Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft
File:                     0gXOrys2rZ_lGQaehrlONtLsS94.mft (raw, json)
Hash identifier:          NTEHEfU0fWnP40LEgmJz8vd4sxLImEBHDqbfYaJEzfE=
Subject key identifier:   8E:34:FF:1D:D9:49:0D:5C:E5:0C:29:D8:E7:A4:03:78:17:B9:38:E1
Authority key identifier: D2:05:CE:AF:2B:36:AD:9F:E5:19:06:9E:86:B9:4E:36:D2:EC:4B:DE
Certificate issuer:       /CN=d205ceaf2b36ad9fe519069e86b94e36d2ec4bde
Certificate serial:       019D9B51020FBBECD1D54D5079CC52FF01FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gXOrys2rZ_lGQaehrlONtLsS94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft
Manifest number:          0BF2
Signing time:             Fri 17 Apr 2026 12:01:10 +0000
Manifest this update:     Fri 17 Apr 2026 12:01:10 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:10 +0000
Files and hashes:         1: 0gXOrys2rZ_lGQaehrlONtLsS94.crl (hash: PxldvTGMugpQ3hJCA2nUsMLkSaEONfUq2HuE12Zj+E0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0gXOrys2rZ_lGQaehrlONtLsS94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:51:02:0f:bb:ec:d1:d5:4d:50:79:cc:52:ff:01:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d205ceaf2b36ad9fe519069e86b94e36d2ec4bde
        Validity
            Not Before: Apr 17 12:01:10 2026 GMT
            Not After : Apr 18 12:01:10 2026 GMT
        Subject: CN=8e34ff1dd9490d5ce50c29d8e7a4037817b938e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:21:cd:e5:d1:15:a5:ca:72:52:59:2c:27:6b:
                    63:53:04:2b:29:fa:92:d9:fd:f4:c7:94:77:59:0a:
                    7d:d1:63:0a:01:77:f7:1e:b4:ab:b1:42:c1:91:e4:
                    96:d0:63:65:78:65:51:69:31:da:6d:33:a9:bd:b5:
                    85:da:e4:d9:da:c2:59:ba:68:2e:c3:3c:81:d9:f0:
                    85:43:be:42:4e:29:7f:59:50:9a:ec:4d:4b:c2:fb:
                    61:e2:67:af:91:ab:b0:26:99:6c:e7:ba:f7:df:e9:
                    d5:11:87:63:f2:b9:55:23:0c:d0:f7:6b:3f:e2:b6:
                    83:af:1d:63:cc:f0:7a:a8:19:b9:2b:ec:25:73:a9:
                    39:11:45:b1:cf:c9:fa:f2:f4:97:57:ed:0b:00:7c:
                    3e:e2:85:cc:27:ac:65:68:31:b6:32:58:8f:7b:93:
                    8f:73:32:c9:1e:13:11:4a:e6:a5:dc:a3:31:55:59:
                    0e:df:41:f7:76:c5:d0:08:94:57:1e:ea:bb:06:f0:
                    b6:45:fa:d4:b2:8c:7b:98:70:d1:41:04:dd:48:6f:
                    ea:c1:da:0a:16:17:06:02:a4:3b:d6:e3:9b:ec:9d:
                    8d:b0:a3:8d:f3:4d:22:51:81:14:ca:ea:67:ed:da:
                    25:39:ff:a4:c2:cd:0d:38:f2:c4:c7:6d:45:39:1f:
                    89:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:34:FF:1D:D9:49:0D:5C:E5:0C:29:D8:E7:A4:03:78:17:B9:38:E1
            X509v3 Authority Key Identifier:
