Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
File:                     JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft (raw, json)
Hash identifier:          OMV6t3lqtwjfwi0LHQg7yuF4Dlp1THPwvUCKlR0XPNc=
Subject key identifier:   E4:7D:EB:D5:52:7F:B4:7B:72:03:B9:CF:11:77:E7:C1:FA:28:89:92
Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
Certificate issuer:       /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Certificate serial:       019D9C2CCCE592905C006A754FB0114341D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
Manifest number:          18C7
Signing time:             Fri 17 Apr 2026 16:01:14 +0000
Manifest this update:     Fri 17 Apr 2026 16:01:14 +0000
Manifest next update:     Sat 18 Apr 2026 16:01:14 +0000
Files and hashes:         1: 5iJn7j9NwT_4zRsEmDpwaHGzgK8.roa (hash: Bq7Db27aznpNLmbu0ahDjZ7PeJYf+EQGmsNOgekFe6w=)
                          2: JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl (hash: sorIp2PFXxFZg17T5VgyZTMOyYk/rD++EG9/hXdI4JQ=)
                          3: wCBMxNVW2s2juIQvGN-nvZjm17I.roa (hash: 3w8A09CcQCqIlBuWIFasyBemt1OICie2jVw2nf/HSKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2c:cc:e5:92:90:5c:00:6a:75:4f:b0:11:43:41:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
        Validity
            Not Before: Apr 17 16:01:14 2026 GMT
            Not After : Apr 18 16:01:14 2026 GMT
        Subject: CN=e47debd5527fb47b7203b9cf1177e7c1fa288992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ac:a4:ab:f0:e8:ad:c5:ac:fd:b2:df:e7:2a:
                    d5:15:15:dc:c6:8f:7d:4a:c9:30:65:40:c8:8c:61:
                    5f:ae:1c:42:cb:c6:ae:aa:59:92:81:66:36:7a:10:
                    50:17:c5:a3:ad:36:a9:1a:e3:9e:d3:65:dc:88:a4:
                    9f:a7:2e:52:c3:c1:8a:42:e5:dc:98:ff:e5:7d:5b:
                    00:3f:04:8e:4c:43:13:b1:6d:3a:c6:bf:0a:8d:3f:
                    15:d6:71:10:8c:35:37:a3:01:8e:95:1a:33:6c:96:
                    ea:ab:72:40:80:8a:c7:e0:c4:d9:5a:ef:1e:70:f9:
                    db:a0:f8:54:72:b3:31:1e:ee:83:b6:9f:d1:d7:0a:
                    10:c4:6e:d6:f5:9d:88:06:a0:ea:3b:11:27:b3:52:
                    2d:1c:2e:0b:fc:8d:1d:8a:c6:87:ed:ae:20:fe:5f:
                    03:c3:78:75:0f:39:74:22:56:b5:d1:44:18:4e:e1:
                    2d:a2:2a:83:c1:50:c9:bc:4e:b7:12:41:53:18:37:
                    a4:90:9a:c2:9a:fe:f0:07:06:32:ab:11:74:9f:07:
                    fe:a1:e7:b7:92:fa:bf:fe:19:0e:a3:c8:30:7b:c2:
                    dd:eb:c9:24:b3:88:f7:18:81:5f:07:ab:d0:ff:62:
                    17:aa:86:7a:0f:f2:78:08:75:2d:16:ea:5f:f9:fc:
                    56:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7D:EB:D5:52:7F:B4:7B:72:03:B9:CF:11:77:E7:C1:FA:28:89:92
            X509v3 Authority Key Identifier:
                keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:83:bc:1e:ce:3f:9b:50:14:cb:cc:4a:79:20:47:f4:65:13:
         8e:a6:5e:fa:9e:01:db:e4:01:86:0d:f4:91:44:46:61:e0:ab:
         1f:4e:84:8c:b6:b7:3e:5c:2e:eb:91:b0:a3:59:cf:65:3b:b0:
         4c:8e:34:64:ad:09:16:81:ce:f4:54:d4:c3:7f:2a:3c:29:96:
         5b:67:26:53:02:b7:7b:d8:24:4e:de:99:cc:e2:65:77:b0:93:
         4b:ef:3e:56:cb:71:38:d4:6f:76:c1:bd:f8:77:94:13:1b:46:
         07:f7:c7:e5:cd:f1:d7:b3:9c:97:fd:e7:ce:2c:a1:2d:04:54:
         39:39:d2:aa:4d:24:06:19:ec:f5:77:45:4b:1f:ce:4b:fd:d3:
         8f:53:a3:65:e1:1b:70:2a:7f:7a:fc:b2:f3:1c:f0:00:06:8f:
         32:03:e3:66:be:84:72:8c:08:e6:55:5c:b7:22:fe:55:3a:05:
         6e:74:fd:2e:b3:6b:a0:ff:50:18:c3:cb:bd:07:23:d8:9e:39:
         7a:cb:d7:02:3a:fa:8f:0e:87:77:71:57:8d:fc:72:b0:a5:b1:
         a0:34:e4:a6:93:cd:be:10:4d:18:9a:7b:92:70:9a:d4:cc:6f:
         0d:9a:c2:3a:a1:6a:5e:5f:2c:91:37:ff:f3:04:e5:17:fb:78:
         ed:db:ab:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:00:14 2026 by rpki-client