Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
File:                     fDw50YmeaZv1F3QY7jgUie3_Q4A.mft (raw, json)
Hash identifier:          XlGZsR2TqsZdZuGe6T/Roxxbr9cpr7kNRd9eENvqwgI=
Subject key identifier:   A7:56:21:9F:0E:13:5A:07:CA:5E:D0:DA:3E:BE:24:1B:F1:34:03:DB
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Certificate issuer:       /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial:       019D9BBE55F3BEA701B9158C47A12738E676
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
Manifest number:          18E6
Signing time:             Fri 17 Apr 2026 14:00:35 +0000
Manifest this update:     Fri 17 Apr 2026 14:00:35 +0000
Manifest next update:     Sat 18 Apr 2026 14:00:35 +0000
Files and hashes:         1: 5SEARh8FCEo871iB7G34fI2Kpe4.roa (hash: m8tzPmTHhc1WTCJBLsi032NvSAtwSGzKJid4Omy7Mh4=)
                          2: BBgeRSvbUJdniHYX4zOgCcL8ACY.roa (hash: PLe5zqvpsl1axyHkG+6mNC+e0kIU1k+pLvAFxSmrAmU=)
                          3: GINhKUhmBtKk0TkbBRxpcNSu6zI.roa (hash: AfFS2Kk3dLWfENSQf5EMy1ayLLvaFvbW7wW4mzMrY2c=)
                          4: WPr7hmOS_5zgQSOkKpNrOBkQjP0.roa (hash: zY6UwlQ/GxjFTntYJPN/sGqFKcDOf8d8m1v7xUcl1jY=)
                          5: fDw50YmeaZv1F3QY7jgUie3_Q4A.crl (hash: kcsFTKUht7A4Xnt1iU1fe35ffiGWFqS5UP9Iwm8zEus=)
                          6: fkKkQqSxJp_plv8zmlMuWpt7SKA.roa (hash: Sf+HsASX9t6YQf31Gs6tChY0U3y7nkWEG9+UmtOAYlc=)
                          7: gxHDLsArjTiXKEpHJWMyRpUv3cY.roa (hash: dCObsibTUgKigew1g86RJZOg/QuYkH7A+/+pCpHO7nk=)
                          8: nuyOFFadfRrO-PHC8XAHyHRujfs.roa (hash: /f8gp/JEgFhNhBZOt0Zfqqd/+VO8Z7hxkEAexMPxwQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:55:f3:be:a7:01:b9:15:8c:47:a1:27:38:e6:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
        Validity
            Not Before: Apr 17 14:00:35 2026 GMT
            Not After : Apr 18 14:00:35 2026 GMT
        Subject: CN=a756219f0e135a07ca5ed0da3ebe241bf13403db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1c:ec:d7:b4:e6:99:c0:e2:f4:cd:b9:29:cc:
                    e3:35:f5:3e:a9:17:5d:99:4f:6e:ca:8a:27:de:ef:
                    2f:9c:00:91:fb:8f:9d:6a:73:e1:93:da:19:53:39:
                    3c:54:39:2a:f3:bf:a0:63:87:1e:9b:28:2a:9a:0b:
                    97:87:b7:e4:ba:2f:5b:9d:ff:92:5d:34:ed:26:88:
                    25:b0:2d:0b:0f:c4:43:8f:3b:00:6f:4e:9f:c0:af:
                    8f:7a:a5:3f:38:aa:0e:66:f3:e2:ca:ee:3d:7e:4c:
                    40:ac:22:d6:f7:40:bb:ab:62:49:14:6b:86:4d:d0:
                    6c:a8:d0:25:b5:26:82:c7:30:2e:46:c8:66:0e:20:
                    21:6a:6a:2d:91:30:2e:47:10:9d:5b:a4:34:e2:2e:
                    f0:4c:e4:a5:e4:df:58:bf:17:97:a1:32:9d:dc:2d:
                    ec:c3:ed:0a:94:5e:68:5f:9d:9d:37:21:e1:10:0e:
                    85:1d:37:1d:14:12:d7:67:9a:c6:3a:93:c6:42:44:
                    b9:f3:d9:20:c5:42:87:12:4d:f2:d6:d7:c6:12:98:
                    0d:bf:50:c6:99:7d:2c:f6:0e:64:bc:b1:d6:89:b2:
                    83:59:59:38:f3:f8:30:3f:b1:fb:a9:95:60:63:6a:
                    8b:36:68:81:bb:ca:1a:95:0e:9a:ac:e2:da:7a:7d:
                    23:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:56:21:9F:0E:13:5A:07:CA:5E:D0:DA:3E:BE:24:1B:F1:34:03:DB
            X509v3 Authority Key Identifier:
                keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:72:cb:27:cd:c0:1e:e6:30:f3:e5:99:a3:47:98:71:32:e3:
         c9:08:d9:2e:05:f3:f0:ea:fe:dd:c1:9f:7a:97:38:ba:ce:1c:
         cf:57:df:9f:7c:4f:70:b3:2a:79:29:f7:88:a8:e1:b0:e4:b2:
         33:4f:fe:03:ea:a2:40:f7:10:3b:b7:dc:04:2e:7c:0d:ef:19:
         f0:a8:50:7d:f2:72:20:d0:5c:a7:56:fb:40:9c:32:06:be:a7:
         4c:56:cf:13:20:68:40:43:d8:a3:9f:be:0f:fb:e0:3f:9b:62:
         c7:48:ad:8f:23:24:ff:37:aa:3b:9d:ba:8d:c7:9f:ca:66:e4:
         cb:d6:69:83:d2:57:96:ce:ea:1b:64:54:62:63:5f:6b:8f:7c:
         66:43:b7:13:80:89:d4:59:19:47:b9:63:71:ad:3f:af:44:74:
         18:46:fe:6b:01:43:bd:8a:f2:4b:2c:f2:3f:90:55:54:e5:de:
         e9:d5:9d:7a:50:d0:71:cd:07:ea:72:18:d5:de:e7:19:24:b7:
         0e:8e:f4:a2:76:e3:f0:17:62:af:93:66:dd:b6:af:e7:ea:2d:
         e7:a4:d4:b0:fb:36:4c:2d:84:90:3d:21:47:95:88:4b:67:b0:
         6f:37:70:73:fd:c3:b2:b2:28:e1:99:d1:33:62:16:c9:8f:8e:
         f0:8c:2f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:00:31 2026 by rpki-client