Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
File:                     M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft (raw, json)
Hash identifier:          H09t2zreoVn61rBO5qyG2mpfP6rZGqOALcEgZ8oaOmo=
Subject key identifier:   D9:02:54:83:F5:85:81:FC:4E:79:05:65:FE:D1:06:9F:80:9F:F3:26
Authority key identifier: 33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80
Certificate issuer:       /CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580
Certificate serial:       019D9AABF8E0A97DA21531D0C430408DA43C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
Manifest number:          11D8
Signing time:             Fri 17 Apr 2026 09:00:54 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:54 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:54 +0000
Files and hashes:         1: JY_xv27BSE0PmJzxtxeH3ELGERo.roa (hash: 7ZqKA1QkpMvfCfkiUQ38tlesyzt3GalUpSbgM/pSlcA=)
                          2: M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl (hash: X97PUKawQzuxqPl6vjGOQVLcwpfMXOtKOhj7GKoMdrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 09:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:f8:e0:a9:7d:a2:15:31:d0:c4:30:40:8d:a4:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580
        Validity
            Not Before: Apr 17 09:00:54 2026 GMT
            Not After : Apr 18 09:00:54 2026 GMT
        Subject: CN=d9025483f58581fc4e790565fed1069f809ff326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:54:fb:69:d1:98:78:0b:96:83:a9:e4:de:
                    5d:e0:4b:8b:76:18:86:3f:88:5c:2c:1e:8d:9d:20:
                    f4:a8:d8:d0:06:9f:3f:7a:7c:56:e9:66:04:d9:dc:
                    97:a5:d7:6a:bc:78:35:74:0b:8e:e6:4f:e0:bc:8c:
                    c2:92:04:19:5f:a1:6a:3b:7c:dc:a5:39:66:ad:d2:
                    94:53:da:4c:2d:f3:f4:2e:99:07:43:d6:82:86:d7:
                    29:e3:3c:61:26:47:f2:c4:65:51:86:68:0b:1a:c7:
                    7b:25:69:d1:fe:3c:52:09:46:5c:42:23:b4:75:72:
                    6f:cd:ef:fe:cf:bc:c3:aa:0c:29:88:dd:a8:67:2e:
                    87:14:cc:3d:ce:91:a8:2b:7d:eb:03:6a:8a:91:4f:
                    f4:d9:2c:7d:bb:d4:ff:34:91:44:27:df:dd:26:8a:
                    2d:99:89:db:d3:db:66:b4:71:34:5f:76:54:f5:5e:
                    e9:53:a0:aa:f7:ab:4f:d9:40:fc:7d:d2:5c:84:75:
                    4a:4e:4e:88:e1:90:97:7f:7e:5c:f9:61:ea:f0:7b:
                    9f:f9:a4:65:d7:48:4a:2d:32:4e:01:e3:6b:ac:e4:
                    12:12:1d:fe:bd:8e:74:0b:00:b9:f5:31:79:87:20:
                    82:47:c5:5d:95:3a:e0:8b:5e:9a:10:78:1c:f4:b7:
                    51:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:02:54:83:F5:85:81:FC:4E:79:05:65:FE:D1:06:9F:80:9F:F3:26
            X509v3 Authority Key Identifier:
                keyid:33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:17:d8:50:66:13:58:b8:ab:63:e9:95:76:10:60:a0:16:c2:
         6e:7f:5b:1d:8a:a9:c3:4f:65:d6:9e:b0:01:b5:0f:c2:6d:6e:
         c7:e5:d1:00:4d:04:ad:99:94:1c:c8:5f:a2:cf:e5:58:a8:e9:
         bb:80:d6:b3:a1:f9:71:0e:26:f9:2b:bf:93:b6:9f:76:97:21:
         81:fd:47:0c:3a:4c:7f:66:64:63:56:e8:1f:7c:28:c1:be:96:
         ce:40:ff:e7:57:50:d8:c7:1c:44:49:23:13:b9:85:68:28:ce:
         0b:74:45:79:21:97:dd:eb:33:62:7d:74:76:dd:0e:c4:8d:ff:
         5f:24:50:69:6c:fb:ad:fa:6e:22:e6:2d:2f:5f:95:49:91:53:
         d5:4e:f5:3f:d3:76:b3:43:2a:6e:ad:01:d4:1b:7c:f3:d7:40:
         0d:0d:a1:6e:97:3a:1b:36:49:db:d0:cc:79:ff:5e:5b:f5:e3:
         26:03:c3:90:03:2d:0d:e5:ed:90:bd:15:48:01:9b:fc:9c:57:
         e2:4e:85:cb:00:6a:91:f3:9d:75:d1:2b:f3:80:d1:39:2c:97:
         0a:d5:45:97:52:f1:90:b4:fa:b7:b6:d7:90:65:60:93:8e:e4:
         87:1f:81:77:e9:ee:22:ac:ca:55:20:09:ff:08:f6:c0:71:4c:
         5e:9e:8e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:39:07 2026 by rpki-client