Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
File:                     8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft (raw, json)
Hash identifier:          wi9EM6Cq238Y/0M6tLmMEWcfTYdKtsLkt2T4t3l2xPE=
Subject key identifier:   A4:E9:30:B5:A7:37:A7:DA:A4:CB:A0:33:AB:2C:78:EC:7D:63:81:41
Authority key identifier: F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
Certificate issuer:       /CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Certificate serial:       019D9962DA3294CD6668334EA5F77FD03D99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
Manifest number:          1675
Signing time:             Fri 17 Apr 2026 03:01:25 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:25 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:25 +0000
Files and hashes:         1: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl (hash: ICq0mV/2UD4fyI1Fl9BtSAung6FPwt92cgC3mT+kbM4=)
                          2: u5KaxC_LjZl4glkpkZdsvGnJ4pk.roa (hash: Go7rnWsx0cmxk8Ezurf4VMcNVol6bQI4xHvGGXPZG0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:da:32:94:cd:66:68:33:4e:a5:f7:7f:d0:3d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
        Validity
            Not Before: Apr 17 03:01:25 2026 GMT
            Not After : Apr 18 03:01:25 2026 GMT
        Subject: CN=a4e930b5a737a7daa4cba033ab2c78ec7d638141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fb:28:f7:a6:45:51:37:f1:f0:9f:09:b8:80:
                    76:0c:2f:e7:d5:84:8f:bd:d7:d1:e9:6c:b5:d7:66:
                    e4:d9:94:09:88:6a:88:00:f5:1d:7b:8f:64:c9:2f:
                    e9:d6:02:db:0e:e0:74:aa:a5:2a:94:92:46:c0:6f:
                    5c:ce:1b:05:98:2b:ed:cf:95:58:1d:9c:af:62:6b:
                    c1:08:86:21:d0:cb:22:c4:a1:e9:bf:da:6d:91:aa:
                    5f:a2:a8:97:05:ae:ca:75:5e:88:6c:08:3c:21:9b:
                    38:24:7c:31:7a:cd:55:50:7b:4b:86:52:71:90:24:
                    2e:33:97:84:c0:4e:75:e6:ab:dc:1f:5f:1f:b9:61:
                    d8:3d:19:f4:e3:c2:71:07:c0:20:73:74:c4:41:2e:
                    d3:8e:08:95:65:49:b5:5a:62:b8:85:f5:4c:73:27:
                    f7:48:97:bd:b1:35:5b:13:4f:a0:fc:c6:64:ef:17:
                    93:76:ca:24:23:c8:e5:cf:99:6e:00:e2:5d:92:eb:
                    7e:bb:e4:8b:af:1c:ea:1f:7c:5e:92:64:3a:48:56:
                    10:77:78:f2:4d:0c:a4:69:b8:08:a1:e2:30:8d:a1:
                    87:5b:35:85:7c:fc:a7:17:d9:43:9e:c7:39:31:8a:
                    20:59:c2:43:a1:10:08:e4:4a:48:26:e2:de:90:58:
                    0d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E9:30:B5:A7:37:A7:DA:A4:CB:A0:33:AB:2C:78:EC:7D:63:81:41
            X509v3 Authority Key Identifier:
                keyid:F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:8b:5b:9e:84:de:8b:29:ac:e8:3b:d9:0b:14:4d:44:46:55:
         af:d0:71:de:4e:3f:da:20:e4:e5:a0:6c:6e:b9:87:53:c3:8c:
         96:2a:7f:ec:86:8b:4b:c8:ac:7c:f4:bf:c9:c3:98:5a:a2:1a:
         80:7d:4e:e3:b1:4c:9e:db:28:df:62:4a:f3:a7:dd:0f:0a:df:
         38:d6:0c:d1:ba:f6:9f:0a:86:c9:54:9f:56:f0:03:57:f0:54:
         ab:53:9d:03:40:6a:43:b9:e5:3c:26:4a:1c:27:52:50:10:18:
         c6:22:b5:7f:4d:3b:c8:67:95:af:53:05:fc:e8:54:f6:3b:68:
         d8:e7:ce:de:9a:5b:fc:48:ff:82:cf:d4:7f:89:8d:82:cd:e0:
         0e:a2:d9:94:65:55:29:c1:3a:f3:4c:4a:0a:1c:56:01:93:a9:
         cf:77:c4:63:3f:0e:53:34:f5:28:2d:fe:d2:64:8d:6b:b8:9b:
         84:b3:61:45:e0:e0:59:ab:dd:f9:2f:de:ac:90:6e:4e:57:17:
         fc:bd:e5:55:af:74:fd:b3:af:cf:31:7c:8f:04:e7:a3:c7:50:
         ac:2f:34:a3:ee:74:a0:8b:8e:cb:c6:6e:c3:52:69:ba:8b:bc:
         a2:95:26:06:68:0d:68:95:f9:6b:03:2a:67:99:2b:b0:7d:b5:
         d8:af:e8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:51 2026 by rpki-client