Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File:                     s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier:          vzOjaUsPoyXy5mAmF99Z4V6VXtHdlZfzeLGU1auHNCI=
Subject key identifier:   6D:51:8A:7F:EF:CF:96:31:69:C9:71:26:FE:A9:D5:E9:5C:6B:FF:93
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer:       /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial:       019D4C90A3AA4B74D85CD02D49FC606F2968
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number:          18B0
Signing time:             Thu 02 Apr 2026 05:00:40 +0000
Manifest this update:     Thu 02 Apr 2026 05:00:40 +0000
Manifest next update:     Fri 03 Apr 2026 05:00:40 +0000
Files and hashes:         1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
                          2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
                          3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
                          4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
                          5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
                          6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: HbokA85PNd9fNQx7nDr9ZjnXHVYbp9dToQFmSHCImYg=)
                          7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 Apr 2026 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:4c:90:a3:aa:4b:74:d8:5c:d0:2d:49:fc:60:6f:29:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
        Validity
            Not Before: Apr  2 05:00:40 2026 GMT
            Not After : Apr  3 05:00:40 2026 GMT
        Subject: CN=6d518a7fefcf963169c97126fea9d5e95c6bff93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c2:3b:fe:01:72:48:e8:fe:44:81:86:32:af:
                    29:4d:56:32:e0:6f:6e:e0:89:7d:81:96:a2:e2:e5:
                    38:5f:ff:ac:31:aa:22:ca:f2:02:7f:7b:7f:63:4a:
                    f8:6a:ef:d0:1e:6d:f9:ad:e8:64:d4:9e:75:b0:70:
                    78:ad:8f:a4:80:f6:09:27:f5:e2:7b:4c:69:bf:44:
                    5f:03:50:94:9f:e9:6b:b2:70:57:12:00:c9:7e:82:
                    de:1b:c0:b4:3b:a3:25:ff:23:bc:9c:fc:28:ed:f7:
                    77:de:07:9c:ae:cd:a3:a1:a2:a0:1b:4d:35:bf:b1:
                    ba:3f:ab:f6:49:a2:8d:6d:56:84:f9:96:84:63:54:
                    2e:99:b5:b4:9a:6f:74:a7:50:7f:d7:e1:9a:55:35:
                    a9:68:af:62:ff:7c:9f:d3:20:90:32:e7:fc:88:ff:
                    5b:65:d5:fd:79:ee:a2:56:2c:11:90:3d:2c:49:7d:
                    52:71:94:97:68:56:c0:cd:c6:9c:3d:56:ec:e7:16:
                    fe:4b:2b:8f:41:83:f9:65:f3:58:f3:98:64:8f:e9:
                    f1:b4:b7:ea:d5:ae:f2:ec:b3:50:34:af:c0:db:8f:
                    0a:d3:38:81:47:2e:b0:ed:83:cb:ca:ad:28:6e:af:
                    12:1b:64:27:bc:01:17:31:44:98:1b:1e:02:b5:31:
                    8c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:51:8A:7F:EF:CF:96:31:69:C9:71:26:FE:A9:D5:E9:5C:6B:FF:93
            X509v3 Authority Key Identifier:
                keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:08:f1:45:f3:fe:11:35:0f:1a:40:84:93:b9:ba:b1:04:3a:
         aa:9b:69:8e:1a:fc:07:c5:e8:37:37:5c:40:5b:73:0d:e2:59:
         46:7d:4f:27:0c:b2:ed:84:a8:03:40:42:a3:d3:27:4d:63:38:
         c4:30:1f:91:66:2a:28:66:b1:01:ff:f4:fe:16:1c:01:bd:1a:
         cd:19:f8:95:80:94:e4:72:35:4f:cb:69:4e:bb:d4:74:1a:a8:
         4f:d0:99:c6:fd:73:a3:be:3a:9d:4e:aa:0f:f5:b5:12:7f:d7:
         52:50:06:5b:0b:3f:9f:73:66:55:8c:73:48:bb:17:8c:1b:1a:
         e9:16:05:df:1e:1a:4c:54:a4:b2:c9:d3:bb:41:8c:a4:39:68:
         08:dd:e9:25:f1:c1:94:d3:f4:e1:fe:36:00:b4:48:f7:d7:76:
         ac:a6:89:4f:cd:97:8c:14:f5:85:d0:5b:29:e6:c7:47:ca:d3:
         f8:23:ce:e7:27:69:f1:55:82:e8:d2:e6:3a:54:59:db:c6:bb:
         07:70:26:99:3e:e7:85:a0:23:5e:63:1e:1a:65:c5:46:7b:51:
         09:4b:f8:70:ff:84:f5:ae:e9:2d:a4:35:12:d8:65:8c:93:e0:
         db:71:68:cf:5f:f8:29:9f:ee:06:9d:e6:98:e2:e4:9b:57:3d:
         75:6f:7a:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ1MkKOqS3TYXNAtSfxgbyloMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2
ZjcxNWEwHhcNMjYwNDAyMDUwMDQwWhcNMjYwNDAzMDUwMDQwWjAzMTEwLwYDVQQD
Eyg2ZDUxOGE3ZmVmY2Y5NjMxNjljOTcxMjZmZWE5ZDVlOTVjNmJmZjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsI7/gFySOj+RIGGMq8pTVYy4G9u
4Il9gZai4uU4X/+sMaoiyvICf3t/Y0r4au/QHm35rehk1J51sHB4rY+kgPYJJ/Xi
e0xpv0RfA1CUn+lrsnBXEgDJfoLeG8C0O6Ml/yO8nPwo7fd33gecrs2joaKgG001
v7G6P6v2SaKNbVaE+ZaEY1QumbW0mm90p1B/1+GaVTWpaK9i/3yf0yCQMuf8iP9b
ZdX9ee6iViwRkD0sSX1ScZSXaFbAzcacPVbs5xb+SyuPQYP5ZfNY85hkj+nxtLfq
1a7y7LNQNK/A248K0ziBRy6w7YPLyq0obq8SG2QnvAEXMUSYGx4CtTGMpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1Rin/vz5YxaclxJv6p1elca/+TMB8GA1UdIwQY
MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt
NmMzMDVhNmRiYWI5LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5
LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQjxRfP+
ETUPGkCEk7m6sQQ6qptpjhr8B8XoNzdcQFtzDeJZRn1PJwyy7YSoA0BCo9MnTWM4
xDAfkWYqKGaxAf/0/hYcAb0azRn4lYCU5HI1T8tpTrvUdBqoT9CZxv1zo746nU6q
D/W1En/XUlAGWws/n3NmVYxzSLsXjBsa6RYF3x4aTFSkssnTu0GMpDloCN3pJfHB
lNP04f42ALRI99d2rKaJT82XjBT1hdBbKebHR8rT+CPO5ydp8VWC6NLmOlRZ28a7
B3AmmT7nhaAjXmMeGmXFRntRCUv4cP+E9a7pLaQ1EthljJPg23Foz1/4KZ/uBp3m
mOLkm1c9dW96hQ==
-----END CERTIFICATE-----
Generated at Thu Apr 2 07:28:28 2026 by rpki-client