Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
File:                     70eAIfcqIbdxQqRNgV3envJoTLw.mft (raw, json)
Hash identifier:          v8DQTdX58qbQgwaBxAChGss/zxB/MX8Re4cIAbTqreM=
Subject key identifier:   AC:2B:46:45:FB:98:A1:CC:D8:A1:1A:9A:0F:00:C0:4D:B6:2F:BC:EB
Authority key identifier: EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
Certificate issuer:       /CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Certificate serial:       019D9A74A03FE17653F0EA22D945FAE646EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
Manifest number:          18C0
Signing time:             Fri 17 Apr 2026 08:00:27 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:27 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:27 +0000
Files and hashes:         1: 70eAIfcqIbdxQqRNgV3envJoTLw.crl (hash: RlgpvcXNwLN/DUwFfXw5oSgcgRieZmHarumP72qVEYI=)
                          2: I9nUczY20Zb-qB4txSR8cQbIwOU.roa (hash: tVztN2aCOWmTRMBNdBunPfUafnJabZOVueK23yoz3NY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:a0:3f:e1:76:53:f0:ea:22:d9:45:fa:e6:46:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef478021f72a21b77142a44d815dde9ef2684cbc
        Validity
            Not Before: Apr 17 08:00:27 2026 GMT
            Not After : Apr 18 08:00:27 2026 GMT
        Subject: CN=ac2b4645fb98a1ccd8a11a9a0f00c04db62fbceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ac:75:f7:27:80:af:f3:4d:ea:ec:c8:84:d0:
                    30:ae:e2:52:85:f1:df:c0:de:dd:58:5e:b7:d9:0a:
                    79:80:ab:a0:36:83:85:51:17:67:3d:46:d8:60:0c:
                    3b:2e:80:29:27:96:6b:a4:48:ed:25:09:11:3b:11:
                    88:8c:fa:00:97:ff:3d:04:7b:d1:32:f1:cd:2c:1a:
                    b9:a5:62:e6:4a:e3:f9:81:b3:c0:9b:b3:3a:47:d1:
                    ef:85:6f:d6:af:c4:dd:1f:9b:83:d2:51:d3:03:05:
                    fb:47:42:a5:5d:29:64:62:07:c5:ad:0e:03:06:be:
                    11:d6:62:88:53:22:1c:86:66:77:17:ff:1b:a6:50:
                    95:ce:a7:f6:27:e0:7e:df:2a:83:9a:b3:3f:0c:b6:
                    3b:a3:d5:de:6e:cd:b9:b9:17:e8:03:ac:44:1c:78:
                    12:95:d8:0f:8d:ca:27:0c:c5:eb:f1:6d:a8:7a:bb:
                    af:b1:d7:07:71:8d:b5:72:8c:8e:c9:fd:5a:17:de:
                    51:55:01:6e:cd:60:39:56:d2:bc:9b:10:fe:c0:1a:
                    4a:85:1b:21:82:ac:e4:8c:15:8b:96:2f:34:e8:c4:
                    28:62:80:b5:eb:ef:0c:68:f5:bc:26:c4:c0:88:1a:
                    71:e5:13:75:81:1d:3c:38:0c:b2:d9:b8:a8:c1:96:
                    fa:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2B:46:45:FB:98:A1:CC:D8:A1:1A:9A:0F:00:C0:4D:B6:2F:BC:EB
            X509v3 Authority Key Identifier:
                keyid:EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:52:8f:06:5e:28:f0:ac:cc:2d:ae:2a:bd:43:bf:ab:e7:99:
         5b:05:ca:9f:f7:77:b8:6d:b4:ae:eb:15:a8:b5:0f:6e:02:e9:
         fd:95:37:bb:aa:b7:c4:a4:b3:4b:9c:db:06:90:2c:9a:0c:a7:
         44:4f:ba:e0:de:d7:b8:5d:b8:f6:66:d1:cb:96:c2:92:30:87:
         f5:63:bf:73:32:10:f6:63:ff:9d:82:9c:8a:c3:d6:ac:e7:b2:
         cd:da:a4:e6:9d:04:95:ce:ae:8e:af:60:70:c7:ea:ab:b8:3f:
         88:df:1d:a0:fa:37:c1:90:46:40:73:eb:a1:f5:14:b1:e6:bb:
         d2:1c:5b:5c:69:b8:d8:c2:d6:2e:17:fa:5f:af:bf:9e:01:c6:
         47:c2:cf:73:64:06:99:2c:a8:90:a1:72:19:75:57:49:37:88:
         74:1e:8e:14:c4:10:02:fb:45:18:ff:ae:44:a5:74:29:de:54:
         3d:b8:00:cc:83:a9:2c:a9:cd:fc:3f:ef:6e:5a:5c:7a:83:ad:
         ec:02:5c:13:85:61:4a:e4:8f:f0:55:46:09:b8:c7:09:73:93:
         11:76:11:43:ec:2d:16:8a:5c:85:78:87:3b:ad:5b:02:92:98:
         66:7b:3d:aa:34:fb:e8:a9:92:97:51:8c:f2:1b:bb:21:64:1f:
         f0:2b:44:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:30:02 2026 by rpki-client