Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
File:                     IsXMfDZMkOr6uml-C_WfBVaalpU.mft (raw, json)
Hash identifier:          GRim9HB1AQgMx1m8liF0MrLzohBoqtAnn4nhE2c/PjA=
Subject key identifier:   75:C3:E0:F1:A3:0B:7A:52:DE:9A:33:47:DD:F2:8D:3B:91:55:BD:DC
Authority key identifier: 22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95
Certificate issuer:       /CN=22c5cc7c364c90eafaba697e0bf59f05569a9695
Certificate serial:       019D9999AB17CDA7DEEFF4DA8CD72BFA96A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
Manifest number:          0F44
Signing time:             Fri 17 Apr 2026 04:01:18 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:18 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:18 +0000
Files and hashes:         1: IsXMfDZMkOr6uml-C_WfBVaalpU.crl (hash: cSiI0ziUnQdulLBWydLK8SlWR/3nRRiHX3UKU/C5RGw=)
                          2: _NSr0h0Kt0SbJsZS8dEj8fAEATE.roa (hash: gHQWo6MfDdcWF8qTZNVOf3frooR2b9p4qIOyB4d8FFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:ab:17:cd:a7:de:ef:f4:da:8c:d7:2b:fa:96:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c5cc7c364c90eafaba697e0bf59f05569a9695
        Validity
            Not Before: Apr 17 04:01:18 2026 GMT
            Not After : Apr 18 04:01:18 2026 GMT
        Subject: CN=75c3e0f1a30b7a52de9a3347ddf28d3b9155bddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:55:c1:b1:e9:6f:fb:f0:6a:eb:69:57:e2:5e:
                    6f:1b:64:9e:00:86:9f:e5:48:1b:45:c4:9f:35:f4:
                    1b:53:6c:80:f4:ac:ed:bc:b7:f6:f1:ac:51:c6:19:
                    30:35:42:f2:f8:9b:b4:0d:40:d3:81:7b:f3:b6:a5:
                    0f:f2:ab:d3:5e:3a:91:4f:e5:23:39:33:e1:84:94:
                    72:27:9c:b4:71:4b:b6:d2:c6:1d:5d:f7:f4:8e:2f:
                    b1:29:31:eb:a1:71:cc:8e:e9:0b:89:9f:73:c9:3e:
                    e9:5d:4a:60:26:f5:ff:9f:01:1c:fa:e7:0c:1b:f1:
                    54:c1:27:ba:31:39:e2:32:81:62:5b:9c:3b:2a:04:
                    dd:7f:8b:f6:84:84:60:7e:63:c3:3d:01:47:f2:6c:
                    e3:dc:56:78:d7:2b:96:ec:2d:8e:35:5f:6f:14:f0:
                    7c:8a:5b:76:49:2f:b8:47:6c:6d:30:53:a1:7b:a7:
                    d1:a9:48:23:6b:e0:06:a2:b1:e6:36:f5:2e:ef:32:
                    db:70:96:67:e5:a9:fd:7e:6e:4d:a7:06:71:ea:05:
                    2e:c1:ae:86:99:86:37:f1:21:10:66:cd:2a:50:0f:
                    03:20:b8:be:48:46:1d:a7:ba:63:55:07:cb:0c:3d:
                    bc:a2:97:e1:72:e4:e5:4f:8a:a9:ad:65:e9:7b:20:
                    83:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C3:E0:F1:A3:0B:7A:52:DE:9A:33:47:DD:F2:8D:3B:91:55:BD:DC
            X509v3 Authority Key Identifier:
                keyid:22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:96:ba:9c:f4:10:27:5b:95:64:eb:0c:42:cf:d4:63:c8:9d:
         e1:f1:c4:65:62:18:4b:3d:52:78:33:d2:a2:c1:22:42:cf:17:
         31:7f:b9:60:91:b5:47:13:d8:68:4d:12:94:7a:bb:4b:1e:0a:
         35:58:ea:78:b8:5b:de:53:63:f2:c8:65:d0:13:60:95:dd:47:
         83:0e:53:e1:40:69:82:03:11:98:61:c0:58:14:c4:1d:ce:04:
         bb:b3:c8:ad:cf:78:74:ef:a0:a0:bc:50:83:c8:51:9a:a2:0e:
         2d:5f:8d:a1:b8:9f:b6:90:51:2c:90:2f:77:7b:b7:85:2f:b4:
         08:f7:4e:ea:30:15:12:d9:b3:95:50:38:6f:7d:d9:7a:80:5e:
         a3:a8:5d:42:05:3e:b2:43:bd:22:95:ee:11:20:f7:d3:c3:a7:
         69:49:c7:2c:d1:ef:25:f7:18:56:cb:92:6c:e2:81:51:90:37:
         e1:95:b9:bb:d9:22:8d:9c:0a:08:58:07:31:c7:7e:be:1b:88:
         57:7f:76:54:9c:1e:77:50:67:17:10:4e:ea:e3:b7:fb:8e:cc:
         fc:5c:2c:c5:7c:2a:2c:49:6c:15:1e:d3:77:3d:9d:d1:a0:35:
         74:ff:bb:ca:8e:b1:64:39:a6:5a:fe:39:0d:92:67:55:50:4e:
         96:ca:6c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:26:49 2026 by rpki-client