Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
File:                     rY6Ff8AL4U7ZK554zDymm4rcJIU.mft (raw, json)
Hash identifier:          xA7TTlKlf5K4xkIIqI4pG8b4jBH1DoQbqX3tmQyaHHI=
Subject key identifier:   B9:7B:BD:4E:7A:7F:C9:7C:39:F4:93:37:E3:A0:F4:5D:CE:51:88:2C
Authority key identifier: AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85
Certificate issuer:       /CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485
Certificate serial:       019D98F42A2EA07D193DAD703839FED86893
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
Manifest number:          18BB
Signing time:             Fri 17 Apr 2026 01:00:31 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:31 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:31 +0000
Files and hashes:         1: rY6Ff8AL4U7ZK554zDymm4rcJIU.crl (hash: drGrkiR/ZmOrOe9pF3RVxmhN1rX0RPlh+AcvzWERY/E=)
                          2: z8ohAxVQDEBUpQ8RPkLaMBNHEug.roa (hash: pT90AwJRD9rVdUR8toxe1at3Xc13+2EF89ax44o0aWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:2a:2e:a0:7d:19:3d:ad:70:38:39:fe:d8:68:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485
        Validity
            Not Before: Apr 17 01:00:31 2026 GMT
            Not After : Apr 18 01:00:31 2026 GMT
        Subject: CN=b97bbd4e7a7fc97c39f49337e3a0f45dce51882c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c8:33:a8:24:68:57:c1:66:61:56:85:d7:4e:
                    b4:74:ae:c2:cd:e5:cb:56:71:aa:e3:c2:41:90:a1:
                    2b:df:45:48:c0:12:20:54:40:50:ff:28:91:e2:ec:
                    9f:9f:fb:a8:32:04:fe:06:63:11:de:3d:ab:70:d9:
                    a8:11:8f:1c:67:16:13:29:f3:ad:43:fd:47:65:85:
                    70:9b:58:c4:d3:f6:0b:b9:a6:14:b2:fb:d3:41:a4:
                    f0:1d:b5:1d:13:cb:65:82:36:de:d9:6c:7f:a0:d8:
                    dd:fe:cb:85:63:11:f7:14:ee:55:c3:36:ce:77:09:
                    76:de:4d:bc:90:8e:ae:7c:77:15:d7:8e:8f:e4:78:
                    0f:58:15:cb:1c:78:ac:08:e9:eb:bf:05:e4:dd:ef:
                    bc:ac:4a:c9:5a:fd:da:b8:fa:af:ea:bb:69:0c:19:
                    48:2a:a8:27:a1:e3:61:0c:4f:d8:a0:9d:66:fa:37:
                    4c:21:8f:bb:45:4a:ab:5d:66:b6:a9:35:35:27:e6:
                    a0:8b:78:91:60:5b:77:51:28:03:5e:90:8c:31:12:
                    5a:95:e6:53:57:98:41:a9:83:1d:44:cf:69:ff:bd:
                    17:94:e4:c7:44:60:a9:2a:6d:5e:29:8a:88:d8:a3:
                    7e:8e:90:28:27:bb:c9:12:95:16:4e:10:03:31:51:
                    bc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7B:BD:4E:7A:7F:C9:7C:39:F4:93:37:E3:A0:F4:5D:CE:51:88:2C
            X509v3 Authority Key Identifier:
                keyid:AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:26:dc:b6:92:7e:93:bd:2d:12:0a:c7:1a:47:9a:fe:c9:a9:
         94:3b:10:eb:d5:c1:a0:52:04:1b:19:ca:3d:f5:3b:bc:7a:0c:
         18:31:a9:43:6b:fa:10:5e:0a:d6:02:01:29:6c:37:bf:fb:75:
         36:df:1f:ff:24:f1:a3:a4:8f:58:3b:37:88:bd:2b:e8:ad:96:
         73:3b:9e:ca:00:87:dc:16:d3:0b:5a:6a:f5:4b:ca:39:36:d1:
         6a:92:81:2e:41:a3:86:2f:20:8e:55:4b:76:49:1f:88:60:be:
         96:b6:04:85:f2:3f:ad:2f:78:c7:69:64:3c:cf:32:59:fe:24:
         c7:c6:9a:64:a9:06:81:b6:db:cd:44:23:56:be:47:2e:f8:60:
         6d:7a:22:cf:6c:c1:c3:b9:92:16:8c:db:e1:3f:10:fe:74:5b:
         71:6d:48:80:da:95:e9:bd:f0:b5:33:3d:7c:0c:8f:a7:88:16:
         7d:1b:bb:e5:a4:64:54:d1:b9:14:76:99:d3:8c:f7:44:d5:c5:
         69:d9:54:dd:c6:07:5d:03:7a:c7:20:a2:1f:1e:67:c8:0e:27:
         22:67:fc:ad:22:e6:78:5f:18:51:17:22:22:a6:86:3b:fe:e3:
         79:d1:47:6c:70:f8:c5:34:4b:b4:d0:4f:96:07:7e:65:86:7c:
         02:70:2b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:47 2026 by rpki-client