Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
File:                     0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft (raw, json)
Hash identifier:          yzIG15upVfCb6WqI5p2t6ShfrPd9KSpB908/Wq61CAw=
Subject key identifier:   2B:39:4F:39:2B:F6:1B:5C:29:D3:A9:72:06:E5:B2:62:AD:69:84:C4
Authority key identifier: D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A
Certificate issuer:       /CN=d1bf176af8dba30fef325365ef3404812ce2d84a
Certificate serial:       019DA3785EE0D7F9C7778ECFF6EC54155F1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
Manifest number:          1149
Signing time:             Sun 19 Apr 2026 02:01:07 +0000
Manifest this update:     Sun 19 Apr 2026 02:01:07 +0000
Manifest next update:     Mon 20 Apr 2026 02:01:07 +0000
Files and hashes:         1: 0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl (hash: 9lMsnLC27VyQNIqWLxxMe+fHMQr7oqKlEMEHN2Xgtow=)
                          2: ZJfd2bM3zI3ej_61TAwH8lmhHLc.roa (hash: duIN3E5E9I7c9rAgU9yjUM0YccPt4nRq25usPFTIyKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:78:5e:e0:d7:f9:c7:77:8e:cf:f6:ec:54:15:5f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1bf176af8dba30fef325365ef3404812ce2d84a
        Validity
            Not Before: Apr 19 02:01:07 2026 GMT
            Not After : Apr 20 02:01:07 2026 GMT
        Subject: CN=2b394f392bf61b5c29d3a97206e5b262ad6984c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f2:8d:e4:15:3b:73:1f:ca:64:0b:31:95:01:
                    3a:7c:b5:8c:5c:ed:32:a8:9b:9c:41:e6:2c:a6:bb:
                    87:98:da:23:50:21:e8:10:dc:54:b0:f2:6e:b5:f1:
                    4d:bb:64:3d:eb:cd:a7:22:19:67:8b:57:0f:fa:23:
                    d2:6f:19:96:7d:9e:aa:7c:f9:9b:67:37:a0:bf:0e:
                    00:07:48:3c:1e:ba:94:f3:e4:fd:95:ba:15:88:f6:
                    72:4e:11:12:83:f6:78:0c:c8:11:ce:d0:4c:1d:17:
                    6e:21:7a:c6:15:ba:a8:a2:25:9c:e3:e0:32:68:5d:
                    68:2c:a0:3d:86:0d:75:7b:a4:4f:a5:44:d2:94:b4:
                    77:b0:cd:b9:70:41:7b:a6:83:5d:04:40:b1:1a:40:
                    0c:24:a9:37:b2:97:25:46:d0:04:b0:7c:1e:d0:f1:
                    a9:45:ed:d8:65:e6:bd:cc:48:91:8a:96:e5:1d:83:
                    06:67:7c:f5:78:f9:6a:da:37:53:4f:cc:f7:44:e8:
                    6a:e2:51:5c:6b:db:c7:29:2d:68:50:51:1f:de:22:
                    b7:c8:1f:05:1b:e3:b1:4f:b8:6f:b1:32:4d:94:35:
                    84:df:03:21:78:ae:76:59:14:eb:7f:db:7f:d8:4a:
                    4d:47:d7:0a:f9:00:8a:4b:ce:df:02:56:c4:3d:f4:
                    8f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:39:4F:39:2B:F6:1B:5C:29:D3:A9:72:06:E5:B2:62:AD:69:84:C4
            X509v3 Authority Key Identifier:
                keyid:D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ef:dd:4c:cb:21:5b:e5:2d:bc:d3:33:04:aa:1e:3f:25:bc:
         3f:ad:ad:10:55:c8:d3:73:35:db:1c:bd:f3:94:84:8a:23:7e:
         0e:77:f6:cf:79:9f:47:16:d8:46:fb:d7:e0:8c:d7:d9:4f:0f:
         99:ec:6f:b3:64:aa:be:7f:81:6e:99:7b:c4:8a:66:81:03:10:
         df:8d:51:5b:47:4a:61:65:54:d0:db:5b:af:58:c3:f4:d3:a3:
         e5:e1:a9:af:b2:f1:27:7a:e3:bc:01:78:38:e3:37:01:4a:37:
         40:25:3a:6c:76:13:ec:15:e2:50:03:00:72:2f:6d:e8:70:8d:
         14:25:c1:fd:4e:70:e8:be:59:da:49:8e:04:ba:e0:4d:b6:43:
         52:fb:54:c5:db:ed:7d:3e:71:b9:22:3d:ad:e3:4c:58:d2:74:
         76:2e:cf:22:fa:ef:af:8c:a3:e3:25:65:13:a0:79:f7:3e:38:
         5d:de:05:91:b3:2b:df:09:3b:70:c9:78:8d:fa:3b:5f:f0:b6:
         dd:91:b9:f3:d2:90:76:ed:9e:ae:fa:3e:ae:ac:19:44:3b:46:
         ed:3f:58:12:55:c1:15:01:a8:d4:a1:a9:b0:6f:21:8c:1f:b9:
         f1:6d:6f:6b:9f:b0:7c:12:7b:13:ea:4b:e7:55:54:e9:c6:51:
         26:ab:97:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:57:03 2026 by rpki-client