Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
File:                     1Fib0sD75-LYWSzuaHGSu7V5efc.mft (raw, json)
Hash identifier:          zNVLhM5wc/57wm6Dr7pxsD9igHQsgV8eAPe1towe+cw=
Subject key identifier:   75:6E:97:2A:91:EC:F5:08:3E:9A:2A:46:13:C0:77:A4:3D:9E:B2:7F
Authority key identifier: D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
Certificate issuer:       /CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Certificate serial:       019D9AE3089364A7C5CEC31B9A88B4B827B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
Manifest number:          0583
Signing time:             Fri 17 Apr 2026 10:01:03 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:03 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:03 +0000
Files and hashes:         1: 1Fib0sD75-LYWSzuaHGSu7V5efc.crl (hash: fKn6fEb7PUQNqfh0GIWyqeB4KZC7zWF+ub6qslFcG7k=)
                          2: hX56E-sl6aHlAsJVpCUmggT-itQ.roa (hash: zGrp5qWxfaDDtjYhp74VIMRhcorx1N2/XDFt+aUjFhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:08:93:64:a7:c5:ce:c3:1b:9a:88:b4:b8:27:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
        Validity
            Not Before: Apr 17 10:01:03 2026 GMT
            Not After : Apr 18 10:01:03 2026 GMT
        Subject: CN=756e972a91ecf5083e9a2a4613c077a43d9eb27f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:af:0f:2a:31:47:05:c2:d4:55:5d:e6:3f:8e:
                    00:e0:e6:e3:1c:ec:4b:bc:19:67:a0:b8:83:64:aa:
                    c9:58:70:d1:91:d0:82:06:66:5b:a8:86:2d:9e:cf:
                    58:30:09:f8:78:63:d6:5c:15:5a:a6:a2:ef:12:bd:
                    a0:51:16:a1:db:30:2d:09:44:2c:51:0b:c6:38:88:
                    b4:b1:1d:a4:93:de:a5:a3:70:b0:7e:22:48:6a:49:
                    92:07:42:ab:7d:0b:9b:e0:b2:5e:fe:09:45:ea:38:
                    01:9a:82:d2:3a:fa:41:99:78:49:66:5e:72:83:01:
                    91:35:d7:47:30:4e:de:5b:72:2c:f2:3c:47:05:76:
                    ef:e4:08:2f:f4:39:52:70:94:ba:17:8d:e9:72:5a:
                    30:df:b2:08:05:65:f5:ac:f7:d0:56:af:e5:13:72:
                    00:4c:1b:c1:31:b2:24:96:b5:9c:9d:32:ad:d0:85:
                    70:31:ff:76:27:48:2d:61:32:9d:c8:02:db:e8:19:
                    34:a9:18:63:4f:40:6d:4f:37:ab:69:4a:5b:8b:d3:
                    61:f6:f1:d5:46:5b:85:b5:4c:bf:61:6d:c3:59:ea:
                    8c:64:31:15:b6:32:1d:58:a7:85:ed:03:fa:69:fd:
                    6d:7b:28:97:bc:af:05:b8:ce:d2:3a:f4:9f:bb:af:
                    6f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6E:97:2A:91:EC:F5:08:3E:9A:2A:46:13:C0:77:A4:3D:9E:B2:7F
            X509v3 Authority Key Identifier:
                keyid:D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e9:c7:4c:58:90:c5:3d:a8:ac:c8:26:01:19:ae:c6:ef:38:
         17:e0:b9:2f:1d:82:62:dc:1e:29:31:18:f9:f2:af:73:0d:84:
         ab:a7:49:fc:1c:af:b5:ec:8a:64:09:0b:5f:83:eb:c0:83:59:
         5f:47:00:9a:66:aa:2a:ac:76:f1:73:a9:ce:74:27:77:6d:8d:
         0e:dc:61:67:1c:2f:75:ff:d0:e2:65:e9:13:2f:b6:a8:87:10:
         4a:d7:13:7a:2c:2c:1a:a0:6f:48:a6:d3:70:36:17:4c:42:66:
         34:2d:a1:be:9a:4a:68:61:b2:97:ff:2a:de:67:66:bf:df:86:
         a0:93:a2:e7:7a:34:88:fc:97:33:34:27:9a:22:06:aa:86:6d:
         02:dd:67:63:35:b2:96:89:7b:e7:9e:de:41:2a:57:39:de:ad:
         cb:20:67:77:55:f7:1a:e2:0d:f0:ba:a2:04:a8:9f:dc:92:22:
         84:50:37:f6:2a:2f:42:aa:8c:2d:d1:e4:a8:82:b9:99:d8:aa:
         7e:d6:2f:ea:53:12:d6:4d:35:dd:0f:80:61:e9:fa:b8:13:98:
         37:4c:71:ee:0a:03:df:77:03:d2:94:0e:d9:e4:2d:ec:1e:7c:
         b8:29:15:e2:42:2b:ea:b8:d0:e6:d0:7a:f0:5c:da:70:83:57:
         8d:c7:e4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:04:55 2026 by rpki-client