Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
File:                     q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft (raw, json)
Hash identifier:          LniUatcThjQPfheSjaeIggflLlXStLgDedfA1MvS8/w=
Subject key identifier:   6B:C0:4E:58:A7:93:23:51:98:E3:7A:2A:4C:E4:C1:A0:95:07:18:E6
Authority key identifier: AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
Certificate issuer:       /CN=abb060166d64cead0e295797e8d27c55d8898bc2
Certificate serial:       019D9B19D1884E13A49FA144BFB7B9F254C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 11:00:53 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:53 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:53 +0000
Files and hashes:         1: LYw_86zqqUU-5ZAgDmKGuBI8moU.roa (hash: yws9eccxGXYISJMC2IFo/HR97Yy0+NyB/dp085XRJR8=)
                          2: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl (hash: DXlo56gja6pWQZ6LQsJxJsY3oXkThGFKYlkO21S4XW4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:d1:88:4e:13:a4:9f:a1:44:bf:b7:b9:f2:54:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abb060166d64cead0e295797e8d27c55d8898bc2
        Validity
            Not Before: Apr 17 11:00:53 2026 GMT
            Not After : Apr 18 11:00:53 2026 GMT
        Subject: CN=6bc04e58a793235198e37a2a4ce4c1a0950718e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d2:ae:a3:10:9e:ce:bc:6a:0a:5c:80:d3:66:
                    0e:7e:b4:6e:c0:93:5b:2e:ac:05:bb:39:81:19:ab:
                    df:2c:b6:ce:bb:e6:47:55:cd:99:0c:f5:7b:95:db:
                    64:f1:a0:78:ca:89:31:26:01:13:f6:ed:5b:87:34:
                    74:ff:bf:ba:89:85:de:6a:89:26:e5:13:40:21:4e:
                    f4:68:07:bd:42:d0:cc:a9:49:18:13:ff:72:e1:12:
                    71:77:3c:74:72:de:d8:48:6f:86:6c:fe:89:c3:28:
                    95:dd:c6:ab:01:47:e9:e4:c0:cb:b9:80:11:c4:7f:
                    8d:31:92:32:3e:5e:85:b8:92:2e:0e:11:a0:29:08:
                    0f:e8:2c:8a:95:01:fc:71:16:84:f4:16:43:d0:2f:
                    75:20:f0:db:5e:27:b1:ff:21:9f:19:1a:bf:8c:81:
                    15:de:e2:5d:a9:67:3d:05:b5:30:cc:92:91:c7:06:
                    8a:e1:87:07:7b:63:c3:1e:10:b7:bc:da:4c:8c:cb:
                    fc:ee:6d:ca:f1:74:d8:93:06:f9:db:95:dc:d0:42:
                    6f:ef:80:f6:a7:22:37:33:8d:4b:5c:f9:8c:0c:9d:
                    28:68:7a:75:39:94:c3:e2:fe:8f:51:bc:1c:66:1c:
                    cc:76:74:74:eb:cb:fa:6d:6c:9c:0f:58:61:fb:32:
                    1e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C0:4E:58:A7:93:23:51:98:E3:7A:2A:4C:E4:C1:A0:95:07:18:E6
            X509v3 Authority Key Identifier:
                keyid:AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:7e:16:f9:b9:4b:77:e3:87:d3:f1:47:77:77:20:74:86:c9:
         e9:e7:77:03:ab:5f:f6:55:61:79:98:da:bb:88:cf:ea:15:c1:
         51:f4:c1:a9:96:ad:43:28:a5:05:fd:df:e7:3e:4a:69:af:ca:
         6b:76:93:14:f3:ae:44:9a:b5:a0:70:29:9e:50:2e:64:a2:e5:
         a4:34:a9:d4:ed:b3:1c:88:e5:f8:88:e5:4e:56:e0:09:f8:85:
         46:5f:6f:b4:b8:d1:ad:d7:0f:b9:cc:1f:02:66:06:e4:04:b1:
         b8:48:32:85:8d:99:c0:04:6d:4f:79:bd:03:2e:f3:4d:b4:7e:
         6a:bd:33:1f:38:55:57:41:10:68:f9:09:fe:60:77:50:d5:a0:
         41:e2:a8:bf:1d:ef:24:46:83:90:be:a9:71:16:af:b5:29:8f:
         0f:48:71:7a:d4:1e:d3:b4:57:74:e6:92:e5:3a:35:2a:54:90:
         ce:a2:ec:47:73:ad:18:65:cd:06:42:d8:c2:40:57:bd:18:2f:
         25:7e:65:68:25:e4:8c:e6:fe:e8:cd:0c:ad:e8:7d:c3:31:0b:
         a4:30:a4:ef:97:43:f5:d4:7f:b1:b8:7f:9d:fd:31:1c:6c:71:
         af:11:29:07:b0:b2:12:77:33:fa:c9:12:1c:2d:ce:cc:31:37:
         02:24:43:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:32:32 2026 by rpki-client