Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft
File:                     abfzv44Ke1kKD_qhycCsWAoLEZ4.mft (raw, json)
Hash identifier:          iMyxN38gHp11CU3Azy+RL6kBrHKujvMjV7K9RK+qBfU=
Subject key identifier:   42:FD:CB:8F:65:F6:7E:98:E3:CA:8D:5C:E4:53:0E:F1:33:B2:6D:0D
Authority key identifier: 69:B7:F3:BF:8E:0A:7B:59:0A:0F:FA:A1:C9:C0:AC:58:0A:0B:11:9E
Certificate issuer:       /CN=69b7f3bf8e0a7b590a0ffaa1c9c0ac580a0b119e
Certificate serial:       019DA48B5114D35A0C4DE7D257C9E8BA1732
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft
Manifest number:          01F2
Signing time:             Sun 19 Apr 2026 07:01:26 +0000
Manifest this update:     Sun 19 Apr 2026 07:01:26 +0000
Manifest next update:     Mon 20 Apr 2026 07:01:26 +0000
Files and hashes:         1: ZckkoNHt2DvjlU2WvYDlIclH-DI.roa (hash: xy5JGKAo4mAfLH66AX9gOwR/ragqzfbDNJ5R5SMZh1s=)
                          2: abfzv44Ke1kKD_qhycCsWAoLEZ4.crl (hash: Bz2kiwfrM+zfs7XXVKiEWhdCty88vc2IFpI4UO8rneo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:8b:51:14:d3:5a:0c:4d:e7:d2:57:c9:e8:ba:17:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69b7f3bf8e0a7b590a0ffaa1c9c0ac580a0b119e
        Validity
            Not Before: Apr 19 07:01:26 2026 GMT
            Not After : Apr 20 07:01:26 2026 GMT
        Subject: CN=42fdcb8f65f67e98e3ca8d5ce4530ef133b26d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ad:a8:75:85:98:24:c6:3d:7f:92:c3:f6:94:
                    dc:31:03:c4:f3:65:d4:9e:fa:d5:d0:79:a5:46:05:
                    d6:72:87:86:fb:98:b1:a2:0f:83:0c:aa:7c:23:38:
                    d8:b7:a3:97:eb:d5:cb:3f:56:33:06:bd:05:19:58:
                    da:08:4f:30:be:cd:fb:79:0a:aa:a8:f4:76:02:1c:
                    86:37:ba:b8:00:b1:ae:92:66:a9:fe:b3:cb:68:72:
                    59:19:ae:f7:57:8a:80:45:d5:dd:60:0d:dc:2e:eb:
                    e8:7d:8a:62:3d:d0:d0:b8:4c:e4:90:8b:36:79:d3:
                    62:68:88:27:c3:e9:96:7f:f5:d5:e8:c6:91:ef:f2:
                    72:ba:0b:bd:28:7b:c1:92:dd:e9:81:dc:e5:90:cb:
                    de:b5:3d:81:ce:3d:97:56:4d:df:8b:39:e7:bb:b2:
                    91:b0:6b:e6:4a:cb:1b:2c:8e:15:0c:99:a9:90:5c:
                    62:af:e2:c8:3e:d3:1a:6f:72:27:20:97:c8:c1:b6:
                    ec:d9:61:89:c7:a7:d4:44:77:ca:ac:ad:dd:aa:8e:
                    5e:65:0a:82:33:1f:bf:96:da:6a:de:9a:9d:c4:15:
                    d9:df:11:44:80:20:9f:a2:e5:9b:87:38:d2:0d:76:
                    3b:75:80:3e:dd:74:69:38:97:cd:91:74:42:b3:31:
                    33:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FD:CB:8F:65:F6:7E:98:E3:CA:8D:5C:E4:53:0E:F1:33:B2:6D:0D
            X509v3 Authority Key Identifier:
                keyid:69:B7:F3:BF:8E:0A:7B:59:0A:0F:FA:A1:C9:C0:AC:58:0A:0B:11:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:21:ea:46:7e:62:1e:ca:23:29:20:48:53:18:61:3e:5d:47:
         b5:b4:72:18:d8:4e:41:fe:d9:1e:9a:f7:03:1b:98:5c:ff:1d:
         02:b5:6f:4d:8b:51:61:b6:22:35:71:5e:be:23:44:4b:99:12:
         52:e7:b6:4e:8c:51:2a:b7:a3:c2:4d:f6:15:52:36:aa:97:7c:
         54:c0:f9:d7:cc:b3:ea:79:22:29:4a:14:19:83:9d:d8:89:e8:
         0d:6e:b2:63:cc:08:d8:9c:18:6e:d0:40:2b:86:34:2d:39:6a:
         1b:52:d6:e2:7d:cb:e3:b4:06:07:d6:0e:ec:74:ef:17:53:05:
         82:a6:67:31:e5:3d:8e:bf:a1:86:f1:fa:0f:a8:56:a3:e6:21:
         a1:70:ac:ea:1c:0b:4d:79:65:c7:f2:a4:4e:24:62:3b:84:28:
         b8:1b:c7:16:7b:35:d6:6f:33:e7:55:3d:2d:26:65:95:70:44:
         8a:e3:b6:e8:4c:73:44:ee:cb:3a:db:e7:a8:f2:42:53:2f:1d:
         6a:54:57:91:4b:27:b7:58:c7:58:d1:b5:f0:66:53:bf:f9:1b:
         a1:28:8c:5b:f3:b2:fd:71:a5:c6:82:ac:be:10:96:a5:94:94:
         3d:c7:c9:91:6f:4d:29:dd:63:65:c2:cf:a9:32:3a:7b:6a:4f:
         07:8e:d7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:04 2026 by rpki-client