Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
File:                     x4QShQX3-Zx1cEQpgK3rivkMwnA.mft (raw, json)
Hash identifier:          L7D4vz0eIJkVcs660PfjoX07akWA6gnH3gBms4oectY=
Subject key identifier:   93:A6:57:3F:ED:F3:53:12:0D:2C:4A:CC:AA:7D:37:8A:38:3F:D6:36
Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
Certificate issuer:       /CN=c784128505f7f99c7570442980adeb8af90cc270
Certificate serial:       019D9A0734062A610201DAB98D70D88158C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
Manifest number:          18C6
Signing time:             Fri 17 Apr 2026 06:00:56 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:56 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:56 +0000
Files and hashes:         1: 6LY_I5SzlhFBv9eGnwKkecDyqDs.roa (hash: rY/4K0UyTx9gEr0sURKBlWuNRZZ59rIT1DcPYpDH8zU=)
                          2: WpjjTnaqAZv75i8pt4da5AeyrG8.roa (hash: zVLZyAPVL7um6st0K7rE7n1hsZMqjYHJuIbZn63Z38s=)
                          3: x4QShQX3-Zx1cEQpgK3rivkMwnA.crl (hash: WmqceTb8yGxtmJeer09vwashbCJbuFbxY4pWq5lNX+Y=)
                          4: zFQaWtM5PgZgQ7lLGiUdAyDYFlk.roa (hash: T++koCK9BmrUNL9Ums78HVke+W3UNP2l17fVLv+FlR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:34:06:2a:61:02:01:da:b9:8d:70:d8:81:58:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270
        Validity
            Not Before: Apr 17 06:00:56 2026 GMT
            Not After : Apr 18 06:00:56 2026 GMT
        Subject: CN=93a6573fedf353120d2c4accaa7d378a383fd636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b9:df:74:6d:08:d0:76:11:bd:e8:5f:86:5d:
                    b0:90:7c:ce:d5:a5:05:b3:b1:76:d4:63:18:42:87:
                    09:ec:a4:d8:23:8a:c2:4f:de:da:df:4c:a4:17:da:
                    ee:3c:16:b7:9b:30:db:72:c5:15:d6:9d:a3:1c:03:
                    7b:55:b7:8a:ff:1f:18:70:12:a2:d8:d7:9b:29:b4:
                    1d:8e:38:d6:24:93:2b:f8:92:72:dd:15:25:08:5b:
                    cf:10:4f:31:ed:69:5b:de:14:9d:ff:ec:69:23:c9:
                    a7:04:0e:2e:d7:d1:6d:4d:69:fa:a8:3c:48:81:7a:
                    a0:1c:7d:67:fa:39:08:b2:1b:27:af:53:64:da:0c:
                    2d:a1:d6:a5:aa:60:fe:f4:c7:fd:ba:17:12:a1:df:
                    dd:83:31:4f:a1:63:73:5f:ab:3f:da:3a:1e:a2:89:
                    17:bf:af:f1:e0:97:55:d8:f1:05:5d:4d:10:34:07:
                    c3:3d:78:f1:0c:ff:c6:3c:d2:7c:49:a1:d3:57:68:
                    2e:34:20:e6:f6:6d:e2:ac:16:2f:0a:13:b2:eb:ca:
                    69:d9:7f:f2:3a:ca:e9:b2:41:be:7e:3a:0b:b4:c5:
                    75:6b:9a:72:c4:9c:4d:70:82:92:52:0e:6c:b7:40:
                    a7:7a:80:3d:0c:e4:70:c9:f0:14:11:4d:6b:18:92:
                    65:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A6:57:3F:ED:F3:53:12:0D:2C:4A:CC:AA:7D:37:8A:38:3F:D6:36
            X509v3 Authority Key Identifier:
                keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:54:98:33:89:ed:f2:06:fa:00:bc:91:23:6f:16:2a:78:13:
         07:e4:15:fe:44:93:be:a7:45:e4:b4:5c:a7:10:4f:e4:23:ab:
         39:4f:be:7d:d7:68:ca:20:f8:74:0c:85:b1:f0:e7:39:d7:9c:
         0d:8f:5a:8e:87:c5:bd:8b:01:b5:c5:bc:9f:ba:51:86:e4:ad:
         72:9b:46:f9:22:18:ad:86:69:07:5b:78:f5:fe:6e:1a:72:03:
         16:00:4f:44:58:63:1a:62:c3:36:c6:b2:f3:7e:22:06:6c:18:
         7d:6b:79:73:c6:7b:5e:9a:d7:f8:31:78:cc:ea:f9:5f:c9:b9:
         c1:dc:09:af:fe:e7:2e:8d:d5:ba:27:3b:e7:9f:71:d4:40:a0:
         e9:6a:71:f0:4b:a0:f8:a9:63:a4:8a:6c:ed:25:71:2d:95:bd:
         88:e0:99:6c:f7:14:c8:1f:27:bd:43:0c:a5:d7:3f:90:ee:30:
         80:19:8a:65:7d:d9:e5:f6:c8:1e:56:0a:bf:ed:df:6d:51:96:
         d9:92:1f:7a:4a:33:39:00:b3:30:d5:ca:07:52:a4:d3:a0:46:
         3b:f0:7b:06:88:37:2e:84:14:a3:4d:54:e9:4d:39:db:08:72:
         9c:dc:14:c1:02:49:cd:c5:09:3e:c9:84:6e:6e:ba:6e:ba:a9:
         a7:1d:36:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:48:50 2026 by rpki-client