Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
File:                     RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft (raw, json)
Hash identifier:          rd57UwFFaFMq5HNqO8FE4kaJOz0msWfhUYZYBTNxr6Y=
Subject key identifier:   0E:A5:C1:42:88:06:70:FC:41:87:7E:74:6D:15:11:99:57:1C:D8:E7
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Certificate issuer:       /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial:       019DCFE3886645660C68A41FA74528A2B1F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
Manifest number:          18E0
Signing time:             Mon 27 Apr 2026 17:01:28 +0000
Manifest this update:     Mon 27 Apr 2026 17:01:28 +0000
Manifest next update:     Tue 28 Apr 2026 17:01:28 +0000
Files and hashes:         1: 1-gvD7al892cvZ4RIDuyKy9oaP8E.roa (hash: 3YuUrQDhY5WtE8QXyn7md8vc7m27H9qU1hbbb54ZWaY=)
                          2: 5Lz9w0B7jrAzPI5acoujGxqoJpE.roa (hash: MZNW6RIYVz1iqV9FFYEQ74EZU6o1FnMQFNeyud+QFNQ=)
                          3: RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl (hash: 6Hl5N4dj4WKTSyqB43e1VNjwlSOUqrQLpAoT64WidJg=)
                          4: U7F_EGMPuOTUwMrEIvZDG6D8FL0.roa (hash: Msu3UEjWnFS+f8ETYG9dtK80xmHaVMz/zqoRDxDt/JM=)
                          5: Zd_S7TX7KyLf91f92bM72Q5m1hg.roa (hash: cE/CxwAeAo553C8FvYX71S7+9eLctivX+ScLAuru1fI=)
                          6: m2jS2YkNTUHRPi6h3Lkhe67p9k0.roa (hash: +y6I9Y8FOJyplIOWWLmZd1y7Nvbup46rof3V4cdi8+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:e3:88:66:45:66:0c:68:a4:1f:a7:45:28:a2:b1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
        Validity
            Not Before: Apr 27 17:01:28 2026 GMT
            Not After : Apr 28 17:01:28 2026 GMT
        Subject: CN=0ea5c142880670fc41877e746d151199571cd8e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:28:47:06:68:f6:f3:fe:e0:3c:c0:e2:f6:1f:
                    32:2e:57:f8:0e:1e:0a:0b:27:31:5d:a9:d8:69:3e:
                    b9:62:67:68:82:e9:ad:1a:f7:72:f5:64:be:bb:76:
                    13:63:3b:dd:06:83:c4:2b:a3:82:69:26:36:0e:61:
                    b7:02:0f:80:f9:1d:c4:64:00:58:e0:97:d5:9c:58:
                    14:4d:ed:1b:d6:3a:04:50:b7:20:1a:4f:d6:66:5e:
                    c5:27:0a:ab:95:be:d9:18:d4:ab:fb:d2:d2:18:4e:
                    dd:d3:d7:3d:b2:76:d4:6d:28:7b:5f:57:46:b5:e9:
                    8f:89:89:fd:56:79:25:b1:62:c0:0e:f1:09:89:b2:
                    92:4a:07:ae:d8:b0:31:71:13:bf:39:70:e1:35:d1:
                    09:73:c3:38:4d:28:72:86:e6:13:8b:73:69:4a:dc:
                    fe:63:2a:6e:2a:d6:0f:15:19:50:29:43:a7:d3:0f:
                    f3:8f:8b:2a:ba:e7:df:63:5b:87:61:53:2a:5d:63:
                    69:a3:f3:2d:1c:7b:15:68:6e:9c:7d:7a:fd:64:db:
                    69:6d:59:99:6f:44:2c:37:7e:46:5b:00:13:b6:61:
