Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File:                     RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier:          CjI4K0Wvut3YB7aTkSeDgq3j8g7RMPkdJtVfQFlviLo=
Subject key identifier:   51:C5:C0:BE:14:11:A9:98:E4:4F:A2:59:F7:05:4E:5E:3C:40:E0:A1
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer:       /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial:       019DDA30498F4670BDA8B22087617E875616
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number:          18E1
Signing time:             Wed 29 Apr 2026 17:01:30 +0000
Manifest this update:     Wed 29 Apr 2026 17:01:30 +0000
Manifest next update:     Thu 30 Apr 2026 17:01:30 +0000
Files and hashes:         1: Ip7p_hL1VXdeRgj8FVGhTum4zB0.roa (hash: agYqlxFFSnuNhJD9cHkZJfqIOemy4XNVrJfaav2GJL4=)
                          2: MGqAhkKHBACRFaiNXYcP9SHiMFE.roa (hash: GZRYXJdlMwxnrdhoW6/XDsnMjgU/H78VBDuIRDqDxI0=)
                          3: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: vEFvdDINqlXpF0pKZ4VBkOwbw9xTt2j8kj1j2zYCnho=)
                          4: WjHsZr2LYotu7UixbhUPmyhufyM.roa (hash: UbFC6dvqvKaXgJmhKzkqauNjGk31aKocZ5d+hid0GEk=)
                          5: hL4nAbMjDcB0I8HfTfp0aJOETu4.roa (hash: HMgiqPXACPgRgXB4fWWx/eVqV6zK3UzAgCuz5lAzZEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Apr 2026 13:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:da:30:49:8f:46:70:bd:a8:b2:20:87:61:7e:87:56:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
        Validity
            Not Before: Apr 29 17:01:30 2026 GMT
            Not After : Apr 30 17:01:30 2026 GMT
        Subject: CN=51c5c0be1411a998e44fa259f7054e5e3c40e0a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:17:9a:5d:80:43:c5:f3:17:13:79:b7:5d:82:
                    78:54:fb:6f:88:0d:41:22:6e:44:87:9e:7d:1b:fe:
                    46:a3:57:5d:cd:3d:85:f7:df:cf:50:ed:98:15:bc:
                    58:34:48:e4:4e:2c:c8:4f:ff:be:ab:3b:82:36:fd:
                    10:1c:d4:4d:e4:1a:92:22:95:2c:49:31:e4:2d:6d:
                    52:bc:3a:b5:1e:9f:7d:f9:18:9c:10:8c:dd:03:63:
                    94:b5:52:47:5c:eb:04:59:bf:a1:ae:0a:8c:64:ef:
                    6d:49:ae:ac:ce:70:ad:a4:6b:0e:ac:0b:ff:df:f7:
                    4f:41:ad:a6:ae:b3:69:07:ad:fa:b8:57:e9:66:b6:
                    27:c7:00:a7:f9:79:c7:67:a7:73:3c:d6:86:c5:24:
                    49:55:f2:ec:f7:5a:ad:f7:5d:a4:3d:13:97:2f:7d:
                    82:dd:fe:90:0d:89:15:ab:0c:eb:f9:cd:e8:50:5d:
                    6a:35:56:3a:bb:43:1f:5b:d0:67:b1:2f:f7:df:08:
                    10:dd:27:37:3b:77:7b:f4:62:fb:d9:1a:56:50:56:
                    3d:26:58:f3:e0:73:47:44:04:91:56:57:94:f0:70:
                    9d:02:e0:82:44:cd:7b:8d:91:97:8e:d8:1e:dc:8d:
