Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
File:                     0qurdedG2x7KqZh1mQA5lIUJMCc.mft (raw, json)
Hash identifier:          EKAibE24CBINbBqPfzTUxTL23teVS1TRsM+zdGNyuOo=
Subject key identifier:   4A:30:4A:36:7F:45:6C:05:F6:0F:E2:DD:15:F2:F0:81:92:42:B1:DC
Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
Certificate issuer:       /CN=d2abab75e746db1ecaa998759900399485093027
Certificate serial:       019D999951DE427D26BB15B8DD82673F9557
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
Manifest number:          104F
Signing time:             Fri 17 Apr 2026 04:00:55 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:55 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:55 +0000
Files and hashes:         1: 0qurdedG2x7KqZh1mQA5lIUJMCc.crl (hash: YXbQ96iYYNWlpFEWt7wrjY7/uaq4FNLs3L2mLQN8vTs=)
                          2: v5IXCnTZ04y2d9WWLRJA3XUiJ2Q.roa (hash: XiQ/nHqmOBxj0EoQgjKCVpu4MAjbfP9RThmf0ShdsEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:51:de:42:7d:26:bb:15:b8:dd:82:67:3f:95:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2abab75e746db1ecaa998759900399485093027
        Validity
            Not Before: Apr 17 04:00:55 2026 GMT
            Not After : Apr 18 04:00:55 2026 GMT
        Subject: CN=4a304a367f456c05f60fe2dd15f2f0819242b1dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2b:58:f8:35:97:53:66:65:5d:b2:f6:1f:04:
                    9d:1c:f2:fc:17:d3:c7:62:35:bc:00:73:e9:a5:c6:
                    d8:4a:ff:f4:aa:72:87:ed:96:f6:e0:07:5c:1f:d2:
                    09:aa:a5:bc:b4:b3:f6:8e:cf:d9:54:e3:64:a3:1e:
                    a2:ec:a6:1b:19:2b:3d:ec:c5:3a:1d:0a:60:e4:e5:
                    a4:95:41:63:06:3a:54:08:0b:54:66:f1:88:4a:cf:
                    54:4d:e2:29:28:5b:0c:ba:65:d3:a7:0e:0a:a4:d2:
                    7b:2a:63:55:1a:ac:1b:bc:71:24:77:b6:0d:bf:56:
                    37:d4:51:3a:8d:0c:79:98:a9:c3:44:9d:3b:c5:24:
                    e4:24:1c:f4:15:86:3f:93:5d:e6:39:51:f7:bc:dc:
                    3f:fc:55:d4:ea:00:2f:db:6d:08:a2:be:bd:2c:39:
                    c1:d1:33:77:44:8a:a1:97:f0:92:ec:75:a9:d6:79:
                    52:8c:17:49:ee:d0:a1:69:81:3c:a7:ed:32:f5:e9:
                    73:3a:59:c4:c4:e3:09:9d:e8:6c:7f:ab:5d:a2:95:
                    de:9f:8f:ea:53:a6:3c:a8:9f:68:89:d9:9a:1b:2b:
                    f8:7b:d9:aa:34:68:3a:00:47:5d:86:20:c5:89:96:
                    54:5f:ec:58:8a:f8:59:80:46:97:bb:04:ad:6e:8f:
                    4e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:30:4A:36:7F:45:6C:05:F6:0F:E2:DD:15:F2:F0:81:92:42:B1:DC
            X509v3 Authority Key Identifier:
                keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a1:3c:6b:07:d0:6d:44:3c:d7:78:fc:9a:83:32:9e:ae:ca:
         52:78:fa:df:5e:a3:cc:94:3d:a9:28:f9:18:9c:81:19:5a:67:
         17:f1:65:0c:af:86:7a:05:cc:88:6c:58:ab:96:d6:e7:30:5f:
         8c:06:c9:9a:5a:db:df:6e:fc:9e:39:71:dc:a4:ed:9d:6d:33:
         06:a8:28:fa:1c:e8:cf:c1:37:89:f4:9d:dd:c2:58:da:af:d3:
         49:1d:1d:3e:9b:c8:16:8a:bd:61:23:dc:6e:87:2b:98:7c:9c:
         e7:e4:4b:23:10:49:70:4e:27:a8:2f:dd:5b:fa:47:54:c5:2d:
         b7:3f:9f:36:aa:a0:1a:7a:be:36:16:56:fb:7e:6a:2d:bf:a8:
         8b:54:3c:4e:55:bc:c1:71:9b:68:d9:9e:50:84:52:b7:fc:94:
         52:53:ac:6a:95:cb:29:66:3e:68:c8:6e:75:03:6f:e1:ac:8c:
         c0:dc:38:31:55:9c:86:a1:91:6f:ef:83:7d:98:c8:55:7a:33:
         97:40:73:76:1c:72:ee:85:e6:36:04:94:7a:f0:4d:4b:15:fe:
         69:8c:d6:ff:f0:a1:77:2f:5f:be:31:85:fd:b0:43:d0:02:6e:
         c7:d0:1f:f0:19:c9:76:42:dd:2f:2a:ef:51:d3:32:93:f9:ab:
         a7:38:d3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:58:03 2026 by rpki-client