Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
File:                     2jIgJypGmu1lzCp_bZf8qZH37IE.mft (raw, json)
Hash identifier:          +rscAvQE1syahgx2/K5UeoQEB4/TbUieG34GVEUPdKc=
Subject key identifier:   57:47:1D:B8:C8:DB:18:CB:E2:12:0E:C9:E3:50:29:B1:79:13:1F:EE
Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
Certificate issuer:       /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Certificate serial:       019D996268CB0FADF6A1CCE956635FE49279
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
Manifest number:          18C0
Signing time:             Fri 17 Apr 2026 03:00:56 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:56 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:56 +0000
Files and hashes:         1: 2jIgJypGmu1lzCp_bZf8qZH37IE.crl (hash: PqWdJtlMpV5ebp6i3VSZMuqI2b3qjrQPqiYFHCiqfec=)
                          2: LTz1De3X8spC3dcHgrNN4wje9mU.roa (hash: L5HiANwADQvPfM4ZMyAYQ5G6J4Pz1djNh1BERnPcH2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:68:cb:0f:ad:f6:a1:cc:e9:56:63:5f:e4:92:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
        Validity
            Not Before: Apr 17 03:00:56 2026 GMT
            Not After : Apr 18 03:00:56 2026 GMT
        Subject: CN=57471db8c8db18cbe2120ec9e35029b179131fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:42:80:05:cf:4a:dd:b1:12:7f:25:89:01:b7:
                    f2:b6:ec:2a:77:73:70:21:9d:8a:d6:c8:d3:06:97:
                    15:d3:a5:f8:6a:61:9c:e4:6b:a8:1f:c7:2a:b7:d9:
                    ae:ab:82:7f:16:f4:05:45:9e:f5:79:fe:e7:b5:a9:
                    0b:c5:0d:f9:8a:af:7f:2a:e6:b9:20:1d:a5:a5:84:
                    ed:e5:da:cc:f9:7f:16:d0:40:ef:90:da:16:3e:06:
                    71:04:1b:85:f4:aa:cf:be:9e:b3:f9:00:4a:9f:73:
                    05:cc:5e:0e:68:98:bd:96:66:ae:0d:2d:62:08:70:
                    12:0c:cc:c7:13:e3:a6:5f:da:22:e9:ae:e8:89:27:
                    5c:c8:5d:7f:f4:98:be:8a:ea:77:39:5c:41:9f:bd:
                    10:88:3a:07:9a:00:c4:d0:6f:ea:47:5b:b9:85:6d:
                    3b:3c:2e:5f:5d:c0:f5:9c:a5:ea:63:c3:9b:69:a0:
                    5a:5b:cd:f8:22:6b:f4:34:5f:a4:e0:8e:da:c0:e2:
                    51:d2:59:a7:1c:e7:24:8d:87:35:ef:d0:96:0d:b1:
                    99:7d:9f:9b:71:6f:6d:25:af:96:cd:07:49:63:41:
                    95:44:bc:65:da:46:81:bf:30:40:db:31:1a:52:55:
                    5d:d3:1e:84:a9:5f:08:b7:1c:21:af:9c:22:03:9f:
                    e6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:47:1D:B8:C8:DB:18:CB:E2:12:0E:C9:E3:50:29:B1:79:13:1F:EE
            X509v3 Authority Key Identifier:
                keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:0a:c7:b5:a3:b3:50:28:6e:6d:bd:7c:77:ef:40:4f:2c:a0:
         37:96:4a:5c:88:db:f4:a9:5f:92:ad:40:3d:79:a6:da:a7:40:
         ed:b3:e2:ec:c3:b2:eb:dc:07:e7:ea:0a:62:b4:c7:df:2c:de:
         98:a3:3f:d0:be:94:6e:3e:6f:6b:98:9a:9c:8e:dc:51:20:36:
         31:e8:ee:70:58:83:41:3d:d4:fe:65:a1:1b:28:a1:aa:55:3d:
         44:49:9b:b8:96:80:40:3c:11:6b:8a:19:67:9e:a3:bb:a8:18:
         3c:49:0b:f1:0d:04:92:6b:8c:55:af:03:c9:cf:23:72:8b:71:
         2b:67:4d:05:27:eb:fa:97:d0:54:96:00:62:6e:3a:1f:5f:1d:
         d4:b5:d7:b0:a3:6a:67:b8:ae:20:b7:48:9c:7a:bc:42:06:4b:
         3f:e3:a0:4e:cd:21:2a:80:20:29:b7:42:d1:5f:a9:30:61:15:
         51:92:f9:66:b1:14:f8:17:c8:85:4a:d9:eb:6a:c2:83:81:84:
         fe:85:30:a6:a1:b6:fb:01:1e:90:03:ab:8e:10:5b:e7:63:e8:
         1b:6d:63:56:0f:5e:e4:bb:df:24:1b:e6:18:c6:12:0b:b0:9f:
         e4:a4:4d:f5:e0:e5:82:35:c7:95:9d:4c:4f:dd:c6:7a:3a:ff:
         ec:03:40:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:22 2026 by rpki-client