Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
File:                     mWchgxr7izgwe0n1ue5ikq0eWFA.mft (raw, json)
Hash identifier:          /o3yl+0FtxQntTe9mH5Zy2rDYpmYMBriBEvkUjG67js=
Subject key identifier:   78:D5:81:A7:EC:51:17:8A:3A:4F:D2:75:1D:4B:90:0D:7E:8B:38:37
Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
Certificate issuer:       /CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Certificate serial:       019DB0446A440297A6F47AF826DB2271C4C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
Manifest number:          18F0
Signing time:             Tue 21 Apr 2026 13:39:26 +0000
Manifest this update:     Tue 21 Apr 2026 13:39:26 +0000
Manifest next update:     Wed 22 Apr 2026 13:39:26 +0000
Files and hashes:         1: VE_LZ5OEVy7OtiwnakNbQlXOUx8.roa (hash: nZT5dviNLBhgGj5zg6mzO60GRglFXHbvUdAHc/xzhdo=)
                          2: VGE1McKV1fObE1-qcqalIcbniqM.roa (hash: eZC03RfnlRHK+KPGMyItH5RKFEP6Dc/vQtXvyRoCh6I=)
                          3: m72BlK4pK3nz4quwny73cERWUUU.roa (hash: 3sQVvJAEO+cZVJVe28TC5M0aUTp2A0mSxPgJfwLQboM=)
                          4: mWchgxr7izgwe0n1ue5ikq0eWFA.crl (hash: EEk58vzEjVOAOI6Cx1rkM4D+ekwgyRrXMGXTTW/pC6Q=)
                          5: nbN6QTJFxRMXWB7BZSEIH-SMH3g.roa (hash: pyiyGBs40xwh8+LBH6NUqQq8ar9YtwxRrDXfuF15LbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Apr 2026 13:39:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b0:44:6a:44:02:97:a6:f4:7a:f8:26:db:22:71:c4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850
        Validity
            Not Before: Apr 21 13:39:26 2026 GMT
            Not After : Apr 22 13:39:26 2026 GMT
        Subject: CN=78d581a7ec51178a3a4fd2751d4b900d7e8b3837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:60:a9:46:77:dc:8b:82:98:27:59:9b:d7:da:
                    e4:63:40:e1:5f:ae:47:04:1e:2b:40:55:77:0c:ea:
                    01:12:51:8b:87:5a:53:8b:2a:31:3b:5a:85:39:41:
                    d3:84:00:6e:49:f6:f7:8e:9c:6d:36:7c:d3:ed:54:
                    8c:5b:43:50:07:ed:d9:ca:51:29:5d:87:2a:3a:50:
                    68:30:b1:84:43:aa:27:cc:80:10:7f:d1:a8:eb:d5:
                    71:b9:f1:b4:8b:64:93:80:c2:2e:ee:25:e1:a2:1c:
                    94:45:5a:4f:5f:7d:51:4e:dd:4f:c7:f9:18:aa:5f:
                    78:a5:76:b8:5e:ca:d2:6e:48:2d:ea:a5:48:2f:d4:
                    b1:d6:2e:fd:d7:7a:33:f0:d3:a0:4a:20:d6:50:c0:
                    8b:ec:21:58:98:b7:40:8a:61:91:b2:7a:15:60:12:
                    b0:a0:8f:74:b9:70:1e:29:cc:dd:11:07:d2:d5:0e:
                    5d:42:9b:10:f4:da:45:e3:4f:c8:3d:8a:ec:64:9e:
                    f2:2d:1b:aa:25:c0:b5:d5:a2:fb:29:9b:a0:fb:e5:
                    90:87:43:bb:2e:da:cf:21:48:28:ce:96:80:e7:e6:
                    47:41:d4:77:dc:9f:24:86:f4:95:c9:be:ba:8c:c5:
                    6d:05:d3:a4:9d:bc:f9:9f:f5:b8:65:3e:cb:c2:62:
