Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
File:                     s5xw9844MbjyzOidsUon3aoOmcI.mft (raw, json)
Hash identifier:          sTQw1Rnrzhh5O0SVxW1k/r5+AkFb9VdQsU4sp6lCRAU=
Subject key identifier:   E3:41:F3:9F:1B:F3:8A:68:1C:A7:BB:8E:48:6F:B9:2F:F3:32:B7:D9
Authority key identifier: B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
Certificate issuer:       /CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Certificate serial:       019D9DE3FBD262E85D673BB848138C529E0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
Manifest number:          18C4
Signing time:             Sat 18 Apr 2026 00:00:57 +0000
Manifest this update:     Sat 18 Apr 2026 00:00:57 +0000
Manifest next update:     Sun 19 Apr 2026 00:00:57 +0000
Files and hashes:         1: 4oagPgJG74n6HXB_8ZxEG0Z-zQQ.roa (hash: SihbXUlI6CJuGEx9+oO0M0CfndPW0YeuEcTHzRftuKM=)
                          2: eR0_T7rJiSO4J7CxpKrWHFxxpOc.roa (hash: EZHtgyXuVhoKYg4ldCwReKSDjf4sa7sqciiJnV/pNsU=)
                          3: gk6Oi_1ZEpbTJNkrcfzivPseRk4.roa (hash: MTngT7ag+SmUmwcOQxAC0+9glcY1SoAbKgViBkJyexI=)
                          4: s5xw9844MbjyzOidsUon3aoOmcI.crl (hash: qVYydXd6hIXSS3s1pk7VbcEFrQUHt6aWyzgCx+dx0ok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:e3:fb:d2:62:e8:5d:67:3b:b8:48:13:8c:52:9e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
        Validity
            Not Before: Apr 18 00:00:57 2026 GMT
            Not After : Apr 19 00:00:57 2026 GMT
        Subject: CN=e341f39f1bf38a681ca7bb8e486fb92ff332b7d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:28:b7:9b:17:b2:49:10:68:73:7c:a5:c4:65:
                    67:93:b0:63:12:49:4e:85:b6:23:e2:9d:7b:fd:1a:
                    01:9c:1f:fd:3c:72:0b:cb:ea:89:a7:bd:b3:b3:f3:
                    01:99:f6:0d:e7:89:15:2b:80:aa:dc:9a:5a:b2:b7:
                    95:89:7c:9f:cc:4c:8a:1c:67:c7:ad:00:9e:fe:88:
                    2a:dd:af:dd:8c:e9:ec:06:87:0e:51:01:ac:13:39:
                    8d:3c:31:7b:c3:bb:66:d5:32:67:65:40:38:04:1b:
                    ff:d1:5e:62:66:93:28:83:ab:40:9e:05:e4:39:85:
                    06:42:ea:e9:80:5b:47:a3:43:de:a5:ff:b5:3e:72:
                    78:13:d3:12:02:cb:9a:08:02:34:03:4f:6a:99:cc:
                    ea:52:f0:3f:73:b5:2f:c3:e1:53:34:5d:98:51:3d:
                    6c:c4:e7:72:d7:f1:75:94:6a:df:c2:a4:1b:d4:dc:
                    64:6e:dd:d7:76:4e:8c:7d:c7:87:1d:ac:fb:c9:1f:
                    2b:43:a2:fa:7a:ec:73:bf:03:00:93:23:b6:46:ba:
                    1f:b4:05:d4:4d:a1:64:2b:bb:b3:6d:c4:b1:53:69:
                    d6:03:f7:c5:b9:db:bb:2f:3d:af:f5:55:b7:fd:8c:
                    9d:c4:8b:3c:54:40:5e:4d:b0:6e:0f:c2:0a:1e:f3:
