Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
File:                     x_o8rcpOExoPvhueQNujg4M89Io.mft (raw, json)
Hash identifier:          Xbkac5kpjhXjO5VwP1utfp3Go1d0Qupe3H4/clZQlwQ=
Subject key identifier:   88:D4:5B:E0:04:75:FB:BB:8E:DD:7D:6C:26:87:67:31:AA:0C:0C:D2
Authority key identifier: C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
Certificate issuer:       /CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
Certificate serial:       019D9BBE7D1AD0CBE019AFF6651E6008BD8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
Manifest number:          188C
Signing time:             Fri 17 Apr 2026 14:00:45 +0000
Manifest this update:     Fri 17 Apr 2026 14:00:45 +0000
Manifest next update:     Sat 18 Apr 2026 14:00:45 +0000
Files and hashes:         1: 8nT5rb3UrAJDsICwRbRykN-JOS0.roa (hash: DT7HhfSPZrLtcCVQk42JiiDF/rCVVpx9BUd5IvtgTOU=)
                          2: x_o8rcpOExoPvhueQNujg4M89Io.crl (hash: xHI7Kz3QRiyS4tmnCA++k2JMN+Os7l0APGPcLKatV0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:7d:1a:d0:cb:e0:19:af:f6:65:1e:60:08:bd:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
        Validity
            Not Before: Apr 17 14:00:45 2026 GMT
            Not After : Apr 18 14:00:45 2026 GMT
        Subject: CN=88d45be00475fbbb8edd7d6c26876731aa0c0cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5f:2e:fe:c9:49:18:7f:e9:b0:16:a1:50:7b:
                    eb:0f:9b:17:59:c9:38:63:11:f6:eb:ba:1c:44:b3:
                    a2:2c:91:81:4b:be:c7:e0:2b:9b:a3:42:d2:ef:b3:
                    2e:19:08:0a:ac:da:9b:d3:17:f9:8c:a4:c4:51:3d:
                    9d:2d:b6:22:6c:d7:58:ec:0b:90:6b:90:0b:94:8d:
                    09:2b:6c:03:2b:48:54:45:62:e2:7a:d4:80:80:45:
                    78:38:eb:44:fc:8b:c1:15:f1:b2:a0:c4:73:05:69:
                    d5:7a:12:e5:53:1c:fb:8b:86:6a:7c:c7:a3:ca:c8:
                    0e:39:db:e9:34:2d:b7:b3:b9:90:46:9e:96:55:5b:
                    ce:aa:2d:a4:94:0e:e4:1a:d4:0d:b1:ae:c1:e6:05:
                    3f:e5:2c:61:74:1c:cd:62:2f:bc:da:08:af:19:5d:
                    06:55:59:b2:38:8d:e1:cf:5c:a6:58:5e:8f:6d:d1:
                    3e:0c:53:e7:0f:84:9e:27:9d:04:7f:55:f7:81:66:
                    50:94:fe:f0:2b:fc:17:29:61:4c:2c:20:be:23:ea:
                    86:36:42:88:e7:03:6e:a9:ed:de:20:3f:ef:a8:e2:
                    b7:9c:87:db:01:45:0d:6c:c2:39:63:f9:00:43:28:
                    6b:3e:f0:58:f4:62:23:97:fe:4c:93:1e:fc:65:44:
                    d1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D4:5B:E0:04:75:FB:BB:8E:DD:7D:6C:26:87:67:31:AA:0C:0C:D2
            X509v3 Authority Key Identifier:
                keyid:C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:da:01:8d:41:a6:d8:1f:e8:5d:52:a2:de:30:5f:65:d7:74:
         24:c5:a9:a0:38:79:9e:74:30:7e:a5:62:19:9f:20:0f:9f:4c:
         5f:1c:13:2a:db:5d:3a:69:62:43:97:04:04:e5:0f:d1:18:71:
         2d:aa:45:86:5f:ff:36:bc:64:e6:20:7c:3d:fc:bb:a3:62:24:
         72:ac:64:42:e5:a5:23:f6:4f:12:76:f2:61:27:75:ad:f5:de:
         4a:a0:b8:20:5f:1c:60:c3:89:93:5e:18:94:b1:7a:dd:cb:c4:
         be:97:e1:a4:69:19:1a:e5:cd:b6:6d:22:2f:8b:2c:90:2a:79:
         48:40:09:d5:22:44:a3:ae:fb:fc:0c:b1:9c:65:c3:f5:be:a4:
         e8:a5:c3:00:5d:ba:1e:d1:d1:30:1f:84:1b:90:fa:9b:d1:c2:
         d0:5d:ca:f6:45:44:bb:47:8b:2d:70:35:a1:84:de:08:74:0f:
         80:23:c1:a0:65:fd:92:d0:ea:6c:14:fb:84:0f:3a:bd:80:41:
         ea:69:8d:d2:55:ba:62:1a:5a:7a:8e:f9:e0:44:23:c6:51:e2:
         12:d8:54:f1:50:76:12:d0:a1:04:34:c5:19:f3:40:71:b4:51:
         f4:aa:68:b1:a6:73:d4:32:35:75:7e:bf:7d:0e:eb:4c:e5:59:
         ce:c5:b6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:34:25 2026 by rpki-client