Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
File:                     F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft (raw, json)
Hash identifier:          jD7Fn+BJeBpODUzhqieM46sDKBiJTh2RHAw9G6EPKtI=
Subject key identifier:   77:7D:71:42:C9:07:5C:8C:BC:18:23:6C:9E:AA:0F:B1:1C:85:04:C4
Authority key identifier: 17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9
Certificate issuer:       /CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
Certificate serial:       019DA454093E6545C33D896FD99B0CCF6B28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
Manifest number:          0B82
Signing time:             Sun 19 Apr 2026 06:01:03 +0000
Manifest this update:     Sun 19 Apr 2026 06:01:03 +0000
Manifest next update:     Mon 20 Apr 2026 06:01:03 +0000
Files and hashes:         1: Ec-2-sBBaXW1azB4lY6gRGycP60.roa (hash: 3Nh1xOi9IYnh19IBIvJ/NsERowhJFiSYsZXvECqtcPc=)
                          2: F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl (hash: 8qB0Pjxbo5GoZC3JJcMiznl2oppYHJPBk63LVnm1/Ec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:54:09:3e:65:45:c3:3d:89:6f:d9:9b:0c:cf:6b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
        Validity
            Not Before: Apr 19 06:01:03 2026 GMT
            Not After : Apr 20 06:01:03 2026 GMT
        Subject: CN=777d7142c9075c8cbc18236c9eaa0fb11c8504c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c4:2e:d2:30:41:2c:3e:0d:c4:f9:0f:33:2a:
                    f8:6c:31:79:bc:1e:53:a9:0a:82:39:37:1f:ff:0e:
                    08:17:d7:f3:a7:e5:76:1c:41:d5:65:0b:89:90:41:
                    67:55:26:89:ca:56:63:a7:91:32:db:a5:e9:b1:f2:
                    ec:1f:b6:42:44:47:72:1a:c3:2b:32:86:34:e6:61:
                    41:7d:b2:cf:3f:28:38:70:af:09:66:52:8a:6f:9d:
                    05:73:d7:b5:5f:9e:c6:4d:d6:6f:ef:76:83:7c:46:
                    46:2b:a9:d8:a0:97:e8:c6:bd:3e:f3:f2:6a:93:c7:
                    5a:9e:fb:64:09:5a:ad:d8:92:76:9e:87:50:3e:c0:
                    bf:c4:2e:fd:62:2f:b9:81:89:29:f6:81:36:ca:56:
                    07:49:ae:a1:08:70:9c:9c:46:f1:92:b7:e2:32:95:
                    b8:96:82:ee:89:bc:d2:a9:04:df:08:1b:97:a2:f9:
                    8f:ae:64:0d:d4:46:68:03:93:d4:c4:12:e7:8d:2f:
                    7e:14:4d:fd:f0:13:9b:51:a1:ad:04:44:2e:a8:a8:
                    21:80:57:24:05:4e:64:dc:da:cf:5b:8e:d0:3a:68:
                    71:b0:b2:11:de:ec:3c:a3:dd:de:d0:e7:49:54:c6:
                    af:7b:d0:21:b8:6a:b3:a8:e5:c0:07:22:62:e9:4e:
                    7e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7D:71:42:C9:07:5C:8C:BC:18:23:6C:9E:AA:0F:B1:1C:85:04:C4
            X509v3 Authority Key Identifier:
                keyid:17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ba:ec:e7:ec:4f:36:af:9b:20:84:5e:6f:76:a9:c4:d0:12:
         5d:aa:f8:49:02:94:c9:dd:46:77:bd:69:aa:52:6b:ee:65:f9:
         c0:b9:6a:86:10:51:0d:ac:8d:5a:3c:6f:3a:52:8c:1f:77:7a:
         70:59:53:65:8c:65:d5:a9:66:00:45:b9:ef:18:82:bd:68:f5:
         70:22:de:35:e9:28:83:c6:71:6a:2a:bc:8a:3b:85:c4:6f:49:
         97:b3:50:1d:56:04:83:ec:2e:6b:96:24:b9:5d:6f:86:76:99:
         4d:f4:c4:dc:a1:96:e4:57:8a:57:64:e7:d4:ab:7f:4e:c2:b0:
         33:fe:3d:53:fa:c6:2b:d0:dc:96:8d:c0:e2:63:f7:ee:60:5b:
         49:52:8c:97:96:ae:41:c4:3e:cc:06:ba:19:29:55:0a:5f:72:
         8c:0f:11:60:dd:77:10:d6:df:7d:e0:28:3b:6b:59:a5:cf:4f:
         33:3d:1a:52:6d:68:e8:a7:b5:cc:2b:b7:c4:5a:66:31:9f:0f:
         c9:93:b3:f2:61:88:32:1e:5b:32:13:d5:29:34:cd:93:12:f6:
         d5:00:60:79:2f:2e:7b:de:5a:37:22:b8:bd:22:23:28:d7:a5:
         e6:f5:46:c8:73:c0:e6:c7:fc:9a:2d:c1:d7:e2:5b:be:9c:f6:
         03:fd:8d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:13 2026 by rpki-client