Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
File:                     M1etQG35k0tQSLX6Id4xRQuTb6k.mft (raw, json)
Hash identifier:          Ipmd+61G2k1b6cKingdX0p1S5SiK7K5IydOPElyDBOo=
Subject key identifier:   14:3C:10:CE:EE:2A:AD:F8:D0:68:A4:8E:98:23:47:14:54:2D:EA:82
Authority key identifier: 33:57:AD:40:6D:F9:93:4B:50:48:B5:FA:21:DE:31:45:0B:93:6F:A9
Certificate issuer:       /CN=3357ad406df9934b5048b5fa21de31450b936fa9
Certificate serial:       019D988635865AD0C4CA30144DFD58E4F0D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
Manifest number:          18C3
Signing time:             Thu 16 Apr 2026 23:00:25 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:25 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:25 +0000
Files and hashes:         1: 8NSywpR9nT-r8M6sQZn_Vy_1zuI.roa (hash: KK6AcEIe4doXNcpLx1+rexzaHvDjwQb/+2RxEu+/uhY=)
                          2: M1etQG35k0tQSLX6Id4xRQuTb6k.crl (hash: k8NoJxOM4OmfSY39mLetLJsElmo0LeRlg/ZAGQkMy4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:35:86:5a:d0:c4:ca:30:14:4d:fd:58:e4:f0:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3357ad406df9934b5048b5fa21de31450b936fa9
        Validity
            Not Before: Apr 16 23:00:25 2026 GMT
            Not After : Apr 17 23:00:25 2026 GMT
        Subject: CN=143c10ceee2aadf8d068a48e98234714542dea82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2f:8a:02:a8:d1:41:91:f9:81:d4:86:74:9c:
                    cc:58:9b:ad:8d:c0:5b:46:cd:59:5e:de:06:bf:15:
                    8e:b6:ac:81:c3:4a:34:4d:9d:a1:b0:89:be:5b:df:
                    75:40:6e:aa:18:7d:3f:33:e4:11:5c:d9:2a:58:fd:
                    53:cc:a0:84:fa:b9:b5:6b:9b:f6:95:3b:60:22:df:
                    42:da:a1:49:bd:7d:9f:1e:b8:e8:53:11:5a:b5:1a:
                    bd:ba:ac:fb:a9:f8:16:82:f8:72:c6:ba:7a:aa:2f:
                    bb:39:cb:7a:1c:76:ee:7a:b8:b4:aa:d9:6e:6a:1b:
                    67:8f:28:1c:b0:e4:fb:b0:1a:e2:9f:91:54:99:c4:
                    de:f4:bb:d9:56:77:28:a6:64:52:7c:d6:3c:26:87:
                    2f:4a:6c:0c:d2:e5:64:65:bc:7b:c0:da:32:b3:26:
                    bb:7b:79:78:6b:06:97:f4:3c:bc:14:44:0b:85:08:
                    de:ca:77:94:d6:86:a9:79:27:21:8d:9f:99:a2:af:
                    e3:ed:61:68:b3:b8:23:c4:63:98:2a:40:14:8e:02:
                    16:51:9d:d1:32:6f:ba:03:7b:c7:02:b4:5d:a6:b7:
                    20:fc:b9:67:47:1c:7b:0b:85:48:d3:8c:f9:d9:f6:
                    fa:58:9f:99:8a:ad:fa:36:df:98:b5:65:7e:1d:71:
                    f1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3C:10:CE:EE:2A:AD:F8:D0:68:A4:8E:98:23:47:14:54:2D:EA:82
            X509v3 Authority Key Identifier:
