Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
File:                     1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft (raw, json)
Hash identifier:          ans2cUPRv8GoCKQmv2mroIXLq/2XyWR0kA43T4PkvDg=
Subject key identifier:   00:0E:0B:63:3C:29:04:27:1B:DE:EE:EB:68:94:84:0C:8B:AB:BF:DD
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Certificate issuer:       /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial:       019D9C9A68C15591B4ACB0777C55E4749573
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
Manifest number:          18D0
Signing time:             Fri 17 Apr 2026 18:00:58 +0000
Manifest this update:     Fri 17 Apr 2026 18:00:58 +0000
Manifest next update:     Sat 18 Apr 2026 18:00:58 +0000
Files and hashes:         1: 0cWx-DBEWXofQGq4uONjR9-bH4Y.roa (hash: pTkOoFQAT359monWmVl8M1BT8bJvgYKuEr63L6+DXH0=)
                          2: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl (hash: gCZs7eU5wScC7U/QIvr4GHlwh3EMfIestYAj36sbWPU=)
                          3: AoOT9bGlJWd-TIRNHpKTWvzqPSY.roa (hash: Zi71VPuABO0kIOBrih/loFOATBl1klL+p6nG7AFF/d0=)
                          4: Bcd1BhwhrloaAtNtyP-2iXTXB5A.roa (hash: dwpLC5kz/iKWj1XEBoyZJZ2yN/0XmLy1ykd/NJpK0sU=)
                          5: EUgnWUs3CsfaZnj_hnNyvxreJoQ.roa (hash: pJY6CLyIZmy66AbMBmwM31A1sACoy25h4xx0+iPYYKE=)
                          6: MP5IdtDl7YEwuRNByyv8kDyAVco.roa (hash: vqDoHpH/1+pER1chx+gV6UvPLCxswhMzI5LmhtQHsu4=)
                          7: TJn7hrwQDusGI6b-JvzCy0ryuuI.roa (hash: jB76SwGUuXPBEx6T4Yw/Gggaft9shy0ZMidb4G0i9nM=)
                          8: UNIm3YXiMDOMkRxhMMlo6vVHArk.roa (hash: Tj2pYqF/A8kH66w2NIt64SQxibERr8EqlG3Fz5Bjgag=)
                          9: UX6g7KL9WRWy9Rrda_z2jmHwIg0.roa (hash: NgIQIWjEkGD0w0vEE9BTQb05Jn1iZvBqKIdoPQLt1R0=)
                          10: XUiE35ZJ3I6RBM2rDx0ESiNgluI.roa (hash: k03+qzTCxQ7lrjUzBfLF9RxlBcgnBj56L5MGzoB6xFA=)
                          11: _6SUA7PKYEVFBTaDAhE_A7MmF48.roa (hash: uJO3tMs1LSBIuJd7osQRiXv584cj5QanzKyRrYPze+w=)
                          12: cOTwaK6RSeeGqDttEyYUstwdoCE.roa (hash: alEZzagowBG75tk1HZniA5+5QPNp5iyxbE6HUR50PHQ=)
                          13: fJWzhiz6ayYsqM8kzsREYtIJBgI.roa (hash: N8Chz/wqQxJEwp3lnnRBhU8gdawDyJefdia645ECTwg=)
                          14: gfMRF0Nj1ChxrdQTcKCsvqZqzRA.roa (hash: VFwJmY7TYTF5JsUpp282lqGtLaHhhYMOSpBJGNGXiME=)
                          15: q7ctECBBEGOXl7uVauozGHraScs.roa (hash: gH9pmibDk4Ofnm2E38XD3fGrNK+1ocC6xSl5pld1ojw=)
                          16: qyuH8NgRhRZdTsIxcPjney8uG5Y.roa (hash: n0uUMyMPIGkKTSZ3n9g1M0rkf82uD6ttedakSVtd8tQ=)
                          17: vhCKx6YE6UZfYQ_y2if0T0sJx9A.roa (hash: 4GxEPZps/hQabeBQl+bTu8j92zD3sd9eABLT3Mr/M3g=)
                          18: x0r6XLUbiGOM5wv_gPZskGbu2oc.roa (hash: cdp8ZKRLyyEX1Hh8O5VsarJhdWV3a3wqBRxkXALsMf0=)
