Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
File:                     1P9RiRrUTBZt7roTFZZsmh2DkJc.mft (raw, json)
Hash identifier:          jIEcIkAvGiqJjwdIMXVvXXLqm5K8MDlOr4DspP0ZT4g=
Subject key identifier:   1C:52:33:20:7B:05:E4:D0:E2:7C:08:67:87:2E:DC:B0:B6:F2:F3:D5
Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
Certificate issuer:       /CN=d4ff51891ad44c166deeba1315966c9a1d839097
Certificate serial:       019D9B8794597314FB179D2AD362502445C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
Manifest number:          054E
Signing time:             Fri 17 Apr 2026 13:00:46 +0000
Manifest this update:     Fri 17 Apr 2026 13:00:46 +0000
Manifest next update:     Sat 18 Apr 2026 13:00:46 +0000
Files and hashes:         1: 1P9RiRrUTBZt7roTFZZsmh2DkJc.crl (hash: e7Y3Kcw/taCu+wTVRM7Y36Piq+GRNUCneNm0c/t0Ezk=)
                          2: Z41uijNFQ0G-iZW7PiDpJ2EAmv0.roa (hash: AfUXmqvyv0xkNeTqOicnT0Mi5qeFfpzbGMDou/p87aU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:94:59:73:14:fb:17:9d:2a:d3:62:50:24:45:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097
        Validity
            Not Before: Apr 17 13:00:46 2026 GMT
            Not After : Apr 18 13:00:46 2026 GMT
        Subject: CN=1c5233207b05e4d0e27c0867872edcb0b6f2f3d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:33:ec:48:28:36:79:75:29:d8:9f:c4:c4:ad:
                    eb:25:65:81:fa:fe:63:8c:45:e6:79:59:bb:be:5e:
                    f6:b0:8a:76:2e:f0:10:53:80:94:a0:60:57:ec:e9:
                    4c:4e:e8:e9:31:3c:e3:02:5c:dd:1e:d1:da:74:86:
                    c4:68:b6:08:8c:23:23:eb:d2:33:ee:d9:82:e7:c4:
                    5c:09:9b:ef:de:84:04:2c:4a:88:a0:b6:7c:f3:a9:
                    a1:21:86:2b:d1:73:f9:69:e3:a1:aa:b0:52:61:10:
                    1c:32:b3:0e:ef:6a:24:33:4a:b4:e7:36:e6:9d:ed:
                    39:e0:20:ee:87:94:4f:cd:e7:bf:aa:00:79:c6:be:
                    1a:71:a9:e7:d0:ee:ba:38:03:b1:42:8b:19:74:17:
                    42:fa:80:f7:4e:60:c2:2e:5b:df:38:90:de:dd:54:
                    f6:17:b3:78:5c:7b:a2:e2:67:aa:a0:1d:19:d5:f1:
                    72:97:b5:d9:73:98:f8:5b:7b:f4:f0:09:de:d9:c0:
                    3d:b9:97:2f:fb:54:c4:b6:73:99:0d:ea:f3:3e:e4:
                    68:06:e0:ed:b7:ad:9e:54:c0:e9:f4:d9:65:63:36:
                    e1:17:90:f2:bf:53:40:65:a6:06:cb:00:d2:f2:59:
                    72:e2:5f:3b:d3:a0:0e:7c:98:f2:a3:25:3f:3c:0b:
                    98:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:52:33:20:7B:05:E4:D0:E2:7C:08:67:87:2E:DC:B0:B6:F2:F3:D5
            X509v3 Authority Key Identifier:
                keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:7b:28:33:a3:2f:b8:9d:04:2a:06:bc:b1:ce:7b:0e:4b:76:
         46:0e:b2:93:db:24:69:94:e6:3f:cf:86:bd:1c:c7:33:3e:69:
         22:9d:4d:61:e9:0a:a9:66:c4:1e:32:47:bf:2f:8a:7b:46:e4:
         bd:c6:0b:89:a1:3e:63:5d:48:d2:70:e8:bd:4a:7e:26:db:1e:
         b7:cd:2f:94:cf:8c:71:8a:31:7a:95:9b:05:68:94:26:13:d2:
         08:9b:5d:ba:c3:77:6e:13:95:a9:2b:b6:7f:3b:62:35:02:3b:
         f2:3c:f6:59:ab:ef:e2:89:f7:6d:61:15:c9:19:80:e2:0d:a1:
         cf:fd:cc:60:98:9b:3c:a8:8d:c7:79:5a:3f:56:76:5f:9e:8d:
         c6:ee:a5:6a:b9:ed:d6:30:05:ab:91:02:21:05:e0:3c:f5:cd:
         68:ed:14:cd:31:b8:ad:f0:cd:6f:ba:b1:bd:54:7b:85:2a:d7:
         e6:fe:f2:19:7e:23:10:3a:6f:56:a9:51:28:22:cb:2f:28:f5:
         50:5f:95:d9:6c:f2:59:9a:83:ba:6c:c1:74:bd:b1:40:76:10:
         fe:20:9a:c3:45:bc:49:89:af:b4:e3:55:04:0e:60:84:73:f8:
         33:eb:18:ed:4d:de:6a:d7:b0:e7:77:00:85:b5:75:47:43:9f:
         1e:83:26:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:23:00 2026 by rpki-client