Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
File:                     IbgvyO2I-ZyrV9doAxdusnqfC_o.mft (raw, json)
Hash identifier:          KBBp2DLZSMLuaLbegnaLQXDiaCxclkPz66+bgYFe7KI=
Subject key identifier:   92:34:32:09:6A:F7:8B:E4:69:E8:70:7D:1C:CD:F6:CF:10:D0:34:F3
Authority key identifier: 21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
Certificate issuer:       /CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Certificate serial:       019D9818A401E4ED0055BC6918A2A1BA438D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
Manifest number:          104D
Signing time:             Thu 16 Apr 2026 21:00:44 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:44 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:44 +0000
Files and hashes:         1: IbgvyO2I-ZyrV9doAxdusnqfC_o.crl (hash: gEZvpbkawRWQLtedXxlf2yluRmPFzJcxuU9Urlbtk6U=)
                          2: hCRU042AoO-wp1TNEdYzfOG7kyM.roa (hash: 458hq105l3Yhrg7POKX+Z5+Z9IN5XlkejgNFXz79fUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:a4:01:e4:ed:00:55:bc:69:18:a2:a1:ba:43:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
        Validity
            Not Before: Apr 16 21:00:44 2026 GMT
            Not After : Apr 17 21:00:44 2026 GMT
        Subject: CN=923432096af78be469e8707d1ccdf6cf10d034f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bc:7b:80:ca:5f:5d:d0:2d:a6:c8:10:ce:5d:
                    e1:e3:dc:7a:7d:b5:f4:bb:52:ac:f2:bb:81:3b:a4:
                    ce:0c:ce:7f:09:4a:b8:2d:73:d4:8c:48:01:cb:93:
                    3b:95:a5:45:c5:f4:74:38:a0:97:e6:d8:35:98:12:
                    d1:24:e2:7b:bd:8b:06:37:ee:74:fd:0c:2f:04:b8:
                    78:44:46:db:8a:6d:bb:a9:d5:26:d2:b4:30:b4:84:
                    dd:50:b9:39:36:bb:22:22:e8:7e:31:90:b6:96:a2:
                    00:1f:50:6e:fc:fc:c4:7a:73:8c:75:e5:47:9d:52:
                    a4:3c:c2:20:c5:f6:3f:71:5a:62:0f:58:56:9e:19:
                    56:69:a5:52:22:cd:41:ea:79:98:27:47:d4:9a:6a:
                    bb:f8:30:3c:cf:a2:be:bf:40:d9:51:8e:99:45:7e:
                    0e:47:0f:d8:7e:e1:22:61:5c:db:09:15:87:d8:68:
                    d2:4e:13:37:8d:98:f7:8a:ba:40:e1:cb:41:98:33:
                    76:8d:51:fa:f3:2c:cb:cd:ce:c9:b2:b7:73:91:94:
                    2c:89:31:68:32:6f:a7:cf:4b:8e:33:ff:5f:00:d3:
                    1a:fb:a1:7c:5f:41:ae:1a:bc:ad:8f:46:48:6a:6f:
                    99:c7:0d:99:27:38:f3:80:7a:8d:c1:82:62:48:d9:
                    e5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:34:32:09:6A:F7:8B:E4:69:E8:70:7D:1C:CD:F6:CF:10:D0:34:F3
            X509v3 Authority Key Identifier:
