Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
File:                     sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft (raw, json)
Hash identifier:          WN96IuDcyyrtuloVI4/C9KT8S+rEJBrh/XEwpgACos4=
Subject key identifier:   11:A6:91:3E:26:25:63:77:C9:BB:24:08:88:53:0B:7E:D3:3F:D6:27
Authority key identifier: B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
Certificate issuer:       /CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Certificate serial:       019D9886C495FD3D0F2C605765C111DD689C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
Manifest number:          0706
Signing time:             Thu 16 Apr 2026 23:01:02 +0000
Manifest this update:     Thu 16 Apr 2026 23:01:02 +0000
Manifest next update:     Fri 17 Apr 2026 23:01:02 +0000
Files and hashes:         1: 6OqTpgmhzn6PJTKFB1lTcULSUt4.roa (hash: 0yR0XfZvnK3OQ/1YUSPxxfbZ0KMJ3RWvdqB7yb8/Z9c=)
                          2: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl (hash: eJ1zcMahO5/rVKE+gWwBqo0Y1p94JwDEYpsItwBXF0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:c4:95:fd:3d:0f:2c:60:57:65:c1:11:dd:68:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
        Validity
            Not Before: Apr 16 23:01:02 2026 GMT
            Not After : Apr 17 23:01:02 2026 GMT
        Subject: CN=11a6913e26256377c9bb240888530b7ed33fd627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:32:9f:77:44:bf:d0:b0:f0:96:d8:64:0c:ab:
                    13:68:60:ae:7d:6e:9d:14:7e:dd:ea:36:0f:15:32:
                    09:03:43:fc:ac:9c:b5:9b:95:e9:6c:b4:f5:60:a5:
                    78:8e:52:d3:64:db:be:0d:dd:de:6c:96:9e:de:a5:
                    0d:57:d2:d2:e2:ff:dd:0f:f5:3a:3a:84:66:98:89:
                    62:97:b0:8a:ca:d4:7e:0e:91:7c:29:ed:63:a2:83:
                    1a:2d:e4:aa:aa:50:cf:b6:81:6a:ba:04:96:62:54:
                    2e:1e:e7:2e:65:c4:3d:cb:3b:9c:6b:70:8c:a8:90:
                    a6:e0:90:94:52:0e:d2:7b:f1:40:a7:f4:ff:9c:02:
                    03:df:4b:4e:4f:16:84:46:73:03:2c:7d:1c:dc:f0:
                    0c:64:4e:c6:ba:53:0a:cb:e0:68:c6:3b:d1:b5:81:
                    50:19:bb:04:be:af:c3:cb:a7:93:55:73:f1:00:50:
                    6e:90:b0:e4:91:76:df:59:22:c2:04:0d:ae:5f:e7:
                    85:90:0c:b2:a7:70:73:fe:a1:a1:d8:1d:b3:dc:44:
                    64:5a:af:b6:da:9f:6b:89:d3:89:64:c7:45:b4:79:
                    4d:a6:06:18:86:35:cb:3c:e2:bb:8e:f6:a5:7a:d0:
                    43:bb:cd:7d:fc:ab:94:79:e4:b9:66:be:53:e2:62:
                    7d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A6:91:3E:26:25:63:77:C9:BB:24:08:88:53:0B:7E:D3:3F:D6:27
            X509v3 Authority Key Identifier:
                keyid:B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:96:72:87:12:94:70:37:bc:a1:62:00:3a:07:ca:28:2a:39:
         a4:2f:44:bd:e8:24:6a:32:04:ef:a9:3a:60:ff:0d:ac:c4:47:
         38:6f:e9:bf:6d:92:49:15:74:b6:6f:62:2a:34:ad:03:44:6a:
         c3:a4:3e:11:c9:75:27:f4:0c:10:c6:4f:a8:a3:06:28:6e:ea:
         d0:7b:51:76:ca:f2:7c:26:54:0b:03:ea:c7:20:63:75:73:4e:
         1c:6b:69:0e:38:94:41:c0:9e:1e:04:73:f6:65:15:f7:45:49:
         5d:97:a7:cd:6c:04:38:cd:59:d2:3f:2d:10:9c:17:e0:d7:68:
         0d:2d:0d:0c:09:20:ac:51:49:9c:99:10:1e:0b:93:93:6c:cd:
         1b:08:f9:86:a3:f9:b2:5c:0b:95:41:fa:c1:74:47:9a:02:fe:
         b6:71:aa:34:03:01:d0:3a:3e:16:b1:63:fb:64:a8:0d:f5:cd:
         eb:89:43:c8:6c:7a:c6:c7:e9:0d:22:ba:84:06:e1:91:0f:a1:
         5e:8d:f1:f8:7e:24:f7:c2:fe:65:88:aa:4b:f8:52:93:9d:94:
         ff:97:6d:59:c0:39:f5:64:61:ee:da:13:21:85:4a:17:c7:42:
         0c:98:55:87:52:dd:76:0d:33:ed:68:44:ea:54:53:3e:2a:b0:
         ce:02:22:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:06:06 2026 by rpki-client