Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
File:                     ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft (raw, json)
Hash identifier:          GY8Fxr6nABSJu84A5fegZoZB3Q5s92aNwNVTSwLl5xE=
Subject key identifier:   8B:FA:5F:05:F9:3F:08:91:47:1A:BF:E3:7F:F5:3E:CB:63:A1:AC:13
Authority key identifier: 8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3
Certificate issuer:       /CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
Certificate serial:       019D99993C0F3B97D387D306E47023D74D4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
Manifest number:          0811
Signing time:             Fri 17 Apr 2026 04:00:49 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:49 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:49 +0000
Files and hashes:         1: ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl (hash: QXnsM8xkumUpwHMooLhoLKFEDwBY3+QXooUFV1y1Qk0=)
                          2: pld-KrrSH2O3PZyUQtP_Kuvp-2s.roa (hash: JZBBxha8VilEBln8tqWZaEhgr9V20qoqkX6/Lbo7/s8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:3c:0f:3b:97:d3:87:d3:06:e4:70:23:d7:4d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
        Validity
            Not Before: Apr 17 04:00:49 2026 GMT
            Not After : Apr 18 04:00:49 2026 GMT
        Subject: CN=8bfa5f05f93f0891471abfe37ff53ecb63a1ac13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a0:00:71:a4:b5:b3:81:ea:ba:c4:33:a3:42:
                    8e:96:fa:3b:cb:e5:36:fe:12:cf:59:ab:8d:b2:7e:
                    9b:6f:30:0e:a9:6b:bf:c7:a9:24:52:e6:9c:f3:c6:
                    3a:34:6f:17:a9:3a:9e:98:43:6b:a5:fe:19:a1:ef:
                    d2:5e:11:f2:19:39:0e:96:d7:19:bf:c6:71:6c:b1:
                    59:a4:01:7a:7a:ea:48:57:c7:0b:a4:11:f8:bd:dd:
                    8c:b9:b0:21:7e:56:bd:d4:90:ff:1b:ea:3b:12:0f:
                    ef:e8:08:a0:d6:24:b7:ca:7b:ed:9a:ea:b0:e9:12:
                    5d:8a:90:a5:f5:94:e4:3b:e0:39:39:56:29:30:5b:
                    2e:4f:06:d8:2f:5f:d1:66:f3:5a:ed:7a:91:d4:56:
                    73:51:a8:78:91:c5:5c:33:ae:74:87:82:ee:10:f2:
                    d2:3d:c4:91:4f:05:2a:ef:64:74:de:71:de:7e:c6:
                    22:6d:7e:ac:f5:9a:09:ba:23:85:66:35:87:4a:cb:
                    70:7b:1a:0f:ec:f8:d9:fb:f6:9a:24:40:d5:48:24:
                    38:40:74:56:dd:0f:fc:cc:7c:2c:9d:48:20:b0:12:
                    5b:05:cb:6f:55:af:d0:7f:2e:2b:7c:54:a9:46:bc:
                    0a:c9:3a:05:cd:6e:c5:fb:2b:2d:c2:c0:c1:c0:63:
                    51:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FA:5F:05:F9:3F:08:91:47:1A:BF:E3:7F:F5:3E:CB:63:A1:AC:13
            X509v3 Authority Key Identifier:
                keyid:8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:18:1a:df:aa:a6:ed:1c:e1:54:e4:9d:8f:6a:de:61:99:d9:
         f6:06:67:0e:bb:03:f4:ae:ff:dd:f9:20:58:c5:b1:b4:13:f9:
         1e:cd:31:00:74:31:f3:a6:ef:42:a3:14:b7:f1:90:c1:eb:37:
         f1:6f:f2:c9:b4:75:4a:00:ec:c3:16:32:62:b8:ee:34:32:9d:
         63:f7:36:f1:77:d2:3f:8a:83:4e:4a:1f:d9:64:f9:06:7b:a6:
         c7:51:b6:03:2a:ed:dc:df:f6:6f:d1:56:e5:d0:6b:ed:4e:1f:
         6b:c4:a2:0a:82:56:5d:45:ca:77:2a:24:31:32:fe:3c:0c:10:
         49:f2:8f:7f:7b:3d:ef:b7:c3:fe:3a:fc:78:c2:db:f5:fa:e7:
         35:82:3f:9d:4c:d7:4c:c9:f4:56:65:5b:84:90:75:ed:22:42:
         8f:af:8b:70:e3:8c:37:35:6f:9f:8a:fc:4c:26:e9:af:05:e0:
         87:e4:c8:3e:4a:70:3f:24:fd:2c:ca:8a:dc:58:82:4e:5d:16:
         b0:d5:d4:dd:77:f7:a8:75:30:28:9d:14:7e:63:3f:bb:bf:01:
         87:79:b9:ec:bd:93:df:5a:2a:f4:80:a1:48:1e:ee:c1:26:fc:
         79:49:d7:3a:ca:c9:54:90:0a:7d:fa:03:cf:df:cc:ac:75:1d:
         e7:06:b9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:27 2026 by rpki-client