Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft
File:                     zWJru3tp7sn2eQsDcFVFuJL6Loo.mft (raw, json)
Hash identifier:          8rT5ylVwGxBe3jwrYgtvUCFHjQKBDvn0LRNb0Ttql3s=
Subject key identifier:   52:3B:C6:5A:1A:FB:F9:84:1A:51:0F:CC:9E:E3:9D:88:DD:2B:37:C0
Authority key identifier: CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A
Certificate issuer:       /CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a
Certificate serial:       019DA3783A1C6AE6750D868ED68B83C8BE27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft
Manifest number:          18C7
Signing time:             Sun 19 Apr 2026 02:00:58 +0000
Manifest this update:     Sun 19 Apr 2026 02:00:58 +0000
Manifest next update:     Mon 20 Apr 2026 02:00:58 +0000
Files and hashes:         1: 0srnwmqHjJ7wt6SmCtQCMFzqvs0.roa (hash: 2PcsF5G0Mq3lPMeGvxmpYXNXSdp0a4eMQFAaAmAvtYY=)
                          2: B_S5icIbEZu3NRi7pO3M0FoxLBY.roa (hash: NpXzXVIDrJc5PoL2K8nkZP6JJq6luR8bBGM3/nlrQ3I=)
                          3: _w8qU7QLDWariPOfRN9OMYuyNWM.roa (hash: 7rGZ50HKoADJZt0gKXjNdUDKxe/HyV19YQRWiM3XHAo=)
                          4: awc83yGNtXzyjqzRMTElkzhM-Io.roa (hash: PQ/L7qMRaTtcJZl8Z1BC36Zg7hT94D0vhYdETaZzx5c=)
                          5: zWJru3tp7sn2eQsDcFVFuJL6Loo.crl (hash: 04mSMfPPjH+dg9hm2pV/M/NdFiSddMiU0ROE5odwnck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:78:3a:1c:6a:e6:75:0d:86:8e:d6:8b:83:c8:be:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a
        Validity
            Not Before: Apr 19 02:00:58 2026 GMT
            Not After : Apr 20 02:00:58 2026 GMT
        Subject: CN=523bc65a1afbf9841a510fcc9ee39d88dd2b37c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:75:55:50:a2:f4:06:6e:76:8e:6f:ee:13:e3:
                    3e:08:c9:5e:a7:df:5e:bc:24:6e:24:e6:94:81:90:
                    2f:29:da:29:76:01:a7:a3:b2:25:86:bc:fc:f0:6d:
                    f0:b1:5e:0d:a5:8f:0b:f2:cb:16:e7:37:1e:66:ad:
                    01:cd:f1:90:7b:77:3f:b9:18:53:28:31:f2:da:f0:
                    51:80:8e:ba:35:72:66:15:84:56:54:a9:58:72:f7:
                    46:be:0a:2c:04:a6:4c:3a:ef:99:27:e8:b5:7f:8c:
                    55:d4:4e:c1:a9:ee:11:bc:b6:1c:41:7c:41:08:22:
                    ed:07:77:36:ff:3e:4b:2d:9a:24:fa:b0:3c:69:d6:
                    8b:bf:79:47:42:ed:12:af:8c:32:63:f3:3c:fc:bb:
                    ad:8b:43:a8:a5:7e:97:9b:4f:59:5e:4d:82:10:73:
                    5e:11:4e:87:ea:6f:ea:1f:07:74:60:75:f1:1f:f7:
                    ed:b1:d1:ad:c2:b9:c6:4f:df:57:58:c2:b5:f5:89:
                    73:2c:8a:73:aa:89:ee:e7:c0:59:e4:6a:49:15:ad:
                    7d:f1:ce:55:b7:1a:a2:6d:8a:1e:be:e0:35:a5:99:
                    4a:ec:68:9a:bf:b2:b2:fe:0c:55:d1:6a:53:34:0d:
                    c7:ff:12:fc:44:c8:70:0e:21:3a:90:1c:3f:c7:a4:
                    98:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:3B:C6:5A:1A:FB:F9:84:1A:51:0F:CC:9E:E3:9D:88:DD:2B:37:C0
            X509v3 Authority Key Identifier:
                keyid:CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:74:06:bf:1d:d8:ed:e0:2c:a4:24:4d:4a:4c:a9:82:ff:13:
         ed:ba:2d:14:c9:f1:a5:a6:e8:1d:b0:ca:db:ae:79:25:ee:b8:
         76:4b:cf:88:4a:d9:fa:27:2b:5d:b5:85:01:7b:42:ae:ba:e3:
         bd:6a:e9:e5:a9:2f:1b:6f:e5:3e:68:c5:53:47:ea:10:32:05:
         6b:61:8d:cb:65:4f:24:53:e9:d7:a3:b5:f3:ed:cc:6c:0e:2b:
         7f:52:e0:ab:f6:c0:da:f8:09:6f:1d:b2:8d:6d:1a:51:6d:dd:
         4e:ca:fb:1e:a5:c0:33:40:cc:b0:50:a7:f9:29:e8:9f:3d:fc:
         96:9d:3a:c0:23:16:98:84:cd:68:ca:7a:99:2c:ab:da:1f:b5:
         fc:20:b4:06:5d:c1:63:f7:f1:55:8e:c2:cf:7d:69:b7:f2:7f:
         62:c2:91:4d:47:47:5c:ec:ec:48:10:2b:84:8e:7e:32:9d:3a:
         63:a8:b3:59:bf:9d:35:33:00:7b:43:11:7e:d4:47:83:16:09:
         5d:55:9a:1d:33:43:c3:b1:7c:4c:80:cc:6c:fa:49:2a:f9:ec:
         fe:e8:3e:e9:0d:d1:fd:3d:a3:8a:46:f9:de:68:c7:f7:c7:f7:
         95:b3:5f:58:04:18:b4:c3:52:fa:0f:5c:fd:d1:07:aa:01:55:
         db:4f:84:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:42:38 2026 by rpki-client