Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
File:                     5884hLeAB6Jdvi4s7wzHO2mSH4g.mft (raw, json)
Hash identifier:          pUIV4ecvvrL+pzaS+1KhUB65PI8aVVhB7i/mbr6Eajw=
Subject key identifier:   A3:B3:5C:15:DF:21:79:16:EA:4F:24:BE:D3:5A:C2:25:02:09:85:E6
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Certificate issuer:       /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial:       019DF9BA5F4AFABA475DF6CCB5D063F4D589
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
Manifest number:          18C0
Signing time:             Tue 05 May 2026 20:00:33 +0000
Manifest this update:     Tue 05 May 2026 20:00:33 +0000
Manifest next update:     Wed 06 May 2026 20:00:33 +0000
Files and hashes:         1: 5884hLeAB6Jdvi4s7wzHO2mSH4g.crl (hash: +t2gDwxpt5gSVWEBYYKNoRunxt+vFtPP8ClRAqsLASE=)
                          2: 6RiDdnednlszc5nfc-ANOJUv2-o.roa (hash: jp3uEswNG4RA6H4G2MDNF+CFUPavRhXT4rfyfKyq6LE=)
                          3: HdDV5YwMNyFB8k-B_X4MU9-30nM.roa (hash: luVRxl/FnQsj5OM+H4x3yTlX1ppJM10PIPO1RpHN79g=)
                          4: Nu_9r8H3m3GpfJQaXI9Z_gksBSE.roa (hash: A0MtvPieujf5jUqev3piW+xmWcpxjiKiXWnP9KoZX/U=)
                          5: ObexSGVy696Wkd2DRhwt2_VaBs8.roa (hash: Ly1Ec9X97SiqjYPYhofzign3IKjIwUM2uHbt0VCXmE4=)
                          6: ObzqjXT5GtzebuI8BcIwPsXaLb8.roa (hash: CxduJ99uKrCwZPdYUZzvhflelo5OchrVkeFU+IICnVU=)
                          7: XJkwKQw1uwsNaMGPHoEZmHJ7ln0.roa (hash: 4mMJPUkmp2WBHWIYLKvvJ35kZmLlEY53pxDsemE3rMA=)
                          8: Y236QjVhGrl24C2bEpBZTpmsO9g.roa (hash: roo618zomZv/80bpPa5A4SKzRxktEgno100+FqWeWZU=)
                          9: teSjGmrvY_tu6RkdG_34GiE8KM0.roa (hash: yc8bd5ePK4M8XX+rsAFOZYDdIrq94apPIscjQGUl9lw=)
                          10: ugVQrwIOiOMJPcA4zFZm9kWmY04.roa (hash: Q8pDB3SA4JzJaHb+up2jkC0do3Kit4mBYGTJ7TNXFRI=)
                          11: yWZ-5OdaSQI1LPfjNeNs7tCX608.roa (hash: esuWPq3Xg5U/Su3ABpCWC8pkIxvEw4LQCmVfV8WC2QE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 May 2026 18:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:f9:ba:5f:4a:fa:ba:47:5d:f6:cc:b5:d0:63:f4:d5:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
        Validity
            Not Before: May  5 20:00:33 2026 GMT
            Not After : May  6 20:00:33 2026 GMT
        Subject: CN=a3b35c15df217916ea4f24bed35ac225020985e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a9:ba:80:5b:c1:60:59:a1:f0:8d:d3:58:44:
                    fc:e9:56:aa:2a:1a:48:88:fc:04:91:b5:89:5f:9f:
                    08:24:37:f5:94:7a:43:f4:fe:01:0e:2c:6f:da:b5:
                    c8:5e:ae:6a:73:16:4b:59:64:cc:29:84:27:22:ee:
                    de:e1:75:bf:0b:b4:53:84:6a:d0:d4:f2:09:e5:da:
                    3d:15:90:f9:fe:3c:8a:61:0b:8a:da:ba:fd:b5:6d:
                    92:74:0e:ba:df:11:dd:0b:f9:51:2e:1d:05:2d:e8:
                    96:da:a1:de:cd:9c:24:51:e2:b8:48:93:19:23:f8:
