Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
File:                     nVE44frPe2XbtXX6fUckDCeLNN8.mft (raw, json)
Hash identifier:          CdPw8xDCYkp49ll+xSiyVG3aWFFczag3VK2lWjSei2g=
Subject key identifier:   F5:73:E5:46:9B:7E:98:14:6F:1A:76:E2:3F:D4:E1:E4:80:19:92:CB
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Certificate issuer:       /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial:       019DA453AB652AF655EB1F373F839C743422
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
Manifest number:          18D4
Signing time:             Sun 19 Apr 2026 06:00:39 +0000
Manifest this update:     Sun 19 Apr 2026 06:00:39 +0000
Manifest next update:     Mon 20 Apr 2026 06:00:39 +0000
Files and hashes:         1: 3bVeZ4jtU_nod0fE248hvJ8HwmE.roa (hash: tZeUGg3uohbozp0AKzn9i/jwYgDahKq/WKKbSHnm6EE=)
                          2: 4_3T9oqdjGNdYvgcmhfdmg2_xFk.roa (hash: C4ZhYpcFum0fbS3tRySUhTlzAuq5N1/9WgaAqXp5T1k=)
                          3: FRI2m35e7-42Vlqf3b-Y2NKeZLQ.roa (hash: oaE/hCDrQO5MgjbWzRph6lVm2avGrrJhXBmUB4OGEJY=)
                          4: nVE44frPe2XbtXX6fUckDCeLNN8.crl (hash: bjEYFC1oV/dcxblvOoOKo9qw4lwjtx90GTF5I7egiJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:53:ab:65:2a:f6:55:eb:1f:37:3f:83:9c:74:34:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
        Validity
            Not Before: Apr 19 06:00:39 2026 GMT
            Not After : Apr 20 06:00:39 2026 GMT
        Subject: CN=f573e5469b7e98146f1a76e23fd4e1e4801992cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:26:ba:b5:a9:68:9f:4a:76:ae:6b:ea:1b:7e:
                    76:18:ff:32:6c:0d:a2:3d:a4:42:fe:d5:13:a0:18:
                    67:a6:c4:91:51:83:67:6a:fb:ac:99:96:aa:a2:58:
                    1f:4e:f0:15:66:ae:9e:f3:77:cc:98:6e:87:5c:55:
                    f4:76:e7:3c:d5:52:d2:a8:73:f5:65:0b:c5:f8:d9:
                    1f:46:b6:07:ab:8a:ce:a1:2f:5a:3c:9d:e1:76:cb:
                    dc:3e:64:c2:c9:4d:78:83:db:67:0c:57:09:70:c0:
                    1d:4c:f2:46:a0:85:dd:f0:a8:33:60:59:52:05:14:
                    d2:c6:77:9d:b9:57:ad:dc:84:2b:e6:b4:56:72:de:
                    1f:72:dc:80:0e:c1:cb:92:ae:7f:c4:45:5f:ae:0d:
                    79:d7:87:e6:12:9a:e3:55:97:ae:11:45:f8:da:23:
                    2b:ca:c1:d8:ed:dc:2e:2f:48:cb:84:fa:79:83:cd:
                    14:96:e9:3e:1b:21:59:0d:8e:d2:74:30:e2:63:85:
                    ac:7f:a7:5a:e6:b0:52:36:d4:18:6b:13:23:03:d9:
                    18:ca:a7:84:45:d2:9b:60:4e:c0:76:0d:af:64:fd:
                    40:51:29:11:b2:e8:fa:19:3c:48:a7:46:00:c7:d2:
                    0d:fa:f3:03:4b:be:3f:86:69:2f:16:fe:63:ef:ac:
                    54:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:73:E5:46:9B:7E:98:14:6F:1A:76:E2:3F:D4:E1:E4:80:19:92:CB
            X509v3 Authority Key Identifier:
                keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c8:74:01:66:be:51:5f:cd:5b:1c:79:d4:1a:df:dd:42:4e:
         13:51:1f:31:37:3a:ae:ba:37:0b:23:91:56:13:96:0a:63:cb:
         68:f5:70:87:4c:a3:a1:9b:8c:40:75:6c:88:32:2c:95:94:8e:
         69:e2:e2:95:90:66:a6:9b:bc:c4:8b:ac:60:25:ad:33:20:1c:
         98:a3:8d:e0:1b:82:4f:8a:fc:b2:c3:33:f3:03:f2:df:25:16:
         14:2f:0d:bc:be:98:01:cc:db:2b:16:4d:f0:a6:5b:15:4d:20:
         b3:01:d8:94:2f:86:c4:71:00:de:3e:64:59:98:fb:7e:2f:53:
         35:b2:9a:5f:44:2d:5e:c4:7a:9a:4b:c0:f8:6c:bb:e1:0d:42:
         58:da:01:a6:84:3f:66:bc:63:fe:c6:f7:63:d8:26:36:7e:d7:
         c7:08:3e:f5:d4:36:e9:da:ec:b4:02:c0:8d:da:e1:08:6d:b8:
         5c:88:c9:5c:2f:55:6e:29:63:e1:51:54:85:b5:27:a6:bb:3a:
         f9:b8:cd:ab:4b:1f:96:41:a9:c5:f8:f3:35:29:f5:42:1f:f6:
         50:9e:15:eb:6d:31:22:d9:83:cc:99:ef:e1:b4:8a:a8:34:b1:
         11:89:b6:55:01:ba:e5:5b:50:3e:26:ba:81:db:04:46:c6:73:
         53:98:de:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:10:45 2026 by rpki-client