                          19: z1vIHaPgOEf1CFFXxVhQ7UIS68w.roa (hash: rFdz4/+higPiFTrvJsOTs2dDOqXP1ja44+BB/HAKISI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:9a:68:c1:55:91:b4:ac:b0:77:7c:55:e4:74:95:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
        Validity
            Not Before: Apr 17 18:00:58 2026 GMT
            Not After : Apr 18 18:00:58 2026 GMT
        Subject: CN=000e0b633c2904271bdeeeeb6894840c8babbfdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7c:a7:95:05:0c:96:67:eb:59:22:50:69:6e:
                    c1:2f:89:d6:8c:43:b2:f2:b9:66:b9:d4:f6:e8:18:
                    de:56:93:b0:d6:33:52:ad:0a:00:a2:01:84:e0:48:
                    77:76:d7:a7:17:2c:94:c6:1c:ff:33:37:9c:ba:5d:
                    af:c6:96:6b:2e:3a:08:ec:e1:c7:46:a0:7d:8e:2e:
                    87:4f:fc:00:2d:b4:cc:1d:3c:f2:9d:18:ec:ba:51:
                    4d:50:04:47:88:ee:3c:da:e7:bd:36:4e:a8:f0:55:
                    05:ae:90:cd:59:ea:60:23:0c:33:1a:15:7c:38:77:
                    82:cb:44:d3:32:c6:44:65:e9:43:0f:95:ac:51:dc:
                    2e:67:75:11:39:99:84:09:14:16:ed:11:db:48:ae:
                    f4:e2:d7:c6:97:ad:2e:f4:62:e3:cd:b3:f4:aa:fa:
                    e4:f3:f3:df:fa:80:9e:24:c0:5e:51:58:3f:9c:9f:
                    2a:ab:94:9c:8b:b0:f9:09:94:74:ae:f6:45:fc:a2:
                    41:c0:c9:d2:64:f2:7a:6f:47:fb:7d:ed:c0:2d:27:
                    52:9d:0e:88:06:1e:d9:12:47:d4:d4:9c:2c:f0:7f:
                    9d:c9:04:fd:c3:a4:b5:4f:b1:28:ac:a6:4f:39:92:
                    01:d1:7b:7e:8b:df:d5:da:1e:70:52:7b:40:cf:ab:
                    32:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0E:0B:63:3C:29:04:27:1B:DE:EE:EB:68:94:84:0C:8B:AB:BF:DD
            X509v3 Authority Key Identifier:
                keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:5a:27:38:d3:8a:42:c5:99:bf:24:9c:b7:68:af:22:34:12:
         6e:cb:f6:a9:b8:80:15:81:fd:ef:d9:e0:40:68:5f:b4:64:eb:
         84:72:4b:de:2e:f5:d7:a7:ce:a6:75:0d:37:e0:28:81:31:37:
         6a:8a:84:dd:22:5b:c1:9f:31:1f:db:d0:7e:7c:d3:3e:21:70:
         2e:b5:d1:7d:ef:f0:96:34:1f:09:6b:58:a4:5f:fe:0f:10:0d:
         5d:50:d8:9d:3d:bb:9f:84:fe:9b:09:29:51:14:03:16:41:a7:
         81:e1:e2:2e:42:2c:87:e8:b7:a0:1c:73:3e:ea:8e:fd:11:91:
         d7:42:93:55:60:1d:fa:23:d5:f5:c8:81:25:f5:12:87:ee:44:
         f2:0e:08:b5:2e:46:8f:93:f6:25:33:91:35:e5:90:0d:2a:74:
         96:75:36:92:79:6f:0f:28:53:f7:20:93:f0:3a:5b:37:7d:c1:
         1a:ef:aa:2d:99:42:99:df:0d:49:c1:ba:f0:d3:e9:d4:1e:41:
         47:a2:1b:4c:6b:0d:8b:80:d9:c4:41:a0:5c:11:4a:25:df:ef:
         7e:77:dd:08:e6:82:06:06:7a:64:d0:6b:81:a3:ec:ca:43:3a:
         6a:51:90:fd:b3:68:35:dd:df:a4:4e:77:1b:64:47:a1:94:ac:
         4f:77:3b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:50:25 2026 by rpki-client