Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
File:                     ahfeGIf8-pJEuTHZbagmeMAUdmM.mft (raw, json)
Hash identifier:          RRRE12l6R0CSnr7B1DU0qh/9yaTn+ZWpP8Q58Ohx0Gk=
Subject key identifier:   3E:F8:55:8B:FD:DF:9C:FC:2B:76:31:E6:03:7C:70:1D:67:99:AE:99
Authority key identifier: 6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
Certificate issuer:       /CN=6a17de1887fcfa9244b931d96da82678c0147663
Certificate serial:       019D9818B0B066E7BF5881ABAD366E41A697
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
Manifest number:          18C1
Signing time:             Thu 16 Apr 2026 21:00:47 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:47 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:47 +0000
Files and hashes:         1: 3IEzMW9wkvjdW6dqOUxlESavJGw.roa (hash: 2z0dKbAFS8Y5M9QfS1OwUUX8b4XiNgWAST0EQxAlJ70=)
                          2: K-_2uZ2W_94glxC861Amn-MX16Y.roa (hash: 8kuZRTyoDvaEWZI2mWm260ca1KMDIA3sdGDe2hunErA=)
                          3: QcKHUIb0ykf50SPR1Ki_C_mpYDQ.roa (hash: jXJ+eXWdyEUtOYkWh8o1m/VVINUVOvHgc2gRQU8crLU=)
                          4: ahfeGIf8-pJEuTHZbagmeMAUdmM.crl (hash: NZD7o00Ys/n1gIvf3ydQ8f93AEnnyMCj5tX5Jt07lNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:b0:b0:66:e7:bf:58:81:ab:ad:36:6e:41:a6:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a17de1887fcfa9244b931d96da82678c0147663
        Validity
            Not Before: Apr 16 21:00:47 2026 GMT
            Not After : Apr 17 21:00:47 2026 GMT
        Subject: CN=3ef8558bfddf9cfc2b7631e6037c701d6799ae99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dc:72:f3:19:ed:a1:0a:83:95:3e:bc:30:46:
                    5c:e9:e6:da:22:15:3a:bd:3b:bd:f0:cf:3d:0a:94:
                    a0:f1:be:95:49:ca:d8:9d:aa:1e:c6:d7:0e:b6:ad:
                    5b:01:72:ff:9d:c5:a3:9b:99:1a:39:83:75:21:be:
                    e3:3b:c5:11:cd:d9:fb:19:78:af:a8:28:ec:9b:a7:
                    25:9c:d1:4f:9b:e4:2f:17:ea:b6:7f:80:e7:e3:50:
                    62:33:4d:7c:84:d6:4f:ff:62:4c:45:0a:ea:52:59:
                    40:c0:6c:b3:6a:81:dc:34:36:95:b3:69:fc:8c:d1:
                    a9:91:82:a1:48:8a:f6:59:1d:5b:bc:16:08:14:41:
                    34:c3:b2:81:3c:a1:ff:d2:f0:6b:fc:52:f7:68:03:
                    3b:72:5b:ef:37:98:2e:6a:21:b4:cb:20:04:f7:eb:
                    cd:78:0d:44:31:0a:de:3a:01:cb:f6:b1:88:6e:cf:
                    68:b5:26:04:f7:a7:bf:a6:7e:0b:8a:5f:b2:6f:16:
                    4a:f0:fc:1a:b5:0c:8a:17:0c:d6:04:58:61:96:f4:
                    4e:34:f0:d7:01:0f:53:3a:a8:38:0b:4b:6b:a7:2f:
                    64:b6:74:49:7b:81:42:14:25:a9:a8:5b:55:e3:99:
                    62:b5:be:e4:aa:30:44:20:83:5b:3a:d3:87:d6:3e:
                    ff:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F8:55:8B:FD:DF:9C:FC:2B:76:31:E6:03:7C:70:1D:67:99:AE:99
            X509v3 Authority Key Identifier:
                keyid:6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b2:9f:40:7d:09:a0:79:e8:af:b4:50:43:18:c3:e4:18:9e:
         17:2e:67:9e:a3:cf:63:96:95:1c:78:ee:8b:ad:32:3e:e7:2a:
         b1:a1:21:92:cb:4c:b7:bd:31:cc:1c:ca:3f:e9:33:96:e2:82:
         85:0d:b7:03:46:ec:40:0b:fe:a9:b1:df:83:92:36:7b:9d:ec:
         d9:07:ed:3f:cd:67:f9:04:6f:6c:7f:ea:6f:07:e2:82:e6:c8:
         ed:a3:20:e2:ff:0f:01:af:1b:1f:e5:97:9a:ee:e7:0e:f1:f2:
         de:19:0b:c9:01:0e:65:35:0e:26:fb:06:f4:f9:91:ce:f5:57:
         e4:af:34:8f:54:71:20:08:c0:2d:f6:24:db:2a:71:0a:84:23:
         4a:e3:30:e0:c5:9c:aa:8d:f6:fb:31:2f:07:7e:9a:5d:15:4f:
         0c:8a:1d:04:0a:21:52:25:96:68:20:32:d4:ee:95:a1:4c:f1:
         e2:57:6d:16:26:d3:5e:62:c8:c0:68:85:2d:89:04:b6:b0:ef:
         bd:cf:84:b9:4b:91:5a:bb:81:5a:ff:1b:0e:18:ec:1e:1e:4e:
         f5:bc:2c:0d:3a:e8:b1:3b:55:cd:fa:fb:57:9a:64:38:4c:6a:
         75:f6:85:fc:44:32:b3:e0:e9:34:aa:7f:29:81:ce:62:35:92:
         e8:7b:16:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:14:33 2026 by rpki-client