Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
File:                     1yGexzg_oGEEgN36YsP4LEAM1W8.mft (raw, json)
Hash identifier:          SQ6lPzapPAqJ3gF4W1odvHn8ouHKowaLs+SEn01MNgQ=
Subject key identifier:   10:1D:08:FD:34:0A:93:5F:77:86:7F:AC:30:49:CE:AA:F0:08:DC:F4
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Certificate issuer:       /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial:       019D992B242EBD900AFA0AA5E47C71BBC842
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
Manifest number:          18D7
Signing time:             Fri 17 Apr 2026 02:00:34 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:34 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:34 +0000
Files and hashes:         1: 1yGexzg_oGEEgN36YsP4LEAM1W8.crl (hash: bDhJN+H4GH7v/FR2bTaitGUd/BymVt6bIPSmPPu9JZs=)
                          2: a2_9wwKBZMb8Nr8HZeMyqj6eUQ4.roa (hash: HfOJoJtir41J/f+2Eh1+jNbOpl4HZb7UfJBs0/Ovz88=)
                          3: cVHvV_AfygNUxK1wLw3TaNGFbjc.roa (hash: aLS2Onqdh8tUWZKfNWq/5VUb/NC+ZJDVJlHb2Z6u8NU=)
                          4: wQxI0N6wQyPtnD-0275R19YpjGg.roa (hash: sn5K7ssLl2Ssv/wbg1cIpo1dVgEp9s7k3bxB61yjjzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:24:2e:bd:90:0a:fa:0a:a5:e4:7c:71:bb:c8:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
        Validity
            Not Before: Apr 17 02:00:34 2026 GMT
            Not After : Apr 18 02:00:34 2026 GMT
        Subject: CN=101d08fd340a935f77867fac3049ceaaf008dcf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:56:e2:c7:81:34:e6:4c:44:21:13:91:aa:9a:
                    60:33:80:d9:02:20:99:c4:ef:72:87:9a:5a:59:ae:
                    86:bf:0c:6e:b0:a9:bc:ea:e3:65:ed:1d:16:48:07:
                    1c:1b:1b:ec:dc:df:80:f0:54:b1:aa:5e:e8:83:34:
                    20:3b:df:97:29:a9:87:70:c2:28:f6:3e:24:5a:31:
                    6c:b6:6f:9d:eb:6d:31:54:aa:7c:58:f5:35:54:1e:
                    31:7e:a1:77:f5:df:ab:41:e1:c2:f1:8d:10:fc:8a:
                    25:d6:fc:7a:90:73:50:72:47:54:de:f0:32:79:29:
                    b4:c2:8a:4d:e3:10:fa:1f:04:c5:5f:26:c8:ae:66:
                    2b:96:0e:7a:9c:01:09:38:86:60:00:ab:a8:6f:8a:
                    96:01:fb:a7:b4:2f:1c:e1:2c:7a:2e:f6:23:15:04:
                    29:83:60:f3:9f:3a:4e:56:88:3b:1d:65:2d:44:3a:
                    94:46:f0:42:45:9a:e8:24:1e:87:04:57:38:cb:62:
                    fc:f7:a1:bb:69:dd:c4:c7:61:10:02:1d:3b:ae:b4:
                    c8:1a:be:71:a1:f6:03:07:c0:27:32:e7:1b:62:8f:
                    5f:f1:34:04:7c:08:0d:ec:0d:db:85:ca:9c:c9:64:
                    db:c4:93:46:a9:db:ed:9e:94:77:af:fa:6b:6d:51:
                    16:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1D:08:FD:34:0A:93:5F:77:86:7F:AC:30:49:CE:AA:F0:08:DC:F4
            X509v3 Authority Key Identifier:
                keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:85:f9:a9:07:7e:d2:06:3c:32:6c:82:71:74:45:fb:2e:c1:
         0d:0e:d9:03:15:3a:6f:1f:55:fc:33:8d:10:4f:29:69:14:64:
         76:24:27:85:bd:e5:24:d3:5c:07:c1:f1:b0:b6:a7:db:f4:53:
         0d:d0:e8:d5:14:62:1d:8e:a9:b0:dd:84:e6:3a:d6:c5:37:4b:
         a0:01:ae:5b:d0:12:ce:18:ff:ce:40:2b:9d:70:c8:34:5a:bd:
         a0:92:56:0c:91:eb:ad:00:d7:da:4d:c4:c7:78:fb:be:f9:e8:
         4a:75:52:c9:a9:eb:57:53:e1:78:ac:f7:8e:8e:3e:48:3c:c3:
         cd:34:0f:90:46:a0:50:fd:c6:76:31:e3:ff:a5:1c:01:d3:a2:
         19:b9:47:42:c7:96:50:c5:d6:65:e2:da:67:62:2b:76:5a:2c:
         25:00:f6:e7:3a:c1:90:eb:46:2f:36:c7:22:9e:da:ec:ad:b1:
         d1:05:80:c1:84:a7:1c:d3:7d:96:68:fe:63:d5:10:c9:77:a4:
         39:74:05:1d:00:2c:98:ec:70:91:b2:b6:ae:aa:af:bf:e5:72:
         75:75:21:e9:e2:8e:01:55:e1:ad:f9:26:8e:72:0e:38:c3:65:
         1c:39:f1:71:d7:28:f7:99:2b:95:3d:f8:f2:67:55:29:89:cc:
         af:2a:8c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:36:32 2026 by rpki-client