Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft
File:                     VTTpuw7k0wwx52r6aRrcknmz81Y.mft (raw, json)
Hash identifier:          KDO1C/GY5zRWbS2AdWceBSHTUM6FztRF2FKHXiLU9v0=
Subject key identifier:   D7:D3:EA:E5:5C:60:47:2A:7C:E7:4A:92:F3:61:82:64:39:F9:5A:DA
Authority key identifier: 55:34:E9:BB:0E:E4:D3:0C:31:E7:6A:FA:69:1A:DC:92:79:B3:F3:56
Certificate issuer:       /CN=5534e9bb0ee4d30c31e76afa691adc9279b3f356
Certificate serial:       019D9B196A1BF439C16890E45213E7EC62AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 11:00:27 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:27 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:27 +0000
Files and hashes:         1: Ay1de_CJDcGalpq6G-6jy9K11Gk.roa (hash: uc5IBSFrLOuYogekySiZznfKugYHdXYL0+i6gvyMboQ=)
                          2: VTTpuw7k0wwx52r6aRrcknmz81Y.crl (hash: PSaNBL2MEXwUuLp3DhaP8HV4imhenmT5aZl7ovrCh5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:6a:1b:f4:39:c1:68:90:e4:52:13:e7:ec:62:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5534e9bb0ee4d30c31e76afa691adc9279b3f356
        Validity
            Not Before: Apr 17 11:00:27 2026 GMT
            Not After : Apr 18 11:00:27 2026 GMT
        Subject: CN=d7d3eae55c60472a7ce74a92f361826439f95ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8d:6c:86:25:a8:44:bf:34:83:26:62:22:ea:
                    36:67:67:29:48:f6:35:31:28:03:94:ec:15:5f:13:
                    bd:6f:27:ec:fd:45:47:6d:71:77:52:7a:25:d3:bc:
                    4f:19:ac:9e:3d:3e:39:57:fa:43:7f:48:a2:39:1b:
                    ac:95:db:7a:2f:75:cd:34:c7:be:09:3e:b0:2c:ca:
                    32:a8:bd:24:eb:5a:d4:d1:86:0a:57:27:b4:71:56:
                    08:e9:27:0d:ab:91:91:d3:1c:6a:68:35:0f:35:da:
                    7f:4f:dd:f6:7c:18:06:bd:0c:57:97:ca:20:94:e3:
                    19:76:c6:5c:19:08:80:b9:f6:32:b2:03:9b:1b:1f:
                    b7:8b:5a:8e:e5:90:4a:c6:79:fd:dc:de:9e:67:1b:
                    a5:1c:13:1a:cb:de:f3:cb:09:59:97:40:26:6c:e1:
                    a4:37:26:67:a1:5c:68:06:f6:b9:9b:47:9b:0e:65:
                    07:04:a1:f7:84:c7:5a:dd:48:95:e9:3a:f2:99:d3:
                    e9:ba:03:fa:11:99:d0:ef:d2:e9:03:a4:ab:6e:e6:
                    2f:44:e1:96:0e:80:da:c1:04:34:79:dc:8c:46:42:
                    13:f5:17:0a:82:28:68:e6:c5:3b:3e:cf:e4:b5:96:
                    fb:71:c7:b0:20:60:4e:bd:a9:0e:91:7b:b6:23:c5:
                    bb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D3:EA:E5:5C:60:47:2A:7C:E7:4A:92:F3:61:82:64:39:F9:5A:DA
            X509v3 Authority Key Identifier:
                keyid:55:34:E9:BB:0E:E4:D3:0C:31:E7:6A:FA:69:1A:DC:92:79:B3:F3:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:01:0f:6e:03:fa:84:10:f0:bc:5e:ab:69:16:c6:bc:8a:16:
         2a:d0:9f:2f:09:b6:57:bf:27:74:61:32:39:1e:eb:03:c9:fc:
         67:46:d3:d7:62:0c:76:f1:d3:1b:1c:2b:00:e6:2b:45:46:38:
         8d:24:49:22:c1:51:07:73:62:51:f9:d1:aa:bd:d0:b8:79:5f:
         bc:13:26:e8:1c:67:ae:48:14:9a:aa:ac:ad:a8:05:e5:42:41:
         fc:ac:fb:fd:3d:a9:ce:14:6c:10:67:1e:a1:a4:5d:ef:5d:e4:
         e8:dd:93:88:29:59:6a:c6:e5:88:c6:57:2d:93:0c:d5:dd:c0:
         87:df:e0:f5:ef:90:de:86:72:5e:0f:44:df:c5:70:b2:10:a0:
         08:65:ca:dc:75:3d:08:49:d2:38:20:1b:ea:81:c2:e3:84:27:
         09:5d:4d:8f:36:b2:c5:ae:12:c6:4d:57:20:21:2f:8e:30:20:
         de:f3:02:7a:0a:cb:89:3a:c8:e4:46:bd:bc:b2:1d:45:5e:52:
         2e:f5:8f:a1:81:90:8e:6b:0f:d4:af:75:62:9a:3d:44:61:c8:
         86:02:e5:8f:94:3c:a7:6f:4b:6b:fc:75:c1:a9:d9:6d:fe:1c:
         d9:9c:0e:f7:a2:0d:c7:52:69:9f:d8:7c:26:b3:9b:1e:14:5a:
         43:9a:37:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGWob9DnBaJDkUhPn7GKtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MzRlOWJiMGVlNGQzMGMzMWU3NmFmYTY5MWFkYzkyNzli
M2YzNTYwHhcNMjYwNDE3MTEwMDI3WhcNMjYwNDE4MTEwMDI3WjAzMTEwLwYDVQQD
EyhkN2QzZWFlNTVjNjA0NzJhN2NlNzRhOTJmMzYxODI2NDM5Zjk1YWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu41shiWoRL80gyZiIuo2Z2cpSPY1
MSgDlOwVXxO9byfs/UVHbXF3Unol07xPGayePT45V/pDf0iiORusldt6L3XNNMe+
CT6wLMoyqL0k61rU0YYKVye0cVYI6ScNq5GR0xxqaDUPNdp/T932fBgGvQxXl8og
lOMZdsZcGQiAufYysgObGx+3i1qO5ZBKxnn93N6eZxulHBMay97zywlZl0AmbOGk
NyZnoVxoBva5m0ebDmUHBKH3hMda3UiV6TrymdPpugP6EZnQ79LpA6SrbuYvROGW
DoDawQQ0edyMRkIT9RcKgiho5sU7Ps/ktZb7ccewIGBOvakOkXu2I8W71wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfT6uVcYEcqfOdKkvNhgmQ5+VraMB8GA1UdIwQY
MBaAFFU06bsO5NMMMedq+mka3JJ5s/NWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlRUcHV3N2swd3d4NTJyNmFScmNrbm16ODFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mNGJhNjMtY2Q5YS00MzExLWI0MTYt
NjRmMjMxZGQ0MDQyLzEvVlRUcHV3N2swd3d4NTJyNmFScmNrbm16ODFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mNGJhNjMtY2Q5YS00MzExLWI0MTYtNjRmMjMxZGQ0MDQy
LzEvVlRUcHV3N2swd3d4NTJyNmFScmNrbm16ODFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwEPbgP6
hBDwvF6raRbGvIoWKtCfLwm2V78ndGEyOR7rA8n8Z0bT12IMdvHTGxwrAOYrRUY4
jSRJIsFRB3NiUfnRqr3QuHlfvBMm6BxnrkgUmqqsragF5UJB/Kz7/T2pzhRsEGce
oaRd713k6N2TiClZasbliMZXLZMM1d3Ah9/g9e+Q3oZyXg9E38VwshCgCGXK3HU9
CEnSOCAb6oHC44QnCV1Njzayxa4Sxk1XICEvjjAg3vMCegrLiTrI5Ea9vLIdRV5S
LvWPoYGQjmsP1K91Ypo9RGHIhgLlj5Q8p29La/x1wanZbf4c2ZwO96INx1Jpn9h8
JrObHhRaQ5o3PA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:35:09 2026 by rpki-client