                    62:00:83:f4:e5:6e:c8:9e:f4:0d:08:3a:0c:9b:c2:
                    78:cb:ae:1c:e6:81:6c:b6:13:20:3a:69:d0:00:ee:
                    ee:1a:a4:21:28:07:2a:ab:d1:91:44:4b:ea:6f:7b:
                    f0:d4:8a:70:54:de:b0:1b:fd:70:71:5e:c6:fb:62:
                    fc:ec:67:5c:61:2e:09:6f:58:e4:b3:8e:c3:61:68:
                    5c:ff:9d:2c:f2:dc:a8:f1:3f:36:97:3a:d4:c6:10:
                    33:fe:6f:34:a1:d4:b1:5e:00:c6:d6:54:a8:db:11:
                    f8:b4:13:a3:9d:7d:56:ff:7a:09:8a:91:d5:e6:3c:
                    18:7f:39:45:44:2e:c0:7e:59:e2:fd:c7:81:f9:01:
                    c9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B3:5C:15:DF:21:79:16:EA:4F:24:BE:D3:5A:C2:25:02:09:85:E6
            X509v3 Authority Key Identifier:
                keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:c2:6d:00:02:97:2b:ec:52:9e:62:b8:15:e3:05:77:0f:98:
         ea:6e:84:0c:50:eb:3f:4a:e1:38:28:43:39:5b:67:44:5a:12:
         ef:ce:80:07:96:45:bc:2b:67:6b:ca:50:fc:b2:cc:a9:32:ae:
         35:0c:34:a1:89:25:58:24:50:fa:7c:c5:28:33:f7:ef:0c:e4:
         7a:8d:ff:71:e3:b8:19:85:f7:3f:15:27:a8:dd:2c:fa:86:c8:
         90:a8:97:c3:59:88:1b:ce:78:a8:4c:03:e5:6b:9c:f3:08:5a:
         af:54:f0:f3:cf:4b:35:50:d0:ed:1a:0b:69:f4:81:1e:0e:90:
         b8:db:4b:1f:0b:33:44:4f:53:97:ea:51:b6:3c:d6:16:35:88:
         12:c8:2e:6c:65:6c:d8:cf:07:04:3a:12:03:8b:9d:19:e0:c0:
         fd:d8:3e:bb:fa:4a:74:54:73:13:c8:86:6d:12:5f:00:00:f8:
         d0:56:f9:8b:06:92:74:db:ea:9c:32:10:04:5f:e2:8a:34:48:
         5c:b4:0c:99:04:30:3c:d9:9d:8d:e4:8d:8c:65:2b:68:3c:cd:
         99:ba:be:02:95:5f:47:9a:ee:5d:a6:0e:d7:43:bd:b4:f4:ba:
         c4:7e:08:7e:5a:fa:c8:35:e4:e0:55:0f:0e:60:a0:1f:d7:cc:
         07:0b:07:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ35ul9K+rpHXfbMtdBj9NWJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjYwNTA1MjAwMDMzWhcNMjYwNTA2MjAwMDMzWjAzMTEwLwYDVQQD
EyhhM2IzNWMxNWRmMjE3OTE2ZWE0ZjI0YmVkMzVhYzIyNTAyMDk4NWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6m6gFvBYFmh8I3TWET86VaqKhpI
iPwEkbWJX58IJDf1lHpD9P4BDixv2rXIXq5qcxZLWWTMKYQnIu7e4XW/C7RThGrQ
1PIJ5do9FZD5/jyKYQuK2rr9tW2SdA663xHdC/lRLh0FLeiW2qHezZwkUeK4SJMZ
I/hiAIP05W7InvQNCDoMm8J4y64c5oFsthMgOmnQAO7uGqQhKAcqq9GRREvqb3vw
1IpwVN6wG/1wcV7G+2L87GdcYS4Jb1jks47DYWhc/50s8tyo8T82lzrUxhAz/m80
odSxXgDG1lSo2xH4tBOjnX1W/3oJipHV5jwYfzlFRC7Aflni/ceB+QHJBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOzXBXfIXkW6k8kvtNawiUCCYXmMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApcJtAAKX
K+xSnmK4FeMFdw+Y6m6EDFDrP0rhOChDOVtnRFoS786AB5ZFvCtna8pQ/LLMqTKu
NQw0oYklWCRQ+nzFKDP37wzkeo3/ceO4GYX3PxUnqN0s+obIkKiXw1mIG854qEwD
5Wuc8whar1Tw889LNVDQ7RoLafSBHg6QuNtLHwszRE9Tl+pRtjzWFjWIEsgubGVs
2M8HBDoSA4udGeDA/dg+u/pKdFRzE8iGbRJfAAD40Fb5iwaSdNvqnDIQBF/iijRI
XLQMmQQwPNmdjeSNjGUraDzNmbq+ApVfR5ruXaYO10O9tPS6xH4Iflr6yDXk4FUP
DmCgH9fMBwsHVg==
-----END CERTIFICATE-----
Generated at Wed May 6 00:20:41 2026 by rpki-client