Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
File:                     RF3xPSDztXGkumELgeYwPbbQmcA.mft (raw, json)
Hash identifier:          H9MxQpuRgyMJP6FkW6iOIcpX5co6G0dprq2MXgOrm9c=
Subject key identifier:   EF:97:45:D8:7F:1F:37:04:05:B5:08:56:DF:B7:75:31:C0:51:92:7C
Authority key identifier: 44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
Certificate issuer:       /CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Certificate serial:       019D97E25B28964878D8A53A30CBB607AE88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
Manifest number:          18C1
Signing time:             Thu 16 Apr 2026 20:01:27 +0000
Manifest this update:     Thu 16 Apr 2026 20:01:27 +0000
Manifest next update:     Fri 17 Apr 2026 20:01:27 +0000
Files and hashes:         1: RF3xPSDztXGkumELgeYwPbbQmcA.crl (hash: PHzKZ9duUVh9yfxeGL+MyIc8sZ1xFyCx+pExQ4p7eSs=)
                          2: cQbewkFEZ4acO97jlQJ5WKuKd7A.roa (hash: nw0VsiavZiymn/xF8CuU14khn+rz47RFDCWUotkUcgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e2:5b:28:96:48:78:d8:a5:3a:30:cb:b6:07:ae:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445df13d20f3b571a4ba610b81e6303db6d099c0
        Validity
            Not Before: Apr 16 20:01:27 2026 GMT
            Not After : Apr 17 20:01:27 2026 GMT
        Subject: CN=ef9745d87f1f370405b50856dfb77531c051927c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4b:59:1a:4e:0c:3b:f1:a0:77:7b:5c:77:7b:
                    4a:66:3f:dd:43:4b:77:3d:f5:5e:40:1b:f4:03:5b:
                    10:19:55:82:8c:19:13:3e:88:71:77:16:ba:38:21:
                    0d:74:f4:ad:4b:03:f1:97:ee:43:03:bd:63:79:4b:
                    a0:a5:c7:31:63:95:6e:53:11:aa:f6:37:ef:3e:d2:
                    e2:98:b0:56:0f:19:d7:dd:69:7a:34:b6:c7:bd:2f:
                    9d:ee:ab:c8:9a:f6:6c:3c:dc:91:6a:82:78:da:5e:
                    42:e9:17:e0:d6:3c:fe:35:01:08:ee:cb:52:cf:1d:
                    34:85:00:04:1d:d5:e1:91:83:50:ca:d6:52:3b:67:
                    a8:8e:3e:6d:35:fe:a5:fd:f0:f5:0d:7b:52:37:eb:
                    05:44:0b:6a:5f:83:3d:3c:5e:de:25:a3:a7:3c:03:
                    bb:4b:36:c4:1b:ff:9c:16:73:cd:25:43:14:c8:23:
                    26:a0:7f:42:e1:bd:8a:10:11:99:3e:31:1c:57:ec:
                    03:7b:aa:fe:7e:71:cd:db:48:80:ea:44:cd:d1:f3:
                    28:0c:4e:96:12:9e:69:3e:b5:87:69:ab:cf:0b:44:
                    44:54:13:32:9c:46:da:09:4e:28:27:eb:ee:65:2c:
                    b0:3b:3f:b5:88:0a:be:cc:b3:e7:d9:fe:e5:bd:e7:
                    02:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:97:45:D8:7F:1F:37:04:05:B5:08:56:DF:B7:75:31:C0:51:92:7C
            X509v3 Authority Key Identifier:
                keyid:44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:66:7e:29:85:da:d4:83:45:5c:16:24:91:2c:a3:82:e3:49:
         41:cb:13:cd:20:48:b9:a8:47:38:cd:ab:d5:e1:d0:ff:5e:b3:
         0f:f6:04:d9:2f:81:a5:96:b5:10:3c:6e:e0:a5:b7:f5:39:7b:
         0c:64:f9:e9:b8:b0:a6:88:a1:dd:5c:bd:58:a8:01:2b:48:99:
         79:2b:3a:20:9d:cf:81:f5:a3:0c:1f:a1:19:ee:ac:ac:3d:b5:
         ce:11:a0:41:d9:c4:db:38:31:97:ef:ec:a6:fc:01:fe:d1:47:
         08:a9:50:a9:61:79:55:93:2a:cb:ac:91:91:b2:88:35:4d:e2:
         84:8f:f9:01:86:e3:b0:7d:60:5f:3c:04:a9:ba:f4:b2:43:5f:
         e8:1d:46:86:60:d8:42:ae:95:05:ce:3c:8f:85:92:b1:d0:1b:
         75:48:b1:e0:48:62:be:3a:5a:e6:0e:47:95:2e:01:53:15:54:
         d2:4e:81:59:14:28:52:7e:6d:49:e0:26:31:a2:d6:8e:b8:c8:
         f8:c0:3f:68:d5:f2:60:f0:93:ff:9b:7f:bf:be:cc:e9:52:e2:
         5b:28:10:d2:87:58:6f:7f:2e:b1:b0:43:8e:76:2c:a6:c2:bc:
         30:20:18:23:06:c1:21:41:27:a6:ad:a3:5f:4f:c7:16:41:3f:
         ab:b9:8e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:02:44 2026 by rpki-client