Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
File:                     PiDHANmNdqnGQBc4ifk2faneiZc.mft (raw, json)
Hash identifier:          4BjrSoDYiB6R2rtgWhBwQMYodIe2sLNZCbX9J7TTiRI=
Subject key identifier:   D1:63:9F:17:7E:30:5B:05:6E:96:03:54:65:87:0E:B3:69:41:CF:33
Authority key identifier: 3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
Certificate issuer:       /CN=3e20c700d98d76a9c640173889f9367da9de8997
Certificate serial:       019DD050BC2B77C94C41B0E0F3B33AD326A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
Manifest number:          18E8
Signing time:             Mon 27 Apr 2026 19:00:45 +0000
Manifest this update:     Mon 27 Apr 2026 19:00:45 +0000
Manifest next update:     Tue 28 Apr 2026 19:00:45 +0000
Files and hashes:         1: 3Y2bsvd6Ko2TakhACGAC13OxWgg.roa (hash: hop+YCd6wtmHiz87UpYcHYekpewszM4DMDY6Yajc55g=)
                          2: DEt4Y-_VZKpKHUQGndzBwGKa-hI.roa (hash: Pn+dJyctNTmeoTcdBPCYjrOipk+Ikj5vYjRfpzr/AfY=)
                          3: Fd0my4VD8yFhFNY23xVFQ5bNE7o.roa (hash: Xq0TLzzFqkURQ7QOU8lzKIy+PNOHeKXumeKowKwhe0E=)
                          4: PiDHANmNdqnGQBc4ifk2faneiZc.crl (hash: Cnktpr/b5LnrPVz+iNGY4/xzSM11YGgH+KdiScU/iAk=)
                          5: XfL7J3_lKAhMT6FV_AAy67CADLI.roa (hash: Cja0K8hb1CFlq8SDbTIyn6C1tgY/4LTLk6lQT4K0o4Q=)
                          6: uekau7rSPung7Kbe6f858ZuB0t8.roa (hash: M2Y/E4DYJ0oSGWPcmXmrI0IqZMHXZ+8X2D2MD5VVJU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d0:50:bc:2b:77:c9:4c:41:b0:e0:f3:b3:3a:d3:26:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e20c700d98d76a9c640173889f9367da9de8997
        Validity
            Not Before: Apr 27 19:00:45 2026 GMT
            Not After : Apr 28 19:00:45 2026 GMT
        Subject: CN=d1639f177e305b056e96035465870eb36941cf33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1b:87:0c:6d:cb:19:f9:18:0f:b2:6f:88:f1:
                    58:23:fd:8e:6c:55:29:8b:79:a3:9d:a6:3a:d1:a8:
                    54:5e:9b:c2:26:08:94:91:7f:e3:0d:ca:5c:3f:3e:
                    8c:90:14:2b:69:d9:8e:dd:b0:3f:d2:ef:93:fa:10:
                    85:72:02:37:47:c4:43:77:e9:0c:2a:68:54:d4:bd:
                    4d:3f:31:70:73:cb:8c:40:b1:80:77:48:9f:25:88:
                    5a:15:06:c2:b9:17:cf:91:6b:c5:5a:ef:2c:13:a2:
                    25:5a:f1:6e:c3:14:c6:f4:36:c1:58:45:d2:15:4a:
                    c6:c4:91:3c:17:05:59:ea:44:7b:38:c5:b8:64:ed:
                    83:5f:a0:6f:ae:cc:df:56:df:1a:eb:c7:ee:66:13:
                    b6:4a:a8:5e:47:bc:56:cc:3f:1d:1d:52:bd:8f:1a:
                    43:cb:13:63:6c:02:0c:50:52:80:81:ec:0a:05:d7:
                    ac:9e:49:e8:d7:65:de:cf:75:e0:71:89:c1:1f:e1:
                    8c:de:26:7c:bf:48:7a:e8:00:17:b8:3d:98:82:fa:
                    f7:db:01:42:9d:16:8e:93:72:fa:3f:08:90:0e:9a:
                    78:35:ac:11:f1:0a:ec:fe:59:a8:92:9b:92:7f:41:
