Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
File:                     12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft (raw, json)
Hash identifier:          bMPl3QEhlaJXK3UQVVxRGPs89n/8nR2NGojGe5Tbwp8=
Subject key identifier:   16:5D:D3:B4:E6:F9:2F:69:EA:29:17:29:98:09:27:3B:91:9F:6D:3E
Authority key identifier: D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
Certificate issuer:       /CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Certificate serial:       019D9961FD004ADC36B9D73A2093575CD7DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
Manifest number:          05BE
Signing time:             Fri 17 Apr 2026 03:00:28 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:28 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:28 +0000
Files and hashes:         1: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl (hash: +eJ6TvfF5sL4GgX3x7/PnzrAQmVTl/LH/B+RpUQmuqg=)
                          2: FoEw3sSBgl3t0ttG82J0ACX5bo8.roa (hash: MuH9TiWx0hlkjcPkeOxwnOHNyUeFkmZNNs45DwxLq/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:61:fd:00:4a:dc:36:b9:d7:3a:20:93:57:5c:d7:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
        Validity
            Not Before: Apr 17 03:00:28 2026 GMT
            Not After : Apr 18 03:00:28 2026 GMT
        Subject: CN=165dd3b4e6f92f69ea2917299809273b919f6d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8d:ca:8e:ce:54:c6:60:a5:ff:84:31:5f:5a:
                    08:63:62:01:84:ab:ba:2c:89:2b:7b:6b:e3:3d:d0:
                    02:f6:77:94:ee:e1:f7:3e:98:57:f8:3c:cb:37:93:
                    9c:83:88:31:d0:66:81:96:25:09:59:dd:2a:4a:2f:
                    46:96:b2:37:2a:57:1b:6f:2e:60:ac:f7:76:cc:c8:
                    b7:02:85:75:8a:5c:7a:23:e7:b2:95:76:35:ab:59:
                    47:fc:89:01:0b:b4:c7:d4:55:82:07:28:95:7e:69:
                    d7:18:95:7b:01:3b:82:10:db:65:4a:e8:00:ee:89:
                    fb:37:bb:fd:9a:10:5a:9d:b5:77:d3:5e:d3:9b:82:
                    89:14:b5:75:ab:f8:30:89:25:de:9a:a9:fb:fc:38:
                    b7:1c:80:80:73:9a:f2:21:c3:31:02:0d:73:96:4b:
                    db:ed:5e:08:05:6b:ec:e1:df:a6:4b:81:f3:70:a4:
                    25:34:a3:58:4d:5d:31:34:aa:11:28:a1:65:81:d5:
                    07:36:3d:27:d4:df:29:11:4f:ae:1b:09:7f:0c:95:
                    54:1f:75:f0:e8:fd:ad:ff:d5:51:54:23:0d:38:e5:
                    0e:cb:f4:35:64:70:98:49:f9:83:19:84:6e:10:6f:
                    72:21:4b:e5:8c:f0:10:e4:07:ce:1d:09:da:1d:9a:
                    26:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5D:D3:B4:E6:F9:2F:69:EA:29:17:29:98:09:27:3B:91:9F:6D:3E
            X509v3 Authority Key Identifier:
                keyid:D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f2:59:6d:21:d3:6e:4a:c2:02:8f:ce:de:a4:b8:f4:00:cf:
         65:85:28:55:04:a7:39:77:fb:ea:18:07:79:b2:49:77:24:bc:
         ff:3b:38:9d:a8:fa:b8:e7:52:42:d2:5f:f3:95:98:eb:2a:fa:
         b3:23:c0:6d:07:3e:6b:89:56:19:08:41:d1:57:93:84:da:2f:
         2e:ee:a5:a3:c4:58:9d:29:b0:85:9a:b8:a9:9a:17:7d:df:2d:
         12:71:25:cd:fd:5e:8a:74:bc:ee:9e:a8:68:df:24:ad:7a:4c:
         12:58:72:9d:13:0c:a1:ad:2a:bf:78:49:d7:50:2d:e7:8a:c2:
         ff:62:b0:ff:b7:76:18:51:2b:0e:75:7e:48:c6:0f:92:a3:b9:
         dd:96:03:bd:ee:1f:14:a2:03:6d:b1:36:99:3a:7b:40:12:3d:
         44:ee:49:35:15:d2:df:4b:ad:15:6c:77:f8:bb:c5:f9:37:e3:
         7a:26:d1:e2:2d:a0:08:c3:96:6f:b8:84:55:2a:6a:50:85:b2:
         9d:eb:84:8f:8b:43:b4:72:30:d2:90:95:72:fa:bd:eb:e1:20:
         e9:88:6e:48:4f:d8:b1:75:8d:de:50:45:25:63:42:fa:25:97:
         41:1c:de:4d:02:2e:6a:2a:45:08:f1:46:4d:7d:19:2a:88:9e:
         58:79:1c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:34 2026 by rpki-client