Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
File:                     GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft (raw, json)
Hash identifier:          SnAIh1GGH9U/YiWHyibq9vb43fJxcJLE+dPMfJnTD9o=
Subject key identifier:   6F:FC:A6:A3:10:EF:AF:76:FF:B8:C1:F7:86:67:67:A3:27:D7:8E:9B
Authority key identifier: 18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71
Certificate issuer:       /CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
Certificate serial:       019D9D75BECE39C59D44280F59E564330D51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
Manifest number:          18CA
Signing time:             Fri 17 Apr 2026 22:00:32 +0000
Manifest this update:     Fri 17 Apr 2026 22:00:32 +0000
Manifest next update:     Sat 18 Apr 2026 22:00:32 +0000
Files and hashes:         1: 4yhn0zab6G9Xm_NjzDhDVFNViNU.roa (hash: A7LqIa0Mp3Sp/NDA4NIu51kIjL901Apj0xVFgoij29k=)
                          2: 7VsPFkhM_OrYhPPIYt8jc85Ys8Y.roa (hash: x7mGZCpmu0SwOVi3OquDRZc+flnwWQDFf3B9ZxRJHaY=)
                          3: GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl (hash: QpSXQn1yG9HTuD0m0RQe5aFv2ZfRodv4UOlolTdFgP4=)
                          4: r7rIkd3JpKTtd7ti5sQWVfcfHRc.roa (hash: BZ2IDfhsgXSEeuZ1ehS1OEbZfErOlb6+IBt9JMlf/C4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:75:be:ce:39:c5:9d:44:28:0f:59:e5:64:33:0d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
        Validity
            Not Before: Apr 17 22:00:32 2026 GMT
            Not After : Apr 18 22:00:32 2026 GMT
        Subject: CN=6ffca6a310efaf76ffb8c1f7866767a327d78e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7c:c9:88:14:f5:24:e2:84:61:77:8e:be:7d:
                    f4:03:9e:ef:cb:65:f3:10:14:4e:08:db:ad:0e:31:
                    8b:4f:64:c8:4c:23:ee:95:3a:6d:28:3e:8c:cc:30:
                    6e:52:8d:90:b3:40:52:ec:3d:4e:6e:ff:93:e0:ca:
                    5e:77:33:d4:aa:6d:d1:7f:b5:f1:ce:6b:a4:01:31:
                    70:27:ac:72:a6:d7:12:74:e8:aa:ea:60:83:7b:68:
                    6e:59:f9:16:fc:97:09:e7:e4:6f:da:12:f5:54:3c:
                    58:0a:0b:b1:5d:33:ef:41:14:88:2f:07:67:2d:b8:
                    15:3a:74:c0:9a:b0:29:fb:df:bd:c8:12:61:15:be:
                    cc:34:8a:23:d6:27:bf:87:48:3e:bf:bc:0b:df:04:
                    3e:1c:6d:d2:62:3e:85:ea:d6:f0:6e:50:61:d7:69:
                    4b:37:53:53:ce:a1:53:ee:68:52:d0:9e:1a:aa:a4:
                    04:6e:2f:0c:c6:05:a4:8c:c1:4f:ed:27:e7:86:1f:
                    9e:74:95:b0:b2:27:b2:da:b6:38:a1:66:20:70:98:
                    23:18:1b:72:aa:f0:17:34:ec:e2:35:f9:a4:46:08:
                    3f:f5:2c:c6:ae:90:1f:d2:e8:3f:9d:f8:61:81:71:
                    b3:b8:ef:c6:4f:4e:42:4a:30:38:3d:23:41:84:89:
                    04:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FC:A6:A3:10:EF:AF:76:FF:B8:C1:F7:86:67:67:A3:27:D7:8E:9B
            X509v3 Authority Key Identifier:
                keyid:18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:a0:b0:7b:5f:2b:8c:da:95:43:46:03:ca:7e:75:8f:55:37:
         12:6b:a6:2b:a0:db:4c:c5:c2:8f:54:be:ac:3b:97:32:6e:90:
         55:95:2c:fd:77:e6:18:a5:a8:3e:21:58:da:e3:1b:77:1f:ca:
         93:e3:1b:28:bb:0d:f9:5e:39:8b:65:d2:c2:2c:d9:d9:bf:46:
         d2:14:bc:08:fe:dc:be:ec:c7:f7:ae:d6:de:fc:21:56:bd:ea:
         b8:11:94:8a:6a:25:2d:f4:e4:ce:18:c2:14:2d:ee:83:59:2e:
         f5:c2:e6:19:40:c7:23:6f:ad:f9:e8:04:31:a1:b2:2f:0c:f0:
         f8:ca:24:26:dd:54:60:84:05:57:92:1e:34:ea:f9:35:b2:39:
         e8:8f:1e:f1:a5:54:aa:aa:e4:d2:36:65:51:32:77:d1:70:1f:
         3d:e5:84:97:37:b3:4b:6b:b1:d1:b0:52:d7:2d:ff:b4:91:7f:
         51:de:39:44:51:97:85:5b:1f:6c:19:32:70:1e:2f:7e:d8:ff:
         e4:d5:42:09:84:a8:c9:fb:4c:05:15:ae:98:e2:ba:ad:32:ec:
         84:87:c6:65:5c:34:01:59:bc:18:a3:98:08:d1:c2:56:45:f9:
         90:81:d7:af:db:5a:74:8d:ad:de:ad:ba:12:3e:d9:c3:4c:3f:
         4a:0f:52:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:25:14 2026 by rpki-client