Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
File:                     1-545C9y9la-rSl_4xO2e_ENoe9E.mft (raw, json)
Hash identifier:          WMpDJ4hYEsxJtztWqlfV8Arra9auzNyb+Yc5lwUxKpU=
Subject key identifier:   FB:16:FE:DA:36:E5:E6:85:2D:E5:7B:A0:5F:74:00:DA:EC:BD:94:63
Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
Certificate issuer:       /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Certificate serial:       019D98864DA481539F63281B4F0898B80DC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
Manifest number:          1211
Signing time:             Thu 16 Apr 2026 23:00:31 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:31 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:31 +0000
Files and hashes:         1: 1-545C9y9la-rSl_4xO2e_ENoe9E.crl (hash: eaAipA2EeDNK3CrADdK8U4u2EZ9yE1RgOi4n33rVyrA=)
                          2: jM4bCus_MOUyOpnMWkBG4DEReus.roa (hash: vMgGiLHRCjWBGhS9GHzMlMhzJpcFt9Lx17KOsSP6sQ8=)
                          3: v4vgN5S5raK6CZzGiAArElrxR7M.roa (hash: xT4jBApJuBPFeaE1dP9JBk2mZGCvg2bKp+Nh1yHS3XY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:4d:a4:81:53:9f:63:28:1b:4f:08:98:b8:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
        Validity
            Not Before: Apr 16 23:00:31 2026 GMT
            Not After : Apr 17 23:00:31 2026 GMT
        Subject: CN=fb16feda36e5e6852de57ba05f7400daecbd9463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:07:eb:b5:6d:3a:d5:4c:f5:a8:87:f5:29:3d:
                    46:f7:50:fc:92:e2:66:a9:74:bc:4e:e1:7f:4f:76:
                    2d:92:40:32:f7:62:b8:40:2e:09:4d:48:17:e6:2e:
                    65:67:48:90:6b:9c:b0:d8:47:be:41:f9:48:e0:49:
                    52:93:b2:b5:0d:53:88:aa:d4:9e:eb:6e:55:18:f0:
                    62:c0:af:ca:1c:1d:61:83:ec:43:ce:be:bf:4e:c7:
                    e4:39:20:41:a7:35:9b:d1:51:76:4a:9a:b0:57:bc:
                    66:39:65:41:c4:85:49:48:38:b0:2d:90:7f:7f:08:
                    35:74:d4:e6:c0:fa:b4:b1:5b:bf:09:25:85:db:fb:
                    b5:0a:d4:71:7e:af:c6:32:5f:77:76:f7:6d:69:b3:
                    bc:35:53:b8:2b:79:83:ff:6d:08:d6:62:b8:d3:1b:
                    41:32:cd:37:e6:62:1b:08:43:e9:cd:67:37:f4:80:
                    51:25:4f:fc:4b:39:57:dc:77:db:8a:b2:ff:0c:a1:
                    4d:43:98:38:1e:b3:18:d1:9c:06:74:b8:94:e2:7a:
                    c8:f2:fb:62:23:dc:7a:18:9c:9b:a7:f6:ea:b5:15:
                    12:95:d0:63:11:8a:3d:fa:8d:c0:c8:50:4b:38:8b:
                    c3:15:5b:e1:99:9f:ad:a4:70:56:69:ae:db:ba:1b:
                    c8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:16:FE:DA:36:E5:E6:85:2D:E5:7B:A0:5F:74:00:DA:EC:BD:94:63
