Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
File:                     29fJUTSL0uCcyvdvV7g4XxXfROQ.mft (raw, json)
Hash identifier:          tpKB4VcqA8+gPAVOmPtPcaXzgzCGv+uTA1KrsbI2Rqg=
Subject key identifier:   CE:E8:B5:99:FE:D3:81:50:FA:B7:43:C4:3F:30:71:DD:48:E6:D8:F3
Authority key identifier: DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
Certificate issuer:       /CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Certificate serial:       019D98BDD791FEA60996DAB45DE7C4083F05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
Manifest number:          18C6
Signing time:             Fri 17 Apr 2026 00:01:11 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:11 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:11 +0000
Files and hashes:         1: 29fJUTSL0uCcyvdvV7g4XxXfROQ.crl (hash: Ah50iqovppn/SR7osf/N2YScd+Ebh5EE18kbVPI/5Lk=)
                          2: IPrRSq2gSatbbHi6fEa8RlmwLy4.roa (hash: RM5/PHoNGaX7XlREXjG/og78083kPTzGlX0ZOlSLFII=)
                          3: mVkogJ-xnAweLAL7bsWjhT8Cpqw.roa (hash: B0ZHTRT8wUE+jzJV8TMgxREJDsonVac0/VpJ6Sd0ekg=)
                          4: ngezMG7cjg7kdta93owuwynmRkU.roa (hash: AWPdd4TuywUrgEAGlpfA8F/3L75UudUwvDZHYHDHNyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:d7:91:fe:a6:09:96:da:b4:5d:e7:c4:08:3f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
        Validity
            Not Before: Apr 17 00:01:11 2026 GMT
            Not After : Apr 18 00:01:11 2026 GMT
        Subject: CN=cee8b599fed38150fab743c43f3071dd48e6d8f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:62:8a:07:ad:f0:e9:a9:da:e2:02:05:70:da:
                    13:9e:c6:8b:e1:08:0b:6d:ea:a6:4f:61:6d:95:8e:
                    20:62:64:34:3d:b6:f9:0d:bc:b8:c1:15:ae:d0:f9:
                    37:42:5b:07:52:20:2e:bc:b6:8c:4f:71:1c:6a:6b:
                    5b:e4:75:15:7d:9e:16:57:ae:c6:c2:c6:2f:dd:9c:
                    cf:72:32:73:01:9c:2d:20:32:ba:69:dc:c7:8a:27:
                    60:4f:f0:9e:83:94:de:38:ab:7c:e5:56:48:2d:67:
                    d3:8d:a8:a0:3c:98:90:85:e7:46:3d:5e:c2:a1:d5:
                    08:44:2c:42:01:ce:66:01:7d:80:1e:a1:01:24:bd:
                    73:13:a5:ee:21:ee:4b:89:97:73:8c:dd:e6:28:6e:
                    5b:33:ab:dc:55:36:1f:22:5f:d5:23:5c:04:df:42:
                    5a:16:ca:b1:81:6c:f1:fc:b1:c0:67:a4:b8:a3:09:
                    4b:6f:84:70:04:f3:b6:da:58:2a:27:b2:5e:18:f1:
                    66:0c:c4:28:53:25:28:ad:3c:fe:99:2f:36:aa:94:
                    2e:f8:61:04:a2:61:4a:81:92:f6:57:4d:ec:cf:a2:
                    22:c8:cf:be:ab:7b:0a:51:b0:57:84:f9:91:39:95:
                    98:be:91:6e:7d:73:49:43:3c:1d:6a:14:a5:d9:fd:
                    40:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E8:B5:99:FE:D3:81:50:FA:B7:43:C4:3F:30:71:DD:48:E6:D8:F3
            X509v3 Authority Key Identifier:
                keyid:DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a7:14:97:0e:19:b3:49:cb:4f:87:e8:8c:37:9a:38:de:83:
         81:12:57:35:99:5a:18:7e:d7:23:13:20:a9:3e:ec:eb:d7:f2:
         29:07:4c:23:4f:f1:68:72:01:69:98:fb:5e:9d:78:7f:b3:c5:
         8e:f1:97:e9:f9:da:16:a3:f0:10:4c:ee:f9:bf:eb:b7:ee:d2:
         36:08:51:23:45:f0:37:ca:18:f1:71:b4:be:47:00:80:bd:d3:
         83:00:8a:19:c5:67:09:cf:74:59:44:9f:60:e6:73:b3:60:47:
         c6:5b:a7:05:cd:b8:18:0f:49:43:58:00:6e:65:99:d5:6e:b0:
         d9:05:0b:e2:c5:c7:bc:1b:39:a4:2a:31:aa:01:20:af:cd:0e:
         98:de:a7:45:95:62:a9:7d:62:01:28:87:d2:5b:8b:e7:83:d8:
         90:83:be:90:44:0e:43:3c:3c:68:6e:d6:c0:0d:ca:05:26:ff:
         4d:06:ea:ed:dc:0c:35:e0:e7:32:db:c3:c9:b8:91:0b:bb:f5:
         84:79:16:79:ad:1f:db:b8:f3:96:39:ce:f5:85:33:d4:6b:06:
         21:d2:5f:25:74:26:cc:41:82:f2:7a:b9:33:05:ac:c1:e2:70:
         43:cd:91:60:8d:81:92:16:55:1e:4d:95:cb:e3:08:9e:b7:f6:
         23:a8:83:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:58 2026 by rpki-client