Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
File:                     xn6d6Ogmze4OZfYiWDQ0uBzze60.mft (raw, json)
Hash identifier:          GH8NE5/391WzJJ0Bgx0+gYMiKwshyb4MYIA/d0R0dxA=
Subject key identifier:   C1:31:35:8D:CE:90:D4:A3:2D:E0:BE:E6:B2:B3:DF:49:3B:C7:0C:B2
Authority key identifier: C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD
Certificate issuer:       /CN=c67e9de8e826cdee0e65f622583434b81cf37bad
Certificate serial:       019D25BAC087565BE9B7D19BD60910372F4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
Manifest number:          1817
Signing time:             Wed 25 Mar 2026 16:01:29 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:29 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:29 +0000
Files and hashes:         1: AfdcY0-Nv9-nDm8D_XhuzGvHs1M.roa (hash: Iln5My7Vy90xzmErWY2q1+QP+/1Vku9eLVf6no/e5Gc=)
                          2: xn6d6Ogmze4OZfYiWDQ0uBzze60.crl (hash: dx2txtp7nSbozv9zs1LkpUUSvbxvRCOeCewEPsWy7lY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:c0:87:56:5b:e9:b7:d1:9b:d6:09:10:37:2f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c67e9de8e826cdee0e65f622583434b81cf37bad
        Validity
            Not Before: Mar 25 16:01:29 2026 GMT
            Not After : Mar 26 16:01:29 2026 GMT
        Subject: CN=c131358dce90d4a32de0bee6b2b3df493bc70cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:71:f2:db:99:8e:31:a2:45:c9:3d:26:d1:19:
                    f5:21:0a:ac:a1:36:5c:dd:b0:87:ce:0e:17:3f:76:
                    75:fb:ec:f3:19:46:ed:16:e5:89:1e:5f:27:9f:73:
                    16:bc:53:44:d7:fd:ae:46:89:98:5b:5e:ed:8b:ce:
                    e0:ed:1c:11:9d:79:17:9c:8e:76:a2:18:d2:bb:cc:
                    18:70:38:4a:2b:b6:6f:5e:6a:cf:21:79:7d:90:d9:
                    cb:fd:4a:59:6e:3d:ba:e3:40:28:2d:bc:a9:99:42:
                    6c:01:14:1b:8c:8f:65:c9:b6:eb:18:a5:5e:94:b0:
                    75:ec:d0:b6:1d:2a:43:9e:52:e7:b2:28:77:23:bf:
                    46:89:0a:fa:0c:43:8b:f4:3b:b7:38:1f:40:b6:7f:
                    8e:03:db:62:36:0f:6f:9f:e0:21:89:3a:00:bc:cd:
                    82:ba:f1:fc:2f:46:ea:9c:18:69:48:b0:58:3b:bb:
                    a9:d0:ec:b3:a5:81:dc:59:20:c0:76:1c:16:a7:e7:
                    10:27:89:9b:09:2f:0e:16:84:0f:a0:e3:b3:ac:af:
                    81:0b:60:1e:7d:26:20:48:a5:5d:37:09:37:0f:db:
                    bb:9d:ff:79:39:86:80:c8:93:30:16:cc:51:70:cc:
                    b8:77:e4:b4:e8:c9:dd:6e:70:f9:cd:5b:5b:35:e2:
                    95:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:31:35:8D:CE:90:D4:A3:2D:E0:BE:E6:B2:B3:DF:49:3B:C7:0C:B2
            X509v3 Authority Key Identifier:
