Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
File:                     I2YsmpgK11hGUKuqNUW56pHT414.mft (raw, json)
Hash identifier:          Xh4KlmSPxwkwioG1EHE651fPDlx5JOulAh5nfvVkOMc=
Subject key identifier:   72:62:56:7C:24:63:B2:0A:56:97:B1:C6:10:7E:1B:06:6F:BE:AE:E2
Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
Certificate issuer:       /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Certificate serial:       019D9C2D489F79293814B4F0E62DFDBA56B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
Manifest number:          18C5
Signing time:             Fri 17 Apr 2026 16:01:46 +0000
Manifest this update:     Fri 17 Apr 2026 16:01:46 +0000
Manifest next update:     Sat 18 Apr 2026 16:01:46 +0000
Files and hashes:         1: I2YsmpgK11hGUKuqNUW56pHT414.crl (hash: RIdPpbQOiHoz7Oqm59j4rPN1oxYOoBhVYJaGyb2MYt0=)
                          2: Tfq0-Nhgv3VBbk9n3Vq4GI4iE_0.roa (hash: /bnj20jmvQ1RfURsnTm2hkQVvQm8WHvC5U4MWvcKmj0=)
                          3: UeUxs8O7BQG0PZAERCcpvW9oGJU.roa (hash: RA/5tda8Js/MvHGINkhN95bDFA6hSRU7RaQvgqea3Ts=)
                          4: fQxumP61VhB9FVDhoZcA_ZnxqZE.roa (hash: QVf5rDdwShREzqt48QWp/0TmeWtlZGZgnBrXgvvda9I=)
                          5: u8pBAQ-Z3p2H9WD6gzLyx7OKtRM.roa (hash: oA/e5+fvQLLxtw5lvTdOJVbmZhfodYNiZ+D6A/AnOCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2d:48:9f:79:29:38:14:b4:f0:e6:2d:fd:ba:56:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
        Validity
            Not Before: Apr 17 16:01:46 2026 GMT
            Not After : Apr 18 16:01:46 2026 GMT
        Subject: CN=7262567c2463b20a5697b1c6107e1b066fbeaee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:22:87:87:98:0d:19:54:91:f8:11:65:33:00:
                    0b:6d:98:c4:fc:70:e1:bf:6e:3d:d9:f8:78:df:09:
                    0b:b8:8e:81:f8:38:32:a6:4c:c2:e1:8d:ac:96:b1:
                    c2:7a:a1:94:fc:9d:42:df:86:67:7d:db:66:1a:b1:
                    c2:48:2a:7c:f0:57:25:ec:7c:1f:f8:9d:2e:d1:9a:
                    89:1d:e8:c3:93:10:2f:fa:4c:82:38:5a:b6:45:1d:
                    9a:36:1b:ab:98:35:1a:7f:03:8d:2f:1c:62:05:ae:
                    af:dc:0b:b4:de:c6:0c:f8:3e:58:58:4c:f5:ee:19:
                    83:e5:61:cf:1b:49:06:a4:b2:5e:ed:c7:ad:1b:30:
                    a6:6b:e9:ca:37:c2:35:8e:dd:3d:8a:72:8e:63:51:
                    10:87:56:60:f0:f3:5d:8a:d0:fe:25:85:90:7f:0a:
                    1a:b3:0b:03:cd:90:3b:57:d5:9b:d2:9c:f2:27:ad:
                    4d:be:be:68:15:12:ce:5f:bd:db:27:b6:24:6c:d4:
                    56:01:16:0b:4a:af:7f:de:9b:b9:90:1c:47:8e:9a:
                    ea:e1:2a:d5:f0:7b:7f:4c:b3:f9:12:eb:fc:4d:b0:
                    eb:04:50:bc:0f:f5:aa:bc:f0:9a:ef:ae:55:9e:af:
                    8f:57:e4:9b:82:09:d3:77:3a:ab:2a:95:e8:02:05:
                    ed:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:62:56:7C:24:63:B2:0A:56:97:B1:C6:10:7E:1B:06:6F:BE:AE:E2
            X509v3 Authority Key Identifier:
                keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:1e:87:df:e3:ba:76:21:da:0f:d3:b3:2b:d9:ee:c8:82:fe:
         6c:f3:d0:4c:ed:63:f3:cb:c3:f9:d8:1a:27:3b:3f:d2:dc:92:
         2c:3f:46:67:c9:d5:7b:41:c4:47:78:d2:36:24:93:df:ed:92:
         4a:aa:c3:5e:00:28:73:e0:00:7e:ab:a8:57:f3:8e:81:0e:db:
         6a:3b:93:25:d1:76:2c:85:2b:53:26:46:e9:09:89:6c:47:8d:
         18:13:fd:67:e4:a0:a5:07:6c:79:68:6f:f8:10:55:f6:ee:0e:
         a4:b3:bb:cb:c5:80:bc:21:70:c1:94:b6:1f:68:ab:b3:f0:0c:
         b6:2e:18:d8:14:e8:c4:8a:c3:25:de:25:b4:df:e9:2f:4e:63:
         66:b4:13:ea:12:c9:fa:2a:f1:85:31:c1:26:19:25:14:89:b5:
         a9:85:38:af:c3:3e:93:2e:90:1c:c4:74:6d:f8:46:db:20:0d:
         d8:bc:73:79:a1:3f:4b:1b:82:4b:d6:92:b4:ef:7a:2c:d5:1a:
         b3:5c:80:79:ec:c1:db:f8:5c:da:e3:4d:3f:c4:85:6d:58:ca:
         0e:9b:e7:46:00:58:5e:56:40:63:58:69:16:3d:09:14:77:54:
         03:31:0d:1f:0c:0e:33:07:41:c3:10:37:2c:ea:ae:c4:c0:a1:
         79:a6:2c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:29:31 2026 by rpki-client