Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
File:                     k89OeSfhBJZOTJb0QWSc40F0zjo.mft (raw, json)
Hash identifier:          jcVaPlafyEMK/AChSVQLbV58s7PPebb7c5uZPVr7tZc=
Subject key identifier:   BA:9D:AC:50:4C:20:BA:B7:4E:4A:14:F8:8C:C0:3B:59:C8:E9:6A:AD
Authority key identifier: 93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A
Certificate issuer:       /CN=93cf4e7927e104964e4c96f441649ce34174ce3a
Certificate serial:       019D996309668E404B6AD15D102BAA3646A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
Manifest number:          18BF
Signing time:             Fri 17 Apr 2026 03:01:37 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:37 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:37 +0000
Files and hashes:         1: a-RfJEkqSAZCcoPr0GaKWgyFyUY.roa (hash: jOtVSSPZObpK8XqzAlQVoc0c5TSMX2XvXMtPwq4gvlk=)
                          2: k89OeSfhBJZOTJb0QWSc40F0zjo.crl (hash: X4jFeILwJQp9ZFlEj5CiL8oBPlaEkBCwKRMjtECUfP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:63:09:66:8e:40:4b:6a:d1:5d:10:2b:aa:36:46:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93cf4e7927e104964e4c96f441649ce34174ce3a
        Validity
            Not Before: Apr 17 03:01:37 2026 GMT
            Not After : Apr 18 03:01:37 2026 GMT
        Subject: CN=ba9dac504c20bab74e4a14f88cc03b59c8e96aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a1:a0:8c:3b:00:12:a8:07:45:b8:be:15:c8:
                    55:9d:eb:6f:84:1a:1a:7e:20:df:dd:1f:92:4e:e8:
                    75:d3:19:11:36:bf:54:b0:14:e4:80:63:42:f0:fe:
                    cb:58:13:dc:6f:05:b8:6e:b2:4d:77:a6:9e:5d:60:
                    ff:ea:19:74:39:8e:6e:d2:01:5b:08:55:0d:85:4b:
                    1e:6b:4c:22:58:9f:c9:d1:ee:1c:4b:44:09:6e:03:
                    ee:73:5f:78:db:34:b2:75:e7:86:73:07:24:00:bc:
                    3b:a6:a1:9c:95:bb:18:7b:63:4b:b6:84:dc:7c:a6:
                    c0:f7:7e:81:14:17:15:59:5b:a0:93:eb:9e:7d:71:
                    32:c7:92:2b:f2:af:2e:af:e4:88:57:ed:28:71:71:
                    a9:53:02:cc:51:8d:e2:1d:18:5d:0f:e2:78:2d:5c:
                    93:6a:0e:97:21:0a:1d:e0:66:cc:a8:e5:a4:e4:35:
                    6c:61:9b:05:ce:bc:62:36:82:8c:a8:3f:d0:06:0b:
                    67:95:b2:e7:4b:85:62:5d:cb:fc:7b:a4:00:5b:3f:
                    cf:f5:56:3f:89:73:5b:07:48:99:7f:83:57:a2:95:
                    84:79:94:d1:dd:ad:bb:df:65:b3:f8:e3:db:68:67:
                    a3:77:00:ce:9a:af:26:39:0a:39:0c:85:28:f4:91:
                    9f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:9D:AC:50:4C:20:BA:B7:4E:4A:14:F8:8C:C0:3B:59:C8:E9:6A:AD
            X509v3 Authority Key Identifier:
                keyid:93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:7c:4e:dd:ea:d3:ba:3d:7e:33:31:ae:7d:56:bc:4c:f6:c8:
         ed:1c:0b:af:54:ee:b9:4a:31:67:26:5b:e1:2b:ca:69:78:52:
         65:d1:1e:71:6f:4a:64:b9:a6:fb:c5:a1:89:6e:37:85:72:e3:
         38:97:3c:67:e3:e3:c1:18:bd:cc:f1:f2:45:7d:a6:31:19:21:
         3f:03:0c:85:0b:82:a1:16:15:ec:6b:d8:6f:f8:f5:3c:b4:8b:
         93:3d:7c:7d:14:74:3b:ea:10:14:3f:0a:af:47:a6:4a:a7:4f:
         49:5e:b5:13:ce:8a:06:33:80:e4:17:8c:16:34:a9:24:80:e5:
         34:8d:57:9b:fe:44:47:72:f9:0e:5a:fc:54:4e:a6:ac:ca:14:
         c4:b7:76:fb:9e:34:14:e9:a2:36:5f:6b:6d:3d:fd:78:35:0b:
         73:88:98:c6:36:e9:5c:c9:9f:6e:89:69:a2:f5:29:2c:e9:60:
         ad:fc:3c:f0:2c:89:4d:32:56:4f:5a:a9:6d:55:a4:53:3f:49:
         5a:6f:ad:19:4b:a1:6f:ff:50:78:ec:d1:f1:19:7c:05:c9:55:
         b4:88:a6:0c:d0:e4:da:2a:9c:7b:14:d8:e2:e2:a1:d0:68:0a:
         21:83:38:30:35:d0:c9:2c:94:77:d4:0e:69:25:72:b1:25:df:
         e0:ad:b3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:24:59 2026 by rpki-client