Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
File:                     myANDnrTzvciOLUWTEss3eI6ah4.mft (raw, json)
Hash identifier:          iPeHqDdOXyWn/UwXKN0Jb7GHaxIQMSi4pNUK0QDpAho=
Subject key identifier:   AE:F3:8A:EF:B1:DF:B9:8C:F8:C2:42:96:DB:F9:7A:7A:A7:91:A7:53
Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
Certificate issuer:       /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Certificate serial:       019D992B1C3644EF9D5BB2D3A80D705B66A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
Manifest number:          18C9
Signing time:             Fri 17 Apr 2026 02:00:32 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:32 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:32 +0000
Files and hashes:         1: OEhJas96pDHXZgaMA_s5Lgp04cY.roa (hash: jxsNaFig0GGgXoj7CMTehSb9YCJBvykYHf4DMMEwiVs=)
                          2: myANDnrTzvciOLUWTEss3eI6ah4.crl (hash: mk0IOTYERq7d6Ci6kf6ZTBMb1eqIKwvGkImn+OEQ5dg=)
                          3: q0hXo__MCYbBoR7iChz8rniPI6M.roa (hash: iTsszB/0K2SiC8hyLh2CRCMWHvU50TZNj9sPsIVxWo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:1c:36:44:ef:9d:5b:b2:d3:a8:0d:70:5b:66:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
        Validity
            Not Before: Apr 17 02:00:32 2026 GMT
            Not After : Apr 18 02:00:32 2026 GMT
        Subject: CN=aef38aefb1dfb98cf8c24296dbf97a7aa791a753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c8:33:c6:6d:bd:4b:22:f8:7e:7c:c3:9b:66:
                    ed:bb:b6:fb:13:88:50:ff:4d:0d:67:12:a6:42:61:
                    0c:78:32:8c:df:e7:78:61:43:b9:28:9c:f3:f1:f9:
                    73:c6:21:9f:c6:47:8e:19:48:95:27:93:02:5c:78:
                    1e:8c:96:3e:ff:a6:d2:18:02:e8:73:4a:0a:f6:68:
                    bc:1c:58:ee:ec:52:55:11:89:99:82:9d:d5:e3:ce:
                    39:5b:73:5b:60:38:ba:46:8a:92:0c:55:e8:54:04:
                    5f:f3:8a:16:24:82:6f:b0:5f:9e:6c:d0:23:36:19:
                    3c:93:be:e7:35:0c:de:7c:9d:0b:ba:2c:83:c4:09:
                    fd:ba:a1:05:18:bc:10:14:21:d7:3b:e0:7c:e5:77:
                    75:41:53:99:68:4f:06:93:86:b8:bd:f4:cc:c2:a4:
                    e2:a4:4f:43:11:66:c1:bb:35:b5:e8:6e:cd:f8:73:
                    e8:d3:f8:4e:7a:3e:af:b9:fd:1e:2c:a6:cc:cc:be:
                    f6:06:62:2d:f1:71:aa:76:38:96:71:62:90:16:6a:
                    e0:cc:da:16:1a:cb:7e:09:b2:82:23:07:44:a9:a4:
                    4a:83:e6:bf:7e:f2:1c:70:9b:c2:3f:77:90:94:97:
                    3c:d5:c1:47:3b:ce:7a:74:74:a2:14:c1:e5:1b:60:
                    38:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F3:8A:EF:B1:DF:B9:8C:F8:C2:42:96:DB:F9:7A:7A:A7:91:A7:53
            X509v3 Authority Key Identifier:
                keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e1:fc:92:cc:9f:f8:3a:f3:57:30:25:ca:19:43:6b:9b:4a:
         66:0b:86:a5:0c:99:5e:61:ef:5d:15:27:3f:59:35:99:74:73:
         5b:01:89:bd:8b:7a:52:5b:02:44:ec:2a:84:69:37:44:1e:2b:
         85:01:e3:66:5a:19:f2:12:f2:a2:ef:8e:60:f3:96:3e:e4:d9:
         f5:55:57:b6:4f:4a:d0:08:47:2b:c9:75:0e:0d:70:c0:cf:22:
         7d:0a:0c:95:ec:83:77:e0:98:a0:9e:9c:ee:35:82:60:2b:ab:
         ba:aa:1b:d7:88:6b:f7:8c:b9:ee:89:a1:05:c4:8a:60:e9:0d:
         80:d6:ff:a9:fd:59:b2:d9:af:b5:21:e2:99:ef:5a:61:fc:28:
         65:96:0d:d7:16:0b:a6:e0:89:58:83:11:38:db:64:41:1e:ed:
         a7:1d:82:8c:34:2a:29:15:07:83:0c:d3:ed:7d:c5:a9:fb:ed:
         b6:ac:55:d4:52:a0:e6:e7:4e:df:d1:f4:04:65:7b:3f:33:a6:
         98:74:61:30:31:d7:82:67:89:64:8e:e7:22:b8:40:f1:58:03:
         8b:e5:96:a6:e3:40:66:21:bf:35:0e:f7:0f:74:4e:11:e3:67:
         24:61:09:eb:70:8d:01:37:0d:8c:e8:f0:0e:50:02:fc:38:f4:
         99:09:12:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:56:39 2026 by rpki-client