Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft
File:                     wPvVh2YT7cVuD13kaMzl6yiF_yk.mft (raw, json)
Hash identifier:          x9IC0GoIQ0w73OdGpRVzze+Fb2vs17AmCQBuftd7S6A=
Subject key identifier:   AE:4F:A2:E1:35:A9:FE:78:23:99:76:20:32:40:29:D5:90:A1:5D:DC
Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
Certificate issuer:       /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Certificate serial:       019D8E3B95A38025F8C2B4660E5A0D583522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft
Manifest number:          18C6
Signing time:             Tue 14 Apr 2026 23:02:42 +0000
Manifest this update:     Tue 14 Apr 2026 23:02:42 +0000
Manifest next update:     Wed 15 Apr 2026 23:02:42 +0000
Files and hashes:         1: Bv5Sg8vgi9S842H6dRuR7sJxzko.roa (hash: hT9sbrvQRiXid7sYPnl4Iixs+zdMa4hm1hg6rDtrIYs=)
                          2: K6nvFDqRGh8xVM7IrF0Rd6Raqmo.roa (hash: EVwo0E7SIOBx5iGAFKfj/k4qRw0//D9TaPWIiThqtao=)
                          3: axRaMfkBmO7VzbCGyjkhx1P2A-8.roa (hash: sc0Yj3PBpLZ4CbPFA/VIugOR8JNz2sSyXRFn+nL0m+g=)
                          4: c8rdVYuNpflJD29KauvVYvS5wQA.roa (hash: bC9GRMHN9BrtnveTDOEwyMbzEqZzFN4CkCTMBFjErAc=)
                          5: wPvVh2YT7cVuD13kaMzl6yiF_yk.crl (hash: LLe3tz7U7QrWbzafQS8UbW17uZ6MpeHpDgVZ5icZ5wA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 15 Apr 2026 22:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:8e:3b:95:a3:80:25:f8:c2:b4:66:0e:5a:0d:58:35:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
        Validity
            Not Before: Apr 14 23:02:42 2026 GMT
            Not After : Apr 15 23:02:42 2026 GMT
        Subject: CN=ae4fa2e135a9fe7823997620324029d590a15ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f9:68:93:05:b2:73:48:8f:df:07:19:aa:0a:
                    27:54:15:e9:3a:fc:f0:a5:2f:4b:c6:98:eb:18:6c:
                    23:d6:c9:f9:2b:94:e1:66:b7:f5:dc:97:2c:9f:da:
                    9e:21:ea:18:90:00:e0:64:dd:e2:ba:7d:aa:76:ef:
                    d7:b3:61:ac:a1:77:4f:7c:2b:9e:13:84:76:1a:26:
                    0c:69:32:1e:8e:a1:84:bc:2c:ce:20:ce:3f:d4:60:
                    dc:e2:8d:04:93:5b:4e:35:0d:74:c8:00:ca:9d:b8:
                    93:90:03:f7:a2:30:7b:37:9d:a0:ec:b8:37:80:c9:
                    62:43:56:07:07:b9:33:25:3c:14:fa:c2:1e:e2:c8:
                    53:1d:22:a8:66:07:db:e4:58:af:ec:42:68:14:40:
                    82:c4:f6:7a:ac:a6:84:b2:8b:c0:22:34:b9:da:e5:
                    3e:ab:74:87:e7:17:c1:42:69:2b:6c:cd:a2:e5:b7:
                    e3:d4:07:1e:cd:e5:9d:dd:51:60:d3:be:c9:38:58:
                    a0:c5:f6:06:f9:dc:d9:86:af:00:76:4c:53:a9:e2:
                    e4:a3:32:ed:f8:fd:80:69:ac:65:b4:59:21:19:69:
                    a7:0d:62:e7:b3:c6:e3:95:c3:df:7e:d8:dd:0b:fc:
                    46:0f:70:d9:97:f6:c1:72:14:dc:1a:f4:e4:c8:3c:
                    7c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4F:A2:E1:35:A9:FE:78:23:99:76:20:32:40:29:D5:90:A1:5D:DC
            X509v3 Authority Key Identifier:
                keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b8:d7:ff:52:57:a8:c1:fa:dd:64:36:4f:82:99:28:52:e4:
         fd:94:62:2f:e5:10:4a:20:be:d8:1d:78:19:04:44:20:06:ff:
         e0:27:6b:cd:f1:52:ac:fe:70:e8:9a:1e:a7:0a:07:12:21:ce:
         f8:49:b0:ba:2e:19:ea:a0:53:e2:56:23:51:19:7f:2f:c4:ac:
         73:a0:87:50:e0:e2:de:61:e2:10:03:f5:a2:ae:66:ef:58:36:
         c0:24:60:23:41:02:06:d0:3a:ae:21:5e:a7:5b:0b:6d:9d:75:
         82:1c:58:c4:c2:b2:c6:2b:81:6b:5d:19:76:ce:53:a5:40:03:
         90:3d:b8:4f:2b:8e:f1:19:ac:b9:d0:e3:7c:e2:7f:9a:b8:d5:
         42:d1:75:ba:a8:9f:2b:36:7a:7a:d1:65:f7:39:7c:30:c3:97:
         57:81:98:e3:9b:c4:15:33:b6:54:fc:74:74:4d:77:ae:9a:27:
         88:86:71:27:a7:ba:54:6d:7b:f8:6a:7a:c2:9f:d3:61:db:d1:
         c4:89:ac:45:c5:b3:f5:61:c6:9f:3c:31:b6:c5:eb:59:4b:67:
         0f:84:79:7c:a7:56:55:ff:e4:b2:cc:52:a1:b1:1f:1f:c4:c6:
         e4:6e:f1:16:ea:19:9d:3f:e2:34:71:a4:ae:6c:52:42:18:f5:
         32:9c:cf:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2OO5WjgCX4wrRmDloNWDUiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZmJkNTg3NjYxM2VkYzU2ZTBmNWRlNDY4Y2NlNWViMjg4
NWZmMjkwHhcNMjYwNDE0MjMwMjQyWhcNMjYwNDE1MjMwMjQyWjAzMTEwLwYDVQQD
EyhhZTRmYTJlMTM1YTlmZTc4MjM5OTc2MjAzMjQwMjlkNTkwYTE1ZGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoflokwWyc0iP3wcZqgonVBXpOvzw
pS9LxpjrGGwj1sn5K5ThZrf13Jcsn9qeIeoYkADgZN3iun2qdu/Xs2GsoXdPfCue
E4R2GiYMaTIejqGEvCzOIM4/1GDc4o0Ek1tONQ10yADKnbiTkAP3ojB7N52g7Lg3
gMliQ1YHB7kzJTwU+sIe4shTHSKoZgfb5Fiv7EJoFECCxPZ6rKaEsovAIjS52uU+
q3SH5xfBQmkrbM2i5bfj1AcezeWd3VFg077JOFigxfYG+dzZhq8AdkxTqeLkozLt
+P2AaaxltFkhGWmnDWLns8bjlcPfftjdC/xGD3DZl/bBchTcGvTkyDx8cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5PouE1qf54I5l2IDJAKdWQoV3cMB8GA1UdIwQY
MBaAFMD71YdmE+3Fbg9d5GjM5esohf8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1B2VmgyWVQ3Y1Z1RDEza2FNemw2eWlGX3lrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wMWViYzItODRkMC00YWUzLWEyYzIt
YTNiNmJlNGE5ZTliLzEvd1B2VmgyWVQ3Y1Z1RDEza2FNemw2eWlGX3lrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8wMWViYzItODRkMC00YWUzLWEyYzItYTNiNmJlNGE5ZTli
LzEvd1B2VmgyWVQ3Y1Z1RDEza2FNemw2eWlGX3lrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbjX/1JX
qMH63WQ2T4KZKFLk/ZRiL+UQSiC+2B14GQREIAb/4CdrzfFSrP5w6JoepwoHEiHO
+Emwui4Z6qBT4lYjURl/L8Ssc6CHUODi3mHiEAP1oq5m71g2wCRgI0ECBtA6riFe
p1sLbZ11ghxYxMKyxiuBa10Zds5TpUADkD24TyuO8RmsudDjfOJ/mrjVQtF1uqif
KzZ6etFl9zl8MMOXV4GY45vEFTO2VPx0dE13rponiIZxJ6e6VG17+Gp6wp/TYdvR
xImsRcWz9WHGnzwxtsXrWUtnD4R5fKdWVf/kssxSobEfH8TG5G7xFuoZnT/iNHGk
rmxSQhj1MpzPHA==
-----END CERTIFICATE-----
Generated at Wed Apr 15 08:43:00 2026 by rpki-client