Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft
File:                     1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft (raw, json)
Hash identifier:          HI2fxjxMHXAcyb/vjgw6oD3p2K16TxdxFKh1fvruutY=
Subject key identifier:   0A:8D:50:5C:A2:16:5B:7B:F7:D0:39:4D:F7:A9:7A:FF:FE:47:D7:11
Authority key identifier: F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B
Certificate issuer:       /CN=f8035ec9de2570c1e7a7db40e272e45548c9202b
Certificate serial:       019D9B196FCE8559F2772B6F77404F29D0A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft
Manifest number:          0C03
Signing time:             Fri 17 Apr 2026 11:00:28 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:28 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:28 +0000
Files and hashes:         1: 1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl (hash: WLaUmHh4ZuR1+EYCDf1YnxoqOaCysSQRwAmrghSyYFk=)
                          2: _bF1xY0tz7JbEXvFbfl2J9z_aGE.roa (hash: RJ6E1ubvdFwW8RqYbgq5Su4V9SdqGf0qZCB+qrw7Uhg=)
                          3: d55MmSSrMOAa7YboXbvWTauB-vE.roa (hash: u/wjI69y9HM6cDlahIXVWn271sSNYCBmkSyoOi+8hS4=)
                          4: tSXjnZHfIFRPkfR23KuWOEzYmso.roa (hash: bT+yAY7ld62QoBr+Sm2VFzdlFNBEOfbRTYnS7F4jOIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:6f:ce:85:59:f2:77:2b:6f:77:40:4f:29:d0:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8035ec9de2570c1e7a7db40e272e45548c9202b
        Validity
            Not Before: Apr 17 11:00:28 2026 GMT
            Not After : Apr 18 11:00:28 2026 GMT
        Subject: CN=0a8d505ca2165b7bf7d0394df7a97afffe47d711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4d:6d:1d:e9:cc:20:6d:57:ff:40:c9:fc:cf:
                    3f:6c:e7:61:c7:86:15:d0:92:cd:1f:75:2a:0e:a3:
                    ed:1c:19:bb:46:28:3c:50:b9:d0:65:77:76:b8:9c:
                    d3:de:23:ef:d9:cb:8d:36:27:7d:5f:73:cf:3a:22:
                    de:e9:7f:1a:8d:c0:15:81:7d:23:56:5a:77:9a:19:
                    96:8a:54:19:66:74:98:c0:8f:39:b4:66:1b:35:f3:
                    11:ba:08:2d:60:2c:52:48:b7:f2:71:46:7c:98:76:
                    0a:68:20:0b:e6:94:13:c7:9d:f4:26:5e:d5:49:00:
                    75:52:15:ed:60:0b:cf:97:f0:42:23:fb:94:2e:6b:
                    e9:bd:0d:22:49:ed:8f:ed:d9:73:a8:02:2d:11:4c:
                    40:11:2d:4f:af:14:5a:c6:ab:61:33:67:f8:c6:06:
                    2e:ac:a5:6c:20:f6:44:b5:d5:92:e8:f8:28:7f:68:
                    22:eb:4e:b9:6d:fb:43:66:24:3d:b0:74:d6:56:f4:
                    84:b3:ac:c7:b7:22:8e:3b:c9:8a:79:6c:74:53:b9:
                    75:68:43:f5:65:3a:49:bf:cb:6e:ef:a1:cc:1a:d2:
                    68:dc:69:78:eb:4f:82:a3:79:68:3a:1f:91:33:ad:
                    a7:5f:32:e6:90:a4:78:8b:c3:56:bd:9d:ff:27:88:
                    21:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8D:50:5C:A2:16:5B:7B:F7:D0:39:4D:F7:A9:7A:FF:FE:47:D7:11
            X509v3 Authority Key Identifier:
                keyid:F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:e3:ff:30:1b:b4:ca:be:b7:91:f5:0e:32:f8:75:37:f1:69:
         79:d0:6c:da:fb:30:61:20:f0:3e:8f:eb:99:45:d7:40:9d:f7:
         8b:61:2e:21:38:29:d0:61:c0:ed:24:4e:10:d6:05:20:d2:e9:
         95:b6:cb:a6:6f:55:d5:a7:da:2d:63:6d:e2:7c:d5:81:1d:4d:
         e4:34:da:c4:40:63:cf:f1:30:e6:9a:95:78:d8:ad:5f:5f:ee:
         0c:e8:81:0a:fd:72:49:24:6b:5e:98:42:d8:8c:fe:a1:06:8d:
         b3:b1:69:2f:bd:b1:32:2d:30:7b:78:2a:43:48:5e:05:fb:a6:
         3f:2e:57:26:ce:71:7c:d7:63:0e:a4:81:af:9e:0d:b4:83:ae:
         8b:c2:a6:05:8b:c5:3f:3f:57:94:70:81:c9:0a:bb:a3:64:64:
         a2:02:ca:7f:cb:d7:80:3e:ce:84:41:fb:f1:d6:6a:a6:a2:96:
         bd:fb:4d:8c:e8:e6:6b:39:e8:84:b1:43:b2:95:b9:59:a2:b7:
         1e:20:fb:6f:95:d1:d2:fd:83:bf:1e:d7:88:c7:9d:b0:d4:c9:
         a3:27:1d:a4:4d:d7:7b:ab:42:7e:84:08:11:70:ac:54:6e:c2:
         91:0a:82:10:1c:18:ff:9d:f0:bf:73:e8:5e:fa:0b:b7:dc:36:
         5e:0c:64:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:18:13 2026 by rpki-client