Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
File:                     RPTFphl4VJskg4j530SdKpXhCgc.mft (raw, json)
Hash identifier:          /bR62r9q9dEnf57KPd5WcCyzNAYzXitASGvtbviNFc0=
Subject key identifier:   CD:FD:07:71:4C:0A:6E:09:F0:40:0A:61:42:82:54:D8:1D:81:1D:39
Authority key identifier: 44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07
Certificate issuer:       /CN=44f4c5a61978549b248388f9df449d2a95e10a07
Certificate serial:       019D984FFB84B264805EB185E4D5FA2FE905
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
Manifest number:          18C1
Signing time:             Thu 16 Apr 2026 22:01:11 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:11 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:11 +0000
Files and hashes:         1: RPTFphl4VJskg4j530SdKpXhCgc.crl (hash: uecglLvinrN/u2RCfqZF+YSKExVL/yEMdtbyuaPMJCc=)
                          2: c8FU8IlEAOdvntJIHy0ItaZdOhs.roa (hash: KkzTKPSTQ7S8XEiV0czmvnh+d+qBGKX4Bc+ANaJ+zBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:fb:84:b2:64:80:5e:b1:85:e4:d5:fa:2f:e9:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f4c5a61978549b248388f9df449d2a95e10a07
        Validity
            Not Before: Apr 16 22:01:11 2026 GMT
            Not After : Apr 17 22:01:11 2026 GMT
        Subject: CN=cdfd07714c0a6e09f0400a61428254d81d811d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:29:42:c4:5e:f3:57:2e:dd:0a:05:de:7a:8b:
                    a7:41:7b:72:5a:36:e4:cd:c2:c7:18:4e:e5:86:fb:
                    d4:5b:03:39:9b:bb:1d:bf:b6:94:a7:62:ac:bc:e4:
                    9e:46:c1:e3:4b:51:a1:e7:75:3e:b6:ad:49:0a:13:
                    31:5f:9a:50:75:bc:83:75:1c:76:55:7f:e8:4e:fd:
                    7b:be:75:9b:44:99:68:61:79:0a:7c:7e:3e:59:15:
                    84:de:07:34:4b:23:39:b6:d6:cc:4c:b7:0c:16:22:
                    9e:9f:cc:d6:26:97:87:82:8c:22:ef:db:34:41:de:
                    b4:6a:83:a5:e8:2e:0d:51:e2:29:db:39:18:bd:8b:
                    ac:5d:7f:d9:a6:8f:e7:83:ae:62:e0:3d:18:97:15:
                    24:e1:42:37:a7:4e:2d:c6:5d:0a:bc:af:04:e9:79:
                    a4:4d:a1:7e:45:80:07:a2:95:6d:25:09:9a:c1:1a:
                    8e:95:e9:aa:32:83:53:e8:6e:4a:fd:e3:09:d8:4a:
                    44:0c:a2:ef:3a:0b:53:98:9a:45:b5:9e:6c:94:04:
                    f1:19:32:de:4d:b1:f1:07:c0:79:26:8f:88:3b:11:
                    2d:3c:9d:49:81:91:49:0c:6d:8d:ea:6d:42:a6:c7:
                    fe:34:9d:b4:48:b9:f5:25:86:3d:0c:2b:76:09:23:
                    88:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:FD:07:71:4C:0A:6E:09:F0:40:0A:61:42:82:54:D8:1D:81:1D:39
            X509v3 Authority Key Identifier:
                keyid:44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ef:f9:70:13:d3:fe:24:0f:15:39:e1:f9:b0:bc:fe:48:56:
         fb:e5:c7:37:5a:ce:14:b3:6d:81:c1:13:9a:ad:26:a3:f7:bc:
         27:b0:d4:65:f8:17:73:a9:c9:83:ef:b8:b7:7d:b8:5c:34:ee:
         4b:be:ac:a1:b0:c3:5d:02:dd:7f:ca:18:db:6e:04:29:c3:fe:
         17:1a:ad:de:67:06:e2:55:06:fb:9d:5f:5d:e6:3f:3b:b9:ad:
         21:62:40:5f:9e:7d:10:fc:93:e0:25:7f:db:1c:fd:6d:cc:38:
         08:51:57:70:5c:cd:51:5d:40:06:3c:7a:b5:99:03:4f:71:0e:
         29:3a:98:cd:2a:80:f3:af:d1:6f:d7:62:62:b9:a1:e7:bd:fc:
         15:32:a8:a6:32:79:cd:be:c0:d3:ae:db:56:2d:31:4d:2f:c8:
         32:9b:c4:d2:1d:6d:a3:db:d0:83:4d:1a:00:20:4b:7b:ff:fb:
         94:e3:e6:0b:82:08:ec:f0:75:c3:9f:d4:40:af:00:c6:1f:86:
         6d:0b:46:53:0c:3f:78:dd:56:eb:c3:a1:6e:a3:ce:bf:d5:4a:
         b9:a1:3b:89:87:8f:b8:76:93:05:24:63:11:d8:e0:73:59:a1:
         01:f8:ec:40:6f:e8:22:ab:e8:8c:46:c4:3c:ad:89:0e:6b:73:
         3c:4e:32:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:22 2026 by rpki-client