Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
File:                     Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft (raw, json)
Hash identifier:          P+Ol6dKwFAIaHgeIpW2LUX/gNUxmofejgJT3X1Re/eE=
Subject key identifier:   78:18:45:D2:FF:9C:04:31:45:E0:D3:34:B6:7A:48:0D:B6:F7:CC:E6
Authority key identifier: 1A:88:F4:29:ED:C8:6A:A8:7B:B3:A1:77:17:CE:A7:1C:70:87:3A:F2
Certificate issuer:       /CN=1a88f429edc86aa87bb3a17717cea71c70873af2
Certificate serial:       019D992B7C1CAFBF758B35B3D16DC26E3280
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
Manifest number:          1514
Signing time:             Fri 17 Apr 2026 02:00:56 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:56 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:56 +0000
Files and hashes:         1: Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl (hash: HAYEa+1/aj51fWW+2FS3AOk4DkglEJryWq9S6zkle+8=)
                          2: O2yqyVYgMd1D21b33Ew-cuZUWKs.roa (hash: mXmtbWNjV9pCi5BRUwRDhllYcEQ3x1WSO9bUZGlzGjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:7c:1c:af:bf:75:8b:35:b3:d1:6d:c2:6e:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a88f429edc86aa87bb3a17717cea71c70873af2
        Validity
            Not Before: Apr 17 02:00:56 2026 GMT
            Not After : Apr 18 02:00:56 2026 GMT
        Subject: CN=781845d2ff9c043145e0d334b67a480db6f7cce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e4:60:bf:83:31:e8:d5:96:50:2b:61:1f:12:
                    2a:a5:60:25:65:27:17:17:28:4b:9b:15:cb:19:13:
                    22:6b:b6:51:41:56:57:c2:f6:6e:1c:1c:aa:37:86:
                    95:41:26:4e:ce:e7:fd:a5:7a:3f:5c:75:d5:fb:b9:
                    92:b5:9d:ae:d3:f6:ef:20:32:a6:81:f0:07:b2:d5:
                    8b:af:65:41:ad:99:80:9d:04:38:5c:56:c9:8b:e8:
                    c1:ab:ba:92:8f:e5:47:49:2b:5f:c4:a3:7e:ad:98:
                    50:4c:ee:32:9e:43:af:a7:30:57:0e:bb:e8:36:bb:
                    f0:50:52:4a:7d:cd:b0:23:b0:8c:b5:c0:d4:36:b1:
                    5a:89:af:3c:cd:49:39:6a:b2:9e:36:99:33:02:8c:
                    ea:72:a9:ab:d5:9b:fc:8a:11:14:2e:31:8f:56:04:
                    f7:54:3f:5e:58:3f:bb:00:40:fe:bc:c5:fe:4c:c7:
                    7f:f1:23:2e:da:01:f0:99:6b:29:16:5d:09:cb:3c:
                    1b:b8:b6:e5:7c:f4:12:b9:ff:8b:95:59:26:43:2c:
                    8e:11:30:c8:eb:e6:59:91:de:9f:ee:7d:89:52:5b:
                    9d:b1:46:83:4b:9a:3d:98:08:ed:5d:f7:24:14:16:
                    93:5e:f8:4a:c8:07:93:40:99:d1:88:38:81:8a:33:
                    c9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:18:45:D2:FF:9C:04:31:45:E0:D3:34:B6:7A:48:0D:B6:F7:CC:E6
            X509v3 Authority Key Identifier:
                keyid:1A:88:F4:29:ED:C8:6A:A8:7B:B3:A1:77:17:CE:A7:1C:70:87:3A:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:54:40:23:5e:07:07:cb:33:3c:8d:fa:d0:48:59:ac:71:8b:
         05:6c:f1:d3:0a:36:1a:01:c0:70:2d:8f:9f:f1:1a:9b:5b:53:
         53:1c:31:fc:6c:ba:c6:af:4e:db:87:c0:a1:9f:90:f5:2a:a6:
         28:06:6c:b2:4d:67:6a:75:19:b0:6d:6c:4d:01:08:f6:73:e8:
         99:2c:16:61:73:d7:96:80:f6:d7:ce:c7:e6:48:81:3b:0f:28:
         08:c9:03:f0:30:db:38:c7:85:b5:e2:2f:0a:f0:18:d6:e3:21:
         e6:e1:3d:c1:da:16:ac:ea:cc:e4:2d:05:fd:cb:3e:2c:94:b0:
         f1:34:18:de:51:fd:6c:06:b5:0b:2b:3a:6e:ef:f3:71:c1:61:
         f8:a1:77:e5:ca:4b:24:a0:34:b4:09:e1:37:7d:a3:79:56:f6:
         25:c8:74:ee:49:31:93:8d:a8:77:b2:3c:5c:4a:21:06:d3:cb:
         78:b3:84:99:23:a6:f4:d9:6e:05:84:76:eb:70:b1:f9:86:d5:
         7f:8c:70:d2:60:b0:33:23:05:84:f4:df:6d:61:b4:98:6f:f5:
         41:86:c2:c0:dd:3e:af:02:e5:8a:64:4b:90:80:f1:c1:73:29:
         59:1d:e6:70:88:28:46:a7:dd:4f:fc:d5:ab:75:52:8e:c0:66:
         96:99:31:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:19:12 2026 by rpki-client