Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
File:                     p72yx7M0uUvNQziPIfggktts_Uw.mft (raw, json)
Hash identifier:          a+P/pLkqTKqOAcxasym/u9HiWhT6kA6OiOM+NojcxOw=
Subject key identifier:   D5:19:3A:5A:D1:47:F5:20:AF:ED:5E:80:DF:35:AD:EE:5A:2A:04:8B
Authority key identifier: A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
Certificate issuer:       /CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Certificate serial:       019D9AAC49B7C0962B1959DA0C4D50D3EC5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 09:01:15 +0000
Manifest this update:     Fri 17 Apr 2026 09:01:15 +0000
Manifest next update:     Sat 18 Apr 2026 09:01:15 +0000
Files and hashes:         1: 6Xsm7GtWPf6sxisdeJuLCo-3tLo.roa (hash: xdyBNDU6Kuc/zF3hUM0jBGfeZpAD6Qr+9Bqu74wdbek=)
                          2: p72yx7M0uUvNQziPIfggktts_Uw.crl (hash: BWyvZPN5mytJwXPMNkkNaV4d1fvi160nexV1iLaXxEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 09:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ac:49:b7:c0:96:2b:19:59:da:0c:4d:50:d3:ec:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
        Validity
            Not Before: Apr 17 09:01:15 2026 GMT
            Not After : Apr 18 09:01:15 2026 GMT
        Subject: CN=d5193a5ad147f520afed5e80df35adee5a2a048b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:42:35:88:74:cf:b9:39:a8:b3:e9:e8:4e:ad:
                    d5:06:4a:5f:26:37:87:56:f2:14:dc:61:c2:97:32:
                    56:55:70:cb:4b:69:59:79:77:e5:b8:e8:d8:00:d0:
                    af:a1:6c:f7:0d:9d:3e:68:ad:9b:b9:a2:3d:08:76:
                    66:86:22:bf:b4:ad:57:bb:ae:dc:a3:f7:0d:04:27:
                    52:f4:2f:af:3b:0a:99:e1:7a:fa:5e:88:a1:55:a8:
                    26:41:7c:66:1b:62:77:6d:98:28:38:e6:82:0e:49:
                    43:46:f5:68:83:a9:88:52:48:79:22:97:94:b6:eb:
                    a7:24:84:59:c1:70:0f:ce:c6:fa:e0:e9:3f:90:33:
                    8b:7b:72:a4:58:0a:44:4b:5f:fc:f0:8a:1f:b3:e7:
                    90:22:fe:88:51:63:29:bc:d2:fd:d2:45:8a:e0:83:
                    b6:5f:d6:80:97:ff:0e:73:08:ba:39:4e:1a:ef:dc:
                    ab:b1:c4:0f:07:8c:d2:52:15:7d:30:bc:52:aa:f8:
                    65:0d:54:1e:39:a8:d7:0b:b1:f5:2a:3b:66:af:14:
                    4e:3e:09:4c:19:c4:2c:3e:e9:cf:14:ea:7b:09:82:
                    90:c2:89:bf:9a:c5:80:d5:da:18:90:b6:7b:ef:7f:
                    10:17:6d:1b:68:93:c1:5b:a2:3e:6c:1d:3a:d9:95:
                    4b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:19:3A:5A:D1:47:F5:20:AF:ED:5E:80:DF:35:AD:EE:5A:2A:04:8B
            X509v3 Authority Key Identifier:
                keyid:A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:0c:e2:56:8e:59:94:8c:d1:22:04:40:91:69:3d:67:d8:88:
         ce:91:5c:6e:76:5a:ee:cb:a7:ff:2d:32:cf:30:10:6f:4a:74:
         46:81:94:1d:f4:6f:99:8c:8c:32:8c:27:e0:4f:6f:6b:3e:b1:
         bf:58:ce:35:72:12:c3:ba:23:e1:a0:ee:64:be:56:f6:d0:b3:
         aa:e4:7e:e0:91:c9:c5:ff:1d:4c:9a:62:5f:55:e1:3e:30:ad:
         1a:81:38:a9:aa:b1:e3:0f:10:af:89:7a:c4:63:c9:88:75:88:
         21:5f:e4:74:4a:6c:5b:22:a0:ec:3d:03:27:93:86:c2:7e:0c:
         76:4c:0e:8e:e2:a9:84:bc:35:47:ad:91:43:25:76:74:af:88:
         8f:98:c5:8b:03:6c:4b:2c:db:f7:b4:59:91:f3:a7:37:93:8d:
         05:40:c0:ad:5a:3a:ec:59:42:a3:67:9b:67:df:a6:4f:0d:a8:
         fc:84:05:f3:5d:f7:6d:99:38:bb:4d:32:b2:5f:d7:f7:52:2a:
         da:23:14:b2:e5:26:5e:26:de:5e:6e:ea:7b:fb:0a:c5:93:b0:
         1c:4a:f9:77:89:8d:c8:61:c0:4b:23:26:24:7e:6f:8c:02:0a:
         05:9a:b6:11:97:1b:8c:f9:72:9e:e5:31:bf:11:2d:6e:d4:02:
         87:76:ad:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:38:49 2026 by rpki-client