Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
File:                     5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft (raw, json)
Hash identifier:          q8Mxx5Rp7fPubI5qJlsPeaJBMNzo5Ti7eWkuGg+yPc8=
Subject key identifier:   DB:0F:3F:C0:94:D0:C9:FD:A0:A1:C4:5C:27:67:2E:CE:C2:FB:DB:8B
Authority key identifier: E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
Certificate issuer:       /CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Certificate serial:       019D9B19B0D54870920379C792ECC06BBE93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 11:00:45 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:45 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:45 +0000
Files and hashes:         1: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl (hash: E/iBfKkvT5Nkz1EDp3HcfaxNNC7AzISqIbImGTu4OFk=)
                          2: cPmuXHtpdWHOv_IohN-yvdSZh00.roa (hash: uWWYQC9FttyGHNgD7wIoeeDy1sX/WMjKSFeXWzNylw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:b0:d5:48:70:92:03:79:c7:92:ec:c0:6b:be:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e71d709d8b184c5a50c9431dccaf649bc8684704
        Validity
            Not Before: Apr 17 11:00:45 2026 GMT
            Not After : Apr 18 11:00:45 2026 GMT
        Subject: CN=db0f3fc094d0c9fda0a1c45c27672ecec2fbdb8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:d0:68:45:45:45:0c:4c:15:28:33:88:8a:54:
                    4f:a5:52:24:5b:3e:8b:5f:4d:0a:91:bd:96:33:0c:
                    45:42:83:39:24:ca:6e:4e:b7:82:45:88:f9:5b:92:
                    44:83:ba:34:80:bd:59:8b:b0:7f:d8:f0:48:a0:33:
                    61:ff:e2:aa:25:55:0c:da:ec:85:0d:de:d9:03:ce:
                    e0:68:ad:51:b3:e6:23:db:fc:05:16:64:8f:dd:8e:
                    2c:c5:b0:d0:85:4c:22:5a:04:4d:75:5b:f5:39:eb:
                    c3:c4:f0:3d:8e:96:60:12:bb:7e:c4:74:bc:57:46:
                    6b:20:3e:23:a6:69:77:af:86:a6:59:1a:7b:3f:9d:
                    c3:ed:20:07:f6:f4:30:68:0e:a9:d1:8d:eb:b2:37:
                    45:de:54:7d:7c:04:41:03:25:c1:25:91:9a:46:4a:
                    b6:9c:a7:47:12:14:4b:21:35:3e:7f:00:93:ac:35:
                    83:27:a7:3b:a8:46:f5:f8:fe:f9:cf:f7:d4:d6:39:
                    68:38:c2:e6:1b:41:f2:76:08:2f:5f:55:6d:51:0d:
                    1b:91:2a:f7:67:be:de:ee:76:24:ab:ce:54:5f:da:
                    7c:2c:fb:fe:a6:36:6b:89:f0:7d:28:97:f4:8d:65:
                    c0:a4:a4:b1:3b:c0:ae:25:22:4f:c2:ce:b9:68:38:
                    2e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0F:3F:C0:94:D0:C9:FD:A0:A1:C4:5C:27:67:2E:CE:C2:FB:DB:8B
            X509v3 Authority Key Identifier:
                keyid:E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:45:57:22:dc:99:9f:46:b3:7b:d8:9b:66:91:88:d4:55:21:
         a0:0e:88:2f:b9:f1:b8:52:95:1c:5a:40:31:58:71:84:fe:5d:
         ab:50:90:be:eb:bd:b6:8e:b8:d5:55:7f:25:ab:4b:0b:a1:0c:
         bb:b7:85:99:c9:cd:3a:e8:09:d3:1f:16:18:d1:02:67:e2:bc:
         d2:7e:df:0c:32:16:44:3c:20:5b:0b:e2:9c:8d:d7:b9:53:5c:
         07:0f:40:31:46:5d:2c:64:9a:b1:78:76:d1:f2:3f:95:c4:fd:
         e2:be:a0:e4:10:c0:e6:fd:07:af:f9:55:7c:85:2b:59:39:a2:
         80:0c:1e:a2:fc:77:fd:b6:d3:04:cb:44:dc:7a:c9:f3:5f:d9:
         e3:bd:83:d9:8e:13:68:f2:05:8c:e2:05:e5:a6:53:3c:46:b9:
         c1:02:14:dc:89:0b:3a:65:90:48:45:8e:15:ff:45:91:ac:5d:
         be:db:fb:04:07:63:3e:87:ba:9a:83:c4:35:86:39:4f:89:4c:
         cb:7e:65:4a:e7:36:1f:63:f9:d6:17:80:a0:3e:0b:3f:c4:21:
         b7:05:a9:4f:28:ca:56:c1:30:b5:87:94:5b:7a:10:ad:e3:8d:
         8b:3c:53:d5:c5:55:8a:89:9e:98:bb:bf:be:bd:34:e7:f0:4d:
         50:fc:8d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:46:02 2026 by rpki-client