Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.mft
File:                     93QnJYYrkL2kUQoC6AT-860RQtw.mft (raw, json)
Hash identifier:          mfp7J+sTHdb86s/NHE4F7Vu1Hjn/uFggYIuZss8EbNI=
Subject key identifier:   0C:9A:9E:C7:16:F1:A8:F0:34:9B:F7:A9:BD:48:7A:3D:F2:54:92:36
Authority key identifier: F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC
Certificate issuer:       /CN=f7742725862b90bda4510a02e804fef3ad1142dc
Certificate serial:       019D97AA9D99E7C14790C2D7FA248B6EB21B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.mft
Manifest number:          18C9
Signing time:             Thu 16 Apr 2026 19:00:34 +0000
Manifest this update:     Thu 16 Apr 2026 19:00:34 +0000
Manifest next update:     Fri 17 Apr 2026 19:00:34 +0000
Files and hashes:         1: 93QnJYYrkL2kUQoC6AT-860RQtw.crl (hash: mbAcA5emoj8bXG8Fz8DG0yQhR04IOtUjFEiOD4PmHMM=)
                          2: KYxy0pnh0MU9rfmWpequqe7xieI.roa (hash: T7Cq49LqPDm2mmMjfW8efC96Mjui5XiIDXZg/V5TnlY=)
                          3: n6xxVcjkCug-o7SUn1MPcYv_4gw.roa (hash: E2YghB0SYkXGzN8panSbLUgBzPNuukknYhzwjv2afJg=)
                          4: pnEqpSkACeNqn39zBs0kLzHEzpQ.roa (hash: DbpSnKPg4cFDLbXNeyhxRDeof5YCNChWvu5ZRYsbbIY=)
                          5: rS0ub271N0mgf5Pfb161dvFC_v4.roa (hash: cU/s0tr6dDuR+BKKqu2aSnnlyz5+VDlFiksMCpDRrOo=)
                          6: ts_rPkgwn2Qi8z7EXS6_3ekjy1w.roa (hash: b1xV7zGywXEyfDZVm80O+ik6/u2GYUW3YmbjuDySQh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 19:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:aa:9d:99:e7:c1:47:90:c2:d7:fa:24:8b:6e:b2:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7742725862b90bda4510a02e804fef3ad1142dc
        Validity
            Not Before: Apr 16 19:00:34 2026 GMT
            Not After : Apr 17 19:00:34 2026 GMT
        Subject: CN=0c9a9ec716f1a8f0349bf7a9bd487a3df2549236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:ea:ab:04:3f:83:9a:21:53:09:98:1d:5c:
                    c4:85:fd:77:5a:7a:35:ee:09:24:68:01:3b:d3:77:
                    88:ea:fb:a4:05:d6:ff:8c:b3:59:c3:46:05:10:28:
                    f2:f1:94:bc:84:8f:3b:48:99:38:f9:17:a2:05:7f:
                    30:d8:ce:04:c7:bc:22:f7:db:e8:ef:49:11:57:6d:
                    10:75:09:cd:f1:a0:7e:7a:a0:7b:46:a0:d0:9e:46:
                    ce:0d:99:d3:95:b3:46:67:2e:2b:e1:63:de:e3:7e:
                    7a:9f:bd:56:9e:58:c8:ad:77:e5:02:d5:7e:15:90:
                    ad:db:ba:34:d6:04:58:50:3d:4a:3c:9d:dd:9b:63:
                    e1:dd:89:c3:d3:fe:47:97:93:52:f6:22:39:9d:ad:
                    eb:4e:c0:60:93:2a:f2:eb:a8:39:9b:8a:36:12:db:
                    8b:70:a4:86:a4:ae:db:ee:ce:4b:49:f5:2e:20:61:
                    44:18:b6:b0:48:ae:1d:29:36:17:69:5c:01:db:90:
                    70:ad:7c:0a:73:08:5a:26:ed:21:ea:58:c3:d7:b0:
                    eb:ae:81:f0:63:c0:a0:b2:36:89:28:97:81:a1:2d:
                    d8:c5:1b:35:02:69:53:58:cc:12:82:9a:1c:47:d2:
                    44:c2:0b:c9:0e:20:8b:48:75:75:55:38:a3:09:36:
                    a8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9A:9E:C7:16:F1:A8:F0:34:9B:F7:A9:BD:48:7A:3D:F2:54:92:36
            X509v3 Authority Key Identifier:
                keyid:F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:0e:9f:2b:e4:d2:ed:44:84:51:a1:ea:1f:93:f4:5d:27:9a:
         09:64:55:00:00:a2:c3:71:e4:6b:c0:40:c5:3f:af:32:c9:86:
         e9:1c:34:64:ee:05:dd:4a:fc:14:9a:05:d6:b3:34:de:eb:52:
         63:60:92:ce:7d:1b:41:ae:a7:0b:fd:08:26:97:62:d7:e6:ba:
         f1:ef:96:ef:45:8d:e4:ba:10:f2:cb:bc:e4:d9:d6:50:68:82:
         95:76:fd:cc:2c:a4:7b:48:1e:5a:1d:3c:65:bb:bc:bd:cd:ae:
         62:78:9f:d1:69:f6:e9:26:db:04:a1:96:07:45:c4:ac:51:12:
         8f:db:3f:1d:41:79:36:6c:a9:da:2e:b4:4c:89:1f:a3:37:0f:
         b1:37:56:cb:59:c6:ba:4b:fc:e5:3b:97:3e:37:83:6c:fe:ae:
         ef:14:0e:18:76:15:8a:bf:f8:b7:ff:a0:0a:4c:51:16:09:68:
         1f:a9:e2:7b:ae:f2:ca:0f:0d:e0:90:34:18:77:83:c9:8b:4c:
         de:c3:fe:cb:c0:37:ca:62:8a:05:d4:91:de:49:da:d7:17:f1:
         dd:82:64:a0:1f:18:71:27:b2:50:14:10:a4:a5:30:5d:7b:4f:
         c7:b9:4d:95:77:0a:ec:ca:d2:15:b8:2c:aa:8c:e3:2a:1d:8b:
         e0:b1:1e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:12:20 2026 by rpki-client