Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
File:                     AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft (raw, json)
Hash identifier:          qCE+eqHhESISD9EY5PZFmdnMZWgc3whRYsFqTPYA2wg=
Subject key identifier:   10:B2:6C:8D:8A:6D:7B:F2:16:D1:44:C2:5E:61:37:90:33:C4:41:2A
Authority key identifier: 00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
Certificate issuer:       /CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Certificate serial:       019E31F320BA3A55851E9A18CCB4BA2EACA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
Manifest number:          18E1
Signing time:             Sat 16 May 2026 18:01:17 +0000
Manifest this update:     Sat 16 May 2026 18:01:17 +0000
Manifest next update:     Sun 17 May 2026 18:01:17 +0000
Files and hashes:         1: AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl (hash: 1Y77eceSPvCfr6WJ/SEID0rpeHW94H6Uis12RAabOvA=)
                          2: qT2NrCiJquJtfq_3e7nF2gYWJ5s.roa (hash: eAGHZA4lhxkkeWMCuFkx9WVGsrMFd32m7CFLgSd01WU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:f3:20:ba:3a:55:85:1e:9a:18:cc:b4:ba:2e:ac:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
        Validity
            Not Before: May 16 18:01:17 2026 GMT
            Not After : May 17 18:01:17 2026 GMT
        Subject: CN=10b26c8d8a6d7bf216d144c25e61379033c4412a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:85:8d:24:fb:0e:ee:e9:2d:69:41:03:e1:a5:
                    80:4f:a0:69:ae:78:64:cd:91:26:80:22:cc:58:20:
                    35:63:8c:bf:66:39:7e:17:88:f8:7e:35:3c:18:c2:
                    ea:b4:b6:7c:0c:fe:de:ba:f0:bc:66:d3:67:a9:fc:
                    34:c6:8d:ac:ae:c6:5e:5f:e1:bb:de:67:d8:4a:95:
                    f3:1f:f6:d8:01:e6:1f:e7:15:9d:d6:7a:8c:6b:5d:
                    6f:6a:08:7b:38:5d:70:8c:0a:43:f8:df:31:4b:4b:
                    0e:a9:e3:70:e0:c6:92:01:78:3b:19:dd:74:e5:8a:
                    1c:e2:46:26:ce:68:6f:86:3e:57:f8:f9:08:b5:bf:
                    17:ee:66:14:92:c4:60:ca:d7:97:5d:a0:6b:ec:36:
                    12:cb:a5:2f:b5:cb:f4:d0:65:10:3f:20:7c:94:d7:
                    cb:75:4c:04:12:d6:9f:4f:06:36:6d:b0:08:2f:9f:
                    37:e8:b6:36:48:c8:6d:eb:fd:c3:74:36:e4:0b:2a:
                    6b:5c:d8:92:3c:b6:2e:a3:23:2a:8b:9b:bb:19:bd:
                    92:2c:69:3c:20:98:33:30:88:fe:90:ae:f3:3e:84:
                    05:98:99:2a:68:7a:48:fe:6a:2b:3d:54:a8:22:6c:
                    39:dd:93:c4:9e:b7:96:0c:c6:7f:3c:c4:10:3f:0a:
                    e7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B2:6C:8D:8A:6D:7B:F2:16:D1:44:C2:5E:61:37:90:33:C4:41:2A
            X509v3 Authority Key Identifier:
