Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
File:                     mFrmxZw15GA4fa68-4Zvih67NoY.mft (raw, json)
Hash identifier:          YmmafAQ0DqO+4Jn5y3zzc1ixf+OAX6u/mf23YRfmWDs=
Subject key identifier:   54:72:3E:35:15:60:12:9C:95:A4:34:88:74:06:1B:A4:0B:16:97:17
Authority key identifier: 98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
Certificate issuer:       /CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Certificate serial:       019D98187E241B016ED53520ADB5AF1D4013
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
Manifest number:          18C2
Signing time:             Thu 16 Apr 2026 21:00:35 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:35 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:35 +0000
Files and hashes:         1: 6mr_negPNHsR5J0MSqEp_ieYKiU.roa (hash: R2V3SBjHf1L7l3zp37riDQXw6pyaQxn29F6fxbrUIig=)
                          2: GljtY0R1J1ByOdSoq7cvOo-xQ8U.roa (hash: Fqs7S4w69EF6ZT+aB+xuRmBdIVTZ/4rbTRRyrV/zgKA=)
                          3: JIvUMyg919C-AEiCOLhbtlj6cjE.roa (hash: c3tt9IXLSdvp7thburVJzoa0SnXdItptroj1j30Mafk=)
                          4: S2LndCNixy083ZTjbNt_shK0ePU.roa (hash: /dwxq7l7Ax9j0ZmPcwmkPrxtmD1WAiHSHcUMVp1m05I=)
                          5: mFrmxZw15GA4fa68-4Zvih67NoY.crl (hash: eDhuS/kXbieYFkM1cUCPGrYieaCvQAHwGADgwrj71yY=)
                          6: wMBz1OxL3HTz5yYKEtRNA_2ypJc.roa (hash: dgJQac7vUSrU8OsO7dHZl/BzAOs/LTYZ/18knGRwxgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:7e:24:1b:01:6e:d5:35:20:ad:b5:af:1d:40:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
        Validity
            Not Before: Apr 16 21:00:35 2026 GMT
            Not After : Apr 17 21:00:35 2026 GMT
        Subject: CN=54723e351560129c95a4348874061ba40b169717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f4:88:1a:2c:a4:da:a6:67:d0:8c:c8:20:46:
                    f2:3b:7e:4c:40:be:a0:9d:30:fc:35:ce:c6:1d:9b:
                    ec:34:11:ce:8c:95:43:aa:14:b0:06:8c:b6:45:ed:
                    70:09:9e:0b:bc:c0:65:23:97:ee:ef:7f:f5:8d:01:
                    1a:0a:1f:f1:bd:53:df:6d:f9:17:b3:a1:57:a3:ab:
                    27:29:4e:ce:7b:6d:f2:82:e8:a2:0c:cb:37:c3:de:
                    5f:81:71:35:02:6a:f9:2a:c2:75:38:6f:75:c0:f3:
                    64:b3:be:3b:10:70:ba:08:be:3d:2f:66:43:70:99:
                    6d:08:dc:b9:0d:ac:fb:8c:9c:60:a2:20:5c:1e:77:
                    be:11:32:9c:aa:61:62:04:ae:16:7e:d6:34:cf:89:
                    d3:9b:96:2f:27:78:d5:b6:e8:1c:b6:1a:64:55:d5:
                    49:bd:10:74:22:c8:4c:8e:8e:db:2f:c1:5c:30:c0:
                    8b:00:d9:12:fd:6b:3b:6e:97:b1:f6:d3:da:19:04:
                    49:41:ea:54:72:b2:0d:d6:9e:55:ed:44:1a:ec:c0:
                    af:55:b7:cb:b3:82:23:71:27:c4:38:f7:a7:fd:a7:
                    2e:e8:3e:4b:b2:21:da:5c:72:1e:83:8a:5a:80:e5:
                    88:bc:7a:e4:4c:c4:ba:79:d6:ff:91:f7:15:30:52:
                    4b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:72:3E:35:15:60:12:9C:95:A4:34:88:74:06:1B:A4:0B:16:97:17
            X509v3 Authority Key Identifier:
                keyid:98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:9d:fb:95:1a:4b:73:15:58:8e:43:69:28:e2:c6:c6:23:ed:
         61:bc:ea:6c:f4:a3:cf:77:f7:09:13:c8:14:e0:00:c7:7d:73:
         ce:54:fe:27:d0:0b:d9:de:c4:88:50:0b:0f:fd:a5:c3:5b:c8:
         e6:5f:8b:e2:f8:5c:71:0f:e3:8d:2f:14:58:5c:fc:ee:1c:63:
         05:82:9e:d9:78:87:a6:5e:07:ff:41:b5:95:dc:3d:38:f6:c7:
         5f:fb:44:85:43:29:04:2d:3c:1f:89:73:db:65:33:09:d7:c3:
         49:f1:32:57:61:8d:cd:2a:0f:d1:17:a5:6b:45:e7:20:04:17:
         9a:2d:2e:14:a9:ff:75:af:18:66:0f:60:e3:6a:63:25:7f:77:
         84:68:95:61:9a:48:0f:79:ab:68:36:96:0f:7c:4e:a9:7c:f2:
         5b:e5:93:87:68:e0:bb:fb:55:33:9d:55:96:6d:d7:54:2f:03:
         6e:d2:17:c6:b5:08:e9:a8:b8:5f:eb:ad:83:00:9d:47:2a:46:
         b5:ab:22:2b:86:12:6d:3b:6a:84:a9:14:49:8b:d8:9c:ea:35:
         d9:dc:60:c4:0e:ba:1b:cd:3d:71:2c:59:0f:77:e1:04:04:84:
         6d:1a:4b:7c:dc:73:30:85:ac:0f:bd:09:e2:c2:71:da:cf:e2:
         94:aa:0b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:08:26 2026 by rpki-client