Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
File:                     O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft (raw, json)
Hash identifier:          +rMWHvWcvWZiMvOrDrf+ts/U21j+bO30dcvG1SyXFrc=
Subject key identifier:   40:84:74:16:9C:E0:DE:02:20:E7:D9:86:3D:B7:50:DF:4B:00:AB:B0
Authority key identifier: 3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
Certificate issuer:       /CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Certificate serial:       019D9A749AE212F86A04273EF277E0F44C4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
Manifest number:          04CD
Signing time:             Fri 17 Apr 2026 08:00:26 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:26 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:26 +0000
Files and hashes:         1: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl (hash: KoujoHa5ODmnAQz2K3kGwH5i3k3+cB/MqG5/ELUdsHY=)
                          2: nmV4wo1OsK526xeTri2upmPsAys.roa (hash: IeXn8vSCp/SPxs1+dmemndjYyp23bbOiRhUmde7q2pY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:9a:e2:12:f8:6a:04:27:3e:f2:77:e0:f4:4c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
        Validity
            Not Before: Apr 17 08:00:26 2026 GMT
            Not After : Apr 18 08:00:26 2026 GMT
        Subject: CN=408474169ce0de0220e7d9863db750df4b00abb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:18:c7:6f:79:6e:08:a2:25:5a:71:c9:9d:c4:
                    ba:90:39:e0:c5:e9:f8:93:33:ce:5a:37:ff:91:68:
                    2f:2c:57:ce:93:86:0b:d6:97:e3:e0:da:d3:d0:f7:
                    e5:1a:09:de:07:c5:07:a1:a5:c5:4f:a7:e2:a2:9d:
                    5d:cf:e4:78:c3:46:c1:b5:db:07:d0:17:6d:26:43:
                    c6:05:da:15:9f:c2:12:30:84:84:9f:2f:70:1c:0b:
                    d7:f4:3c:14:78:b7:c7:c3:2c:97:62:68:2e:88:e0:
                    14:b6:1b:54:87:bc:f2:cf:2e:19:38:dd:ae:e5:70:
                    b5:ce:97:2a:cf:e0:ea:d2:66:53:f3:d7:33:b3:3c:
                    0b:81:42:5d:e2:7f:1f:7d:37:51:da:f9:5d:14:a3:
                    ce:52:b9:e6:34:f1:9b:ee:1b:02:39:82:fb:c1:de:
                    63:d8:19:71:7e:67:31:5c:c2:92:41:17:c6:e1:fc:
                    a0:35:25:1f:11:1d:05:09:5a:f8:6f:cb:08:dd:e2:
                    94:b4:93:e5:26:8c:19:0c:10:5f:59:3b:1b:a7:b2:
                    b3:e0:d7:11:c5:41:98:30:8d:2b:f1:6f:a5:23:a9:
                    aa:99:01:5c:66:cc:8d:6b:71:b6:8d:06:8c:1b:b4:
                    c7:4e:cd:5c:d4:c3:02:f4:75:5d:45:5f:9b:67:26:
                    a5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:84:74:16:9C:E0:DE:02:20:E7:D9:86:3D:B7:50:DF:4B:00:AB:B0
            X509v3 Authority Key Identifier:
                keyid:3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ae:68:16:9c:cf:c9:75:db:3a:a5:50:98:56:ac:71:0d:44:
         d1:89:2b:0e:c1:fb:5f:ca:a8:65:c2:80:e9:b4:03:60:8e:59:
         8f:d5:25:cb:2b:b7:e9:5a:5a:b0:cd:99:cf:14:ac:28:95:9d:
         dd:0a:9b:a9:08:07:19:c9:d5:01:af:f3:0e:f8:9f:e5:31:55:
         37:ee:6a:27:8f:9a:fb:1c:42:43:ec:ad:f1:af:db:65:c0:b2:
         37:be:12:35:f5:9c:8a:8d:a1:8c:a1:5c:58:79:cb:dc:41:c6:
         e2:a1:50:3e:fe:dc:26:09:9d:f8:e4:d2:18:76:f2:04:f6:3d:
         44:a8:4e:be:2d:16:1b:99:4a:2a:a8:81:fc:ca:df:6e:1d:9e:
         aa:42:a6:18:cc:63:4c:70:2a:1d:fd:5f:db:34:ef:1d:09:02:
         6a:b3:d5:cc:27:f2:f2:4f:df:62:29:d7:9e:a4:b9:ef:3f:a9:
         70:c0:70:9e:aa:34:6a:66:d9:bc:ed:55:fb:89:ee:10:19:75:
         fa:db:c0:d8:7f:0f:29:0e:44:50:20:f0:c2:57:55:91:51:46:
         e1:0a:a4:c6:3a:53:4f:6d:45:d4:74:54:3b:eb:a1:55:fa:a0:
         93:ed:1a:fb:fe:e2:74:ad:fd:1e:29:e8:50:16:f8:2a:bc:9f:
         28:29:2d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:36:57 2026 by rpki-client