Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
File:                     pJuD9b3hodyT3mlHaDfp46N3l68.mft (raw, json)
Hash identifier:          57SscTUM25LS7w4ZFqq68qeG+hcIXYkwTHAGpw//Nw8=
Subject key identifier:   D4:25:45:71:A9:D8:55:AE:6B:5E:62:2A:DF:A4:B2:2C:83:5D:30:F6
Authority key identifier: A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF
Certificate issuer:       /CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
Certificate serial:       019DFF186702CB793B84E6FEC357B0CAB7D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
Manifest number:          18F7
Signing time:             Wed 06 May 2026 21:01:22 +0000
Manifest this update:     Wed 06 May 2026 21:01:22 +0000
Manifest next update:     Thu 07 May 2026 21:01:22 +0000
Files and hashes:         1: _xbk6TstsNtf1uEDvwohYt6Gqmg.roa (hash: POljjhEax4aAurVZjBSXk9yYPwBhrXFZZutRKo1D0lI=)
                          2: pJuD9b3hodyT3mlHaDfp46N3l68.crl (hash: /uVb5HdyucwMHSQGFx1uvvrsIvTnFATamvphFJW5/0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 May 2026 21:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ff:18:67:02:cb:79:3b:84:e6:fe:c3:57:b0:ca:b7:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
        Validity
            Not Before: May  6 21:01:22 2026 GMT
            Not After : May  7 21:01:22 2026 GMT
        Subject: CN=d4254571a9d855ae6b5e622adfa4b22c835d30f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:85:8c:ef:48:5d:b9:be:d3:59:74:a7:98:1d:
                    5e:ba:7b:19:43:1c:aa:02:6e:38:be:88:de:a0:f7:
                    e3:b2:b6:a3:d2:af:80:5d:d6:45:f9:d7:7e:a7:07:
                    98:10:db:5a:b6:ef:cd:a4:39:cc:6e:7e:7e:32:19:
                    c7:a0:00:4c:a5:36:2f:f3:6f:e7:c8:f9:3c:bc:8a:
                    c4:01:03:6f:c6:9b:9d:62:bc:c6:9f:43:4a:a5:9a:
                    87:36:2e:20:de:fe:1c:d2:77:51:17:36:d9:d4:94:
                    8c:b4:ff:a5:89:c5:fa:25:0f:ea:72:4f:a9:6d:1f:
                    7c:bb:45:9b:1a:f5:44:ee:29:d1:ba:b3:99:73:d6:
                    bb:b7:e5:22:69:91:4f:41:85:bc:96:c2:d5:d7:0a:
                    39:57:34:a8:43:59:8b:4b:c9:04:2d:10:7c:ee:d9:
                    46:f9:68:f1:4a:8e:f2:83:b5:63:ac:13:19:62:59:
                    ba:43:c7:b6:fd:b2:0a:57:95:30:6f:04:d3:d6:de:
                    eb:ed:a8:1e:70:72:68:e1:dd:7d:8d:fe:b4:6e:5a:
                    71:ad:63:2b:f3:ef:e9:6d:ee:9e:2e:bf:99:e2:fb:
                    ba:bc:8f:66:5e:10:6a:72:b4:cf:3f:5b:1f:2a:85:
                    ca:1c:43:ba:33:79:ad:0d:79:71:63:a6:45:a2:b7:
                    7d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:25:45:71:A9:D8:55:AE:6B:5E:62:2A:DF:A4:B2:2C:83:5D:30:F6
            X509v3 Authority Key Identifier:
                keyid:A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:2e:3b:f1:99:7d:2e:ee:2e:3d:1a:a3:b2:59:99:88:80:55:
         f1:b2:3a:9d:0e:67:fe:db:c6:3d:f8:a9:3e:80:ee:3e:2b:32:
         92:8d:0a:96:b3:ed:c7:10:c2:1b:2c:cf:5c:ea:71:dd:fc:49:
         ea:dd:3a:19:b5:a7:b6:65:3e:6e:43:ec:6d:6a:5b:d2:78:d7:
         a9:d2:fe:c9:e2:34:63:be:3f:75:64:f6:fe:27:9c:25:c2:61:
         d6:0a:b3:2a:ef:4b:63:77:33:25:f2:50:7b:6e:d9:6a:1c:2f:
         4b:6c:99:01:39:da:32:81:19:86:83:94:5e:32:56:31:7a:8e:
         63:09:a9:9c:ad:e4:dc:4a:2d:e3:b8:50:bc:08:a8:b7:d7:3e:
         2c:9e:c0:68:8d:e4:2e:7a:65:e4:53:50:a2:17:dc:e6:19:08:
         49:c8:79:d2:d3:e7:3e:2e:3c:6a:a7:91:3d:30:c1:19:22:da:
         94:95:de:7a:7b:8f:04:c0:e4:38:9d:cb:a0:c4:4c:0c:ee:04:
         84:ac:a0:4f:cb:06:7f:f0:f2:df:4e:1d:14:d6:d1:51:c4:94:
         d1:87:fc:6d:80:d3:f4:81:39:0e:3d:01:e2:36:5b:ab:9b:36:
         73:6a:33:24:8d:6f:60:d7:f0:e5:e6:83:37:a3:b2:a5:5f:2e:
         e6:b1:47:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3/GGcCy3k7hOb+w1ewyrfZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OWI4M2Y1YmRlMWExZGM5M2RlNjk0NzY4MzdlOWUzYTM3
Nzk3YWYwHhcNMjYwNTA2MjEwMTIyWhcNMjYwNTA3MjEwMTIyWjAzMTEwLwYDVQQD
EyhkNDI1NDU3MWE5ZDg1NWFlNmI1ZTYyMmFkZmE0YjIyYzgzNWQzMGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4WM70hdub7TWXSnmB1eunsZQxyq
Am44vojeoPfjsraj0q+AXdZF+dd+pweYENtatu/NpDnMbn5+MhnHoABMpTYv82/n
yPk8vIrEAQNvxpudYrzGn0NKpZqHNi4g3v4c0ndRFzbZ1JSMtP+licX6JQ/qck+p
bR98u0WbGvVE7inRurOZc9a7t+UiaZFPQYW8lsLV1wo5VzSoQ1mLS8kELRB87tlG
+WjxSo7yg7VjrBMZYlm6Q8e2/bIKV5UwbwTT1t7r7agecHJo4d19jf60blpxrWMr
8+/pbe6eLr+Z4vu6vI9mXhBqcrTPP1sfKoXKHEO6M3mtDXlxY6ZFord95wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQlRXGp2FWua15iKt+ksiyDXTD2MB8GA1UdIwQY
MBaAFKSbg/W94aHck95pR2g36eOjd5evMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hZDFjNjktY2U1Ni00ZWRhLTg3ZWEt
OTg3NzE5ZWU2YTBjLzEvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hZDFjNjktY2U1Ni00ZWRhLTg3ZWEtOTg3NzE5ZWU2YTBj
LzEvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUS478Zl9
Lu4uPRqjslmZiIBV8bI6nQ5n/tvGPfipPoDuPisyko0KlrPtxxDCGyzPXOpx3fxJ
6t06GbWntmU+bkPsbWpb0njXqdL+yeI0Y74/dWT2/iecJcJh1gqzKu9LY3czJfJQ
e27ZahwvS2yZATnaMoEZhoOUXjJWMXqOYwmpnK3k3Eot47hQvAiot9c+LJ7AaI3k
Lnpl5FNQohfc5hkISch50tPnPi48aqeRPTDBGSLalJXeenuPBMDkOJ3LoMRMDO4E
hKygT8sGf/Dy304dFNbRUcSU0Yf8bYDT9IE5Dj0B4jZbq5s2c2ozJI1vYNfw5eaD
N6OypV8u5rFHxg==
-----END CERTIFICATE-----
Generated at Thu May 7 06:30:03 2026 by rpki-client