                    de:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:41:F3:9F:1B:F3:8A:68:1C:A7:BB:8E:48:6F:B9:2F:F3:32:B7:D9
            X509v3 Authority Key Identifier:
                keyid:B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:08:f2:7d:f3:7f:b6:62:17:47:51:ad:f7:ee:9b:c9:56:fe:
         03:08:b0:4a:9b:e4:3c:3e:42:ef:cf:3a:62:06:55:b4:ae:18:
         ef:bd:f4:bb:5c:9a:5f:2b:f8:3e:ac:6b:73:2c:e7:5f:ab:6e:
         c0:78:92:29:d4:ed:f0:3f:49:94:07:72:49:e1:89:a7:43:a4:
         1d:31:2b:3b:4c:a0:7a:87:57:7f:de:66:7a:75:b2:28:0f:32:
         c6:0e:0a:da:62:73:6b:fa:0b:a9:35:54:4e:af:f7:e9:a0:ad:
         76:e0:00:b9:80:86:59:1b:b0:3d:5c:26:15:ce:3f:5d:30:28:
         98:73:5c:e9:ee:e2:82:52:b7:26:0a:24:72:55:4d:9f:f7:9c:
         e4:da:86:19:6f:c9:b2:13:63:08:fd:dc:b1:26:50:c0:e8:83:
         6d:19:93:93:6d:a1:45:05:c0:f1:64:1f:ee:9d:92:b3:06:03:
         17:ee:a1:9c:41:4d:9c:d9:a6:87:d5:77:b8:04:ee:83:50:17:
         1d:39:af:47:6a:7e:3f:81:eb:5e:21:d0:d7:41:3a:bd:bc:90:
         a9:79:d3:ce:ec:06:db:e1:1f:ac:10:79:27:c9:12:7b:41:e3:
         6b:18:7c:3b:bd:db:62:a3:51:81:e6:86:9d:e5:a4:85:cb:1d:
         90:35:1a:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2d4/vSYuhdZzu4SBOMUp4LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOWM3MGY3Y2UzODMxYjhmMmNjZTg5ZGIxNGEyN2RkYWEw
ZTk5YzIwHhcNMjYwNDE4MDAwMDU3WhcNMjYwNDE5MDAwMDU3WjAzMTEwLwYDVQQD
EyhlMzQxZjM5ZjFiZjM4YTY4MWNhN2JiOGU0ODZmYjkyZmYzMzJiN2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyi3mxeySRBoc3ylxGVnk7BjEklO
hbYj4p17/RoBnB/9PHILy+qJp72zs/MBmfYN54kVK4Cq3JpasreViXyfzEyKHGfH
rQCe/ogq3a/djOnsBocOUQGsEzmNPDF7w7tm1TJnZUA4BBv/0V5iZpMog6tAngXk
OYUGQurpgFtHo0Pepf+1PnJ4E9MSAsuaCAI0A09qmczqUvA/c7Uvw+FTNF2YUT1s
xOdy1/F1lGrfwqQb1Nxkbt3Xdk6MfceHHaz7yR8rQ6L6euxzvwMAkyO2RroftAXU
TaFkK7uzbcSxU2nWA/fFudu7Lz2v9VW3/YydxIs8VEBeTbBuD8IKHvPeqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONB858b84poHKe7jkhvuS/zMrfZMB8GA1UdIwQY
MBaAFLOccPfOODG48szonbFKJ92qDpnCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczV4dzk4NDRNYmp5ek9pZHNVb24zYW9PbWNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lOTE4MTMtOTI3ZS00N2E1LWI3MDIt
ZGU1Mzc4NDYxZmVlLzEvczV4dzk4NDRNYmp5ek9pZHNVb24zYW9PbWNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lOTE4MTMtOTI3ZS00N2E1LWI3MDItZGU1Mzc4NDYxZmVl
LzEvczV4dzk4NDRNYmp5ek9pZHNVb24zYW9PbWNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwjyffN/
tmIXR1Gt9+6byVb+AwiwSpvkPD5C7886YgZVtK4Y7730u1yaXyv4PqxrcyznX6tu
wHiSKdTt8D9JlAdySeGJp0OkHTErO0ygeodXf95menWyKA8yxg4K2mJza/oLqTVU
Tq/36aCtduAAuYCGWRuwPVwmFc4/XTAomHNc6e7iglK3JgokclVNn/ec5NqGGW/J
shNjCP3csSZQwOiDbRmTk22hRQXA8WQf7p2SswYDF+6hnEFNnNmmh9V3uATug1AX
HTmvR2p+P4HrXiHQ10E6vbyQqXnTzuwG2+EfrBB5J8kSe0Hjaxh8O73bYqNRgeaG
neWkhcsdkDUaBA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 05:36:29 2026 by rpki-client