:a4:30:fb:d0:57:94:68:e0:c1:58:80:f4:92:71:
                    c3:b9:58:ae:83:f5:19:0e:1a:f6:66:a7:7f:42:e8:
                    b3:3e:55:40:2a:61:48:59:a0:43:86:68:a0:40:28:
                    41:67:32:f5:4c:e3:41:9b:35:48:30:68:4e:39:c5:
                    fe:85:84:fd:13:2c:b8:c9:d9:9f:d2:3e:a5:32:5d:
                    c3:10:85:1b:08:91:c6:81:e0:8f:69:4d:0c:a6:ca:
                    d1:bd:09:35:ef:b7:38:e1:13:03:2e:e6:e3:14:ef:
                    7f:98:c9:f2:18:92:da:07:13:22:81:d7:c5:07:51:
                    6f:75:f9:74:4f:30:76:a1:10:94:34:05:2d:4e:4b:
                    5b:31:31:3d:a3:74:1b:34:b0:72:7d:94:78:dc:0f:
                    f8:b8:4a:13:58:74:45:44:7b:f9:f8:83:a8:0e:2a:
                    ef:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:05:76:65:F1:09:A7:55:76:23:33:26:B1:4E:73:8E:F9:96:1E:2F
            X509v3 Authority Key Identifier:
                keyid:22:68:9D:0F:91:3D:29:CC:63:D6:C9:26:CB:46:2C:B2:7F:18:44:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:e6:ea:e2:e6:a3:33:3e:48:e4:b6:f4:e9:3d:fd:78:96:2f:
         c6:74:9a:12:56:2e:b3:c0:ce:30:4d:f6:95:76:ad:8b:41:d0:
         33:91:3e:bd:e1:ca:e1:56:bf:27:79:29:c0:a0:34:6c:f5:80:
         45:40:76:de:4c:bd:5c:46:eb:5e:e7:66:2f:c2:b3:cd:93:76:
         95:60:45:fa:96:11:5d:98:41:a1:8c:bb:8e:dc:e0:16:c5:7e:
         cb:6c:21:73:46:cb:c7:0c:1f:2c:85:8c:68:2f:fe:fd:48:3a:
         5d:fd:f8:93:3c:6f:44:72:f6:3b:3f:36:8e:39:95:c8:47:ca:
         f1:5e:e8:aa:48:97:1e:44:20:0e:01:e8:e2:e1:12:e3:91:9c:
         52:0d:6c:a8:d6:6d:6e:d0:4d:f9:e8:ca:52:22:57:e6:e1:be:
         51:ad:8b:db:dc:b9:76:2b:1d:fd:cd:83:81:4f:ab:7b:62:b1:
         d1:e7:05:ca:23:bb:ec:35:23:aa:86:73:d6:a3:b5:0d:4c:71:
         b4:e5:41:f8:e1:31:82:2f:d9:71:b9:ac:be:9b:c5:5a:06:bf:
         9f:d9:23:8c:c4:bf:a9:28:85:ef:30:95:17:12:bb:6f:c6:91:
         d6:c9:53:8d:d8:1f:26:fb:93:22:25:78:f4:93:6d:85:9b:0d:
         47:06:e4:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lL16ISoqiLacAIA65XUlkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNjg5ZDBmOTEzZDI5Y2M2M2Q2YzkyNmNiNDYyY2IyN2Yx
ODQ0MDgwHhcNMjYwNDE5MTAwMDM4WhcNMjYwNDIwMTAwMDM4WjAzMTEwLwYDVQQD
Eyg3ODA1NzY2NWYxMDlhNzU1NzYyMzMzMjZiMTRlNzM4ZWY5OTYxZTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAzXGGDhV/Sxh+MOP4MTDQKIQ8Pz
yGJFsG5EZ6kVi4q1lDTe92wrrbVJtTqsgjV/Uz2saeX4oGfNwWJHFV10oaqVv4gW
L3qWjgBqRR21ZHNBf4y/A5s8t5mopDD70FeUaODBWID0knHDuViug/UZDhr2Zqd/
QuizPlVAKmFIWaBDhmigQChBZzL1TONBmzVIMGhOOcX+hYT9Eyy4ydmf0j6lMl3D
EIUbCJHGgeCPaU0MpsrRvQk177c44RMDLubjFO9/mMnyGJLaBxMigdfFB1Fvdfl0
TzB2oRCUNAUtTktbMTE9o3QbNLByfZR43A/4uEoTWHRFRHv5+IOoDirvIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgFdmXxCadVdiMzJrFOc475lh4vMB8GA1UdIwQY
MBaAFCJonQ+RPSnMY9bJJstGLLJ/GEQIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSW1pZEQ1RTlLY3hqMXNrbXkwWXNzbjhZUkFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wNDNlZWUtMzE5OS00ZjhlLWIwYTkt
NGFkODUyYTEyY2Q2LzEvSW1pZEQ1RTlLY3hqMXNrbXkwWXNzbjhZUkFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8wNDNlZWUtMzE5OS00ZjhlLWIwYTktNGFkODUyYTEyY2Q2
LzEvSW1pZEQ1RTlLY3hqMXNrbXkwWXNzbjhZUkFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+bq4uaj
Mz5I5Lb06T39eJYvxnSaElYus8DOME32lXati0HQM5E+veHK4Va/J3kpwKA0bPWA
RUB23ky9XEbrXudmL8KzzZN2lWBF+pYRXZhBoYy7jtzgFsV+y2whc0bLxwwfLIWM
aC/+/Ug6Xf34kzxvRHL2Oz82jjmVyEfK8V7oqkiXHkQgDgHo4uES45GcUg1sqNZt
btBN+ejKUiJX5uG+Ua2L29y5disd/c2DgU+re2Kx0ecFyiO77DUjqoZz1qO1DUxx
tOVB+OExgi/ZcbmsvpvFWga/n9kjjMS/qSiF7zCVFxK7b8aR1slTjdgfJvuTIiV4
9JNthZsNRwbkEw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:21:55 2026 by rpki-client