Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
File:                     53ltjBnzKhyvvVt49Sds6N-ZXQo.mft (raw, json)
Hash identifier:          FhfhjSGKNCBHeh1GcDKdKu5DEOZ6sDvzkcZmLnu1hhg=
Subject key identifier:   8C:E4:E3:1D:B2:F7:29:5B:4D:3A:A9:A3:E9:9C:3B:0E:F1:45:FE:2B
Authority key identifier: E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A
Certificate issuer:       /CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a
Certificate serial:       019DA52F431E803AC23F68C3F7D9D5ECDCA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
Manifest number:          18C9
Signing time:             Sun 19 Apr 2026 10:00:31 +0000
Manifest this update:     Sun 19 Apr 2026 10:00:31 +0000
Manifest next update:     Mon 20 Apr 2026 10:00:31 +0000
Files and hashes:         1: 53ltjBnzKhyvvVt49Sds6N-ZXQo.crl (hash: DDw3VB9iSG+RzI4AoVKArffVG9yRgGbBCSJdWwtKAbs=)
                          2: D4ylrio1wtOKejkm6w9gAvQAe9Y.roa (hash: 8e3cUg43lYO4QgRug3qrBfXB7M63c6tSerUcL1Eq+FA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a5:2f:43:1e:80:3a:c2:3f:68:c3:f7:d9:d5:ec:dc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a
        Validity
            Not Before: Apr 19 10:00:31 2026 GMT
            Not After : Apr 20 10:00:31 2026 GMT
        Subject: CN=8ce4e31db2f7295b4d3aa9a3e99c3b0ef145fe2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d7:cd:8c:06:3b:69:83:1a:e5:be:78:c8:78:
                    4b:4f:6a:9e:72:1f:72:95:bd:72:a6:ec:81:e7:a2:
                    85:c2:82:ef:98:5d:70:e4:9d:03:93:2c:a8:27:fe:
                    d1:b2:90:f1:f4:42:b1:9e:90:0f:65:7f:34:92:6e:
                    95:f1:9d:fc:59:45:a4:77:47:70:8a:cf:b8:93:2c:
                    7c:bc:c8:93:10:09:ab:a1:33:33:ba:a9:86:03:3c:
                    a7:c8:de:5a:51:bc:de:e2:6a:cf:fa:d8:f3:7d:a2:
                    3b:51:65:43:46:e3:eb:5f:bd:60:4b:53:8b:0e:2a:
                    1a:fc:4c:65:68:6d:fe:1f:fe:aa:f4:35:b4:1f:7d:
                    02:1a:0a:29:db:8b:70:e5:52:a4:c8:79:f6:b1:88:
                    23:87:40:3b:0b:6e:16:24:b9:21:21:e4:34:c6:4a:
                    ea:6e:db:de:09:0f:57:ae:ea:34:f4:5b:93:51:fc:
                    be:94:73:c1:ac:cb:e1:db:0d:0b:9c:11:8c:b3:79:
                    d8:5e:1a:98:45:b7:ea:ec:26:23:93:fc:0e:70:6c:
                    6e:70:23:99:3b:a7:9a:34:f0:a9:65:db:dc:fb:5d:
                    3f:08:a3:ae:61:e4:a2:a0:0d:91:df:b7:cf:69:6a:
                    00:e6:74:4f:ae:f3:5c:31:a6:d6:f6:e9:b1:ee:79:
                    8a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E4:E3:1D:B2:F7:29:5B:4D:3A:A9:A3:E9:9C:3B:0E:F1:45:FE:2B
            X509v3 Authority Key Identifier:
                keyid:E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:4f:2e:6e:95:93:c3:ca:89:77:bc:53:93:4c:e3:c3:4a:fe:
         a9:67:bd:b0:95:8b:f7:c5:a0:10:fd:f7:ee:00:ee:b3:12:31:
         a9:29:f4:f7:67:be:3d:6f:04:93:3b:59:2e:14:ea:59:b3:07:
         95:99:5c:2d:e6:6e:3a:a7:03:94:27:40:5b:21:43:93:5d:3c:
         d8:42:13:f4:21:05:43:07:7a:b4:a5:7a:1e:2b:24:d5:db:39:
         41:bb:87:f4:e1:4a:1d:9d:3b:cf:9b:01:d3:b2:3e:a6:ac:ca:
         bc:ad:87:a3:da:e0:2e:04:ff:0f:64:d0:58:e4:c0:a3:db:5a:
         98:b5:4c:aa:0c:b7:b8:38:98:08:b0:02:10:2c:69:95:cf:81:
         97:58:3b:e4:8e:f0:b3:da:75:c2:2b:3b:3a:c4:47:8b:32:fe:
         bc:7b:d6:d0:9b:57:c3:18:5b:11:e1:75:f0:c1:f1:97:06:99:
         9e:d0:60:fb:77:3c:de:46:07:bc:fe:56:9d:23:9b:f8:48:89:
         16:bd:69:fd:ba:aa:07:85:a2:b3:cf:e9:0c:e9:04:51:a8:e2:
         06:a2:61:52:97:94:5e:7f:a8:3c:ef:46:3d:21:87:6b:a0:27:
         97:45:33:7c:db:69:6d:92:56:77:75:44:fb:01:12:1e:66:fd:
         29:65:6f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:19:16 2026 by rpki-client