                    b0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D5:81:A7:EC:51:17:8A:3A:4F:D2:75:1D:4B:90:0D:7E:8B:38:37
            X509v3 Authority Key Identifier:
                keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:5d:8d:76:b6:d4:bd:83:88:4f:5c:c5:14:2c:ce:a3:be:f3:
         06:e0:a8:6f:2a:43:e5:b7:66:9b:07:4a:9f:09:a6:a6:09:f9:
         f7:26:88:eb:7d:bb:41:29:08:87:fa:fe:e0:a3:47:dc:2c:34:
         4b:d4:04:e9:67:88:b1:4d:6e:31:96:97:84:aa:b4:b7:ca:e6:
         f3:3a:26:6a:d2:c0:7c:ac:e5:9b:cf:de:b6:24:72:d9:0d:5e:
         6a:d5:cd:db:03:01:9b:35:0b:35:35:e0:05:29:d8:10:92:4a:
         2f:a8:b0:33:b7:76:22:28:65:09:29:17:87:bc:46:80:45:62:
         c4:85:e1:17:e4:74:2a:32:24:32:c2:1a:07:97:d9:cb:ad:1c:
         05:10:94:68:3f:2b:d6:f3:2c:96:c0:25:97:ce:f7:ab:02:fd:
         68:1d:5c:5e:f8:e1:87:5a:d3:90:3e:a6:a2:8f:6d:e5:b3:8d:
         38:99:12:59:a0:79:93:a3:d0:eb:ba:3e:ea:9f:26:48:43:21:
         21:28:62:67:01:6d:8c:cb:3e:f5:e6:46:50:32:2d:cb:1b:d5:
         98:00:11:51:5d:8c:8b:b2:cc:2f:9f:af:e0:27:7c:0d:1a:0e:
         3e:21:ce:6f:d5:48:e5:99:08:6a:02:6c:84:6f:bc:2e:78:82:
         1f:79:db:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2wRGpEApem9Hr4JtsiccTAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NjcyMTgzMWFmYjhiMzgzMDdiNDlmNWI5ZWU2MjkyYWQx
ZTU4NTAwHhcNMjYwNDIxMTMzOTI2WhcNMjYwNDIyMTMzOTI2WjAzMTEwLwYDVQQD
Eyg3OGQ1ODFhN2VjNTExNzhhM2E0ZmQyNzUxZDRiOTAwZDdlOGIzODM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWCpRnfci4KYJ1mb19rkY0DhX65H
BB4rQFV3DOoBElGLh1pTiyoxO1qFOUHThABuSfb3jpxtNnzT7VSMW0NQB+3ZylEp
XYcqOlBoMLGEQ6onzIAQf9Go69VxufG0i2STgMIu7iXhohyURVpPX31RTt1Px/kY
ql94pXa4XsrSbkgt6qVIL9Sx1i7913oz8NOgSiDWUMCL7CFYmLdAimGRsnoVYBKw
oI90uXAeKczdEQfS1Q5dQpsQ9NpF40/IPYrsZJ7yLRuqJcC11aL7KZug++WQh0O7
LtrPIUgozpaA5+ZHQdR33J8khvSVyb66jMVtBdOknbz5n/W4ZT7LwmKwqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjVgafsUReKOk/SdR1LkA1+izg3MB8GA1UdIwQY
MBaAFJlnIYMa+4s4MHtJ9bnuYpKtHlhQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVdjaGd4cjdpemd3ZTBuMXVlNWlrcTBlV0ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8xYzFlYjItMWY2NS00ZjcxLThiMzIt
YjRiZmU0NTZkZGUwLzEvbVdjaGd4cjdpemd3ZTBuMXVlNWlrcTBlV0ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8xYzFlYjItMWY2NS00ZjcxLThiMzItYjRiZmU0NTZkZGUw
LzEvbVdjaGd4cjdpemd3ZTBuMXVlNWlrcTBlV0ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfl2NdrbU
vYOIT1zFFCzOo77zBuCobypD5bdmmwdKnwmmpgn59yaI6327QSkIh/r+4KNH3Cw0
S9QE6WeIsU1uMZaXhKq0t8rm8zomatLAfKzlm8/etiRy2Q1eatXN2wMBmzULNTXg
BSnYEJJKL6iwM7d2IihlCSkXh7xGgEVixIXhF+R0KjIkMsIaB5fZy60cBRCUaD8r
1vMslsAll873qwL9aB1cXvjhh1rTkD6moo9t5bONOJkSWaB5k6PQ67o+6p8mSEMh
IShiZwFtjMs+9eZGUDItyxvVmAARUV2Mi7LML5+v4Cd8DRoOPiHOb9VI5ZkIagJs
hG+8LniCH3nbmQ==
-----END CERTIFICATE-----
Generated at Tue Apr 21 19:04:08 2026 by rpki-client