                keyid:21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:35:79:88:f5:fb:5b:28:d5:b2:31:d7:2b:f0:89:00:e0:d6:
         19:5e:12:ac:f6:5d:38:b7:9d:42:ef:8c:0f:b5:34:f3:ab:3f:
         72:e3:7c:6a:77:62:4e:1b:67:20:13:2c:45:74:6c:ef:ca:9d:
         17:ff:4e:a3:64:0c:e9:43:b6:62:dc:0c:95:a4:c2:5a:33:17:
         8a:16:b0:e3:cf:30:38:54:9e:33:98:ed:fe:b5:f1:ab:44:b3:
         01:1d:61:03:68:9c:ee:48:12:81:b0:e1:8c:11:e5:08:4c:7e:
         3f:28:9c:a5:b5:b4:b8:f9:6b:5b:36:49:96:65:9c:4b:49:8e:
         5c:c5:42:28:e8:dd:67:fb:74:45:84:bb:34:84:73:cd:99:2d:
         79:c9:89:de:d7:d9:71:40:b3:bd:11:4f:a7:6c:d5:96:cb:31:
         56:99:38:74:b3:36:ee:aa:01:e9:fb:18:ec:a2:72:ad:e4:7f:
         94:40:51:cc:c3:2c:d6:b8:5c:05:55:a6:01:d1:67:29:2f:f3:
         e1:a3:78:39:a8:78:a6:7d:8e:48:9f:c5:a3:9f:0f:65:47:31:
         b7:53:79:8d:25:00:80:bb:5f:1d:22:a3:31:9d:b1:0f:97:63:
         2e:0a:90:c2:95:66:c4:46:ae:06:a8:41:0d:6c:1e:58:6f:1a:
         07:31:dd:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGKQB5O0AVbxpGKKhukONMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYjgyZmM4ZWQ4OGY5OWNhYjU3ZDc2ODAzMTc2ZWIyN2E5
ZjBiZmEwHhcNMjYwNDE2MjEwMDQ0WhcNMjYwNDE3MjEwMDQ0WjAzMTEwLwYDVQQD
Eyg5MjM0MzIwOTZhZjc4YmU0NjllODcwN2QxY2NkZjZjZjEwZDAzNGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybx7gMpfXdAtpsgQzl3h49x6fbX0
u1Ks8ruBO6TODM5/CUq4LXPUjEgBy5M7laVFxfR0OKCX5tg1mBLRJOJ7vYsGN+50
/QwvBLh4REbbim27qdUm0rQwtITdULk5NrsiIuh+MZC2lqIAH1Bu/PzEenOMdeVH
nVKkPMIgxfY/cVpiD1hWnhlWaaVSIs1B6nmYJ0fUmmq7+DA8z6K+v0DZUY6ZRX4O
Rw/YfuEiYVzbCRWH2GjSThM3jZj3irpA4ctBmDN2jVH68yzLzc7JsrdzkZQsiTFo
Mm+nz0uOM/9fANMa+6F8X0GuGrytj0ZIam+Zxw2ZJzjzgHqNwYJiSNnlswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJI0Mglq94vkaehwfRzN9s8Q0DTzMB8GA1UdIwQY
MBaAFCG4L8jtiPmcq1fXaAMXbrJ6nwv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWJndnlPMkktWnlyVjlkb0F4ZHVzbnFmQ19vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hYjY1ZjYtMzFiZS00MTQ5LWE2ZTMt
YWU1ZmE1M2I5M2IyLzEvSWJndnlPMkktWnlyVjlkb0F4ZHVzbnFmQ19vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9hYjY1ZjYtMzFiZS00MTQ5LWE2ZTMtYWU1ZmE1M2I5M2Iy
LzEvSWJndnlPMkktWnlyVjlkb0F4ZHVzbnFmQ19vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzV5iPX7
WyjVsjHXK/CJAODWGV4SrPZdOLedQu+MD7U086s/cuN8andiThtnIBMsRXRs78qd
F/9Oo2QM6UO2YtwMlaTCWjMXihaw488wOFSeM5jt/rXxq0SzAR1hA2ic7kgSgbDh
jBHlCEx+PyicpbW0uPlrWzZJlmWcS0mOXMVCKOjdZ/t0RYS7NIRzzZktecmJ3tfZ
cUCzvRFPp2zVlssxVpk4dLM27qoB6fsY7KJyreR/lEBRzMMs1rhcBVWmAdFnKS/z
4aN4Oah4pn2OSJ/Fo58PZUcxt1N5jSUAgLtfHSKjMZ2xD5djLgqQwpVmxEauBqhB
DWweWG8aBzHdQw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:27:13 2026 by rpki-client