Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
File:                     A39TL6Ji9ca9lhW8151u3UPy4HU.mft (raw, json)
Hash identifier:          fvgFKyWIw3QfwGvWgV8zvlRSAjmvjOD6OIhUaZKP2X8=
Subject key identifier:   87:86:27:09:5E:BF:DE:1E:96:F4:79:33:DD:35:8C:CA:73:A3:C0:7D
Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
Certificate issuer:       /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Certificate serial:       019DB1D8C2DF26D452D49C72B5C04F16320E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
Manifest number:          18CF
Signing time:             Tue 21 Apr 2026 21:01:06 +0000
Manifest this update:     Tue 21 Apr 2026 21:01:06 +0000
Manifest next update:     Wed 22 Apr 2026 21:01:06 +0000
Files and hashes:         1: 0kDLFicUYCSnk5qezsAnlqD_YsQ.roa (hash: nPUI+tPRgC8/2WDdTR0OhIepUfEAFxE9m9YTijKjEm8=)
                          2: 5S_7thf2DaNAtWCpIaM3S8JGyIw.roa (hash: gFO7mmA7nFE7H8OIcfxRMIamOyG5pl0gNHLu/ghYBzU=)
                          3: A39TL6Ji9ca9lhW8151u3UPy4HU.crl (hash: xwpqpUHA7Dq+iI4kqN/ChAAs8xTALkmAq3wQArza8nw=)
                          4: okyJ_dyqGcdnFwHJe7BtYHyXka8.roa (hash: 4dVv/6YLlqIKpJZjxm1+2Z9rbJ0osG+l17eURfhyO4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Apr 2026 21:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b1:d8:c2:df:26:d4:52:d4:9c:72:b5:c0:4f:16:32:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
        Validity
            Not Before: Apr 21 21:01:06 2026 GMT
            Not After : Apr 22 21:01:06 2026 GMT
        Subject: CN=878627095ebfde1e96f47933dd358cca73a3c07d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8d:29:75:67:2c:64:57:ca:f0:65:84:91:4e:
                    0d:28:b8:5d:1d:2d:ba:f9:dc:12:8e:1f:67:ff:1f:
                    4f:6e:9a:c2:b3:a5:35:e2:ce:31:b2:3c:bc:cf:27:
                    ba:e2:2c:c5:e2:bb:70:13:43:f3:aa:e2:38:ee:84:
                    17:67:9d:d0:42:f8:91:29:12:bf:a2:6e:21:5f:47:
                    25:2d:56:b9:bb:c8:e5:62:86:55:83:74:53:30:c9:
                    59:ab:69:4d:18:cb:4e:d4:cd:4e:b8:9c:0d:07:e0:
                    87:3e:63:ee:c1:d1:02:bb:86:8f:26:da:88:82:5b:
                    06:1d:db:6f:23:ca:05:78:ab:dd:22:c7:7f:5c:2e:
                    d0:b5:5d:d2:d0:65:c7:ea:e9:0e:12:7d:f4:57:41:
                    e9:0d:82:c8:6e:e3:ab:3e:80:dc:3d:89:bc:a9:ea:
                    be:a8:fc:a9:e5:97:8c:d7:90:55:89:c4:c4:7f:c3:
                    40:db:1e:2b:b1:31:91:65:41:07:41:86:6f:d9:fb:
                    48:55:ea:ed:a1:9a:86:8f:9f:3c:c4:29:49:b5:c4:
                    3d:79:58:38:cf:e3:aa:4f:50:95:28:b6:1a:84:a8:
                    c6:07:d3:03:8f:2b:ab:ff:90:12:e8:49:92:a6:51:
                    66:c1:6f:67:a7:e9:0b:62:01:21:46:73:bc:1e:2e:
