Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
File:                     g8ED1lpU1q8e-6asPmNyICivK7E.mft (raw, json)
Hash identifier:          PZcT8YRimbLHq/eYfyWfrsef4ycSNjhmBoyiwvw7URw=
Subject key identifier:   A9:10:C2:93:29:1A:BE:FD:D1:8C:09:FD:B9:E5:BC:A8:84:9B:84:9A
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Certificate issuer:       /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial:       019D98F4DAE81D1A73B899BB945D3704A1AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
Manifest number:          1011
Signing time:             Fri 17 Apr 2026 01:01:16 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:16 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:16 +0000
Files and hashes:         1: 3Ji8ZxtqU_lIwKa_SqT03tF5SWE.roa (hash: jTuElWfRQSD5SofMMRCQ0LeEwPmYlDKmyuYEtvYSFDY=)
                          2: W5VTroF4zcGApX3Giz89KR2_wWg.roa (hash: GNfQgd1tr7xOtZa17O8ZeusFNmCf6n9fTIUFI6Sv0mk=)
                          3: cWuGeJ6gM-3ve4HkKVmEZUSc7S8.roa (hash: P0kghOMwSQUMU4gKXJ4ASB+7Zwvt3QGVEmH46AdBNrw=)
                          4: g8ED1lpU1q8e-6asPmNyICivK7E.crl (hash: iU2xi+c5LBiTQ9ZgsZz8f++S1BzM7f9rGwvSwLUvSSw=)
                          5: i1BjMoSXoEWlc23if0J_xkTVNk8.roa (hash: l69kedN+dgUtEyfn899iCFRNjGmUnUexKwv+aYvezR4=)
                          6: mI1bOyES1SUvd3jXkMpsFL9UDNs.roa (hash: G8pWjV9esRmq6YgXU83pAW+6b6j1UXEhnMOTBHJgNSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:da:e8:1d:1a:73:b8:99:bb:94:5d:37:04:a1:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
        Validity
            Not Before: Apr 17 01:01:16 2026 GMT
            Not After : Apr 18 01:01:16 2026 GMT
        Subject: CN=a910c293291abefdd18c09fdb9e5bca8849b849a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:e4:06:c9:52:c7:10:aa:55:23:e3:99:e0:e0:
                    83:eb:26:d1:7e:cb:c8:8d:e0:56:f2:75:2d:9b:01:
                    29:dd:d1:31:5e:b5:bf:c2:49:10:6d:76:2d:53:b0:
                    8d:14:66:f0:e0:99:89:d8:2d:81:a7:06:84:94:0b:
                    39:6c:8c:cb:78:3d:0d:f4:e1:56:65:77:70:5a:81:
                    0c:26:23:ff:47:14:b6:77:dd:68:f8:f4:ca:32:9d:
                    c1:8e:04:8e:05:4f:a1:37:ca:21:e5:1d:9c:6d:bd:
                    ac:76:e9:cc:29:34:15:98:31:5c:d3:a5:14:57:c3:
                    60:ce:54:82:15:58:10:69:ea:0b:f7:61:f9:a2:94:
                    00:e1:fb:c4:2a:d7:0c:41:82:9e:58:73:73:a5:27:
                    dd:c9:d7:f1:93:1b:f4:68:b3:74:d2:e6:92:a0:fb:
                    71:c0:19:2d:1e:bc:11:0e:b3:05:d7:fa:d8:0e:82:
                    46:b4:c0:75:8c:48:f9:22:00:1a:84:1c:5c:67:5a:
                    75:8c:7a:0b:13:f5:f8:7b:ff:ef:43:3c:54:27:70:
                    5c:12:4d:70:f7:4c:41:5f:61:ea:f3:dd:b8:dc:f2:
                    69:09:6e:5b:f2:e9:ac:7d:9c:14:44:d6:75:20:b0:
                    84:e4:d5:58:b5:75:f0:7b:ec:5d:09:63:ce:04:c2:
                    f8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:10:C2:93:29:1A:BE:FD:D1:8C:09:FD:B9:E5:BC:A8:84:9B:84:9A
            X509v3 Authority Key Identifier:
                keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:b9:fa:a2:9d:29:32:68:89:cf:3d:d5:d0:19:c0:dd:48:8f:
         e8:70:f1:d9:f6:5c:6c:f6:eb:04:73:d7:5e:2e:55:8a:78:4b:
         77:f3:f5:05:bf:92:fc:93:bc:49:c0:e1:c7:3d:da:25:58:fb:
         0d:84:a8:78:28:f4:70:6e:07:b7:3c:58:29:35:7e:4f:c9:69:
         12:84:b9:a0:48:c8:61:78:a2:a7:b3:75:8d:ae:f7:e2:97:64:
         20:86:f9:53:22:bc:ac:ef:c4:e9:4b:70:0d:1f:28:b7:a2:63:
         a9:8a:ed:56:3f:58:c6:13:b8:93:b6:de:59:6b:22:63:54:2f:
         4b:fe:df:fd:90:56:07:00:75:0b:e4:e1:bd:85:64:00:b1:6c:
         8f:0d:82:c5:9e:39:88:f1:04:77:a7:b2:7a:fb:0b:eb:b6:4b:
         ed:0b:bd:30:ca:66:ae:13:22:e1:b5:7b:f7:63:83:b9:58:72:
         eb:c2:3b:4a:a5:37:f6:01:97:20:fa:fc:05:d9:9f:80:0a:2c:
         6d:a9:e2:8c:d4:80:72:a7:24:bc:09:ec:58:e1:85:be:29:c4:
         ff:5d:3a:40:00:ab:a0:f4:9f:96:0f:54:9b:53:ac:0c:db:7d:
         2b:55:cb:aa:fc:a9:fc:c9:f3:0f:25:de:98:36:17:ab:48:13:
         0e:d4:47:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:58:30 2026 by rpki-client