                keyid:33:57:AD:40:6D:F9:93:4B:50:48:B5:FA:21:DE:31:45:0B:93:6F:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:0d:bc:00:ad:13:94:1f:b0:af:ac:fb:9e:45:3b:f7:de:63:
         d0:68:0b:9a:9a:f6:91:c0:68:1f:5f:4a:bd:a6:ee:ef:81:e8:
         69:3b:5e:c4:74:12:1c:38:52:5c:f8:0f:aa:85:89:ce:1f:60:
         2d:ab:7f:6b:80:1e:71:72:c7:d1:c3:94:24:c3:b9:d0:67:ca:
         22:d5:9a:69:89:80:b5:a1:86:35:ef:e6:80:a5:fb:29:7a:32:
         86:b5:34:ac:17:9d:cc:d4:e5:3c:f7:00:57:c5:07:28:67:fd:
         d2:2b:34:c6:37:2e:33:f2:56:37:d6:37:ea:e0:6f:26:22:be:
         69:0a:56:b4:54:5c:12:57:da:e4:33:15:30:2c:96:9c:bc:2c:
         f1:70:b3:9b:a8:74:4a:2e:e3:48:74:ad:47:9b:f0:3c:a2:69:
         24:68:17:83:33:33:a9:cc:88:28:fb:c7:b1:b6:d5:2c:8a:6d:
         df:43:b2:31:3c:86:79:96:07:2f:12:0b:e2:0b:bf:55:6d:cc:
         38:ab:a6:2f:d8:b5:29:4f:19:60:a9:90:16:fd:c2:9b:9e:dc:
         6b:50:f1:17:9d:93:ed:b4:fa:d4:52:b3:4e:57:43:96:03:e3:
         b9:16:91:6c:54:05:b8:0c:1c:32:93:d5:61:86:40:78:e4:73:
         09:b4:bd:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YhjWGWtDEyjAUTf1Y5PDVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNTdhZDQwNmRmOTkzNGI1MDQ4YjVmYTIxZGUzMTQ1MGI5
MzZmYTkwHhcNMjYwNDE2MjMwMDI1WhcNMjYwNDE3MjMwMDI1WjAzMTEwLwYDVQQD
EygxNDNjMTBjZWVlMmFhZGY4ZDA2OGE0OGU5ODIzNDcxNDU0MmRlYTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty+KAqjRQZH5gdSGdJzMWJutjcBb
Rs1ZXt4GvxWOtqyBw0o0TZ2hsIm+W991QG6qGH0/M+QRXNkqWP1TzKCE+rm1a5v2
lTtgIt9C2qFJvX2fHrjoUxFatRq9uqz7qfgWgvhyxrp6qi+7Oct6HHbueri0qtlu
ahtnjygcsOT7sBrin5FUmcTe9LvZVncopmRSfNY8JocvSmwM0uVkZbx7wNoysya7
e3l4awaX9Dy8FEQLhQjeyneU1oapeSchjZ+Zoq/j7WFos7gjxGOYKkAUjgIWUZ3R
Mm+6A3vHArRdprcg/LlnRxx7C4VI04z52fb6WJ+Ziq36Nt+YtWV+HXHxawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQ8EM7uKq340GikjpgjRxRULeqCMB8GA1UdIwQY
MBaAFDNXrUBt+ZNLUEi1+iHeMUULk2+pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTFldFFHMzVrMHRRU0xYNklkNHhSUXVUYjZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jNmQ0ZWMtYTA3Mi00ZjNlLWFjZGEt
MGNmNjM4NGE1NjEwLzEvTTFldFFHMzVrMHRRU0xYNklkNHhSUXVUYjZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jNmQ0ZWMtYTA3Mi00ZjNlLWFjZGEtMGNmNjM4NGE1NjEw
LzEvTTFldFFHMzVrMHRRU0xYNklkNHhSUXVUYjZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXw28AK0T
lB+wr6z7nkU7995j0GgLmpr2kcBoH19Kvabu74HoaTtexHQSHDhSXPgPqoWJzh9g
Lat/a4AecXLH0cOUJMO50GfKItWaaYmAtaGGNe/mgKX7KXoyhrU0rBedzNTlPPcA
V8UHKGf90is0xjcuM/JWN9Y36uBvJiK+aQpWtFRcElfa5DMVMCyWnLws8XCzm6h0
Si7jSHStR5vwPKJpJGgXgzMzqcyIKPvHsbbVLIpt30OyMTyGeZYHLxIL4gu/VW3M
OKumL9i1KU8ZYKmQFv3Cm57ca1DxF52T7bT61FKzTldDlgPjuRaRbFQFuAwcMpPV
YYZAeORzCbS9gw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:59:03 2026 by rpki-client