Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
File:                     Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft (raw, json)
Hash identifier:          qnDzR79+IDX4Tk1cqauMw4s9GGD0UCXgqtSuPMIHF0Y=
Subject key identifier:   D4:33:72:02:46:2D:34:8F:FA:9E:AE:6A:49:D6:63:01:94:D0:F0:2B
Authority key identifier: 03:27:76:9C:1A:01:E1:25:0F:1F:28:A6:05:B5:C9:D9:B6:D3:41:9A
Certificate issuer:       /CN=0327769c1a01e1250f1f28a605b5c9d9b6d3419a
Certificate serial:       019D9D3EE0AD2DA9C07CABF4747195C28A35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
Manifest number:          DB
Signing time:             Fri 17 Apr 2026 21:00:36 +0000
Manifest this update:     Fri 17 Apr 2026 21:00:36 +0000
Manifest next update:     Sat 18 Apr 2026 21:00:36 +0000
Files and hashes:         1: Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl (hash: F60EKf0d61HrIsYwJA0D/QIwHlU4STOo7AE+rJ+7u8g=)
                          2: eLRzDYpH6ctJoMbMPtU-ULGxRIo.roa (hash: OdzMUAVnw7I56wJuOq/9aOkYjscK9Sg8yKOxq15PvwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:3e:e0:ad:2d:a9:c0:7c:ab:f4:74:71:95:c2:8a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0327769c1a01e1250f1f28a605b5c9d9b6d3419a
        Validity
            Not Before: Apr 17 21:00:36 2026 GMT
            Not After : Apr 18 21:00:36 2026 GMT
        Subject: CN=d4337202462d348ffa9eae6a49d6630194d0f02b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:75:53:0d:80:5c:87:43:91:27:11:9d:4e:85:
                    3e:e1:3d:8e:91:70:ac:2d:eb:bb:79:b2:6b:82:b3:
                    20:9d:c5:d2:18:59:49:d2:9b:7f:21:cf:f0:18:a9:
                    d0:a7:f2:c1:49:80:c1:ef:97:02:d8:e4:61:08:8f:
                    a9:1d:5d:da:81:2b:f3:9c:90:54:85:b1:be:9e:4c:
                    de:a4:04:b0:05:c1:63:37:94:5d:ee:85:03:b6:7a:
                    d4:c4:25:f8:8b:0c:e8:0b:96:36:cc:37:cc:af:53:
                    93:1e:9e:79:41:69:96:e2:fd:2d:d4:19:98:cb:78:
                    19:90:64:42:a8:d2:f0:cb:99:36:3c:e4:1f:a6:a6:
                    f7:59:65:69:b3:7f:98:b7:0b:33:7e:2c:0f:6e:18:
                    00:58:3a:1a:5c:83:16:7d:d6:82:e5:2d:fd:d1:c5:
                    fa:6c:b4:f5:39:83:37:42:c4:95:bf:3f:16:66:28:
                    c5:59:f7:41:db:3b:6f:86:b6:03:02:2d:84:33:87:
                    98:b5:77:54:69:f4:2a:8c:43:be:43:1b:2d:51:6c:
                    15:06:eb:d9:51:67:06:e6:d8:b2:48:bf:09:72:66:
                    50:e2:be:30:02:c4:6d:11:5e:ff:6d:5a:9b:7f:df:
                    3d:3c:1a:b5:3c:9c:c3:de:a7:8e:07:fc:e1:56:57:
                    c0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:33:72:02:46:2D:34:8F:FA:9E:AE:6A:49:D6:63:01:94:D0:F0:2B
            X509v3 Authority Key Identifier:
                keyid:03:27:76:9C:1A:01:E1:25:0F:1F:28:A6:05:B5:C9:D9:B6:D3:41:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:7d:36:84:06:fd:6c:3c:c1:12:0a:c3:5c:5e:79:07:e6:b7:
         a1:54:f9:db:65:8b:d6:a4:ea:00:48:05:0f:57:04:43:37:8f:
         55:ec:38:c5:96:92:ae:9b:ad:87:7c:cf:8a:41:7b:60:6a:1c:
         2a:68:d3:47:6b:40:a4:81:e4:49:53:86:7c:39:b1:29:b2:f8:
         79:23:4c:32:d6:bf:ac:ab:16:b1:18:d0:55:53:59:16:14:9d:
         91:c2:8b:9b:ce:45:68:fd:f9:5e:3c:cd:78:6f:82:e3:81:04:
         23:7e:a2:23:4c:90:89:f1:bc:d5:54:07:10:61:f5:28:ba:99:
         5e:73:55:c6:db:ab:27:cb:b8:23:7e:cb:eb:06:3f:cc:bf:45:
         26:58:60:8d:21:7a:4f:80:1c:88:b6:ef:c9:36:de:43:f5:e8:
         33:08:b0:38:c8:8c:58:f6:cd:29:91:a4:be:9c:70:5f:70:0e:
         b2:81:85:af:61:6c:3a:bf:58:ad:51:26:b4:08:e1:7c:eb:7e:
         f4:3f:e5:c8:5e:ee:bb:6f:1b:88:1b:c5:cd:88:98:6a:4a:68:
         70:1a:ed:f1:0d:8f:d2:50:f8:62:54:83:09:00:f2:c1:17:8e:
         73:45:49:c6:15:01:e1:ce:9e:6e:f2:c7:57:19:42:8b:14:f3:
         b0:4a:ef:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:00:39 2026 by rpki-client