Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
File:                     FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft (raw, json)
Hash identifier:          5oRkB4gvLvBDP6gvVqOdFYH8E4EsjbcgUjEAClmVf0E=
Subject key identifier:   61:FE:3D:44:34:E9:2C:7B:FC:F3:C0:8B:23:F2:56:8F:1B:CC:48:60
Authority key identifier: 16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81
Certificate issuer:       /CN=167782bea46fd271768ff46d9b45c057a9df5481
Certificate serial:       019D98BDF882555DE8649266D8BE0ECEBBC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 00:01:19 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:19 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:19 +0000
Files and hashes:         1: FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl (hash: 0QzTxykwnKlQr6zFRiMG5J6pznFT829wYs/uWWmUgBo=)
                          2: ivXhF8HUZHKEYR2EUtQx0A5y1L0.roa (hash: XQATR8bU8IBZH5tjUzM6YW6W1aJgryoOIOyHkr8fKR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:f8:82:55:5d:e8:64:92:66:d8:be:0e:ce:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167782bea46fd271768ff46d9b45c057a9df5481
        Validity
            Not Before: Apr 17 00:01:19 2026 GMT
            Not After : Apr 18 00:01:19 2026 GMT
        Subject: CN=61fe3d4434e92c7bfcf3c08b23f2568f1bcc4860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c6:64:14:56:cb:41:81:54:fb:8d:1d:6c:0d:
                    e7:d8:8a:13:9d:88:a4:dc:5d:27:dc:98:d1:42:15:
                    bc:64:9a:07:92:99:2d:f6:19:d9:41:d5:e4:50:37:
                    f9:28:48:95:94:8e:f4:73:3a:8b:92:3e:18:1e:61:
                    7e:a8:8f:24:38:19:8e:a7:40:85:14:88:3e:e4:9c:
                    d0:a5:bd:98:2d:1a:d8:9d:92:80:16:3a:1c:3c:16:
                    d0:bb:2b:dc:0f:3f:57:32:20:1b:89:cd:f3:45:a5:
                    0f:9f:2b:ee:ca:0b:f3:2b:e4:1d:9c:6f:f7:29:ee:
                    c8:b8:7d:fd:ba:33:05:9a:e8:fa:71:00:85:68:15:
                    33:05:a1:30:2e:ac:ce:5b:12:4d:2b:64:3c:fc:0a:
                    39:76:fa:2f:18:42:ce:ca:36:e8:e0:e2:f8:1b:62:
                    3d:24:3f:be:8b:dd:8d:e7:7d:bf:7e:1f:2b:e5:46:
                    30:6d:6f:9f:28:fc:11:3b:e5:20:b5:e4:22:b5:70:
                    ab:3f:04:44:26:33:88:07:54:93:0f:dc:a4:4f:86:
                    11:5e:23:96:fa:9d:9d:e6:c6:9e:02:af:70:94:27:
                    43:d1:02:eb:92:29:43:f4:07:cb:4f:8a:f2:d0:35:
                    ed:28:6e:c9:bb:b8:73:c7:eb:ae:dc:f9:2d:05:59:
                    49:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FE:3D:44:34:E9:2C:7B:FC:F3:C0:8B:23:F2:56:8F:1B:CC:48:60
            X509v3 Authority Key Identifier:
                keyid:16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:3a:df:bc:34:07:d2:7c:92:ce:43:4b:8e:94:73:c8:45:7b:
         b2:f6:5f:42:d7:25:1c:43:be:52:f3:71:70:bc:7b:60:2c:3b:
         70:c4:0e:a0:74:cf:e4:af:c2:57:2c:15:2d:8f:82:6b:e7:41:
         c2:ad:ea:47:67:8c:0d:e4:29:d1:41:e3:51:06:71:7d:04:01:
         28:25:fd:5d:b4:ab:dd:20:00:0f:34:29:76:bb:27:1d:1a:69:
         c0:52:ab:56:8c:44:c3:2d:4a:5c:a7:c0:19:af:e5:d6:99:13:
         e0:65:ce:06:33:e1:02:b1:fb:1d:7e:a3:63:53:a6:65:dd:cf:
         19:f2:47:c4:f1:b2:b1:6c:b2:bb:c5:35:20:2a:3d:28:b1:6c:
         c3:9c:44:47:2d:46:d1:69:37:db:45:fa:83:16:7d:3d:d6:73:
         81:e3:0a:fa:fc:96:6b:50:7e:5e:14:29:56:61:ca:0a:6a:ae:
         04:af:9e:f4:e9:4a:b0:57:55:51:2a:62:c3:95:4b:46:99:c9:
         55:30:82:5e:d8:5a:c4:d5:6a:0b:04:cc:65:1e:7b:64:04:a1:
         0f:6a:cb:f3:a6:7b:77:fd:5e:b0:f0:dc:d1:12:f9:e7:fa:22:
         dc:66:9a:78:98:14:60:6d:2c:5c:d0:95:11:26:bd:d4:dd:4a:
         59:15:cb:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvfiCVV3oZJJm2L4OzrvAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2Nzc4MmJlYTQ2ZmQyNzE3NjhmZjQ2ZDliNDVjMDU3YTlk
ZjU0ODEwHhcNMjYwNDE3MDAwMTE5WhcNMjYwNDE4MDAwMTE5WjAzMTEwLwYDVQQD
Eyg2MWZlM2Q0NDM0ZTkyYzdiZmNmM2MwOGIyM2YyNTY4ZjFiY2M0ODYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsZkFFbLQYFU+40dbA3n2IoTnYik
3F0n3JjRQhW8ZJoHkpkt9hnZQdXkUDf5KEiVlI70czqLkj4YHmF+qI8kOBmOp0CF
FIg+5JzQpb2YLRrYnZKAFjocPBbQuyvcDz9XMiAbic3zRaUPnyvuygvzK+QdnG/3
Ke7IuH39ujMFmuj6cQCFaBUzBaEwLqzOWxJNK2Q8/Ao5dvovGELOyjbo4OL4G2I9
JD++i92N532/fh8r5UYwbW+fKPwRO+UgteQitXCrPwREJjOIB1STD9ykT4YRXiOW
+p2d5saeAq9wlCdD0QLrkilD9AfLT4ry0DXtKG7Ju7hzx+uu3PktBVlJiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGH+PUQ06Sx7/PPAiyPyVo8bzEhgMB8GA1UdIwQY
MBaAFBZ3gr6kb9Jxdo/0bZtFwFep31SBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm5lQ3ZxUnYwbkYyal9SdG0wWEFWNm5mVklFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lZjBiOTItNWQ4NS00NzkyLWI1NTEt
OWEzNTgzNjI4MjljLzEvRm5lQ3ZxUnYwbkYyal9SdG0wWEFWNm5mVklFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9lZjBiOTItNWQ4NS00NzkyLWI1NTEtOWEzNTgzNjI4Mjlj
LzEvRm5lQ3ZxUnYwbkYyal9SdG0wWEFWNm5mVklFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJTrfvDQH
0nySzkNLjpRzyEV7svZfQtclHEO+UvNxcLx7YCw7cMQOoHTP5K/CVywVLY+Ca+dB
wq3qR2eMDeQp0UHjUQZxfQQBKCX9XbSr3SAADzQpdrsnHRppwFKrVoxEwy1KXKfA
Ga/l1pkT4GXOBjPhArH7HX6jY1OmZd3PGfJHxPGysWyyu8U1ICo9KLFsw5xERy1G
0Wk320X6gxZ9PdZzgeMK+vyWa1B+XhQpVmHKCmquBK+e9OlKsFdVUSpiw5VLRpnJ
VTCCXthaxNVqCwTMZR57ZAShD2rL86Z7d/1esPDc0RL55/oi3GaaeJgUYG0sXNCV
ESa91N1KWRXLEw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:47:52 2026 by rpki-client