                keyid:00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:87:b0:36:cc:f5:da:cb:2a:dd:f1:da:b8:f4:d9:a8:8b:61:
         de:fc:66:82:65:93:83:6c:99:10:bb:29:34:99:69:42:ac:db:
         4d:81:8f:0a:6b:c6:1a:5a:ec:e4:0c:25:d7:6d:95:7e:17:17:
         2c:62:8c:0b:e6:c1:15:d9:53:0f:af:36:c9:e3:c3:36:88:ce:
         50:eb:46:2c:f7:8a:4e:4f:d6:23:3c:ac:1d:ed:e6:09:40:e2:
         19:70:2b:32:78:b1:52:25:6d:ab:15:16:eb:3a:de:8f:5d:b8:
         8d:33:07:67:78:df:96:58:3a:f2:78:9e:85:4b:88:ae:18:df:
         49:c7:48:cd:c9:f6:68:cb:84:6f:58:31:21:4c:38:29:ca:8f:
         7e:8b:12:0e:16:16:2e:0b:3d:64:77:7a:92:89:49:cc:89:2b:
         53:dd:09:73:4e:24:0a:33:f4:2b:31:88:1d:a8:5a:2d:82:88:
         2b:b7:6e:da:8b:e7:0e:90:99:b8:03:e7:09:76:51:3a:a9:57:
         63:26:fa:e8:26:67:81:d3:aa:68:7d:84:57:05:80:b3:64:b7:
         69:45:39:4b:f1:9d:d8:45:49:65:1f:da:22:8d:2c:d9:63:31:
         d9:6f:b5:50:76:a2:42:4e:47:ad:eb:fd:3a:dd:91:80:04:77:
         6b:21:95:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4x8yC6OlWFHpoYzLS6LqyiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMmZhNmUxOTA1NjgzODkwNWJjMzJiNTNhYjBkMTA0N2Q3
OGU0ZDQwHhcNMjYwNTE2MTgwMTE3WhcNMjYwNTE3MTgwMTE3WjAzMTEwLwYDVQQD
EygxMGIyNmM4ZDhhNmQ3YmYyMTZkMTQ0YzI1ZTYxMzc5MDMzYzQ0MTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IWNJPsO7uktaUED4aWAT6Bprnhk
zZEmgCLMWCA1Y4y/Zjl+F4j4fjU8GMLqtLZ8DP7euvC8ZtNnqfw0xo2srsZeX+G7
3mfYSpXzH/bYAeYf5xWd1nqMa11vagh7OF1wjApD+N8xS0sOqeNw4MaSAXg7Gd10
5Yoc4kYmzmhvhj5X+PkItb8X7mYUksRgyteXXaBr7DYSy6Uvtcv00GUQPyB8lNfL
dUwEEtafTwY2bbAIL5836LY2SMht6/3DdDbkCyprXNiSPLYuoyMqi5u7Gb2SLGk8
IJgzMIj+kK7zPoQFmJkqaHpI/morPVSoImw53ZPEnreWDMZ/PMQQPwrnAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCybI2KbXvyFtFEwl5hN5AzxEEqMB8GA1UdIwQY
MBaAFAAvpuGQVoOJBbwytTqw0QR9eOTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUMtbTRaQldnNGtGdkRLMU9yRFJCSDE0NU5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny84NjZiNmItZjU2Yy00YTJmLTkwMmQt
ZmJjMzZlNDM0OGY1LzEvQUMtbTRaQldnNGtGdkRLMU9yRFJCSDE0NU5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny84NjZiNmItZjU2Yy00YTJmLTkwMmQtZmJjMzZlNDM0OGY1
LzEvQUMtbTRaQldnNGtGdkRLMU9yRFJCSDE0NU5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXoewNsz1
2ssq3fHauPTZqIth3vxmgmWTg2yZELspNJlpQqzbTYGPCmvGGlrs5Awl122VfhcX
LGKMC+bBFdlTD682yePDNojOUOtGLPeKTk/WIzysHe3mCUDiGXArMnixUiVtqxUW
6zrej124jTMHZ3jfllg68niehUuIrhjfScdIzcn2aMuEb1gxIUw4KcqPfosSDhYW
Lgs9ZHd6kolJzIkrU90Jc04kCjP0KzGIHahaLYKIK7du2ovnDpCZuAPnCXZROqlX
Yyb66CZngdOqaH2EVwWAs2S3aUU5S/Gd2EVJZR/aIo0s2WMx2W+1UHaiQk5Hrev9
Ot2RgAR3ayGVkw==
-----END CERTIFICATE-----
Generated at Sat May 16 20:23:53 2026 by rpki-client