            X509v3 Authority Key Identifier:
                keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:d5:1a:6e:e2:b3:0b:bb:60:e0:78:ce:83:a5:26:36:d7:59:
         63:04:18:d0:91:ff:65:c8:46:82:e1:20:8a:a6:39:65:8f:17:
         96:31:ac:c6:ed:3c:44:32:b1:c0:54:e5:03:95:d3:52:d8:1f:
         4e:8c:53:8a:e9:7b:0c:05:32:44:20:bd:8f:d5:14:f3:72:16:
         e5:70:0a:4f:0b:7d:34:5a:88:b0:c0:e2:55:13:10:8b:9d:01:
         72:e4:68:77:d6:ef:56:2c:46:fe:fc:2d:47:1a:dc:f1:38:6c:
         d9:84:a1:ea:9d:26:6c:7b:47:74:04:66:58:e0:8e:3f:dc:f1:
         73:7f:e7:65:9c:0a:a3:81:88:12:75:48:a6:dd:26:f3:76:ac:
         ad:14:b1:45:20:91:7d:5f:23:b1:38:35:58:ad:83:2f:b7:5e:
         31:2a:65:83:99:87:7b:6b:bf:18:72:af:7a:96:da:46:f0:0c:
         7c:b8:65:95:a0:2d:e2:4f:ed:e9:b6:d2:bd:bb:e1:64:8d:82:
         64:2d:a7:06:59:4c:04:09:fb:79:01:9c:21:ae:a1:60:b4:6c:
         98:68:7a:29:10:2c:b2:d8:e4:22:21:80:3e:91:1a:bf:f3:26:
         27:12:a0:df:40:e6:cd:7f:ec:9b:5c:5a:e0:bb:de:5d:c1:d9:
         fc:bd:7d:1d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2Yhk2kgVOfYygbTwiYuA3AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOWUzOTBiZGNiZDk1YWZhYjRhNWZmOGM0ZWQ5ZWZjNDM2
ODdiZDEwHhcNMjYwNDE2MjMwMDMxWhcNMjYwNDE3MjMwMDMxWjAzMTEwLwYDVQQD
EyhmYjE2ZmVkYTM2ZTVlNjg1MmRlNTdiYTA1Zjc0MDBkYWVjYmQ5NDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQfrtW061Uz1qIf1KT1G91D8kuJm
qXS8TuF/T3YtkkAy92K4QC4JTUgX5i5lZ0iQa5yw2Ee+QflI4ElSk7K1DVOIqtSe
625VGPBiwK/KHB1hg+xDzr6/TsfkOSBBpzWb0VF2SpqwV7xmOWVBxIVJSDiwLZB/
fwg1dNTmwPq0sVu/CSWF2/u1CtRxfq/GMl93dvdtabO8NVO4K3mD/20I1mK40xtB
Ms035mIbCEPpzWc39IBRJU/8SzlX3HfbirL/DKFNQ5g4HrMY0ZwGdLiU4nrI8vti
I9x6GJybp/bqtRUSldBjEYo9+o3AyFBLOIvDFVvhmZ+tpHBWaa7buhvI5QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPsW/to25eaFLeV7oF90ANrsvZRjMB8GA1UdIwQY
MBaAFPueOQvcvZWvq0pf+MTtnvxDaHvRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS01NDVDOXk5bGEtclNsXzR4TzJlX0VOb2U5RS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvZDkwMmNhLWNkZjMtNGYyOS1iMjMy
LTcyNDI2ZDkyNjAxYi8xLzEtNTQ1Qzl5OWxhLXJTbF80eE8yZV9FTm9lOUUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI0L2Q5MDJjYS1jZGYzLTRmMjktYjIzMi03MjQyNmQ5MjYw
MWIvMS8xLTU0NUM5eTlsYS1yU2xfNHhPMmVfRU5vZTlFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwdUa
buKzC7tg4HjOg6UmNtdZYwQY0JH/ZchGguEgiqY5ZY8XljGsxu08RDKxwFTlA5XT
UtgfToxTiul7DAUyRCC9j9UU83IW5XAKTwt9NFqIsMDiVRMQi50BcuRod9bvVixG
/vwtRxrc8Ths2YSh6p0mbHtHdARmWOCOP9zxc3/nZZwKo4GIEnVIpt0m83asrRSx
RSCRfV8jsTg1WK2DL7deMSplg5mHe2u/GHKvepbaRvAMfLhllaAt4k/t6bbSvbvh
ZI2CZC2nBllMBAn7eQGcIa6hYLRsmGh6KRAsstjkIiGAPpEav/MmJxKg30DmzX/s
m1xa4LveXcHZ/L19HQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:23:38 2026 by rpki-client