Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
File:                     AH5rWqQ302kxUVAqIRSW431K4sU.mft (raw, json)
Hash identifier:          Xyfdm+dgxxoMengnA+dBQbzcHtSzmeI7n9NXMUT+13Q=
Subject key identifier:   79:A6:24:E8:A2:54:FF:F8:B2:1F:4E:9E:CF:AC:C6:FA:EC:0C:AC:FA
Authority key identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5
Certificate issuer:       /CN=007e6b5aa437d3693151502a211496e37d4ae2c5
Certificate serial:       019D9BBF5F30A0E7492EBC9C16E7DFAD93E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
Manifest number:          1641
Signing time:             Fri 17 Apr 2026 14:01:43 +0000
Manifest this update:     Fri 17 Apr 2026 14:01:43 +0000
Manifest next update:     Sat 18 Apr 2026 14:01:43 +0000
Files and hashes:         1: 0UtZJpaH9ZhWJzvOUmqS1m2r370.roa (hash: UdeibxbzHWRgn3KJEu2PyWPjfgCf2fUauCUDT1MFzeU=)
                          2: 2i6ET0xmeFNNwjckPtEiXMzR1A8.roa (hash: RMMo6cNDlmb7w7WUvvn6btB8oEeGkC5RlJSJmweHPSg=)
                          3: AH5rWqQ302kxUVAqIRSW431K4sU.crl (hash: 0NeIXrcyoRfE0xrxUH1ea8jYTDrfwXnbi6gWQ2JbDdc=)
                          4: R1KgvQsI1PNvvWsNYjSHXjmCUko.roa (hash: eSfdxnu6Fm6Qr8tRqOcchhcxy/tWOkcHERSE8N3r8uI=)
                          5: XdtoN-G6_JHehbj0D7l71OQKEXE.roa (hash: bDoA0XebMdpMlFP6CJH1fk3V+NG+IRgcZpROF4NtHwY=)
                          6: Yx7l960TQn9HM_7QR6gs0XY-qcA.roa (hash: O+2F1pg3A5EVSk1DJbaRJDwXaNusK4Cx5sLgaLCJXdM=)
                          7: vV4kfM7-tPnyYx_K2ljxEExtxso.roa (hash: iQoz4P+KRDJgWwM5+v9IkBekoevvl7t44wSOdaiYAvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:bf:5f:30:a0:e7:49:2e:bc:9c:16:e7:df:ad:93:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007e6b5aa437d3693151502a211496e37d4ae2c5
        Validity
            Not Before: Apr 17 14:01:43 2026 GMT
            Not After : Apr 18 14:01:43 2026 GMT
        Subject: CN=79a624e8a254fff8b21f4e9ecfacc6faec0cacfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e5:27:a3:13:8e:3f:7f:b4:28:d9:4e:46:f5:
                    05:e7:9e:3d:53:59:70:b5:c8:f8:ca:b5:90:57:3b:
                    5e:a9:44:93:c8:3f:fd:7a:03:ca:b8:73:72:2e:be:
                    59:a5:e3:be:54:23:3f:d8:4f:c7:99:05:b0:ea:8a:
                    02:85:46:01:84:dd:fe:b8:9d:f5:3d:cf:95:c6:7f:
                    44:ca:a7:df:fe:99:cb:44:31:29:c4:9d:14:48:78:
                    97:55:40:cd:98:23:bf:6e:1f:f9:80:82:1f:8e:92:
                    c7:6a:d8:56:32:dd:b3:11:c5:2a:a1:f6:36:d7:3b:
                    58:ee:6e:c8:c0:30:f9:a9:36:23:f0:9d:66:19:64:
                    c1:78:e9:58:16:68:e3:fa:cd:fb:87:32:15:6b:8e:
                    6f:1a:6c:d8:a4:ae:a9:dc:1d:d5:95:a3:81:10:2a:
                    fe:72:f8:d2:d4:f0:93:7a:02:3d:ff:a9:e9:2a:df:
                    2c:69:97:89:76:3a:00:94:e6:c2:c2:05:93:79:69:
                    5a:fb:65:1f:13:fe:c2:4b:c5:4a:83:59:c2:d6:30:
                    2f:02:de:1d:e7:1f:50:20:f7:d9:cc:82:d4:d4:5f:
                    82:b2:08:da:a1:f4:98:b0:ce:8c:fd:92:97:fd:28:
                    bf:92:a8:09:67:9c:39:69:0e:0c:06:6b:40:c5:bc:
                    bd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A6:24:E8:A2:54:FF:F8:B2:1F:4E:9E:CF:AC:C6:FA:EC:0C:AC:FA
            X509v3 Authority Key Identifier:
                keyid:00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:00:fc:b7:19:55:91:f3:36:69:1d:0a:f5:c9:20:3c:45:5d:
         1f:b8:11:b2:a2:49:b1:c3:de:19:90:0d:5b:a4:82:c4:d6:cf:
         1b:c4:9a:f5:38:37:18:e2:38:f2:12:1b:35:09:de:40:fe:1c:
         c9:4b:49:98:90:86:f1:97:cd:f2:bd:4b:59:fd:77:8a:08:cf:
         e3:16:ec:b3:71:2a:36:7f:3c:fb:72:44:66:ca:8a:8d:e9:8b:
         9f:34:bc:8f:1e:82:7a:e2:81:d9:62:92:42:37:e7:57:12:f8:
         4c:d6:4e:34:c2:72:c9:d7:b8:fe:ba:d3:68:a7:04:bc:ec:7c:
         94:fa:c9:d5:a2:44:99:9c:ef:8d:b5:e5:bb:67:e4:9e:6f:5b:
         a2:d1:99:fc:99:42:0d:38:7b:ee:ef:b6:31:32:2c:e9:75:94:
         30:1b:a0:f6:cf:88:bc:b4:2c:04:ac:f9:5f:78:d4:59:fc:33:
         82:21:83:ab:e6:20:f0:b2:ab:ce:0a:a1:23:d9:03:c7:e0:e3:
         47:73:2a:96:c6:c5:b9:57:68:8d:c5:b4:3b:97:81:5f:87:2d:
         1b:b1:30:66:cd:d9:ed:62:e7:8b:09:a3:56:60:7a:18:ab:65:
         52:51:00:af:f7:73:0d:58:b0:a2:46:35:ae:88:4a:b7:e8:91:
         12:71:9f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:31:38 2026 by rpki-client