Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
File:                     Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft (raw, json)
Hash identifier:          3rD2RteQJ32ITakObfyXlMI5xTlIkFmOuoX93ST1tnE=
Subject key identifier:   3D:4D:18:C1:D8:5A:76:9F:93:9E:76:ED:E7:87:C4:8B:6A:F9:86:17
Authority key identifier: 62:AF:1D:7F:36:B1:86:58:02:53:5E:49:A7:33:1E:03:5A:D0:10:08
Certificate issuer:       /CN=62af1d7f36b1865802535e49a7331e035ad01008
Certificate serial:       019D9B50CAB4F628953EDD8EF9FB8EE3B06D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
Manifest number:          0D26
Signing time:             Fri 17 Apr 2026 12:00:56 +0000
Manifest this update:     Fri 17 Apr 2026 12:00:56 +0000
Manifest next update:     Sat 18 Apr 2026 12:00:56 +0000
Files and hashes:         1: 6pfTR-noxja27M34pFELSd5hwh4.roa (hash: gxeFOTQ55de/7+Ulcgm+cnNnRnSBx2XFr4qJtHE96Xs=)
                          2: Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl (hash: zHT2y4Jl0jMmhYQeOpqC3VWnMWn8a8U4UNLIA3l38BI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:50:ca:b4:f6:28:95:3e:dd:8e:f9:fb:8e:e3:b0:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62af1d7f36b1865802535e49a7331e035ad01008
        Validity
            Not Before: Apr 17 12:00:56 2026 GMT
            Not After : Apr 18 12:00:56 2026 GMT
        Subject: CN=3d4d18c1d85a769f939e76ede787c48b6af98617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2f:7d:d5:77:96:11:0b:4b:78:15:5f:2b:60:
                    d2:bb:84:e0:4c:be:cb:23:ac:3d:9e:8f:5b:79:45:
                    2d:3a:85:85:b1:f0:e7:73:6d:39:58:94:38:ea:7f:
                    16:ce:27:c0:63:2e:88:df:a0:b4:1e:a4:e6:5b:15:
                    20:8a:d9:a8:da:a1:65:de:13:1a:60:58:7f:8c:fe:
                    14:1f:cf:af:5e:9b:9c:f7:df:b0:f2:08:28:80:57:
                    16:87:5b:bd:df:6c:f6:88:f2:9c:0b:cc:29:a3:3a:
                    7e:74:26:8c:45:90:bb:a9:f7:d8:74:39:23:4f:69:
                    62:0b:5d:20:1c:a9:69:c7:37:70:8e:58:89:b9:23:
                    9c:0c:bb:af:40:cd:88:19:62:cb:10:40:b0:7c:db:
                    77:6c:a8:13:97:35:56:01:23:9d:34:5a:b1:35:25:
                    4c:20:6f:ef:f2:5a:6c:d5:9d:89:19:f2:09:80:7a:
                    bf:ee:3e:03:1d:67:6d:75:22:43:41:ed:fa:bf:c2:
                    80:b1:bd:51:01:2c:4d:ed:5d:d2:57:1d:93:98:af:
                    19:94:fb:e3:09:ed:7c:d2:8a:28:fc:bc:42:2f:81:
                    fc:71:56:16:4f:ef:93:1f:1d:91:96:e5:36:3d:04:
                    7b:8a:d7:a4:5b:b7:4e:36:36:f8:5e:76:06:e1:6d:
                    29:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:4D:18:C1:D8:5A:76:9F:93:9E:76:ED:E7:87:C4:8B:6A:F9:86:17
            X509v3 Authority Key Identifier:
                keyid:62:AF:1D:7F:36:B1:86:58:02:53:5E:49:A7:33:1E:03:5A:D0:10:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:af:54:25:ac:3a:a5:f8:72:01:e5:38:51:66:ba:7a:1b:ee:
         ab:c2:95:ec:bf:89:c4:c2:af:f7:ee:c0:7c:7d:8a:87:80:05:
         83:db:f2:23:e6:87:29:0e:02:9d:79:6a:cb:2b:c0:39:3b:ca:
         a9:a6:e1:d7:aa:0b:1d:5c:70:68:99:f8:21:a7:26:16:cc:60:
         4c:03:4f:a7:4c:d7:ec:b2:f3:37:88:39:15:cf:de:15:4e:04:
         e2:19:7c:42:3b:08:10:6b:64:6d:f2:4a:63:89:3e:32:e8:f9:
         43:c8:5f:34:2c:dd:82:e4:f9:3a:02:e1:3a:f1:e9:fe:66:5f:
         e1:24:dd:77:f0:4a:4a:b7:dc:79:5d:72:7a:f3:1f:33:92:d2:
         86:e6:97:ce:14:fd:a2:55:15:9b:d5:7c:1a:25:48:09:a0:4d:
         2a:af:41:71:ac:c0:b8:0d:7a:53:86:82:c3:28:26:79:65:3b:
         88:a8:c1:30:44:b4:0f:63:94:82:77:c3:f9:a2:3c:0c:bc:20:
         a9:e0:fd:a7:7f:53:ef:ec:5b:fd:59:4b:64:b6:9a:27:19:20:
         dc:48:dc:75:3b:d2:73:f9:0d:f2:e6:ff:df:62:5c:42:b1:9b:
         70:38:f2:1d:95:4b:12:af:07:0c:ab:81:55:c8:e6:7a:9c:f9:
         54:fd:c3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:19:44 2026 by rpki-client