Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
File:                     CAdgG8REIsjSOjzXK_6hu_KgVjo.mft (raw, json)
Hash identifier:          zGfz5vLtpqzeYEL4dUgonFJGluyoEXLyMZV1qrq34gE=
Subject key identifier:   F9:47:77:FB:92:24:BD:07:03:EC:F7:A6:5A:00:D8:C8:6D:F1:C0:4A
Authority key identifier: 08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A
Certificate issuer:       /CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
Certificate serial:       019D984F8A1797358021B58EF086B67D19AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
Manifest number:          18C1
Signing time:             Thu 16 Apr 2026 22:00:42 +0000
Manifest this update:     Thu 16 Apr 2026 22:00:42 +0000
Manifest next update:     Fri 17 Apr 2026 22:00:42 +0000
Files and hashes:         1: CAdgG8REIsjSOjzXK_6hu_KgVjo.crl (hash: fXAu/aLF7kqMOBtrhqAidz0Xn66wgfc/H/LssaNv7k0=)
                          2: H1YvmuStYDNqAB61c-rWu6eqTD4.roa (hash: 9PGCd+QuRbx4/mSkh35qhoqedPe+bLxdrUELkN0aarc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:8a:17:97:35:80:21:b5:8e:f0:86:b6:7d:19:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
        Validity
            Not Before: Apr 16 22:00:42 2026 GMT
            Not After : Apr 17 22:00:42 2026 GMT
        Subject: CN=f94777fb9224bd0703ecf7a65a00d8c86df1c04a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:00:c5:8f:37:7d:b5:3e:1c:39:02:38:64:80:
                    7a:fe:f2:1f:5f:cc:33:b8:12:36:a7:32:f0:0c:19:
                    d0:a7:f4:2a:9d:97:50:53:8a:d4:b0:fc:63:29:b9:
                    a1:75:c8:b5:2d:a7:fa:19:2d:ef:ff:b1:26:24:37:
                    ff:40:ff:58:00:81:6b:df:c1:11:92:1f:69:00:55:
                    63:f0:f0:40:53:b6:11:10:18:47:5f:d2:66:ab:c4:
                    62:73:cf:58:dd:08:52:25:f3:ce:a0:75:b3:7e:35:
                    3a:66:4d:f9:0a:b3:e3:18:85:cf:ea:46:2c:dc:b2:
                    3f:b4:11:a0:52:90:ef:4b:2d:af:52:ae:68:31:b3:
                    1c:02:be:ea:01:f1:fd:a7:4f:13:07:17:b8:bf:2c:
                    e7:b6:27:27:58:d3:d2:87:7a:b3:e8:c5:6a:f9:88:
                    de:58:bd:8d:47:e4:fd:24:63:86:9c:0e:54:bc:f6:
                    2f:17:4f:e8:dc:27:ed:48:38:18:9b:69:f2:fb:aa:
                    d5:6c:c4:05:2d:ad:6c:56:11:d1:dc:13:8f:c1:63:
                    fb:d2:8d:98:e0:d9:44:0e:b3:9c:f7:71:95:aa:d2:
                    a5:6b:5b:a8:8e:1e:75:cd:64:cd:4a:32:4a:97:b4:
                    9e:a5:57:96:35:7e:6b:3b:6e:40:f5:e9:bf:c6:e7:
                    b2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:47:77:FB:92:24:BD:07:03:EC:F7:A6:5A:00:D8:C8:6D:F1:C0:4A
            X509v3 Authority Key Identifier:
                keyid:08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c9:a1:bc:28:59:6c:03:c9:b8:a5:7b:ef:f5:a8:69:4a:81:
         0b:d1:0a:c4:4b:b7:3c:d8:ed:7b:35:c4:2d:55:40:d0:dd:30:
         d8:5a:23:63:3f:ee:9b:23:52:1b:15:15:89:24:2c:f8:64:bb:
         73:c5:0d:b7:c3:9e:39:e1:b4:db:77:3e:2c:d0:f3:08:a8:21:
         18:2d:84:b2:02:e2:06:11:2a:ea:32:28:ee:dc:e0:8f:c2:08:
         79:5b:43:06:b9:2f:2b:b4:e7:24:2a:57:d5:6f:cd:b8:ba:98:
         96:94:59:78:13:6b:c9:1a:aa:d6:e0:f2:98:0a:ce:5d:fa:a8:
         60:ac:73:ec:4e:2f:bb:a7:4e:e3:b0:3d:da:58:14:22:8c:34:
         2d:ed:a1:b9:ad:8a:f3:35:41:80:fd:15:d2:8a:3c:11:b8:a4:
         cf:6d:2c:0f:4e:16:c2:8b:5f:1a:3d:dc:af:e2:29:c9:b9:fc:
         16:69:3c:9c:17:fd:0f:82:c6:5d:44:bb:2c:d6:c4:3f:7a:91:
         08:ba:09:6f:ab:5e:15:5b:06:f7:22:f2:a0:34:4e:78:38:6b:
         44:1e:90:f5:17:dd:80:55:57:54:c5:3d:ab:75:11:06:6b:82:
         54:b1:2d:d0:52:3d:59:b2:be:64:7d:f1:2d:88:f5:dd:71:4b:
         f8:30:c4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:44:24 2026 by rpki-client