Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft
File:                     V1jLEehCvK8TI2R_O-_u4vxvDiw.mft (raw, json)
Hash identifier:          5LhK3VY4KpL0MZ79YIzcv7rJfPChN17FEWdiKYl/Kyo=
Subject key identifier:   67:49:31:FF:02:3B:36:69:00:F2:2F:FE:55:4A:51:E4:54:38:EF:E6
Authority key identifier: 57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C
Certificate issuer:       /CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c
Certificate serial:       019D98BDA7B1D6DD4F6CFFA87423C41EBCF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft
Manifest number:          07B7
Signing time:             Fri 17 Apr 2026 00:00:59 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:59 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:59 +0000
Files and hashes:         1: UET1a8V82jVZjnsiMPaDJshQePU.roa (hash: /A8Ykurm8F86bjaeLphiBKdfzuSXJ1hhNjDM9g1WZgU=)
                          2: V1jLEehCvK8TI2R_O-_u4vxvDiw.crl (hash: 4omQjrHh4BSUThk79T1vpPNUgRAnc5lJLCV8wmyYSPg=)
                          3: mJ7goJLPxt6WLTrHUK5dn6uffyw.roa (hash: xPOuaH+Jv4nTcu4W7pFvN3DaBKDrAjXSPG2Gujx8Qe8=)
                          4: sHT9uRMJFfzV4bMDWClaNZLXg6c.roa (hash: 1CccVeF+jPttRzzbL8y6u91VStwFjE2E+hkKFOv1shU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 00:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:a7:b1:d6:dd:4f:6c:ff:a8:74:23:c4:1e:bc:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c
        Validity
            Not Before: Apr 17 00:00:59 2026 GMT
            Not After : Apr 18 00:00:59 2026 GMT
        Subject: CN=674931ff023b366900f22ffe554a51e45438efe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:81:cc:c5:ec:36:00:ab:dc:7c:db:dc:6e:9f:
                    52:40:e8:7d:5b:c2:6a:e8:a5:4e:40:d3:db:40:a7:
                    3f:af:80:41:35:e9:04:97:44:d0:c3:26:84:2a:58:
                    32:3b:a3:fd:ac:e2:67:f6:60:f7:cd:96:bf:4b:0d:
                    47:d3:fd:6a:b9:99:97:c7:73:91:b2:d5:e7:63:4d:
                    49:fa:33:f0:42:34:29:89:6e:38:ff:ec:fd:15:0d:
                    dd:dd:09:e6:4c:3f:20:33:a5:34:27:32:ce:f1:01:
                    e4:1a:de:6c:60:14:6a:d4:e0:c9:25:d6:23:32:ee:
                    b9:60:11:d3:fd:ab:0c:a7:4a:60:ee:65:61:2c:81:
                    82:e3:e6:82:dd:a0:dd:97:57:7b:17:28:99:9a:2e:
                    0a:ff:2d:71:f3:00:1a:91:96:42:e5:0e:19:28:e4:
                    3f:32:47:ce:22:1b:0b:05:50:69:85:62:4f:15:dc:
                    2f:a3:5f:5a:31:ab:9a:55:ba:df:58:78:d8:a8:ac:
                    93:6c:bd:d2:d5:cd:65:e2:e5:8d:c3:42:41:ce:75:
                    7f:d4:b4:9f:d6:78:07:99:33:47:f4:92:9e:70:63:
                    42:77:ef:e6:1d:32:7d:9d:cf:46:7e:08:41:6a:bc:
                    eb:b7:3e:aa:a3:e7:88:49:56:c1:ad:11:32:20:0a:
                    04:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:49:31:FF:02:3B:36:69:00:F2:2F:FE:55:4A:51:E4:54:38:EF:E6
            X509v3 Authority Key Identifier:
                keyid:57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:4b:48:20:fd:4a:20:48:7c:84:0c:1f:25:07:98:04:b4:61:
         00:6e:29:4b:f0:25:c4:f9:ae:4f:15:15:29:fb:2a:51:06:0f:
         20:0e:40:f1:4f:13:4e:83:16:60:ff:fa:05:6e:f7:ff:2c:a0:
         41:b2:eb:97:36:33:6b:2b:bc:b7:64:ae:c8:a1:fb:2b:b1:f8:
         b2:c9:24:f9:c3:ef:0e:2b:0c:c9:fa:60:cc:a0:89:dc:f4:e4:
         22:68:14:a7:ef:8d:32:8c:35:ab:41:79:cc:f9:39:94:1e:bd:
         7e:a3:ce:90:84:97:eb:44:e4:10:97:fc:5f:7b:9e:4b:da:13:
         45:7e:71:dc:b2:5a:3d:70:cd:33:0f:a5:9d:04:60:ba:05:5a:
         5d:45:f1:9c:ba:a7:b3:7b:bf:8c:95:90:2c:43:c5:25:6b:28:
         ed:41:11:88:71:fc:bb:b5:ce:ff:c1:94:32:44:8d:0a:18:b0:
         0a:d9:d5:34:bb:32:e3:4f:6c:ab:da:c7:2a:f3:22:f1:32:68:
         d4:4e:8d:78:2a:b0:ec:66:85:17:58:a5:33:41:10:b1:29:9b:
         5d:eb:e9:9c:88:37:03:2b:24:70:9d:ce:7f:b4:4c:22:0b:e6:
         4c:28:54:87:7b:d3:d3:ef:f7:13:d5:5e:fd:b3:b2:6c:24:ff:
         68:06:f0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:26:58 2026 by rpki-client