Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
File:                     gU7b0ZY0y7kaDS2v11nUyafne3o.mft (raw, json)
Hash identifier:          PolO7+czd2HIwbAZG5lWe/rrIqainFkfz6F2Ki2Ufz8=
Subject key identifier:   19:26:B5:6C:5B:4C:73:D6:50:2C:AA:C9:68:8D:88:F3:C3:E3:E3:5B
Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
Certificate issuer:       /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Certificate serial:       019D9961FBC0346A2CB834D7329EFF02CAF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 03:00:28 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:28 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:28 +0000
Files and hashes:         1: 2mdLM4QMSFolc5LIsVCE-5xpuxw.roa (hash: Pb6j/jV8p9sMo1nrwtTOTYAV2/aTJmLOHn6ZswOsyqw=)
                          2: dTiJsEq_JJ5524hOgqQnN8Ddhhg.roa (hash: C8qRzW17uM9hsxbqGg5gMXnbyDi7MEbAVWHt31dT0Ag=)
                          3: gU7b0ZY0y7kaDS2v11nUyafne3o.crl (hash: Qppg4eF8EaHiaNsfG/oySflkFH6FOCpY1LHmCIha9jU=)
                          4: kPXbHwmFeaUgl0gADFGcVtXfM54.roa (hash: PFLTi3V9mE8UoiZOrhozT0x6k7lKbzmX0yMq70JlctI=)
                          5: zJqeRCb5j4Dd57Zj7b1drSwEVOY.roa (hash: kMSmGuO+kRwRxKV3HZvVShc5KQnbIWPqxWeSNvdxgoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:61:fb:c0:34:6a:2c:b8:34:d7:32:9e:ff:02:ca:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
        Validity
            Not Before: Apr 17 03:00:28 2026 GMT
            Not After : Apr 18 03:00:28 2026 GMT
        Subject: CN=1926b56c5b4c73d6502caac9688d88f3c3e3e35b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:43:96:44:46:65:74:24:f2:83:a8:d6:a9:73:
                    c4:e0:78:7a:67:0a:54:c4:9e:da:4c:22:ce:eb:13:
                    c0:fe:db:b3:a8:05:eb:5c:56:cd:e3:ae:79:d2:06:
                    6e:c3:30:a1:31:56:2d:21:fa:8f:05:9e:7c:0b:5b:
                    c5:a4:a5:e0:e7:e3:d0:12:54:ad:78:ff:47:e6:79:
                    d7:04:9e:d7:5b:8b:fa:10:2b:9a:f6:f5:11:45:ca:
                    c0:57:6c:97:92:8d:0c:65:90:4e:e3:7b:72:db:18:
                    01:35:e8:a9:c3:64:01:79:fb:50:e4:c4:f3:1b:e8:
                    e4:be:24:c8:38:01:de:38:ae:95:2e:30:79:6d:5f:
                    75:1e:9d:9c:15:e0:ac:b9:e6:99:59:13:ae:33:7d:
                    59:0f:5d:fb:ed:ac:b8:22:85:07:99:98:03:f8:a6:
                    0c:b6:8b:42:44:92:94:ea:cb:2c:46:51:b6:4e:60:
                    95:94:40:1f:cc:2a:a3:ef:79:89:f3:12:27:12:95:
                    ac:1e:a7:f6:d0:4c:09:3d:09:90:af:ed:69:cd:29:
                    62:73:aa:f8:ee:3f:1c:b0:22:97:e4:c2:7f:bd:af:
                    00:bf:d1:c9:9e:42:5a:bf:88:9f:ab:91:9e:7d:63:
                    60:29:33:00:4c:03:ed:1b:44:17:72:66:92:7a:af:
                    c4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:26:B5:6C:5B:4C:73:D6:50:2C:AA:C9:68:8D:88:F3:C3:E3:E3:5B
            X509v3 Authority Key Identifier:
                keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:7c:0f:21:c5:64:14:a5:9d:c6:67:cd:ec:84:e9:67:68:c6:
         7b:41:74:36:11:27:3a:14:07:e2:aa:a8:de:38:0d:bf:a1:c5:
         a6:66:59:cc:44:a4:0b:43:e4:28:83:14:a1:b7:ab:68:91:7e:
         c3:6c:09:1c:7e:03:5e:08:c9:8f:fc:0a:91:0b:d8:62:95:09:
         5c:ab:ea:65:ad:dd:97:86:6c:bd:13:3f:c3:26:2a:34:44:4e:
         dc:47:07:04:49:b0:16:3d:f3:5d:14:0b:ea:28:69:b7:b7:72:
         49:93:80:bc:64:c4:0d:7d:91:cf:85:a1:44:b6:90:3e:9d:b7:
         e3:11:11:bd:2f:41:50:59:31:a5:dc:80:0d:75:66:1d:20:21:
         de:76:71:3c:01:01:fd:da:da:d6:2b:19:3f:2d:ce:18:f8:78:
         90:cf:bd:b1:bf:45:4f:c2:9c:29:53:bf:22:c9:f5:2d:f0:c3:
         a4:f5:a0:86:f8:bb:64:09:c5:65:b5:e2:d0:f9:4c:5c:bb:4c:
         36:6f:e4:59:75:7a:a2:c8:17:c4:b7:93:83:58:57:1f:a6:6c:
         c8:f7:dd:98:f0:7d:3a:e5:4f:5e:2c:9b:00:6d:0e:4e:0d:64:
         d3:d8:84:14:87:00:76:52:11:98:8d:a4:f0:75:01:9f:b8:1a:
         d5:b3:97:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:49:29 2026 by rpki-client