                    63:e3:4e:7f:d0:d2:09:1e:24:ed:90:5b:e1:5f:e7:
                    a6:d8:ea:61:f1:d8:75:0e:63:87:01:ac:f8:52:e0:
                    31:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A5:C1:42:88:06:70:FC:41:87:7E:74:6D:15:11:99:57:1C:D8:E7
            X509v3 Authority Key Identifier:
                keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:38:62:52:a7:a3:6f:68:23:66:fa:cf:00:19:94:a2:be:df:
         1a:b2:d3:24:e5:0c:f5:8a:4e:8e:fe:da:15:69:02:29:10:05:
         51:f5:56:79:35:9a:2d:b4:3f:06:ae:0a:3b:9f:3b:68:35:a3:
         0a:34:3b:f3:d6:a9:2c:16:38:52:e9:07:94:7d:31:e8:26:55:
         2f:95:15:38:50:2b:5e:3c:19:a3:4e:de:0b:90:ce:c6:75:1e:
         5a:e5:3b:63:46:e0:39:d9:db:82:ad:2a:d4:f0:49:15:d7:35:
         16:c4:f2:fb:46:c4:64:a9:30:54:15:df:06:15:3f:01:5c:30:
         48:57:56:b8:f3:0b:f7:ad:11:9d:f6:4f:97:a9:90:0c:14:82:
         2c:d5:63:9a:0a:98:e7:14:0f:0b:34:54:b7:2f:12:d0:7e:7c:
         fc:9e:d7:00:f1:d8:52:e1:4b:dd:81:de:bd:44:97:bd:c2:47:
         c9:53:34:0e:c8:db:a6:59:34:ec:e7:d9:29:a5:aa:96:0c:74:
         bd:ad:ff:0c:1d:0d:e6:84:2f:d6:f4:1e:fd:cc:7c:f5:f3:0d:
         95:95:89:27:76:0e:4c:3a:7a:46:df:7b:77:9f:16:a4:b5:53:
         07:2b:8e:ac:d8:1e:11:8e:f5:e0:40:64:92:46:c2:cd:d6:5a:
         39:0b:72:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3P44hmRWYMaKQfp0UoorHwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZDlhMGE0YjU3YTBlZWM3YzRlNTJhMTE5ZGI0YjFjNjU2
ZjRkYjQwHhcNMjYwNDI3MTcwMTI4WhcNMjYwNDI4MTcwMTI4WjAzMTEwLwYDVQQD
EygwZWE1YzE0Mjg4MDY3MGZjNDE4NzdlNzQ2ZDE1MTE5OTU3MWNkOGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyhHBmj28/7gPMDi9h8yLlf4Dh4K
CycxXanYaT65YmdogumtGvdy9WS+u3YTYzvdBoPEK6OCaSY2DmG3Ag+A+R3EZABY
4JfVnFgUTe0b1joEULcgGk/WZl7FJwqrlb7ZGNSr+9LSGE7d09c9snbUbSh7X1dG
temPiYn9VnklsWLADvEJibKSSgeu2LAxcRO/OXDhNdEJc8M4TShyhuYTi3NpStz+
YypuKtYPFRlQKUOn0w/zj4squuffY1uHYVMqXWNpo/MtHHsVaG6cfXr9ZNtpbVmZ
b0QsN35GWwATtmFj405/0NIJHiTtkFvhX+em2Oph8dh1DmOHAaz4UuAxFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6lwUKIBnD8QYd+dG0VEZlXHNjnMB8GA1UdIwQY
MBaAFEbZoKS1eg7sfE5SoRnbSxxlb020MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82NzNiMWQtNmQxNC00ZGY1LTk5YWQt
MmVlMmI3Mjk1ZGZmLzEvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS82NzNiMWQtNmQxNC00ZGY1LTk5YWQtMmVlMmI3Mjk1ZGZm
LzEvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzhiUqej
b2gjZvrPABmUor7fGrLTJOUM9YpOjv7aFWkCKRAFUfVWeTWaLbQ/Bq4KO587aDWj
CjQ789apLBY4UukHlH0x6CZVL5UVOFArXjwZo07eC5DOxnUeWuU7Y0bgOdnbgq0q
1PBJFdc1FsTy+0bEZKkwVBXfBhU/AVwwSFdWuPML960RnfZPl6mQDBSCLNVjmgqY
5xQPCzRUty8S0H58/J7XAPHYUuFL3YHevUSXvcJHyVM0Dsjbplk07OfZKaWqlgx0
va3/DB0N5oQv1vQe/cx89fMNlZWJJ3YOTDp6Rt97d58WpLVTByuOrNgeEY714EBk
kkbCzdZaOQtySg==
-----END CERTIFICATE-----
Generated at Tue Apr 28 03:23:40 2026 by rpki-client