                    4c:f1:10:4c:7f:f8:55:66:bc:ba:53:e5:8a:aa:cb:
                    e4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:63:9F:17:7E:30:5B:05:6E:96:03:54:65:87:0E:B3:69:41:CF:33
            X509v3 Authority Key Identifier:
                keyid:3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:7d:a6:ba:b8:08:7d:0c:33:5b:78:15:f1:c1:07:0e:a1:ef:
         3b:4c:a5:34:d8:56:3a:88:9d:8e:a1:d4:15:ae:73:b4:60:e2:
         75:77:c7:d6:2f:5e:1f:6b:74:a1:25:fd:7a:99:86:9c:6a:b9:
         18:5f:dd:a8:e8:56:14:28:05:e7:71:4f:76:22:68:e7:b2:e4:
         6b:18:dd:63:44:7b:70:e5:53:1c:5e:b5:f6:7e:81:da:77:f7:
         35:39:f8:81:05:7f:8a:3b:2a:40:9c:3f:4d:eb:fe:2a:33:19:
         3e:79:26:44:a5:ce:19:ec:57:08:57:97:2b:2b:3e:47:e8:aa:
         9a:fb:1f:9b:ac:3c:dd:15:8f:42:31:81:40:e4:ed:3f:56:6b:
         d2:68:d5:ef:db:32:81:b1:f7:83:fe:41:e6:15:8f:42:30:a4:
         eb:20:a5:52:d7:44:cf:cb:88:f6:f5:4e:75:2a:07:ea:d2:99:
         a8:f2:73:2a:50:48:a9:78:8c:45:b3:59:a4:bc:3c:59:c7:a0:
         ac:20:26:05:69:70:2d:c3:70:7c:40:c6:62:66:df:69:d2:25:
         53:27:1e:34:d4:15:25:3b:2d:24:0e:44:a6:23:da:8c:3f:65:
         5a:e2:56:8d:40:47:35:17:d0:81:e3:27:d7:4d:db:32:d4:92:
         e6:65:60:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3QULwrd8lMQbDg87M60yajMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMjBjNzAwZDk4ZDc2YTljNjQwMTczODg5ZjkzNjdkYTlk
ZTg5OTcwHhcNMjYwNDI3MTkwMDQ1WhcNMjYwNDI4MTkwMDQ1WjAzMTEwLwYDVQQD
EyhkMTYzOWYxNzdlMzA1YjA1NmU5NjAzNTQ2NTg3MGViMzY5NDFjZjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBuHDG3LGfkYD7JviPFYI/2ObFUp
i3mjnaY60ahUXpvCJgiUkX/jDcpcPz6MkBQradmO3bA/0u+T+hCFcgI3R8RDd+kM
KmhU1L1NPzFwc8uMQLGAd0ifJYhaFQbCuRfPkWvFWu8sE6IlWvFuwxTG9DbBWEXS
FUrGxJE8FwVZ6kR7OMW4ZO2DX6BvrszfVt8a68fuZhO2SqheR7xWzD8dHVK9jxpD
yxNjbAIMUFKAgewKBdesnkno12Xez3XgcYnBH+GM3iZ8v0h66AAXuD2Ygvr32wFC
nRaOk3L6PwiQDpp4NawR8Qrs/lmokpuSf0FM8RBMf/hVZry6U+WKqsvk0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFjnxd+MFsFbpYDVGWHDrNpQc8zMB8GA1UdIwQY
MBaAFD4gxwDZjXapxkAXOIn5Nn2p3omXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGlESEFObU5kcW5HUUJjNGlmazJmYW5laVpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hYzZjN2ItZDA1OS00MDE0LWE5Njgt
ZTQ2ZDhkMTZhMTVmLzEvUGlESEFObU5kcW5HUUJjNGlmazJmYW5laVpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9hYzZjN2ItZDA1OS00MDE0LWE5NjgtZTQ2ZDhkMTZhMTVm
LzEvUGlESEFObU5kcW5HUUJjNGlmazJmYW5laVpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh32murgI
fQwzW3gV8cEHDqHvO0ylNNhWOoidjqHUFa5ztGDidXfH1i9eH2t0oSX9epmGnGq5
GF/dqOhWFCgF53FPdiJo57LkaxjdY0R7cOVTHF619n6B2nf3NTn4gQV/ijsqQJw/
Tev+KjMZPnkmRKXOGexXCFeXKys+R+iqmvsfm6w83RWPQjGBQOTtP1Zr0mjV79sy
gbH3g/5B5hWPQjCk6yClUtdEz8uI9vVOdSoH6tKZqPJzKlBIqXiMRbNZpLw8Wceg
rCAmBWlwLcNwfEDGYmbfadIlUyceNNQVJTstJA5EpiPajD9lWuJWjUBHNRfQgeMn
103bMtSS5mVg3Q==
-----END CERTIFICATE-----
Generated at Mon Apr 27 22:29:13 2026 by rpki-client