Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          MAM5SmjvIeM1+2E8EKIOml3CZ5bDweFzZPpM1QIlHvQ=
Subject key identifier:   A5:02:86:6A:40:C8:70:CE:E1:C1:CB:2A:E3:12:28:78:EB:E4:85:34
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       019DB73637D64FBDFE20CE39FE6F7492E250
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          18F3
Signing time:             Wed 22 Apr 2026 22:01:16 +0000
Manifest this update:     Wed 22 Apr 2026 22:01:16 +0000
Manifest next update:     Thu 23 Apr 2026 22:01:16 +0000
Files and hashes:         1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: 0igiBu1hdrYeao2jyo6abFq6rhrXgwmAFr3WQJY7RRk=)
                          2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
                          3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
                          4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Apr 2026 22:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b7:36:37:d6:4f:bd:fe:20:ce:39:fe:6f:74:92:e2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Apr 22 22:01:16 2026 GMT
            Not After : Apr 23 22:01:16 2026 GMT
        Subject: CN=a502866a40c870cee1c1cb2ae3122878ebe48534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:97:c0:a8:53:73:db:d1:f1:85:4c:67:79:ae:
                    64:a4:50:4b:59:d5:ac:3e:2d:76:a8:b5:07:ca:cc:
                    1f:3e:36:6d:c9:d1:e1:07:00:46:82:f6:d8:c1:26:
                    80:5e:29:bd:cd:85:7a:d5:64:a5:f7:72:df:65:50:
                    6f:12:94:5b:39:b1:bc:b6:37:e0:99:51:f7:77:9c:
                    bb:2f:39:89:db:d3:55:50:ba:78:e4:d0:eb:9f:b2:
                    eb:78:ca:23:c7:22:25:c2:68:be:ba:ca:31:4d:98:
                    be:38:29:dc:ca:10:3b:05:09:fb:71:bf:77:4a:f8:
                    e4:9f:df:9b:8c:41:76:63:7c:49:01:08:5a:92:32:
                    54:22:6b:08:10:bc:e9:36:50:65:88:37:6c:4d:2f:
                    9a:8c:4c:d3:4a:80:5f:4a:0b:3c:71:b1:fd:15:8e:
                    43:d6:f1:39:3b:84:1d:53:90:d0:b5:dd:cc:8f:e0:
                    44:e8:15:c6:c1:49:54:89:45:6c:14:1f:16:e6:ab:
                    e4:a8:44:a9:9c:eb:e8:62:2e:ba:e6:19:84:0c:bc:
                    3b:2b:6f:5d:60:13:45:32:d2:cb:30:64:a4:14:c7:
                    63:cc:e3:74:d6:7e:1c:19:63:0c:7b:4c:1e:c0:98:
                    45:a1:e3:d7:6e:55:1d:cc:d9:07:be:b2:32:79:fc:
                    9d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:02:86:6A:40:C8:70:CE:E1:C1:CB:2A:E3:12:28:78:EB:E4:85:34
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:39:05:0d:20:8f:48:40:f7:0e:c9:39:e0:4c:c0:fd:42:a0:
         e4:4c:9b:f3:b0:ff:9d:ba:7e:bc:6e:9a:ec:d0:9b:05:76:dd:
         e2:3c:90:4a:8d:64:f6:ef:96:cc:a4:c1:f9:17:95:12:ac:c1:
         b8:6c:12:64:cb:64:82:c1:ba:8c:fa:81:ea:db:a1:69:11:43:
         22:69:68:1c:ea:17:0d:98:a4:3f:3f:2d:e7:b6:29:d0:e2:6c:
         8a:75:af:78:57:80:cc:d9:e9:62:ce:6c:f6:04:97:a3:a9:bc:
         31:5f:cb:08:08:b1:8f:03:62:b8:90:71:26:84:cb:8f:20:61:
         1f:e6:ef:90:28:05:ab:5f:47:10:f7:2c:0c:67:96:5d:54:af:
         e1:2e:1b:aa:8a:99:8b:3b:5a:ef:47:83:b3:27:b5:02:04:98:
         28:4e:57:1a:51:e4:e1:5c:d9:62:30:3b:06:3f:5d:fe:bb:d9:
         7c:ad:24:8f:13:d9:fb:e7:af:53:00:ed:ba:f0:ea:b9:3d:18:
         ea:f7:02:2c:53:a2:7c:18:5f:32:d9:c6:a2:63:10:6c:09:2c:
         39:ac:f6:40:46:73:c8:58:61:0c:44:10:9f:aa:32:fd:a8:63:
         90:aa:a8:de:cd:87:f4:08:b2:98:7a:f9:82:45:2d:83:c5:06:
         96:4f:64:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ23NjfWT73+IM45/m90kuJQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYzMzZTQzZWY1NjUyN2ExNjlkNmFjNmQ3ZTYyYzYzZDE5
NzMwNTEwHhcNMjYwNDIyMjIwMTE2WhcNMjYwNDIzMjIwMTE2WjAzMTEwLwYDVQQD
EyhhNTAyODY2YTQwYzg3MGNlZTFjMWNiMmFlMzEyMjg3OGViZTQ4NTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZfAqFNz29HxhUxnea5kpFBLWdWs
Pi12qLUHyswfPjZtydHhBwBGgvbYwSaAXim9zYV61WSl93LfZVBvEpRbObG8tjfg
mVH3d5y7LzmJ29NVULp45NDrn7LreMojxyIlwmi+usoxTZi+OCncyhA7BQn7cb93
Svjkn9+bjEF2Y3xJAQhakjJUImsIELzpNlBliDdsTS+ajEzTSoBfSgs8cbH9FY5D
1vE5O4QdU5DQtd3Mj+BE6BXGwUlUiUVsFB8W5qvkqESpnOvoYi665hmEDLw7K29d
YBNFMtLLMGSkFMdjzON01n4cGWMMe0wewJhFoePXblUdzNkHvrIyefydZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUChmpAyHDO4cHLKuMSKHjr5IU0MB8GA1UdIwQY
MBaAFAPDPkPvVlJ6Fp1qxtfmLGPRlzBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUt
YTNhM2ViODc5ZjJiLzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUtYTNhM2ViODc5ZjJi
LzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjkFDSCP
SED3Dsk54EzA/UKg5Eyb87D/nbp+vG6a7NCbBXbd4jyQSo1k9u+WzKTB+ReVEqzB
uGwSZMtkgsG6jPqB6tuhaRFDImloHOoXDZikPz8t57Yp0OJsinWveFeAzNnpYs5s
9gSXo6m8MV/LCAixjwNiuJBxJoTLjyBhH+bvkCgFq19HEPcsDGeWXVSv4S4bqoqZ
izta70eDsye1AgSYKE5XGlHk4VzZYjA7Bj9d/rvZfK0kjxPZ++evUwDtuvDquT0Y
6vcCLFOifBhfMtnGomMQbAksOaz2QEZzyFhhDEQQn6oy/ahjkKqo3s2H9AiymHr5
gkUtg8UGlk9k1A==
-----END CERTIFICATE-----
Generated at Thu Apr 23 08:10:26 2026 by rpki-client