                keyid:C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:0f:8f:1c:98:82:1b:c8:0e:4f:e9:37:dd:74:69:4d:c6:cb:
         9a:46:fc:ef:6d:cb:84:c2:47:c0:06:3e:be:e4:b3:98:55:aa:
         56:75:cf:4c:c8:1a:87:17:ac:3e:88:6c:c8:58:c1:bb:af:fe:
         68:2b:a8:2d:16:e1:ef:c9:33:04:fc:7e:88:84:c0:4f:0d:57:
         7e:2a:1c:58:e2:33:bd:ab:fb:75:ea:3e:4f:75:5f:ce:e1:73:
         5a:d9:c4:f0:b4:c2:47:8a:72:91:ba:a5:99:15:91:b9:ff:8c:
         98:31:70:95:0f:db:ee:af:90:65:20:06:50:57:0c:d7:e5:31:
         0d:07:9c:57:e1:a0:19:ae:5b:c6:32:6a:67:70:6d:fe:18:00:
         c7:31:b3:ca:6f:70:d8:a0:08:7c:eb:65:ab:33:7c:fd:16:68:
         20:ff:a4:52:67:8e:3d:bd:8a:3d:6a:4d:c2:aa:28:79:bc:d8:
         93:06:94:5b:e0:95:58:cb:50:5f:c4:6f:0b:3d:11:8f:b6:8f:
         59:2f:57:c6:7d:7e:8c:07:fb:bb:27:7e:09:a5:28:ca:bc:1a:
         cf:85:c1:dc:e3:3b:f1:47:1c:84:91:31:31:3d:3d:52:8d:ce:
         fb:8d:ab:68:13:8f:6c:68:4e:b5:e1:d0:b5:e3:d5:34:ef:4e:
         ee:f6:af:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lusCHVlvpt9Gb1gkQNy9KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2N2U5ZGU4ZTgyNmNkZWUwZTY1ZjYyMjU4MzQzNGI4MWNm
MzdiYWQwHhcNMjYwMzI1MTYwMTI5WhcNMjYwMzI2MTYwMTI5WjAzMTEwLwYDVQQD
EyhjMTMxMzU4ZGNlOTBkNGEzMmRlMGJlZTZiMmIzZGY0OTNiYzcwY2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHHy25mOMaJFyT0m0Rn1IQqsoTZc
3bCHzg4XP3Z1++zzGUbtFuWJHl8nn3MWvFNE1/2uRomYW17ti87g7RwRnXkXnI52
ohjSu8wYcDhKK7ZvXmrPIXl9kNnL/UpZbj2640AoLbypmUJsARQbjI9lybbrGKVe
lLB17NC2HSpDnlLnsih3I79GiQr6DEOL9Du3OB9Atn+OA9tiNg9vn+AhiToAvM2C
uvH8L0bqnBhpSLBYO7up0OyzpYHcWSDAdhwWp+cQJ4mbCS8OFoQPoOOzrK+BC2Ae
fSYgSKVdNwk3D9u7nf95OYaAyJMwFsxRcMy4d+S06MndbnD5zVtbNeKVnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMExNY3OkNSjLeC+5rKz30k7xwyyMB8GA1UdIwQY
MBaAFMZ+nejoJs3uDmX2Ilg0NLgc83utMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG42ZDZPZ216ZTRPWmZZaVdEUTB1Qnp6ZTYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wYjBjMWMtZTVlYS00NTU4LWJiZGQt
MTk5ZTA1NmE2ODAwLzEveG42ZDZPZ216ZTRPWmZZaVdEUTB1Qnp6ZTYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wYjBjMWMtZTVlYS00NTU4LWJiZGQtMTk5ZTA1NmE2ODAw
LzEveG42ZDZPZ216ZTRPWmZZaVdEUTB1Qnp6ZTYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFw+PHJiC
G8gOT+k33XRpTcbLmkb8723LhMJHwAY+vuSzmFWqVnXPTMgahxesPohsyFjBu6/+
aCuoLRbh78kzBPx+iITATw1XfiocWOIzvav7deo+T3VfzuFzWtnE8LTCR4pykbql
mRWRuf+MmDFwlQ/b7q+QZSAGUFcM1+UxDQecV+GgGa5bxjJqZ3Bt/hgAxzGzym9w
2KAIfOtlqzN8/RZoIP+kUmeOPb2KPWpNwqooebzYkwaUW+CVWMtQX8RvCz0Rj7aP
WS9Xxn1+jAf7uyd+CaUoyrwaz4XB3OM78UcchJExMT09Uo3O+42raBOPbGhOteHQ
tePVNO9O7vavKA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:32:26 2026 by rpki-client