Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
File:                     tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json)
Hash identifier:          G7arG4SYEDNgniUsJXBRNz43BhbwjfFERAazE4GCu4g=
Subject key identifier:   F8:0F:26:DF:4E:4C:FD:7A:20:73:C0:91:DF:0B:89:A2:8E:B1:C3:3F
Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
Certificate issuer:       /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Certificate serial:       019D99628609CCAA256FFB0938A6458C1256
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
Manifest number:          18BF
Signing time:             Fri 17 Apr 2026 03:01:03 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:03 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:03 +0000
Files and hashes:         1: mRAbVrC4vL4GmozrjHi2i0Iaytw.roa (hash: vC24nQiiHK47q4YRBJHF/HkE+eYaEpAw6ZvG99eAnwU=)
                          2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: CD0EkdZZwR0szgRCsnuSAFnIuQZMaNAkLp/fpfZgiv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:86:09:cc:aa:25:6f:fb:09:38:a6:45:8c:12:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
        Validity
            Not Before: Apr 17 03:01:03 2026 GMT
            Not After : Apr 18 03:01:03 2026 GMT
        Subject: CN=f80f26df4e4cfd7a2073c091df0b89a28eb1c33f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:79:bc:b4:74:04:39:cf:4b:45:6c:a5:05:c8:
                    e2:44:78:ef:3c:76:cc:46:0b:c2:54:03:56:03:4c:
                    66:6f:48:99:eb:c7:18:cd:f3:00:a8:a2:d3:51:60:
                    90:8f:80:9b:6a:cc:bf:f2:15:e9:de:45:1a:2c:d6:
                    85:2c:e5:92:a9:ca:d9:55:dc:3e:25:a8:74:00:b0:
                    ba:0e:b3:ca:0d:b0:b8:4c:25:8f:6b:f5:98:43:ad:
                    ce:71:3c:c6:99:4d:cb:25:f5:4e:d4:10:dc:0d:3d:
                    85:b7:9f:ae:5c:a6:e2:97:fd:f4:d3:91:77:f6:66:
                    04:89:78:23:33:b8:b6:4b:fe:5f:f4:f9:4f:c9:d9:
                    c5:9c:e1:35:6a:b3:7f:60:aa:22:63:5d:c8:da:70:
                    a4:cf:f0:9f:ab:c3:88:66:81:eb:c8:78:69:b2:4e:
                    e8:28:22:38:4d:c8:7f:12:11:5d:f3:b7:39:dc:2e:
                    2c:d6:e7:1d:25:2d:53:4e:99:82:99:86:79:ef:54:
                    f5:c5:35:03:85:f1:02:ae:3a:af:d4:bc:e6:1d:b2:
                    67:a9:b0:0c:fc:c4:81:7b:39:0d:63:27:09:c3:25:
                    d5:0d:bf:ec:cb:e1:97:e7:eb:c4:e4:74:f0:64:1c:
                    c1:0a:be:87:74:90:fe:b0:2b:10:50:ea:bb:1b:c8:
                    7d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0F:26:DF:4E:4C:FD:7A:20:73:C0:91:DF:0B:89:A2:8E:B1:C3:3F
            X509v3 Authority Key Identifier:
                keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:1d:40:14:2d:86:32:d4:24:9a:5e:b2:fc:75:93:82:61:fc:
         8a:7a:79:ec:ae:a0:9b:83:4a:0b:7a:dc:74:fd:7b:7d:62:41:
         43:5b:3e:9a:da:c1:36:f1:0f:1e:a4:8f:df:6b:cd:61:0c:1a:
         8b:38:cd:0d:c8:23:82:d7:d7:4c:7e:86:2c:16:d0:7a:14:c2:
         e6:45:10:8d:7e:c6:30:8b:5a:55:e6:d4:8e:ab:03:c7:2d:77:
         c2:19:f9:c6:bb:2b:1c:95:9a:0a:18:67:52:d5:98:16:d0:a1:
         2a:17:e5:32:6d:69:0c:ce:30:ab:15:ca:b4:c3:0c:3b:a9:96:
         71:f4:cf:17:e1:f6:bf:f3:d8:39:e5:85:87:f5:76:cc:25:fd:
         40:f9:4b:20:0a:44:d7:49:3d:4a:21:fe:59:18:29:6e:80:6d:
         6a:97:d6:45:21:df:41:3f:ce:43:04:b8:ec:f6:bc:c2:ad:37:
         d7:4f:06:13:8e:c4:36:06:7a:f6:2d:1f:ff:89:2f:fe:24:5d:
         0a:22:75:96:50:5a:ed:ae:16:34:b1:a3:93:10:e8:b4:c7:f0:
         da:41:ba:52:cf:b2:20:b9:b6:e5:ba:6d:e4:07:99:df:c0:f8:
         c8:75:82:50:e2:62:a9:fc:e1:b3:ea:f9:b1:4a:12:cd:f4:d4:
         01:98:3a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:31:38 2026 by rpki-client