Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
File:                     c_9LHL6vndddO17z7pp11XmfcoA.mft (raw, json)
Hash identifier:          oNXyMMCeqZZwBdeACXXW5L4LTljMYp8tlkseI0WCx6c=
Subject key identifier:   13:FA:18:20:D8:47:A2:3C:B1:71:19:53:25:35:4D:EC:CB:A9:D7:73
Authority key identifier: 73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
Certificate issuer:       /CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Certificate serial:       019D9998D8245601BF1DA43900E09145B0AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
Manifest number:          0D04
Signing time:             Fri 17 Apr 2026 04:00:23 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:23 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:23 +0000
Files and hashes:         1: 40EThboBSEVGFMmXd89FK4WaTNo.roa (hash: ohel7RKT+QSonvsuuV4gvqAOjnxAWjb8zzBfZRnvIeI=)
                          2: XNHFS8ZMGooSizNDD-_Z2_M2bLs.roa (hash: NrqwSk7qLUhd2Ca65sK/JaxXop9TloKYfUN2lC/2ang=)
                          3: c_9LHL6vndddO17z7pp11XmfcoA.crl (hash: w7kgTf9/bmrZdlOWoj+Ut/88SCMxU/nNqtabdjGmMTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:98:d8:24:56:01:bf:1d:a4:39:00:e0:91:45:b0:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
        Validity
            Not Before: Apr 17 04:00:23 2026 GMT
            Not After : Apr 18 04:00:23 2026 GMT
        Subject: CN=13fa1820d847a23cb171195325354deccba9d773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:30:72:7d:4e:a1:33:7a:09:49:fb:03:fe:4f:
                    3b:b0:03:fa:e1:20:38:7e:e6:58:9d:b8:d8:8e:ac:
                    3e:23:f4:a5:44:36:86:61:78:4f:35:1c:9c:27:38:
                    b5:51:10:c5:2f:5f:c7:5e:50:65:00:11:79:cd:94:
                    c0:77:0b:2d:e6:e7:83:de:7e:3a:4b:05:60:c0:d4:
                    0a:b9:0a:7d:3b:38:e1:a0:0a:f6:19:5e:c0:4b:dd:
                    2e:20:33:5d:30:5d:a7:62:ed:3b:02:bd:54:4e:f6:
                    de:3c:7c:62:0f:dc:71:1d:71:98:85:f9:4d:0c:3a:
                    08:5b:c1:6f:bd:61:eb:dd:f7:09:f6:71:f3:6e:d8:
                    2a:fd:0f:76:03:89:47:e8:69:e3:31:6f:ac:f7:f5:
                    7f:9b:2b:95:82:d0:31:c9:8c:ee:f9:f1:4a:44:c1:
                    9a:04:91:24:61:8a:39:e8:81:d1:1f:6a:e8:48:71:
                    33:ad:f1:da:36:df:e8:4d:24:06:92:15:1b:8c:ba:
                    22:89:52:a4:32:dd:1a:75:20:ca:4e:c6:2c:4a:55:
                    be:dc:34:a5:88:fa:1a:dc:a7:e3:bf:af:b3:9f:28:
                    84:88:51:1b:c3:e8:65:34:f2:c8:a5:bb:bd:64:41:
                    fc:fd:b1:3f:e1:6c:c0:92:b9:3b:18:dd:3d:cf:30:
                    6c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FA:18:20:D8:47:A2:3C:B1:71:19:53:25:35:4D:EC:CB:A9:D7:73
            X509v3 Authority Key Identifier:
                keyid:73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e9:98:51:26:f7:8a:6f:d3:5c:f0:a5:3a:55:fd:e3:29:56:0d:
         2b:09:f0:64:6a:1c:c8:c1:8a:cb:35:e7:c5:79:de:e8:92:97:
         ef:cb:97:a1:b0:72:9e:22:5d:57:5c:f4:81:5d:e2:68:ff:9f:
         9b:59:98:a1:37:ad:8e:33:c7:c8:b6:0b:d2:d7:dc:31:f1:c5:
         1a:43:8d:d6:bb:fd:05:9e:c9:94:02:66:d2:ba:db:90:5b:5c:
         02:da:fe:3e:06:20:03:93:76:92:b6:54:e4:25:a1:02:d4:a3:
         70:21:67:52:e1:ab:f7:bd:3e:51:66:1d:26:9b:86:12:c3:91:
         78:47:0e:60:0d:40:da:65:bd:b0:f7:64:fd:32:34:70:e6:43:
         c9:54:ce:88:01:02:19:e5:03:69:ee:6d:53:8e:72:11:2d:53:
         99:e3:bf:5e:86:e2:e3:18:d5:bd:d8:4f:42:a8:97:4b:6a:ea:
         62:0f:c1:51:ca:5c:2b:e2:2a:35:10:5a:ca:0d:d9:6d:4f:52:
         a4:32:99:bd:7b:53:33:76:f8:cd:b9:1f:c7:c5:14:7f:2c:66:
         c6:0b:f6:78:2d:8c:81:15:bd:97:15:da:55:a2:61:b0:15:f9:
         94:5a:84:8f:d5:28:9c:eb:f0:5b:89:d0:b5:03:af:4c:1a:76:
         d9:6d:99:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:51:44 2026 by rpki-client