Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
File:                     n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft (raw, json)
Hash identifier:          MLPlLBaroIwGbYITyERI9Vs0LMpt7NQ5/h+rFCVrfOM=
Subject key identifier:   62:98:FA:C0:D4:1A:2A:16:8E:59:07:37:00:51:19:0C:E5:D3:A7:6D
Authority key identifier: 9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78
Certificate issuer:       /CN=9f8a3c9a9edf644735a94eb09f01cab39855d278
Certificate serial:       019D9BBE26B04488A25FFE638BB27554B414
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
Manifest number:          0D30
Signing time:             Fri 17 Apr 2026 14:00:23 +0000
Manifest this update:     Fri 17 Apr 2026 14:00:23 +0000
Manifest next update:     Sat 18 Apr 2026 14:00:23 +0000
Files and hashes:         1: 3YrPqOPm2HTyKR3X-5RSXy5Hk4U.roa (hash: 5vGo/rzHCgJgztw1UHKfY47yWsIJL5OxKuVDeP97MLA=)
                          2: n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl (hash: fFx1Vscs3dDi4KL+NE+B+5V68WU8ipUqy/8MowNr0u0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:26:b0:44:88:a2:5f:fe:63:8b:b2:75:54:b4:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f8a3c9a9edf644735a94eb09f01cab39855d278
        Validity
            Not Before: Apr 17 14:00:23 2026 GMT
            Not After : Apr 18 14:00:23 2026 GMT
        Subject: CN=6298fac0d41a2a168e5907370051190ce5d3a76d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c0:86:e9:5c:c8:2a:26:16:6e:fb:bf:58:cc:
                    37:1f:55:d6:ce:d5:a9:b0:4a:3a:16:11:87:c3:7c:
                    4c:9f:c6:6b:2d:31:10:9d:57:2c:55:4e:fa:b8:68:
                    62:be:d2:48:8a:0b:da:15:b1:a2:02:33:20:c4:de:
                    6a:39:46:c6:e5:55:d3:a9:97:50:17:8d:08:21:2f:
                    57:71:13:d5:0c:73:96:d8:50:a6:41:e2:66:9a:ef:
                    69:4d:b8:c1:0a:8c:96:61:5d:18:33:48:a2:a8:51:
                    82:a5:a2:10:b8:bb:45:74:bd:59:d5:e7:00:5a:69:
                    75:fb:10:58:12:7f:2b:e2:c9:bf:9d:d2:ab:c9:48:
                    56:66:b7:c9:fe:25:66:ef:62:a3:da:23:a2:18:29:
                    85:c7:b8:fe:04:a4:9c:d4:cc:19:58:ae:e7:14:ac:
                    63:04:3d:60:d5:1b:b9:1e:92:29:c3:d9:75:a3:67:
                    72:ad:f7:2d:1b:99:16:63:ab:c7:b0:da:5d:a6:42:
                    65:37:e8:d1:f8:b5:58:fb:97:91:53:5d:6f:84:1d:
                    3b:59:b8:19:92:26:21:e6:cc:6d:3d:85:69:0d:c0:
                    df:8e:24:56:27:8b:0d:ee:9e:e7:59:e1:7b:de:38:
                    26:ff:09:ab:9d:5c:c6:27:b4:b6:21:e8:e2:46:fd:
                    8e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:98:FA:C0:D4:1A:2A:16:8E:59:07:37:00:51:19:0C:E5:D3:A7:6D
            X509v3 Authority Key Identifier:
                keyid:9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:05:6f:04:75:b2:3d:ef:02:61:6e:58:d2:6a:9e:ec:23:8e:
         0f:fc:5d:49:5c:f4:34:84:7b:77:7c:a3:0d:cf:0e:4e:33:9a:
         5d:b0:4e:65:0b:e0:01:5a:74:b6:1c:9f:69:56:34:96:45:bb:
         0d:9d:22:e7:7e:e6:18:8b:d4:6e:9e:90:91:c0:90:11:79:d4:
         b2:45:eb:12:4a:03:a9:54:40:fa:cb:ba:86:45:9c:73:83:fb:
         32:7c:b5:20:f2:dc:67:6c:d5:6f:c5:b6:c6:a7:b5:05:33:cd:
         16:0f:2a:4f:f3:6e:fd:0a:4a:36:40:d8:a5:ca:1b:2f:7d:ea:
         0a:6c:8b:21:ab:88:e3:3a:b8:90:44:57:54:22:50:bc:f8:a4:
         c4:22:e4:ab:6c:ae:d8:8a:7e:b6:19:86:2d:d5:b9:be:37:6c:
         69:35:8d:52:6f:33:e9:4f:22:bc:07:13:2b:93:96:49:7e:c9:
         ed:e7:7a:81:4b:f8:16:34:02:6e:62:8c:93:a6:e7:cc:4e:74:
         c9:a7:34:c6:82:31:33:af:e2:f4:49:67:3c:8e:6d:7b:61:4a:
         a5:e3:b5:26:6d:c8:bf:6e:e6:a8:2e:8f:a2:c7:8d:0d:dc:c7:
         d4:2d:15:d9:fa:fd:fa:73:0d:a8:a8:6c:cb:b3:e2:3c:c0:79:
         ec:de:4c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:16:57 2026 by rpki-client