Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
File:                     3g2da2l8ochlcMJWhi5oWLR5nIU.mft (raw, json)
Hash identifier:          PPBm1Oob+Os/PLMDJGQj53+wTswrZ+D0bGdHuKpT4Lc=
Subject key identifier:   24:14:08:6C:20:C7:73:82:7B:43:09:03:2B:7A:A1:41:57:39:72:8F
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Certificate issuer:       /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial:       019D98BD547946F152D51E903496DFA1F278
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
Manifest number:          18CC
Signing time:             Fri 17 Apr 2026 00:00:37 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:37 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:37 +0000
Files and hashes:         1: 3g2da2l8ochlcMJWhi5oWLR5nIU.crl (hash: EMkz0i21YspLZtQ9F3wqehF8ZvFJaY7stcMfAwWMQNg=)
                          2: E_7lG7f5ZU0hPBZXeO9KiDguzXQ.roa (hash: uU7vlve0LCQA4yv+Ab2N5h2lLHcGh/mEnZNylo4rqpM=)
                          3: FHmWYGqSdJ5-CsqGnoJKGcWPx4o.roa (hash: S6HSVK6CcsFHebtvgQR42wkTCiX4LDp+Y8NKZpU+vms=)
                          4: XKNodyTpVE_edu5x6d6F6Y2O2tk.roa (hash: bwj5H0svZvvLnoA8x9sKQziSKp08OjMhTh7PRO1SLcQ=)
                          5: ZDpRY_KWNL6AZ9OnIDN7BtGPipc.roa (hash: 1DrZ+2ptHaqoBHGtimSHqvMKa2JLNNgAJEEeUlCf64I=)
                          6: hneKOL6xKV3cr3gP56n-PmBtpXI.roa (hash: GxqGClH9UHGqcmyTREy95vx88t5aKLbmXG/YE4t9Tqg=)
                          7: xTqndtOYNNxGOKliN2NcyMFkix8.roa (hash: 7wOPiKD57FwmTf2UKEcrkMSUmvstWjxFYMSq5+S7Psw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 00:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:54:79:46:f1:52:d5:1e:90:34:96:df:a1:f2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
        Validity
            Not Before: Apr 17 00:00:37 2026 GMT
            Not After : Apr 18 00:00:37 2026 GMT
        Subject: CN=2414086c20c773827b4309032b7aa1415739728f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:36:11:62:ce:d0:b0:5f:8a:5a:c3:77:48:f3:
                    df:d1:57:75:46:76:de:82:f9:6c:10:2a:f6:cc:64:
                    31:39:68:40:3a:a9:c0:78:e6:94:50:ee:6a:fe:fd:
                    31:4f:e6:4a:ce:02:a9:aa:8f:f3:cf:74:8b:1b:15:
                    43:eb:65:39:e7:3e:f5:d5:18:8c:ed:e6:d7:ac:ff:
                    64:b7:56:01:00:3c:6b:a8:39:13:e0:72:cf:2e:62:
                    df:0d:5f:50:92:56:21:88:a7:4e:b7:90:b4:1d:ff:
                    af:c5:ec:b3:e5:e4:cc:f7:a9:3d:fe:7f:c7:a9:9f:
                    b5:9a:08:0b:20:06:4f:25:e3:64:6e:95:43:f7:13:
                    dd:c1:99:b7:54:4c:83:ad:6c:b7:4a:9c:fc:21:0e:
                    f4:42:10:26:c8:f1:80:bc:7d:f4:b2:23:1a:0a:2a:
                    89:be:74:d6:ad:18:7b:a2:f8:4e:39:75:ca:5f:f5:
                    d5:95:70:63:4d:9d:d8:b9:8a:01:c1:d9:38:55:75:
                    3a:fd:8f:83:be:13:af:dc:54:19:2d:66:b4:c1:84:
                    31:c6:43:ab:b8:7f:ce:1e:36:29:94:11:94:e7:9d:
                    1f:f9:1e:70:57:9f:56:b1:30:e7:3c:a1:46:74:02:
                    18:a4:e7:96:92:54:de:42:0d:f6:da:ba:8a:1c:0e:
                    b2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:14:08:6C:20:C7:73:82:7B:43:09:03:2B:7A:A1:41:57:39:72:8F
            X509v3 Authority Key Identifier:
                keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:42:5f:de:ea:5d:7f:79:95:d3:83:40:87:48:17:44:86:25:
         d7:f8:03:5b:37:ae:dd:c3:0e:61:e0:a3:11:11:c5:8b:f3:0b:
         70:7b:0c:21:f8:1d:6f:c8:a7:e0:2c:e8:a2:bf:04:59:62:1e:
         8d:6d:80:4f:c1:04:5f:cc:85:83:29:25:01:ab:06:25:9c:1c:
         03:00:1b:17:00:b1:43:31:d6:6a:f7:16:82:21:4e:be:0b:f9:
         00:1c:26:52:41:d8:8e:1d:68:a2:8b:6c:ae:fd:87:40:d3:2e:
         4b:7c:d5:9e:85:b9:7a:29:e1:a7:9d:af:8a:79:80:a1:da:1a:
         6d:e5:ea:6b:e9:2c:f2:b7:75:99:a8:dd:8d:b4:f0:a3:53:2f:
         43:7c:9f:bb:43:db:75:0f:31:08:c1:05:0d:72:29:d5:29:77:
         02:90:b1:b6:d7:69:dc:66:01:d7:58:a1:28:42:4c:00:0f:e0:
         a5:c1:f8:76:da:ad:04:74:1f:a9:0c:0c:d5:f0:4b:23:b3:81:
         9b:ec:6a:c2:a0:33:86:0b:cf:17:4b:35:b5:1d:8e:9d:4e:a4:
         05:dc:8c:d4:af:e9:10:48:fb:e4:03:b2:fd:ae:30:64:c4:a7:
         eb:af:d6:80:7a:a1:de:49:17:e0:0b:a6:e8:fa:14:f5:c8:58:
         c5:14:1a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:36:23 2026 by rpki-client