Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
File:                     xeu4t5Qi-y1tioLbfxrAtqpZs38.mft (raw, json)
Hash identifier:          YpfuKplYwxrIl7sJ3CCZQw5YBOD/cga8jWU1/Ap7TIw=
Subject key identifier:   24:E3:E8:CB:FA:73:24:3A:AC:CB:84:45:3A:3F:B1:A1:88:0E:27:F1
Authority key identifier: C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F
Certificate issuer:       /CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
Certificate serial:       019D99CFC0029EE2ECFB8DA95841C6E12591
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
Manifest number:          17E5
Signing time:             Fri 17 Apr 2026 05:00:22 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:22 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:22 +0000
Files and hashes:         1: emO2nonrGTBV6dWmgfFKxf2S-4Q.roa (hash: J/NmygUcPvRFH9fgrU6o+RxXyKYU/ZMkRyNKy/UmGBA=)
                          2: xeu4t5Qi-y1tioLbfxrAtqpZs38.crl (hash: 8GaEwDlNvjwSz/U7eipazKR15uB23YeyYe7zAWdCFEk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:cf:c0:02:9e:e2:ec:fb:8d:a9:58:41:c6:e1:25:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
        Validity
            Not Before: Apr 17 05:00:22 2026 GMT
            Not After : Apr 18 05:00:22 2026 GMT
        Subject: CN=24e3e8cbfa73243aaccb84453a3fb1a1880e27f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:86:98:4e:99:42:15:95:8b:95:8e:88:c5:73:
                    07:cd:a3:44:91:83:17:ac:e7:ab:27:c2:e2:96:5f:
                    98:3f:e8:b3:a8:a1:4c:74:0a:1a:47:68:1d:26:cb:
                    c3:c1:01:56:e4:62:5e:3b:94:a5:8c:57:ef:fa:05:
                    b3:28:0a:96:8e:d1:39:f2:be:48:7e:d9:03:cd:2d:
                    d5:f0:cf:9b:2b:93:ef:3e:08:72:a7:d4:8b:01:d2:
                    d4:6b:59:df:2c:8f:fa:a6:2c:63:64:8e:e0:20:dc:
                    ad:6d:4c:f7:10:24:c8:78:78:0d:1c:99:c4:83:ae:
                    56:7b:27:78:8e:1e:3f:88:af:28:1b:62:dc:be:7e:
                    fa:98:a1:d7:2f:95:bb:0d:47:8b:63:e0:df:5f:dd:
                    40:aa:57:1f:f8:7d:eb:6d:7f:3f:b2:01:92:81:b2:
                    f9:a8:aa:45:25:94:9c:a5:75:69:7a:34:51:12:2d:
                    8c:cf:96:5d:c6:ad:a1:43:64:27:a0:e4:72:fe:10:
                    14:4f:73:a7:ae:b7:67:17:4d:33:89:ed:73:3c:10:
                    af:e7:51:48:bd:63:f5:14:9f:81:c2:d1:20:94:85:
                    eb:9d:d6:45:90:a9:73:95:c9:a7:a3:da:c7:72:54:
                    9f:4b:50:07:6d:25:61:d4:1c:06:0d:44:7e:91:82:
                    52:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E3:E8:CB:FA:73:24:3A:AC:CB:84:45:3A:3F:B1:A1:88:0E:27:F1
            X509v3 Authority Key Identifier:
                keyid:C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:a9:31:51:40:31:14:61:e1:64:93:06:14:82:71:aa:34:a3:
         8e:12:9a:12:85:9a:a7:b6:51:d1:f1:87:4a:a4:1f:1a:99:34:
         d1:db:ca:00:c7:2c:cf:ca:55:04:45:a4:ce:5c:af:fe:53:d1:
         7d:b0:63:8d:10:84:10:47:ab:06:f4:90:30:35:03:d0:51:39:
         dc:8e:86:23:ab:9f:da:c5:18:1e:13:a4:13:66:67:c1:6a:8d:
         cf:1f:33:6c:3d:e6:cb:9e:2b:cd:d1:78:22:5d:89:7c:38:c4:
         7f:3e:72:2c:27:0f:67:45:64:cd:07:11:f8:23:25:f9:d8:75:
         fa:e6:89:c3:88:5d:9b:fe:37:7f:58:bd:02:99:93:b8:0c:98:
         3c:04:bf:12:8a:fc:d9:6f:83:37:9a:24:0e:51:e6:68:b6:7f:
         1b:bc:7c:f1:57:83:a5:e9:9c:84:e5:50:77:dc:ee:e6:16:e3:
         97:5c:27:29:ae:71:6e:2b:6d:c9:d5:5c:5e:59:83:01:c1:1b:
         05:76:d9:9e:cc:3f:f1:8e:f1:1c:c7:0d:27:ec:bb:cf:07:71:
         36:c7:f2:bf:4d:44:74:56:3d:cd:85:be:36:d9:16:26:a1:cc:
         07:d8:c4:70:a6:f8:62:f8:62:ed:39:c0:47:ab:bd:c4:1f:24:
         87:40:42:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:07:42 2026 by rpki-client