Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e7576a-4363-4984-b4c7-b1f29cccce55/1/IPblO2l60mO0uk6kmBQ2aog7VK0.mft
File:                     IPblO2l60mO0uk6kmBQ2aog7VK0.mft (raw, json)
Hash identifier:          WVhgl4UqxgwwqNKw9aUNi+Mmo//t9/V9HPcNo3owzDg=
Subject key identifier:   47:EC:A8:88:9B:0D:F8:77:E4:2A:F8:9C:EE:FB:25:42:49:E3:B2:FC
Authority key identifier: 20:F6:E5:3B:69:7A:D2:63:B4:BA:4E:A4:98:14:36:6A:88:3B:54:AD
Certificate issuer:       /CN=20f6e53b697ad263b4ba4ea49814366a883b54ad
Certificate serial:       019D98BDC6DD9BCBD1D515F65D1CC68F7F51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IPblO2l60mO0uk6kmBQ2aog7VK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/e7576a-4363-4984-b4c7-b1f29cccce55/1/IPblO2l60mO0uk6kmBQ2aog7VK0.mft
Manifest number:          18C0
Signing time:             Fri 17 Apr 2026 00:01:07 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:07 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:07 +0000
Files and hashes:         1: IPblO2l60mO0uk6kmBQ2aog7VK0.crl (hash: 2lvOtP+46jPHIhoVFPrCHz3C6m3qVzR/4QDoVDr2bOY=)
                          2: PUGn7Ab6cMVb76OjXGWaJzUV5BY.roa (hash: iJYYEN2U/S0Cca5PknTdBrcbLrfBr1O6hjipT0an39E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/e7576a-4363-4984-b4c7-b1f29cccce55/1/IPblO2l60mO0uk6kmBQ2aog7VK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/e7576a-4363-4984-b4c7-b1f29cccce55/1/IPblO2l60mO0uk6kmBQ2aog7VK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IPblO2l60mO0uk6kmBQ2aog7VK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:c6:dd:9b:cb:d1:d5:15:f6:5d:1c:c6:8f:7f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20f6e53b697ad263b4ba4ea49814366a883b54ad
        Validity
            Not Before: Apr 17 00:01:07 2026 GMT
            Not After : Apr 18 00:01:07 2026 GMT
        Subject: CN=47eca8889b0df877e42af89ceefb254249e3b2fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:71:bc:c2:39:52:10:e3:ec:f5:2c:8a:fd:de:
                    c2:b2:7c:bb:df:e5:6a:ad:5f:fe:d6:52:86:39:d7:
                    9d:f1:f7:58:b1:5b:52:db:54:65:f0:83:f5:4f:e4:
                    b0:b7:48:56:84:7a:e9:12:ad:69:1b:23:c0:45:b8:
                    0b:c5:d3:75:c7:09:0f:fe:22:75:86:37:3e:22:22:
                    7d:f8:9f:6f:98:8e:33:3d:da:bc:3f:03:d5:72:44:
                    75:ce:1b:0b:f2:ac:7f:2f:ed:6f:c7:90:1f:58:3a:
                    84:a0:ab:37:77:f3:69:73:5a:f8:96:88:d4:f5:db:
                    00:01:d3:66:3d:36:96:a4:81:7f:99:8b:f5:51:5b:
                    8a:de:d9:c6:d5:65:fa:fd:5a:ec:42:d7:ae:82:88:
                    1e:ba:dc:d1:65:42:5c:fa:70:a0:8c:d4:3a:2d:bd:
                    c7:7d:9e:a5:b9:90:4e:ae:1b:19:45:88:29:b5:60:
                    64:0a:0c:2b:1a:46:28:47:d7:12:04:25:10:96:40:
                    52:5c:52:4f:34:af:be:14:a6:b6:cc:d2:56:4a:a1:
                    d3:f1:0a:70:24:2d:e2:b7:db:c0:af:6b:df:c0:14:
                    6e:4c:85:a0:39:3c:40:b8:b8:93:c6:b3:cb:af:c6:
                    07:c8:04:80:e2:8b:e4:6a:f4:4e:4d:62:f5:54:a8:
                    6f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EC:A8:88:9B:0D:F8:77:E4:2A:F8:9C:EE:FB:25:42:49:E3:B2:FC
            X509v3 Authority Key Identifier:
                keyid:20:F6:E5:3B:69:7A:D2:63:B4:BA:4E:A4:98:14:36:6A:88:3B:54:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPblO2l60mO0uk6kmBQ2aog7VK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7576a-4363-4984-b4c7-b1f29cccce55/1/IPblO2l60mO0uk6kmBQ2aog7VK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7576a-4363-4984-b4c7-b1f29cccce55/1/IPblO2l60mO0uk6kmBQ2aog7VK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:51:da:13:bc:8c:9a:cb:89:8b:8c:de:0d:86:4a:86:61:3b:
         ff:f0:0c:0c:7f:9a:ea:e3:fd:d7:10:fe:a6:38:9f:c0:d5:ee:
         ef:44:63:eb:0d:69:a5:79:62:7f:26:8d:16:8f:35:9c:ce:a0:
         68:c7:14:69:99:a4:95:b8:49:25:a4:4f:f1:77:13:01:6c:83:
         de:d6:65:b0:6f:39:ba:09:db:9b:72:5c:23:a2:63:95:8a:17:
         1c:1b:b5:ca:f8:43:7f:3e:d7:67:fe:17:40:0d:90:4e:39:c0:
         a4:dc:7e:29:fd:f0:3c:c0:aa:d5:85:4c:9b:b7:5b:cd:f1:44:
         ff:bd:66:fa:b0:9c:fa:2d:4a:c1:5b:13:0c:5f:79:1f:46:65:
         7f:bf:cb:b8:a5:e2:1d:27:c9:e0:f7:39:10:7b:79:e6:26:34:
         c2:4a:6b:f0:65:98:5c:ed:76:c8:2d:5b:7a:30:c2:b9:e9:ef:
         bf:e7:ad:77:6c:8f:bf:66:1a:98:0c:b3:a7:d4:53:11:c7:e0:
         21:e1:e9:1b:86:b9:ce:fe:71:97:f4:9f:aa:61:6c:25:df:52:
         86:c1:12:c0:dc:20:a8:c5:1d:d5:0b:69:ef:df:5e:92:aa:8e:
         23:10:91:b9:a4:78:b3:28:cc:a0:cc:3f:f2:0a:85:06:16:c8:
         41:65:70:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:18:18 2026 by rpki-client