                    1c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:86:27:09:5E:BF:DE:1E:96:F4:79:33:DD:35:8C:CA:73:A3:C0:7D
            X509v3 Authority Key Identifier:
                keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:1d:56:97:0b:12:94:b0:3b:f3:dd:c5:1e:18:d3:8a:78:ac:
         0e:a9:dc:c2:ad:f5:6f:7b:01:18:e4:33:9d:fc:af:69:2b:f1:
         e2:86:5f:c0:9a:69:c6:2a:3c:bf:40:76:3e:df:c7:99:b4:5d:
         7e:97:94:4f:2e:57:4e:c5:56:85:b6:42:05:d8:46:21:f8:13:
         c5:b6:b5:16:8b:9d:92:3a:64:a3:52:19:db:4a:8c:1e:ec:ae:
         00:26:ca:ce:d3:81:0b:55:fb:52:cc:62:2d:85:bb:ba:2a:73:
         f2:64:f7:7f:f8:f3:ca:b4:9c:37:46:bf:23:0e:96:22:6c:e6:
         a9:dc:65:e3:17:fa:30:f4:15:4f:c8:59:5a:6e:8d:d5:47:2c:
         10:cc:18:81:f7:15:59:b0:d7:b4:da:20:a7:c9:01:ed:0a:e4:
         d3:f0:40:d2:7a:2b:23:d2:d0:b0:84:c9:06:b0:ec:3b:d0:21:
         ab:ae:e5:a4:6e:cb:1c:9a:d7:e0:da:35:3b:ce:44:18:cd:4f:
         c7:c9:f8:d1:cb:8b:87:74:33:0a:61:88:ac:7b:3a:ab:c4:62:
         db:7e:4a:38:fd:11:f8:5e:d0:c7:4a:2d:e2:1f:fb:79:7d:41:
         31:1a:a0:b3:70:f3:ec:30:57:55:48:35:47:ed:36:dc:c7:50:
         25:a3:33:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2x2MLfJtRS1JxytcBPFjIOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzN2Y1MzJmYTI2MmY1YzZiZDk2MTViY2Q3OWQ2ZWRkNDNm
MmUwNzUwHhcNMjYwNDIxMjEwMTA2WhcNMjYwNDIyMjEwMTA2WjAzMTEwLwYDVQQD
Eyg4Nzg2MjcwOTVlYmZkZTFlOTZmNDc5MzNkZDM1OGNjYTczYTNjMDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr40pdWcsZFfK8GWEkU4NKLhdHS26
+dwSjh9n/x9PbprCs6U14s4xsjy8zye64izF4rtwE0PzquI47oQXZ53QQviRKRK/
om4hX0clLVa5u8jlYoZVg3RTMMlZq2lNGMtO1M1OuJwNB+CHPmPuwdECu4aPJtqI
glsGHdtvI8oFeKvdIsd/XC7QtV3S0GXH6ukOEn30V0HpDYLIbuOrPoDcPYm8qeq+
qPyp5ZeM15BVicTEf8NA2x4rsTGRZUEHQYZv2ftIVertoZqGj588xClJtcQ9eVg4
z+OqT1CVKLYahKjGB9MDjyur/5AS6EmSplFmwW9np+kLYgEhRnO8Hi4cBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeGJwlev94elvR5M901jMpzo8B9MB8GA1UdIwQY
MBaAFAN/Uy+iYvXGvZYVvNedbt1D8uB1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTM5VEw2Smk5Y2E5bGhXODE1MXUzVVB5NEhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8wOGU1N2MtZDcxNi00NzA1LTk1NjEt
MDNhZGZiYzY4YzkxLzEvQTM5VEw2Smk5Y2E5bGhXODE1MXUzVVB5NEhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8wOGU1N2MtZDcxNi00NzA1LTk1NjEtMDNhZGZiYzY4Yzkx
LzEvQTM5VEw2Smk5Y2E5bGhXODE1MXUzVVB5NEhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhB1WlwsS
lLA7893FHhjTinisDqncwq31b3sBGOQznfyvaSvx4oZfwJppxio8v0B2Pt/HmbRd
fpeUTy5XTsVWhbZCBdhGIfgTxba1Foudkjpko1IZ20qMHuyuACbKztOBC1X7Usxi
LYW7uipz8mT3f/jzyrScN0a/Iw6WImzmqdxl4xf6MPQVT8hZWm6N1UcsEMwYgfcV
WbDXtNogp8kB7Qrk0/BA0norI9LQsITJBrDsO9Ahq67lpG7LHJrX4No1O85EGM1P
x8n40cuLh3QzCmGIrHs6q8Ri235KOP0R+F7Qx0ot4h/7eX1BMRqgs3Dz7DBXVUg1
R+023MdQJaMziw==
-----END CERTIFICATE-----
Generated at Wed Apr 22 01:44:39 2026 by rpki-client