                    6e:4b:94:4a:8c:26:2c:97:1f:16:d3:9b:bc:93:20:
                    72:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C5:C0:BE:14:11:A9:98:E4:4F:A2:59:F7:05:4E:5E:3C:40:E0:A1
            X509v3 Authority Key Identifier:
                keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:65:f6:88:70:d5:0e:59:7f:f8:ef:5f:27:b9:fd:9d:98:ba:
         ce:9a:b3:39:4d:6b:52:13:5b:a3:a5:08:17:2f:d9:d7:40:5a:
         0b:a5:39:87:b9:3e:cd:51:65:88:49:37:05:0a:a7:64:b2:f2:
         12:40:ad:23:0e:ce:44:59:d5:f0:93:ec:3e:23:96:d7:28:9e:
         73:3e:c2:5b:ab:a2:be:14:2d:41:f2:72:8a:ec:2b:e8:c8:d2:
         71:e6:19:f2:f5:ea:c1:62:07:b7:86:8f:69:d0:8e:5a:47:c1:
         86:be:93:b2:09:4e:eb:90:c4:cc:cc:e5:c5:11:fc:4f:c5:d0:
         49:27:8f:af:be:84:db:e2:1f:ad:db:d6:64:5f:28:c1:a4:c4:
         5b:4a:b1:3d:3a:3f:34:c2:dd:85:7b:5c:43:b7:9d:4c:5a:94:
         67:49:5b:3b:05:f2:3b:4e:71:63:a2:2d:e4:71:22:30:01:b5:
         74:67:8d:81:05:b8:6a:bd:6e:6e:11:cd:2f:00:a1:fd:0e:48:
         54:d3:01:4b:f3:f6:14:e7:f8:bc:ac:04:8a:f9:b5:c9:8d:ab:
         f5:de:cf:99:53:63:69:93:4f:4a:2d:2d:b4:37:68:71:79:97:
         2f:9e:f6:1a:48:50:80:bb:15:da:2d:00:cd:80:1b:d0:d3:b6:
         93:f2:aa:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3aMEmPRnC9qLIgh2F+h1YWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2Yzk4YjJlNGEzZTA2MGRlZjQ1YWJjNjJjMGUzNDVmYWE4
MGI1ZWMwHhcNMjYwNDI5MTcwMTMwWhcNMjYwNDMwMTcwMTMwWjAzMTEwLwYDVQQD
Eyg1MWM1YzBiZTE0MTFhOTk4ZTQ0ZmEyNTlmNzA1NGU1ZTNjNDBlMGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApReaXYBDxfMXE3m3XYJ4VPtviA1B
Im5Eh559G/5Go1ddzT2F99/PUO2YFbxYNEjkTizIT/++qzuCNv0QHNRN5BqSIpUs
STHkLW1SvDq1Hp99+RicEIzdA2OUtVJHXOsEWb+hrgqMZO9tSa6sznCtpGsOrAv/
3/dPQa2mrrNpB636uFfpZrYnxwCn+XnHZ6dzPNaGxSRJVfLs91qt912kPROXL32C
3f6QDYkVqwzr+c3oUF1qNVY6u0MfW9BnsS/33wgQ3Sc3O3d79GL72RpWUFY9Jljz
4HNHRASRVleU8HCdAuCCRM17jZGXjtge3I1uS5RKjCYslx8W05u8kyByjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHFwL4UEamY5E+iWfcFTl48QOChMB8GA1UdIwQY
MBaAFEbJiy5KPgYN70WrxiwONF+qgLXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yYWE4ZDEtY2I3MS00OTA0LWE1OTEt
MzQ0OTUyMjcxMGU3LzEvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yYWE4ZDEtY2I3MS00OTA0LWE1OTEtMzQ0OTUyMjcxMGU3
LzEvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnWX2iHDV
Dll/+O9fJ7n9nZi6zpqzOU1rUhNbo6UIFy/Z10BaC6U5h7k+zVFliEk3BQqnZLLy
EkCtIw7ORFnV8JPsPiOW1yiecz7CW6uivhQtQfJyiuwr6MjSceYZ8vXqwWIHt4aP
adCOWkfBhr6TsglO65DEzMzlxRH8T8XQSSePr76E2+IfrdvWZF8owaTEW0qxPTo/
NMLdhXtcQ7edTFqUZ0lbOwXyO05xY6It5HEiMAG1dGeNgQW4ar1ubhHNLwCh/Q5I
VNMBS/P2FOf4vKwEivm1yY2r9d7PmVNjaZNPSi0ttDdocXmXL572GkhQgLsV2i0A
zYAb0NO2k/Kqtw==
-----END CERTIFICATE-----
Generated at Wed Apr 29 20:35:52 2026 by rpki-client