Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
File:                     FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft (raw, json)
Hash identifier:          Wxm90ViS9DF3NLSlx/7ne32KiUf7SrGC/QeOI4wlOoI=
Subject key identifier:   10:00:69:B2:9C:92:85:81:E1:EE:8C:3E:44:D2:BB:1A:FE:8D:F6:7D
Authority key identifier: 14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
Certificate issuer:       /CN=14c66a786e6ef31674bec6833c78aebec1633972
Certificate serial:       019D99D0457A2195333B27CD46F65CF55532
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
Manifest number:          18C0
Signing time:             Fri 17 Apr 2026 05:00:56 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:56 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:56 +0000
Files and hashes:         1: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl (hash: uWE6CPkB76n+2pGlcPbAwB5opjrMtgcqlsseEfnQAc8=)
                          2: lmzI8mKK7VNK4bS0BEeEZ9whyrI.roa (hash: V1SxHQwjwN4AmdXg8rhG9lnM2vuDDx2mOA2my+gG8OQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:45:7a:21:95:33:3b:27:cd:46:f6:5c:f5:55:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c66a786e6ef31674bec6833c78aebec1633972
        Validity
            Not Before: Apr 17 05:00:56 2026 GMT
            Not After : Apr 18 05:00:56 2026 GMT
        Subject: CN=100069b29c928581e1ee8c3e44d2bb1afe8df67d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ad:a1:e7:53:59:33:22:00:b4:2b:bb:10:34:
                    8d:f2:2f:c6:3e:f8:74:bd:2a:a6:55:3f:2c:50:64:
                    9b:22:f9:2d:f9:68:39:03:fe:6d:0b:e2:4e:89:60:
                    c8:aa:9f:ca:7c:16:55:06:8d:83:6c:6d:4a:d1:ab:
                    0a:f5:98:c7:73:f6:0f:26:2b:a5:75:4a:41:d0:75:
                    54:68:84:f8:15:06:eb:c3:ff:98:d8:88:ca:fe:a1:
                    9c:83:63:7b:75:86:ba:f2:20:91:60:11:1b:2a:99:
                    b0:a6:39:7b:af:7f:d1:81:1d:d8:de:13:44:01:f0:
                    c8:d5:01:ac:60:e4:54:87:5e:cf:d5:21:57:1d:51:
                    90:b7:0e:fc:78:04:d9:e6:c7:3e:fe:cf:42:60:0a:
                    c0:f1:61:96:a3:72:8c:2c:94:03:ce:3b:5c:a9:d3:
                    03:1a:d1:85:85:19:32:b5:70:2c:d1:d5:93:d3:6b:
                    e1:21:00:03:a7:22:1e:2c:98:da:9d:8a:78:3c:0e:
                    ef:a0:33:8e:e0:de:2e:a7:25:2a:33:3c:2e:c5:26:
                    8f:48:dd:b8:77:83:62:3c:4c:59:a8:94:2f:df:86:
                    80:af:d4:90:ab:81:54:76:8b:40:af:ae:5e:e2:3d:
                    49:c7:e4:4c:cf:e1:31:54:3b:15:f0:cc:aa:28:8e:
                    29:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:00:69:B2:9C:92:85:81:E1:EE:8C:3E:44:D2:BB:1A:FE:8D:F6:7D
            X509v3 Authority Key Identifier:
                keyid:14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:47:ab:7a:2f:d2:40:cb:e0:51:58:d7:4c:38:97:66:4b:28:
         5f:4a:a4:65:5a:65:88:1d:f0:cd:eb:5b:10:4e:21:0e:d4:39:
         0b:cf:97:30:df:f8:f3:4a:82:b4:bc:8f:1d:93:bc:34:46:d0:
         3b:7f:42:0d:30:9b:4c:de:4f:56:34:41:c4:4d:e0:a8:d9:e3:
         79:36:f1:6e:64:12:d1:ce:fe:af:34:0c:62:58:77:2f:8f:58:
         66:33:ab:30:cb:be:1a:79:9c:11:ec:63:2e:f5:5e:6e:b7:54:
         b5:66:22:21:b5:29:78:cf:69:5a:68:a2:43:5c:7f:ba:ed:f4:
         a0:6d:e3:6f:04:bc:2d:8c:2a:63:97:15:6e:c9:9d:b1:58:f6:
         dc:f4:04:e0:19:cd:44:0f:a7:b1:8d:4c:a8:3e:4d:71:77:5e:
         39:f3:b5:5b:49:7b:69:67:4e:f0:53:9b:38:aa:8a:45:6a:08:
         7e:11:7b:54:96:9b:b6:b5:36:ab:6d:6c:a4:b0:55:0f:bc:54:
         be:b6:0c:19:4c:57:c4:32:fa:b0:19:f3:d7:16:92:69:fa:41:
         8b:6c:56:86:17:b8:92:d2:e4:d8:9d:4a:76:ae:90:bf:02:6c:
         3e:bc:80:1e:a8:66:58:5f:94:bb:15:81:f9:af:71:26:26:a0:
         81:65:13:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:52:41 2026 by rpki-client