Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
File:                     0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft (raw, json)
Hash identifier:          8gV3ZrxRP4QgeeVbvgOlrvHa/J2gwdjyE4oSsr83EHU=
Subject key identifier:   C6:A3:04:CA:7F:79:1F:F4:64:F2:BC:59:2B:09:8F:1F:51:F9:78:81
Authority key identifier: D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A
Certificate issuer:       /CN=d2075c84f529c87dd85fd4afea4e0934366af54a
Certificate serial:       019D9BF56C6AEF5660D0D2C4ED5F944CEBCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 15:00:45 +0000
Manifest this update:     Fri 17 Apr 2026 15:00:45 +0000
Manifest next update:     Sat 18 Apr 2026 15:00:45 +0000
Files and hashes:         1: 0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl (hash: xkoDMDutLJgRzkQwJqHPmgV3KjR3Om0bf+aTIkgpoAc=)
                          2: 0i0PYX0obfO9VURW0I4RA1U23yA.roa (hash: +RcEhC8AwdCvLX2rfo02Ca2oOyM5cBarb0CVTNYTosM=)
                          3: O6eW5NgA4SYtR0QdMpos9kGVbx8.roa (hash: vNWr6WjAQo4/b29D3hI5zGTafpoZZFqPo9hkvS1ZF+M=)
                          4: rVuwmGnwYv_V6whaEGlCtt_t-jU.roa (hash: eOWfhOukOgYiBn4QdoGi9zhMMnx1blKy6/IzloDdoFI=)
                          5: sz2hM6b0kWi5lGSZOx8xQWLEDac.roa (hash: WNOAe/3pRo5H7hWt2dUEHtw/6Zr0ujDafm8V0QNv03k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:6c:6a:ef:56:60:d0:d2:c4:ed:5f:94:4c:eb:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2075c84f529c87dd85fd4afea4e0934366af54a
        Validity
            Not Before: Apr 17 15:00:45 2026 GMT
            Not After : Apr 18 15:00:45 2026 GMT
        Subject: CN=c6a304ca7f791ff464f2bc592b098f1f51f97881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:38:d4:ce:ce:d1:47:52:9c:34:0e:13:a7:fd:
                    e1:ca:9f:fc:6a:d4:71:b5:5c:cb:54:f0:47:bb:39:
                    a5:57:c0:76:d3:12:3d:f0:7b:74:95:4d:e8:29:bb:
                    55:fe:db:22:90:10:aa:6f:1d:56:21:3e:96:89:34:
                    ef:5d:0a:0c:90:05:8d:25:c3:d3:98:0a:1f:74:72:
                    3b:b2:90:90:b0:93:6b:ca:d3:70:ce:68:1c:b7:ee:
                    c2:6e:82:78:5a:82:8f:50:27:6b:d6:27:03:e9:1c:
                    3f:42:73:c6:8f:81:fe:b4:ad:2b:89:63:ff:f3:d4:
                    e6:07:ad:36:3c:93:58:8b:04:67:2a:60:1e:31:2f:
                    f4:19:52:34:10:02:10:ec:83:87:03:50:6f:9e:39:
                    ce:a2:05:f0:a2:ed:eb:6c:be:ee:c5:28:cf:56:14:
                    96:cc:5a:ae:72:53:84:67:d1:79:bd:60:74:2a:92:
                    f6:2e:68:98:da:b0:90:85:31:ac:d8:88:09:cd:d3:
                    68:c2:38:8f:7e:10:b8:1d:c7:06:b4:59:79:ed:a4:
                    c2:ea:87:80:dc:9d:4b:68:bb:6c:4a:da:df:09:35:
                    0a:d4:e5:82:0a:9d:75:4b:ae:9c:ef:2c:2c:dc:e1:
                    49:3f:3b:93:af:6d:ab:54:ea:63:91:76:0b:19:b5:
                    ff:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A3:04:CA:7F:79:1F:F4:64:F2:BC:59:2B:09:8F:1F:51:F9:78:81
            X509v3 Authority Key Identifier:
                keyid:D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:1b:ff:ec:86:5c:25:ab:63:f9:2f:84:92:2f:e8:db:0e:fa:
         8a:ca:d0:35:bb:ae:c3:bc:d2:e6:2d:0a:b1:55:7a:22:42:a9:
         3d:8d:6d:94:c8:96:cc:6d:3d:db:15:4c:b1:09:75:6b:a3:e5:
         b8:2d:2f:e9:15:b9:af:b1:77:36:f4:ee:11:2f:65:2b:c3:d5:
         a3:0f:a5:ce:93:50:ad:f8:dc:e2:ae:35:82:db:34:f0:88:0b:
         36:49:7f:b5:59:37:03:35:04:ca:7a:0c:81:b1:5c:0f:80:64:
         9c:4d:e6:2a:c7:ee:f1:8c:13:af:67:58:be:11:dc:87:9f:25:
         65:d6:f2:7a:14:ea:79:2c:b9:34:08:db:1c:d7:d9:a8:ee:d0:
         90:25:da:2c:f2:a7:6a:66:74:d3:b5:17:37:bc:dc:54:e0:fb:
         9b:1d:13:f9:75:ce:bf:e8:03:61:e3:7c:20:31:a5:1c:31:e9:
         da:b0:e8:be:60:24:98:31:8f:4e:27:50:4a:e0:c5:b7:fa:d0:
         04:f5:ae:08:12:28:18:33:f2:d3:3b:e4:d1:c7:ec:ed:e9:fc:
         1d:f1:34:fa:06:ac:b7:cf:56:51:8c:11:72:77:d1:aa:d7:fa:
         83:df:36:42:9a:d2:51:9c:e0:1b:dd:27:8d:c4:a1:aa:da:7a:
         71:de:11:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:16:26 2026 by rpki-client