Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft
File:                     K4HHU7d2Zeeln45QgxTxWTVsIo4.mft (raw, json)
Hash identifier:          6TASjrHPwcK1aI16forBQgp8K4ozbL+YgsVUn5HTg7M=
Subject key identifier:   1E:D0:35:03:1A:95:1A:91:C2:4E:B0:E3:BA:B7:06:72:51:6B:01:DD
Authority key identifier: 2B:81:C7:53:B7:76:65:E7:A5:9F:8E:50:83:14:F1:59:35:6C:22:8E
Certificate issuer:       /CN=2b81c753b77665e7a59f8e508314f159356c228e
Certificate serial:       019D98BD1EFD7AF94C3B19E2177A7E0BA301
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft
Manifest number:          12CF
Signing time:             Fri 17 Apr 2026 00:00:24 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:24 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:24 +0000
Files and hashes:         1: IajIOki8N-Tfh1ubDWlzntjVI-4.roa (hash: LVVvbRrnTDOYtO0x8wssTk+uRYbqHCBuMGCLmMJuSJY=)
                          2: K4HHU7d2Zeeln45QgxTxWTVsIo4.crl (hash: 1BiZzvePwm8xNbZnC1DzweA92lH74G6Oa/cxOUvUIXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:1e:fd:7a:f9:4c:3b:19:e2:17:7a:7e:0b:a3:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b81c753b77665e7a59f8e508314f159356c228e
        Validity
            Not Before: Apr 17 00:00:24 2026 GMT
            Not After : Apr 18 00:00:24 2026 GMT
        Subject: CN=1ed035031a951a91c24eb0e3bab70672516b01dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:57:26:13:2a:52:43:f6:91:b5:75:fd:27:bc:
                    3d:e8:59:65:04:9d:99:c0:7b:24:1a:f4:ae:76:26:
                    c1:03:f1:f6:9b:96:e1:df:fd:dd:22:5d:12:ba:dc:
                    c0:11:35:b9:6c:5e:37:99:85:fd:94:58:42:e8:4c:
                    34:b4:41:d9:15:91:7f:25:db:32:61:de:61:83:9e:
                    18:b3:57:e3:82:aa:d0:1e:76:d9:38:c3:64:7b:b9:
                    70:89:12:87:2a:c6:82:2b:fc:33:94:3d:4f:4b:a9:
                    5d:fd:72:bf:0b:b0:99:05:93:ff:8e:5c:66:c1:57:
                    55:59:7e:da:99:84:58:9e:0d:7f:10:e3:bb:76:55:
                    fb:f9:b5:8b:83:df:8f:66:4e:4c:98:ad:30:29:5c:
                    f1:27:06:2b:9b:63:e1:15:96:32:85:b2:41:f5:85:
                    e3:e4:da:08:bd:f7:b0:db:9a:c5:ec:82:ba:02:80:
                    43:0a:69:5c:a1:f0:f4:bc:c5:6e:82:60:86:fd:b9:
                    68:1e:c5:0d:1c:de:e7:47:ba:0a:11:04:04:ca:d3:
                    d9:1e:7a:d7:51:8c:8a:fc:9f:b8:e3:a1:fd:8f:99:
                    b2:a0:14:56:d6:81:0e:7c:7d:c4:10:57:9a:ea:36:
                    35:72:3a:0f:8c:6d:65:13:6b:36:ec:9d:8a:0f:ee:
                    0e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D0:35:03:1A:95:1A:91:C2:4E:B0:E3:BA:B7:06:72:51:6B:01:DD
            X509v3 Authority Key Identifier:
                keyid:2B:81:C7:53:B7:76:65:E7:A5:9F:8E:50:83:14:F1:59:35:6C:22:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:fe:d8:65:98:ee:f6:d0:35:9b:ae:98:a1:13:c2:0d:01:8e:
         f0:79:c3:2a:5d:e7:35:75:a0:4c:07:6c:12:a0:99:a4:55:9a:
         b2:19:f3:c1:11:63:53:66:42:86:7c:55:fb:ac:2b:fa:75:3f:
         77:f9:74:2c:23:3d:fc:21:8b:36:22:00:49:c4:38:bb:85:1d:
         48:dc:38:cb:ff:43:b3:9e:78:64:24:53:36:d2:3f:06:1d:1b:
         b5:9a:a7:b3:0d:8f:fe:68:da:84:67:a2:81:cc:b6:df:74:b5:
         78:e0:06:72:f9:95:9d:95:3e:14:c1:83:84:0e:d7:e8:b9:e3:
         0b:dc:b6:37:69:47:55:4d:a7:07:ac:1e:35:61:1d:25:bd:42:
         30:7d:84:2e:57:ac:9d:de:a5:22:37:dd:5a:54:34:90:52:fd:
         4c:e7:c4:c0:f6:45:5a:45:f0:2b:78:12:62:0c:55:80:70:85:
         2a:e4:c6:b7:70:4e:68:c8:41:eb:5b:7a:dd:38:a5:b7:ab:59:
         5b:b9:3a:79:bc:73:f2:61:dd:95:b9:68:92:01:c3:03:fc:00:
         b9:7b:54:21:6e:a6:c4:79:f4:9f:34:78:b0:cf:74:06:b4:d6:
         44:30:98:2f:35:a3:fc:2d:f7:72:5a:86:2b:97:98:d3:21:51:
         a0:45:35:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:13 2026 by rpki-client