Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
File:                     1-PvIQVghSG6P4IYLW-w-koO4A4U.mft (raw, json)
Hash identifier:          VDZzCqviwPt0p0yOhyklWtB0v73+5q0arFNs3kRBnMU=
Subject key identifier:   7E:AC:D8:C6:0C:80:FF:05:59:E5:0A:B2:C0:28:E7:09:CF:9F:07:B8
Authority key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
Certificate issuer:       /CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Certificate serial:       019D98F4B9B59748C0ABC369343D432090C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 01:01:08 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:08 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:08 +0000
Files and hashes:         1: 1-PvIQVghSG6P4IYLW-w-koO4A4U.crl (hash: Jt//9JtdXW/VZUnilK46mKHEd0izgPH3B41sRZNZnKE=)
                          2: Fe8C_WdJ22L_dUyWBiMD7GctyW0.roa (hash: jgg9eOYs6Fp1X/VK0bPmmQUSKdjdeLQeRgEOHtqy2sM=)
                          3: iZkVXsS9yGQ5uNDpG7uCxyLqe-E.roa (hash: 1BhAgUiLaur5U/BDzt8YwtvIu/RtYONux/FF3rMGdkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:b9:b5:97:48:c0:ab:c3:69:34:3d:43:20:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
        Validity
            Not Before: Apr 17 01:01:08 2026 GMT
            Not After : Apr 18 01:01:08 2026 GMT
        Subject: CN=7eacd8c60c80ff0559e50ab2c028e709cf9f07b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:40:4c:31:8e:45:72:8d:84:bb:f9:d5:3a:8b:
                    df:63:94:65:2a:6f:50:50:a8:4b:2c:38:8e:5d:e1:
                    46:ae:d5:ce:b7:cd:33:89:9b:97:9a:33:a7:72:fd:
                    46:cc:a9:1a:e7:30:f4:f8:1f:8f:b2:48:d2:c8:c7:
                    26:17:46:ed:08:b0:eb:1b:f8:70:47:f8:07:6f:df:
                    c9:bb:92:fc:ad:97:f8:06:59:16:e2:65:3c:f5:80:
                    bb:1b:7c:22:b0:e1:d3:97:d5:70:11:8a:52:2c:ea:
                    9b:83:29:02:4c:8e:c5:03:77:b2:e9:6a:4d:c3:12:
                    3e:86:30:f8:1c:35:16:a7:2c:86:32:84:6a:94:16:
                    d4:5c:3b:f8:10:a0:a3:eb:df:19:28:58:0d:be:30:
                    a0:f4:02:d2:d8:04:5a:ac:aa:76:fe:08:47:2d:98:
                    8f:c6:ec:3c:f4:cc:e5:70:10:c4:d4:c7:f5:79:59:
                    ca:f2:66:81:d4:cd:ab:f6:fe:4e:01:6d:a0:a6:3d:
                    0a:9c:87:c9:b1:e6:c0:0a:71:49:1e:3a:69:e5:a9:
                    90:4b:6e:01:8f:ac:ac:85:d3:b8:75:e7:9e:55:b6:
                    dd:b0:e5:60:b5:54:d5:49:21:73:71:b6:30:5e:86:
                    ea:ee:52:e2:0d:01:f7:c5:2e:9b:7b:72:cb:98:e8:
                    02:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AC:D8:C6:0C:80:FF:05:59:E5:0A:B2:C0:28:E7:09:CF:9F:07:B8
            X509v3 Authority Key Identifier:
                keyid:F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f9:6f:85:1e:c7:e9:17:5f:0f:f6:15:af:ab:11:2f:85:8a:
         31:0e:30:d8:35:b6:29:6b:ae:9c:da:9d:5d:b3:b9:5c:17:b9:
         b0:b7:52:db:f6:b9:ca:cf:28:11:ea:3e:94:ca:87:3e:d0:33:
         3d:9a:4b:ee:05:84:d9:c2:b3:7a:a7:07:0e:99:a8:e1:56:c0:
         15:90:8f:46:48:01:39:8b:4d:d9:6f:1b:2c:a8:48:dd:aa:98:
         ca:ae:39:3f:cd:e8:1f:52:3a:d3:e3:d1:ab:90:f9:cc:ee:9e:
         15:cc:01:b9:5f:81:e7:da:f2:fc:26:c1:54:44:f4:b6:59:26:
         bd:cb:17:b3:b1:c5:67:93:fb:21:8c:f3:46:65:91:4c:1c:22:
         ea:70:70:b8:de:f8:39:fa:3c:b9:28:25:58:18:1a:bf:8f:cc:
         14:d3:6b:29:6e:f1:88:4f:aa:f8:a0:e4:64:32:23:4e:83:9d:
         19:fc:1f:d5:59:19:73:4a:0e:fc:25:b6:e2:de:fe:81:d6:21:
         06:cd:29:ab:59:fe:cb:b9:ad:11:ab:75:5e:ca:da:6c:1a:28:
         3c:d8:0f:52:94:33:ed:c9:7d:24:70:65:1f:27:4d:e6:83:2a:
         b1:88:e7:1e:1f:ac:e4:0d:ad:fc:50:c1:fe:7b:b4:7b:b6:dd:
         46:41:bb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:43 2026 by rpki-client