Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
File:                     boSxI5O_yw5tbzLMlcDXEXT8mzA.mft (raw, json)
Hash identifier:          km4cd15/wYm+KIfR7Vz0gNk11Q8C27ge77b4H6wbgFw=
Subject key identifier:   33:85:D3:60:82:9F:6E:22:95:A7:26:4C:9C:D2:94:BC:D1:2E:D5:C3
Authority key identifier: 6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
Certificate issuer:       /CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
Certificate serial:       019D99D0CE614E5C92A15321CD495F0CA671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
Manifest number:          18C7
Signing time:             Fri 17 Apr 2026 05:01:31 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:31 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:31 +0000
Files and hashes:         1: boSxI5O_yw5tbzLMlcDXEXT8mzA.crl (hash: d9KfYVT29KadQCdQ58FgPN0H0gKxtWxGo8xk0xljv2o=)
                          2: xmUoPe_uoUefJbAVDkhT4XlknC8.roa (hash: 8avUZYobEaMzXgdIn1drj3OJ1RhpFzcqCel7ZlxOycE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:ce:61:4e:5c:92:a1:53:21:cd:49:5f:0c:a6:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
        Validity
            Not Before: Apr 17 05:01:31 2026 GMT
            Not After : Apr 18 05:01:31 2026 GMT
        Subject: CN=3385d360829f6e2295a7264c9cd294bcd12ed5c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:11:43:1b:83:24:e0:ab:98:19:6e:9a:94:d9:
                    5e:a2:15:8e:4f:79:00:fb:ad:26:73:81:da:d6:e7:
                    75:ca:6c:51:d3:82:78:b9:76:54:06:23:8a:47:ef:
                    74:06:0b:fe:c8:9d:3a:e8:93:e0:f9:75:6c:92:59:
                    b4:b4:16:cd:18:c5:e8:db:0f:65:19:3c:f3:6c:3c:
                    8a:c3:8d:07:ca:0d:20:dc:73:8e:a7:71:1d:1b:82:
                    76:72:81:11:8f:7f:f5:3b:e4:5b:f6:6d:26:ea:49:
                    86:c9:93:42:76:7b:33:f2:b2:05:ab:be:04:66:ce:
                    ab:fa:79:22:d0:dc:6b:05:52:79:fd:ed:15:77:50:
                    13:22:dd:43:9b:93:dc:dc:e6:53:61:19:cc:6a:c6:
                    bd:9c:12:8e:b7:b2:90:e2:43:91:ed:c1:b3:89:70:
                    7e:75:75:73:13:13:ee:70:ec:1e:fd:c7:d0:2f:12:
                    3f:da:c3:35:6d:ea:8e:01:b5:63:5a:9d:1c:1e:1a:
                    ec:aa:73:eb:15:e8:e6:0f:c9:1f:4a:3b:ce:18:e7:
                    74:f1:4f:b9:81:f7:cc:45:e5:bd:8f:6a:32:a0:27:
                    39:0a:5b:39:b1:36:37:a6:0b:18:17:93:96:9b:2d:
                    a8:c5:3f:a3:1f:17:4b:5b:4f:df:21:a6:32:63:bf:
                    0c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:85:D3:60:82:9F:6E:22:95:A7:26:4C:9C:D2:94:BC:D1:2E:D5:C3
            X509v3 Authority Key Identifier:
                keyid:6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ef:7c:9c:2f:05:fe:2a:b0:a7:00:35:80:b2:0d:c6:bf:47:
         0b:e4:3b:6a:71:43:db:aa:bb:bf:f2:a9:2d:59:25:bc:9d:f2:
         af:93:70:87:90:a4:aa:89:40:af:5c:ba:78:c0:46:3d:c8:1f:
         3f:bf:15:c8:16:3d:16:97:30:22:5e:51:d7:8b:84:c5:7d:dc:
         0d:4d:f6:92:23:6c:d8:59:c6:47:f5:da:75:72:54:28:56:d1:
         ed:cd:11:c5:3a:5c:7b:b5:ec:a7:73:64:68:e9:5e:8a:90:e1:
         fd:79:bd:56:19:3e:ff:53:a8:f2:74:0d:47:92:3b:53:a8:e4:
         70:57:d9:f9:32:9b:1f:b3:d0:6a:22:37:f4:e8:eb:58:9d:36:
         9f:49:5c:06:71:4b:e3:c3:fc:37:7c:50:1d:77:4b:88:a9:1e:
         f9:17:ef:64:0e:4b:85:e8:a2:2a:6d:47:8b:5c:76:5b:58:53:
         79:97:fd:91:96:4d:4b:75:4a:02:ff:5e:8b:74:1f:61:ba:1d:
         45:9b:df:6b:d3:a8:d9:17:22:4f:45:26:45:fe:76:2c:cd:80:
         fe:f2:93:e1:eb:58:4c:45:0c:ef:5d:14:a7:58:9a:cf:a6:af:
         0b:dc:1f:d8:d0:b1:f2:d8:08:f5:33:8e:da:63:50:a9:5d:0b:
         60:38:ff:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:25:05 2026 by rpki-client