                keyid:D2:05:CE:AF:2B:36:AD:9F:E5:19:06:9E:86:B9:4E:36:D2:EC:4B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gXOrys2rZ_lGQaehrlONtLsS94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a5:00:27:32:13:22:8f:dc:40:9b:58:29:6a:fc:8e:ec:80:
         9f:22:cc:f9:25:3a:67:c4:cf:31:66:46:d9:26:af:7a:b0:16:
         a4:77:c1:8a:c1:93:95:19:96:7c:ba:dc:80:ed:ca:3a:0c:55:
         3c:ec:9a:91:f8:66:c8:b7:6e:6f:4a:81:c3:00:a9:d3:3f:5f:
         26:24:e0:fa:67:c4:60:22:f0:74:84:a8:76:87:27:2a:03:1e:
         77:7e:25:ab:ed:ca:40:2e:19:9d:8e:ea:c0:d8:a8:ae:3a:9c:
         20:8d:c6:4e:0b:94:e0:a8:08:76:0c:45:38:05:79:d3:32:68:
         60:2c:bb:ff:ff:2b:d0:c9:1d:b4:af:7a:e5:45:72:1a:ff:19:
         29:3e:e2:3f:1b:56:52:6a:c9:a7:0f:4f:ac:0e:ba:a4:4c:57:
         6c:9e:80:a3:08:24:38:16:65:44:5b:a3:96:8a:81:d8:24:ea:
         36:26:a6:bf:32:87:b3:d9:63:fd:15:b7:5e:e7:c0:f4:cc:23:
         e0:ad:0e:b3:4d:81:f6:43:47:a3:e5:c0:5a:76:c1:a4:0d:bb:
         3e:58:a5:12:bd:a9:16:b9:6b:89:46:e2:51:e8:9a:24:0a:7f:
         c2:20:80:11:4e:f7:b3:29:ff:ed:77:d5:4d:e2:b5:3a:1f:03:
         59:e8:d0:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUQIPu+zR1U1QecxS/wH8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMDVjZWFmMmIzNmFkOWZlNTE5MDY5ZTg2Yjk0ZTM2ZDJl
YzRiZGUwHhcNMjYwNDE3MTIwMTEwWhcNMjYwNDE4MTIwMTEwWjAzMTEwLwYDVQQD
Eyg4ZTM0ZmYxZGQ5NDkwZDVjZTUwYzI5ZDhlN2E0MDM3ODE3YjkzOGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yHN5dEVpcpyUlksJ2tjUwQrKfqS
2f30x5R3WQp90WMKAXf3HrSrsULBkeSW0GNleGVRaTHabTOpvbWF2uTZ2sJZumgu
wzyB2fCFQ75CTil/WVCa7E1Lwvth4mevkauwJpls57r33+nVEYdj8rlVIwzQ92s/
4raDrx1jzPB6qBm5K+wlc6k5EUWxz8n68vSXV+0LAHw+4oXMJ6xlaDG2MliPe5OP
czLJHhMRSual3KMxVVkO30H3dsXQCJRXHuq7BvC2RfrUsox7mHDRQQTdSG/qwdoK
FhcGAqQ71uOb7J2NsKON800iUYEUyupn7dolOf+kws0NOPLEx21FOR+JrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI40/x3ZSQ1c5Qwp2OekA3gXuTjhMB8GA1UdIwQY
MBaAFNIFzq8rNq2f5RkGnoa5TjbS7EveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGdYT3J5czJyWl9sR1FhZWhybE9OdExzUzk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ZmExNzItOGU1NS00NzExLThjNzUt
MThmODkyNWM2NjY1LzEvMGdYT3J5czJyWl9sR1FhZWhybE9OdExzUzk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ZmExNzItOGU1NS00NzExLThjNzUtMThmODkyNWM2NjY1
LzEvMGdYT3J5czJyWl9sR1FhZWhybE9OdExzUzk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqUAJzIT
Io/cQJtYKWr8juyAnyLM+SU6Z8TPMWZG2SaverAWpHfBisGTlRmWfLrcgO3KOgxV
POyakfhmyLdub0qBwwCp0z9fJiTg+mfEYCLwdISodocnKgMed34lq+3KQC4ZnY7q
wNiorjqcII3GTguU4KgIdgxFOAV50zJoYCy7//8r0MkdtK965UVyGv8ZKT7iPxtW
UmrJpw9PrA66pExXbJ6AowgkOBZlRFujloqB2CTqNiamvzKHs9lj/RW3XufA9Mwj
4K0Os02B9kNHo+XAWnbBpA27PlilEr2pFrlriUbiUeiaJAp/wiCAEU73syn/7XfV
TeK1Oh8DWejQ1A==
-----END CERTIFICATE-----