Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
File:                     95_P0odavfYeGdMnDq_h7_rcZmI.mft (raw, json)
Hash identifier:          oSmZfwLZsxt+QI8H+5AmvUnF6EXlu70JwpK2ShVMmj4=
Subject key identifier:   FF:75:AB:BF:E0:60:81:DC:CE:5C:8D:7E:C7:46:9E:5F:99:06:F7:58
Authority key identifier: F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
Certificate issuer:       /CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Certificate serial:       019D9998F3E2E6B896F83E7364490AF72660
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
Manifest number:          04BA
Signing time:             Fri 17 Apr 2026 04:00:30 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:30 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:30 +0000
Files and hashes:         1: 12ZQ62nPJwBHdDipttw3dUMZnqY.roa (hash: mj44+gLUBC8dy/BsSB97lGlEqLGL0epooCBx2VlfKb0=)
                          2: 95_P0odavfYeGdMnDq_h7_rcZmI.crl (hash: ij34cV8LNxChPs2iHEoYpoAzsEK1bMmlQVTZYzWjnpw=)
                          3: Jv0u9cMD564Ime5yTEWdumsR3O0.roa (hash: y04ea8/vqCOfvH/IiN/FLgzOzYxMmv/5aeY5o3QGFD0=)
                          4: MGt5BnBc1caHCVlOZifA8hYKUFM.asa (hash: Z3wsIN7VXFqQgyEQhPtCMDIavrFmtm5IXKY4ICw229o=)
                          5: gxePdXWHsul0oNwQhQ3aS2MQ6ME.roa (hash: iRowxiL68qvO5oDgW7hTqSRfTbL0D0sk6Kkkv12eMRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:98:f3:e2:e6:b8:96:f8:3e:73:64:49:0a:f7:26:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
        Validity
            Not Before: Apr 17 04:00:30 2026 GMT
            Not After : Apr 18 04:00:30 2026 GMT
        Subject: CN=ff75abbfe06081dcce5c8d7ec7469e5f9906f758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c0:a7:24:a8:81:04:81:73:eb:22:c4:3d:61:
                    c2:3f:d4:21:ed:a4:32:69:af:68:1d:ec:8b:ed:07:
                    3c:6c:4f:64:1e:e2:e6:0e:a5:bb:d9:47:6c:b2:91:
                    c7:4f:1d:98:1f:3f:47:d3:4a:33:59:f2:63:7c:a5:
                    55:76:cc:91:1e:c4:a9:c5:64:13:46:0e:7f:91:65:
                    22:35:4f:b6:a0:19:10:72:b1:1a:65:69:ea:c1:f7:
                    4f:a2:7b:f9:57:07:75:3a:18:ef:99:06:be:10:23:
                    39:80:39:cf:52:dd:30:7b:4e:72:d6:2c:4b:83:b9:
                    7c:93:7e:2d:93:b3:60:0f:1d:34:f8:47:cc:32:66:
                    15:7a:93:88:3a:c0:79:8e:ca:1f:33:46:c7:f0:c7:
                    f3:e7:fe:6e:28:b8:5f:41:86:a3:49:b1:bc:b4:9f:
                    bc:ce:c9:ac:97:03:04:4e:27:79:5c:16:fd:12:05:
                    3b:c0:0a:d3:ee:e5:99:70:98:7b:5d:4f:dd:d2:4a:
                    89:2b:f5:a0:66:67:75:06:b0:e0:6c:10:48:2c:fb:
                    fe:9c:6b:69:2e:f3:69:66:bc:8a:ee:b8:e3:df:83:
                    d5:4a:ef:3b:81:4d:83:8c:73:79:ae:8b:b7:93:f6:
                    57:a2:1e:46:f9:83:32:ea:bc:0c:df:c0:a2:53:19:
                    3b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:75:AB:BF:E0:60:81:DC:CE:5C:8D:7E:C7:46:9E:5F:99:06:F7:58
            X509v3 Authority Key Identifier:
                keyid:F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:6a:31:1b:de:fb:7a:d8:92:ab:88:8b:81:07:77:45:47:32:
         c0:ae:70:77:af:cd:73:9b:a4:48:7b:59:5e:88:8b:5d:5f:ec:
         9e:b9:85:4d:22:4f:9b:f5:e1:cc:c7:02:5a:97:76:f0:f3:c0:
         f7:d4:47:04:81:99:91:25:0d:16:af:e2:35:80:f0:5d:b7:fc:
         63:6d:6e:37:c2:e2:b3:50:5a:06:73:41:ca:73:70:32:b2:09:
         bc:dc:cb:c7:e4:c0:9e:c2:a4:ad:b5:4e:c0:5c:66:07:a4:a4:
         ad:17:07:26:c8:a8:df:03:35:e5:83:05:dd:06:4a:5e:75:5d:
         f2:ea:7c:b4:e9:90:ad:a3:69:d3:a6:c6:ed:e0:18:55:70:ed:
         9c:da:a6:49:a3:52:79:81:15:87:e4:0f:e2:a9:56:01:c6:93:
         30:da:ca:f7:02:bc:19:e3:f7:90:f5:5c:2d:26:3a:59:70:84:
         32:96:1e:dc:11:b3:84:5a:70:06:19:ee:8a:45:7e:af:ed:dc:
         c7:6a:fd:64:18:c8:48:62:d1:3f:3b:ef:92:e7:46:1a:45:73:
         ee:a6:3a:ef:a8:9e:46:d6:a7:d9:aa:72:71:0d:c2:19:ac:99:
         92:41:6f:40:8a:a5:e5:4e:fd:90:f1:b2:99:ed:29:10:f6:44:
         5f:92:4b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:09:19 2026 by rpki-client