Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
File:                     nxvZcy5s3W50lNeRh_yoVbUZmQk.mft (raw, json)
Hash identifier:          g17gyNBjeOHrBWxg453c3l+l4rLKEsk+NyjhQgc3o4E=
Subject key identifier:   50:60:98:E2:22:52:00:27:C5:45:41:82:07:7F:B7:EF:4A:8A:FD:E1
Authority key identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
Certificate issuer:       /CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Certificate serial:       019D9A3DEB6902E0C1510A0560BFFD7AFC7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
Manifest number:          1643
Signing time:             Fri 17 Apr 2026 07:00:42 +0000
Manifest this update:     Fri 17 Apr 2026 07:00:42 +0000
Manifest next update:     Sat 18 Apr 2026 07:00:42 +0000
Files and hashes:         1: 7CJ50Z4jSScacH7m-JbxhQfRAT8.roa (hash: DeZQIphwpcBhptFjXao8KHzyokPEFqwFhAKphJ/giEM=)
                          2: JOjsmVlflGoiSPZ3EdXzNHqwPxQ.roa (hash: x1TQNb6OLI+ULwCdM0E8bCboywBE0qslaF9HtDCN484=)
                          3: YWzwe319rfYXpYuP3IvXqCx8tZo.roa (hash: 1w3/nvkpGpApD4pL14BdnheXsuPZSDSH4dgaXoYHNHo=)
                          4: nxvZcy5s3W50lNeRh_yoVbUZmQk.crl (hash: hzUTpTRmJZQeQ6Zoow9tZWWCQW8qitdNPvV7puRCx+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3d:eb:69:02:e0:c1:51:0a:05:60:bf:fd:7a:fc:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
        Validity
            Not Before: Apr 17 07:00:42 2026 GMT
            Not After : Apr 18 07:00:42 2026 GMT
        Subject: CN=506098e222520027c5454182077fb7ef4a8afde1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3b:80:18:d4:44:cd:48:1f:6e:6c:37:d4:9e:
                    02:87:f6:e7:e1:ea:fe:09:e4:e5:c9:b8:7d:e5:dd:
                    36:e4:64:d7:a1:c6:96:2d:c9:cb:20:b8:75:93:c3:
                    d5:b2:8f:aa:4f:d5:2c:f2:fa:90:38:94:e9:0f:b4:
                    b9:83:8b:16:bf:60:09:6a:d9:2f:31:f1:0d:33:83:
                    f0:1c:3b:0c:30:dd:4a:b8:57:10:90:df:ad:88:bb:
                    2a:3a:ba:00:ef:05:e1:dd:03:ab:f5:24:9e:a0:96:
                    97:0d:99:98:60:ff:b9:86:ba:27:aa:48:6c:65:ba:
                    cd:fd:67:f8:51:27:01:04:b0:ef:9b:a6:c6:aa:fd:
                    9c:4d:b2:97:b2:67:d0:66:85:4b:e2:af:d1:09:72:
                    ba:07:8b:33:1d:c6:02:85:09:91:c4:47:84:14:1d:
                    1c:1c:af:46:d1:a9:4f:9c:7f:0d:93:e2:4b:fe:17:
                    5f:dc:60:22:2f:a7:71:f7:3c:33:b1:f8:85:52:ac:
                    e2:87:02:af:dc:8a:21:2a:26:be:6e:18:87:63:b6:
                    61:a4:de:5a:31:fd:2a:2a:b8:f8:98:20:1a:93:5a:
                    fc:bf:83:c7:9a:05:6e:c4:f1:83:2f:f5:a4:03:0c:
                    6a:b5:09:64:eb:34:25:84:f6:85:c5:f3:fa:f1:7e:
                    31:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:60:98:E2:22:52:00:27:C5:45:41:82:07:7F:B7:EF:4A:8A:FD:E1
            X509v3 Authority Key Identifier:
                keyid:9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:8f:30:8f:7c:f4:5a:6a:90:05:0e:62:06:87:57:1c:2b:ad:
         be:b5:d4:62:34:44:d1:34:87:7b:d6:f1:df:0f:87:9f:40:01:
         1b:eb:ab:9a:d9:7b:d3:e9:bf:ca:05:a4:ac:bf:ae:d3:61:06:
         f2:e3:a2:dd:65:df:f6:9f:8b:7c:5e:23:cf:47:10:be:83:dd:
         77:19:40:a5:a8:08:57:33:ac:a3:ed:59:9d:e0:c8:ed:00:7c:
         c9:65:b0:b1:10:c6:56:18:4c:b5:2d:de:41:bc:74:d0:3f:03:
         a1:22:59:de:3f:ad:82:2e:33:4f:99:11:42:1f:a3:52:b1:bf:
         cb:05:b7:b5:8c:99:d4:73:66:a8:62:ef:d2:5a:49:da:49:cc:
         be:35:0a:d3:2c:6e:86:4a:81:14:0a:85:ca:ac:4c:1c:e3:a0:
         8d:c5:d2:3e:b5:a0:88:c9:cb:24:82:09:44:db:98:4b:66:03:
         06:4f:52:f6:f6:29:05:7c:89:29:28:02:71:72:b3:0f:a5:1e:
         de:67:68:3f:c0:ad:6e:20:41:e3:e8:f7:99:fd:4d:a1:57:0d:
         09:3a:10:ab:f4:39:5d:29:62:c0:ca:8a:f5:ce:59:b0:00:cb:
         27:ed:47:66:c5:35:08:06:0d:fa:b9:76:23:33:6b:49:83:fe:
         d5:7a:5f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:40:39 2026 by rpki-client