Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
File:                     ioludoVA84eh3U_52qS4W6SKkG8.mft (raw, json)
Hash identifier:          IanGEr4+bcrSV2eipyiuOsVrxrB17/7ETZMi8Z0KrH0=
Subject key identifier:   01:0B:79:CA:9E:20:FF:ED:F2:97:5B:BE:94:3A:78:AA:A3:77:BE:FE
Authority key identifier: 8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F
Certificate issuer:       /CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
Certificate serial:       019D9A3E6EB348E119E3D995BA8F1478E0AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
Manifest number:          1205
Signing time:             Fri 17 Apr 2026 07:01:15 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:15 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:15 +0000
Files and hashes:         1: ioludoVA84eh3U_52qS4W6SKkG8.crl (hash: Wrn3eb/acXVLde6hpYZVmCoxsRFh2ONjuHW3qzc1yik=)
                          2: pl9mzp_8YMyJw55sEo1vdEjuXI8.roa (hash: gvQ9YBNcPAS5X5E1J1OqXa8f8Nq/+m7113n6v9qADuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:6e:b3:48:e1:19:e3:d9:95:ba:8f:14:78:e0:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
        Validity
            Not Before: Apr 17 07:01:15 2026 GMT
            Not After : Apr 18 07:01:15 2026 GMT
        Subject: CN=010b79ca9e20ffedf2975bbe943a78aaa377befe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:39:f8:30:53:dc:e8:fc:a9:f7:24:b1:51:ae:
                    5a:df:7e:19:04:40:07:88:ab:b2:e0:7a:f4:e9:1f:
                    11:a6:b6:8c:da:ed:c8:31:ed:6e:2d:c9:b5:7f:9b:
                    7d:fb:7b:45:ff:1b:6e:46:42:7e:c3:e1:f7:4f:a4:
                    ec:0f:f3:40:f1:7f:d7:9d:2b:da:ab:cb:39:9f:0e:
                    76:d7:dd:48:9d:ce:36:1c:88:98:a7:80:a6:10:b1:
                    8e:e6:88:39:03:82:f9:d5:92:2c:00:aa:10:44:31:
                    8b:39:08:20:10:96:d3:02:0f:dc:a0:ea:6a:cb:e6:
                    11:6e:ac:3c:b3:37:f2:49:48:5b:34:14:81:e4:9f:
                    ba:26:80:ba:07:4b:35:94:b7:93:58:2c:b3:1e:e7:
                    e1:06:e8:05:bc:bb:64:c9:a0:84:fa:c9:ff:64:0f:
                    aa:1d:ed:1a:6e:b7:d5:f4:34:7c:3c:b4:1b:09:53:
                    1c:e1:8f:08:46:b3:0e:1b:de:4d:5b:24:b9:81:ba:
                    5c:e6:67:a9:5d:94:0c:12:7e:59:fe:1f:a2:d9:41:
                    ff:07:fc:8d:27:27:3b:15:c5:a4:41:89:a1:16:da:
                    a5:46:05:e6:a3:d1:db:c6:c6:d9:c1:bd:a8:23:dd:
                    02:54:a5:11:37:c5:61:66:bb:3f:08:43:0c:6a:a3:
                    e2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0B:79:CA:9E:20:FF:ED:F2:97:5B:BE:94:3A:78:AA:A3:77:BE:FE
            X509v3 Authority Key Identifier:
                keyid:8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:0a:b9:17:e7:11:9b:93:23:3e:ab:d7:d7:57:98:ea:c9:51:
         45:89:f9:52:6d:55:f3:ab:46:40:4f:ff:2d:f9:3c:63:56:7e:
         af:95:23:dc:84:d5:f8:aa:a3:0b:cc:50:39:7b:d7:28:a0:22:
         84:49:de:7f:18:4b:7a:b3:34:d9:5e:f2:99:ee:82:40:cb:67:
         b4:98:52:ce:85:52:92:11:cb:82:ce:c9:28:fe:1b:e3:8d:0c:
         63:7f:53:a9:68:4c:ae:b9:52:0e:72:54:e9:28:63:00:a4:af:
         de:07:e6:45:bb:6e:21:11:d1:ad:cd:ba:c0:31:92:84:27:82:
         ec:2f:41:c8:34:4e:a7:7e:20:30:19:5a:8b:20:9f:21:c8:16:
         d3:ee:d5:ad:9e:d7:75:18:df:ec:41:77:e6:0e:f5:0e:86:44:
         1c:14:e2:ba:c1:c2:6b:b6:73:fb:54:c4:f9:4f:b6:83:c5:0e:
         b4:e8:5f:4c:f5:7a:1f:e3:70:0b:66:c0:c2:aa:87:e6:dd:29:
         36:84:2d:4c:1f:39:a8:b8:8a:23:df:1d:69:65:b3:3b:db:75:
         df:6d:ab:9a:d3:8c:2f:e5:eb:4d:a6:8f:e2:fc:73:6d:1a:65:
         3e:af:7e:6a:90:d4:87:9c:74:1f:ba:1e:30:0b:88:d5:7e:1d:
         69:bc:07:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:01:55 2026 by rpki-client