Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
File:                     4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft (raw, json)
Hash identifier:          UAdbnsvRdadP5+SArO0YMhy8eH0Ak41uPxfaolYF5mE=
Subject key identifier:   57:8E:54:D4:F2:1C:14:24:DC:0C:AE:21:31:0F:C9:01:2B:07:A1:A6
Authority key identifier: E3:1D:A2:BA:05:7E:9A:54:A6:17:0F:25:7F:F9:78:56:DC:97:E0:68
Certificate issuer:       /CN=e31da2ba057e9a54a6170f257ff97856dc97e068
Certificate serial:       019D9850C2181FAF305842B4082818BE6D7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
Manifest number:          18C1
Signing time:             Thu 16 Apr 2026 22:02:02 +0000
Manifest this update:     Thu 16 Apr 2026 22:02:02 +0000
Manifest next update:     Fri 17 Apr 2026 22:02:02 +0000
Files and hashes:         1: 4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl (hash: kLKUdAHO8omAuRECOhTOTBvFt4uukerBk+FoxhQG6h0=)
                          2: limcXQL5irLoJkXVtLb_HxKT9Cc.roa (hash: aQ8BkEO1FUkjaNo1mk5XdjSymKmGcpWue4kgaoY47rc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:c2:18:1f:af:30:58:42:b4:08:28:18:be:6d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e31da2ba057e9a54a6170f257ff97856dc97e068
        Validity
            Not Before: Apr 16 22:02:02 2026 GMT
            Not After : Apr 17 22:02:02 2026 GMT
        Subject: CN=578e54d4f21c1424dc0cae21310fc9012b07a1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:01:34:cc:cb:27:ba:12:d5:61:cb:84:41:5e:
                    f3:30:22:93:aa:3c:3d:79:97:37:20:ee:8a:19:af:
                    2b:8e:eb:33:a9:c3:c7:b7:d3:60:ba:85:bf:b0:35:
                    00:b9:5b:2e:85:39:fe:f9:4b:97:10:f1:90:17:21:
                    f9:43:41:41:e3:0f:77:ff:7e:65:4e:f4:4f:d5:b1:
                    81:28:41:6e:98:46:bb:77:e5:c7:ac:aa:aa:b2:6e:
                    95:a8:2b:9c:d3:4b:0e:ab:3d:a1:85:cc:47:d3:a7:
                    90:1e:b2:ba:7d:cd:24:13:f9:2d:47:d6:15:4b:b8:
                    d5:20:1d:b2:4f:91:68:6a:ca:a8:9f:c2:04:3c:24:
                    7a:90:d1:a0:d3:b8:6a:05:cf:40:b1:e6:4b:b7:e8:
                    5b:a6:e4:6f:ae:e1:fa:d4:22:11:5c:5a:8a:4f:25:
                    cb:b1:76:f1:c9:62:12:22:ab:3b:37:67:f8:84:d4:
                    94:fe:c0:3e:b6:53:59:c0:1d:96:02:51:1e:9c:54:
                    2c:f9:8e:6b:68:25:fe:43:53:77:8b:73:26:8b:31:
                    e0:4b:72:14:0a:56:99:c5:38:96:48:ef:38:7d:01:
                    3a:66:99:5c:3f:63:a3:46:ec:60:b3:43:ce:03:0b:
                    c1:e4:67:c4:ab:0f:af:66:8c:9c:22:01:b3:a4:26:
                    be:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8E:54:D4:F2:1C:14:24:DC:0C:AE:21:31:0F:C9:01:2B:07:A1:A6
            X509v3 Authority Key Identifier:
                keyid:E3:1D:A2:BA:05:7E:9A:54:A6:17:0F:25:7F:F9:78:56:DC:97:E0:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:17:ab:1c:87:61:ce:d9:40:40:f4:37:a9:a3:72:57:4d:a6:
         26:a1:1b:b7:8b:5b:f8:01:d1:60:6b:1d:b0:56:5b:3f:02:7c:
         b6:4b:44:98:3d:1e:24:e2:cd:e6:01:c7:74:d0:c4:39:4f:41:
         4d:fe:28:4c:44:fd:69:b6:de:a7:65:73:0e:bd:6c:57:81:52:
         3b:13:34:38:44:51:dd:d1:70:a4:97:95:39:bd:24:c6:43:b8:
         dc:c5:d7:fa:e5:02:b4:17:df:f6:bb:8c:22:c5:26:67:3d:94:
         3d:90:ec:b9:d8:75:b4:04:6f:5d:5f:97:46:8c:b2:51:66:66:
         2b:7e:11:7c:5a:47:48:7f:21:37:dd:1b:03:e2:d0:90:b2:8e:
         d0:6a:6d:92:80:b9:bb:74:aa:ba:c7:c0:6e:3d:15:97:c9:1b:
         7d:fe:98:6a:e2:c0:13:87:af:39:a9:1d:45:79:8e:b2:00:fb:
         a2:f5:3d:6b:87:1a:bf:ac:b1:2b:15:9c:ac:e5:ca:05:ab:e0:
         33:2f:b6:66:ef:43:89:ba:66:01:80:51:13:2e:04:7b:34:7e:
         5a:14:11:44:53:55:92:90:ad:49:dc:e7:1a:4a:85:f2:1b:39:
         98:dc:e9:fc:7a:6a:2c:13:02:73:df:71:be:9c:08:a2:9d:07:
         b4:f9:3e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:54:40 2026 by rpki-client