Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
File:                     fYx0FDwic-IBpnVxVDHfryj-F7I.mft (raw, json)
Hash identifier:          M6IzK+3oRw7L6Gktd7kOyUpEDyE0wRe8EGQtmNOd1JI=
Subject key identifier:   08:C5:E9:E0:30:35:7D:07:56:40:F3:29:41:25:31:40:46:47:6F:D6
Authority key identifier: 7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2
Certificate issuer:       /CN=7d8c74143c2273e201a675715431dfaf28fe17b2
Certificate serial:       019D9962B59AF441A7C5904313A517B0AC57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
Manifest number:          0D4C
Signing time:             Fri 17 Apr 2026 03:01:16 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:16 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:16 +0000
Files and hashes:         1: Yc6S2U-P88_n_iZTloXSN0V0Eao.roa (hash: AY1UxXU5qK5SakiZ4km0VoIyNHZTCKedI3Fo2P7nvNY=)
                          2: fYx0FDwic-IBpnVxVDHfryj-F7I.crl (hash: 4cV3WKoOZGdmXUtNTgdXO7EoT8M2pCHfE20uCEn6R7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:b5:9a:f4:41:a7:c5:90:43:13:a5:17:b0:ac:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d8c74143c2273e201a675715431dfaf28fe17b2
        Validity
            Not Before: Apr 17 03:01:16 2026 GMT
            Not After : Apr 18 03:01:16 2026 GMT
        Subject: CN=08c5e9e030357d075640f3294125314046476fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:14:bb:bc:98:40:be:43:6e:32:21:89:9d:cf:
                    d1:ea:cc:fc:6d:1d:1f:56:a7:2c:29:22:7f:a3:3b:
                    a2:e3:88:c6:7c:59:e6:fe:c7:9a:70:93:5e:ec:1d:
                    53:79:ac:31:f2:61:67:90:e0:04:d7:11:3b:62:ce:
                    ef:80:87:88:a0:7d:e2:1e:31:bc:aa:25:5c:2e:01:
                    c1:fa:99:95:90:99:dc:09:76:08:3b:fb:fb:8d:0f:
                    3b:79:6c:c9:52:11:24:7b:f7:da:24:5d:45:39:af:
                    02:6d:98:44:fd:4a:0c:28:65:d4:ad:1e:d6:84:08:
                    9e:03:8f:e5:b7:40:34:ce:b3:5f:dc:04:20:30:48:
                    8b:56:c5:5c:41:3c:bc:71:a3:b0:41:c0:16:f0:c5:
                    e5:61:db:b7:d2:83:e0:22:c1:8f:e0:c1:79:57:dd:
                    88:87:89:c8:39:1b:6d:dd:96:9a:10:83:41:33:e7:
                    70:ac:5c:b1:b7:a0:97:8d:b2:5a:14:ff:bd:25:a7:
                    bb:2f:97:61:4f:e0:a7:e1:69:40:ff:2b:47:76:18:
                    92:fd:7a:bc:1f:0d:c3:46:49:f4:fd:ec:ba:52:97:
                    9a:82:1e:68:c1:54:92:e8:9a:6d:6c:80:e3:6b:8f:
                    a6:c8:bf:ec:57:5e:4a:8f:4e:d5:0e:93:ee:dc:71:
                    2e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C5:E9:E0:30:35:7D:07:56:40:F3:29:41:25:31:40:46:47:6F:D6
            X509v3 Authority Key Identifier:
                keyid:7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:97:3a:88:7c:9e:fe:a0:65:50:6e:37:c8:c1:ff:38:e6:bb:
         f1:00:0b:7c:c2:1a:a2:8b:d0:d5:6f:f8:7a:e7:3a:6f:9a:4e:
         0a:c0:d5:fd:3c:c2:7a:c4:3a:da:fb:30:ec:b0:14:53:86:9c:
         8d:c8:63:fb:a4:57:a4:3e:91:6d:30:00:ac:5e:18:36:be:b8:
         a2:b6:53:cb:8f:18:35:c0:32:b5:9f:ad:74:6f:c0:a9:05:63:
         92:1a:1b:03:e8:88:6c:38:ef:76:b0:1e:6b:c7:0b:ac:f0:6f:
         a0:89:07:36:3a:6a:22:b9:0b:bd:6c:ab:d7:69:00:d0:c9:f7:
         3d:0d:eb:8b:45:15:61:a7:c9:d2:1c:b6:51:da:db:ab:9a:6b:
         45:86:ae:4e:d8:31:25:e1:44:d6:92:91:17:ec:fc:f7:75:25:
         72:b2:ef:88:15:a4:31:70:f4:66:99:82:08:ba:3f:8e:a7:99:
         0d:85:44:56:6e:95:27:77:21:ee:d2:78:62:8b:5a:14:62:97:
         46:de:05:5b:f8:52:b9:89:d5:45:18:e0:56:91:b2:6b:ec:21:
         98:04:cd:a3:57:4e:32:31:de:b3:87:f0:f9:51:f1:01:4d:c7:
         9d:be:aa:43:88:70:fb:20:5d:c6:f2:61:f1:61:e5:b6:65:8c:
         5c:75:f6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:33 2026 by rpki-client