Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft
File:                     DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft (raw, json)
Hash identifier:          orbpILw8YgjewOJXD9Ie1lY3Mj5cyFMzyNjVHMahuJ0=
Subject key identifier:   04:06:18:B6:8E:48:6D:82:0A:26:DC:06:02:E3:D9:1B:5D:BD:ED:7D
Authority key identifier: 0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9
Certificate issuer:       /CN=0ef47d753d25289fd98794974aa0536010567bd9
Certificate serial:       019DA3AF3D55C875EF9E81746AB19707270A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft
Manifest number:          1875
Signing time:             Sun 19 Apr 2026 03:01:03 +0000
Manifest this update:     Sun 19 Apr 2026 03:01:03 +0000
Manifest next update:     Mon 20 Apr 2026 03:01:03 +0000
Files and hashes:         1: DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl (hash: Eet7X0jhBtag3JqtbB0HBx76r8EuDMGNvqIs06pQwDs=)
                          2: EsBecN6jyUPom0lR7fBtvD4EJAA.roa (hash: Pc0Q6aLby7aPGyIvtbMD/7dqAXIuzl/Uhstg+PAdUTY=)
                          3: j6rhc4S_F8h7VB3Awvt7ekIbcvU.roa (hash: IIIPT68Ml/iwXcRui+0OH6ULMVRAHZ1sDhy6Qzl+HUs=)
                          4: zVGqBsJcMqzZG82yUvWny_0AJM4.roa (hash: GXc9htJWfrH+QcttVkUrnH3WgYi63Hk8IALD1e7NyIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:af:3d:55:c8:75:ef:9e:81:74:6a:b1:97:07:27:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef47d753d25289fd98794974aa0536010567bd9
        Validity
            Not Before: Apr 19 03:01:03 2026 GMT
            Not After : Apr 20 03:01:03 2026 GMT
        Subject: CN=040618b68e486d820a26dc0602e3d91b5dbded7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9f:09:8b:c8:62:f0:5b:37:53:32:e8:5e:f6:
                    de:12:62:ae:ce:82:a0:9b:b0:a8:91:d8:9a:20:6e:
                    51:f0:83:7d:3f:ab:4f:97:9f:42:10:54:81:a8:53:
                    5c:31:30:2c:48:d7:52:b9:84:08:b2:e0:b2:93:6b:
                    78:dc:a0:81:9c:59:c7:6b:f1:9b:f9:7d:5f:8d:02:
                    cd:07:ae:33:af:49:ef:86:88:7c:fa:00:a9:d4:d5:
                    0c:d5:79:e5:2b:45:fd:b7:88:ff:3a:a8:89:d4:ab:
                    53:43:4f:0f:c9:cc:0f:b1:d8:0a:16:d7:03:60:d6:
                    ae:ab:ca:21:bf:13:81:9a:db:53:a9:12:56:b2:42:
                    ef:7b:f3:f1:48:51:cb:3b:c3:e4:92:f1:eb:c4:71:
                    d2:89:6d:66:c0:4b:3a:c9:34:06:33:68:d9:ad:e0:
                    68:8f:1e:98:a1:bd:f0:1e:b4:73:96:92:8d:2c:28:
                    33:51:2e:97:ac:d4:20:dc:8a:55:4b:3f:e9:fb:7a:
                    b9:5e:d9:0a:ad:98:bf:29:43:d7:f5:67:24:ba:8e:
                    6d:3a:03:49:17:8c:1c:dc:ee:13:f0:f9:b1:b1:2a:
                    36:3f:3a:52:ad:77:0f:ad:e0:f1:d7:b5:d1:10:c1:
                    2e:55:0a:55:d1:b7:05:87:ed:9f:68:1a:d0:93:71:
                    60:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:06:18:B6:8E:48:6D:82:0A:26:DC:06:02:E3:D9:1B:5D:BD:ED:7D
            X509v3 Authority Key Identifier:
                keyid:0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:93:17:e4:90:8f:5c:f5:c8:4b:6e:64:d0:2f:14:12:2b:36:
         18:ec:ae:76:03:1b:82:55:fd:4a:43:f5:32:ba:cc:32:e2:08:
         7a:a9:94:19:39:ab:e8:0b:5e:a8:dc:17:35:87:7d:3a:f3:75:
         47:6a:0d:ee:12:bb:42:6a:0c:c9:ab:12:f4:b3:14:41:83:8e:
         78:ea:57:8d:d4:52:63:f3:bb:9a:73:17:6b:e0:5d:6d:f7:07:
         ee:44:31:b4:fb:f2:e2:bb:aa:07:d4:0f:05:89:53:ac:81:f2:
         d6:0e:f6:bd:6c:d7:0c:d4:2e:ec:de:6d:cd:e7:67:b6:c7:46:
         63:5e:db:11:89:3a:a6:c8:9e:eb:22:00:cb:65:c9:80:94:b5:
         83:78:a3:99:bb:68:06:6c:35:c4:5a:4e:f4:05:cd:36:6e:cc:
         6e:2a:02:68:49:b3:68:e9:45:a1:a7:77:8c:0c:2b:c8:c6:f8:
         30:44:4f:b7:d8:dc:5d:3d:38:40:a5:45:60:da:4a:29:e7:92:
         65:8c:9f:75:9f:60:03:db:25:51:07:fd:d8:d4:e2:1e:4f:90:
         60:43:b7:a6:ef:8f:8b:c9:bc:d5:c1:af:e3:a8:e4:fe:b7:71:
         91:9d:74:68:bb:6f:d6:de:ad:80:34:05:09:10:ef:98:a8:3a:
         41:76:da:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:28:33 2026 by rpki-client