Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
File:                     8HH00RnQt0-2bjen74eNRJ1U3cg.mft (raw, json)
Hash identifier:          jICz1rKt4MiuYsOhlWGn1soDeUN+tbP08lkGu40IPNE=
Subject key identifier:   F6:E9:0C:94:0B:AF:DE:5C:50:1B:98:FA:E9:4E:25:8B:26:95:2D:14
Authority key identifier: F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
Certificate issuer:       /CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Certificate serial:       019D97E1EE2FBD323F8415E4D154AA444700
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
Manifest number:          18DF
Signing time:             Thu 16 Apr 2026 20:00:59 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:59 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:59 +0000
Files and hashes:         1: 8HH00RnQt0-2bjen74eNRJ1U3cg.crl (hash: 2J03oXs5HWtAp1rmDWpIrkVSnRgKbI9Q11CWoctjH3E=)
                          2: JTGa6gnVCnC_0aiY47Op1UuqiXg.roa (hash: Ks2YhvrwgXilKIV5biVYzNEQiDr4tEwP3nbyii0EPRs=)
                          3: Vvb80MYSkguz6_4hy1kdfE1ltwA.roa (hash: sqkJWQ9Xeo1TklNk71WrnovXu2Ri41sp487lWIh/DUU=)
                          4: jFj46lu_4u0ubIJMiYtU4-hn078.roa (hash: G0bQ//8p+NwdW+KNpaWOQBklpF5Yu3De2ZhKpunhcY8=)
                          5: onuyGuJos8Q8ND84yh1u-8KZ0LI.roa (hash: IwftUiRifWGm4SmqfCzNFHRxNAZyFmT+9xw7JojcqMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:ee:2f:bd:32:3f:84:15:e4:d1:54:aa:44:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
        Validity
            Not Before: Apr 16 20:00:59 2026 GMT
            Not After : Apr 17 20:00:59 2026 GMT
        Subject: CN=f6e90c940bafde5c501b98fae94e258b26952d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:18:62:49:1c:24:6f:78:3a:52:97:9b:c6:8e:
                    cf:7d:39:8d:f6:0f:91:72:53:3a:3a:44:7f:55:bb:
                    75:d2:b3:44:b8:b4:2d:f1:74:3d:ef:fc:ef:61:6c:
                    b6:ff:71:02:f8:56:79:f7:d6:a5:dd:3b:b9:f3:08:
                    d7:40:58:f3:6b:7a:a6:bb:ff:a8:50:9b:8b:72:14:
                    0d:a2:24:e4:05:82:6f:11:0e:9b:7a:a1:0e:7f:15:
                    79:f6:88:f5:f9:5b:9c:7d:57:9c:0f:0b:da:c0:db:
                    8e:ca:63:9a:9d:69:ce:75:9a:0c:a4:5d:16:56:81:
                    7b:25:27:13:ea:ad:db:a4:22:5b:ef:3f:50:e4:5e:
                    08:a1:f1:81:25:cb:5d:33:74:bd:87:1e:20:60:79:
                    f1:e0:ab:12:0d:af:75:19:9e:9b:91:05:ce:1d:76:
                    1e:9a:ed:a5:e8:cf:3e:ee:c6:7e:6a:a2:1d:f8:42:
                    a7:08:66:0c:da:d1:fe:8b:52:85:5a:2c:b2:54:5c:
                    a7:a2:37:3d:48:e5:38:45:df:ab:96:90:12:05:ab:
                    5b:b0:2b:b9:00:5e:f9:16:57:05:e4:83:b6:12:97:
                    19:c0:93:3d:5e:fd:d1:44:2b:e9:cf:5e:1c:42:3a:
                    bf:fa:13:50:0d:ca:11:5b:7e:11:01:2c:99:07:82:
                    d4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E9:0C:94:0B:AF:DE:5C:50:1B:98:FA:E9:4E:25:8B:26:95:2D:14
            X509v3 Authority Key Identifier:
                keyid:F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:c4:dc:14:eb:16:ef:9d:74:2e:11:0c:1a:c2:a7:23:52:a7:
         1f:7a:73:dd:af:4f:a6:7f:e9:d1:51:27:c7:1b:93:da:f8:18:
         bb:ba:89:31:05:47:6d:d2:04:21:51:91:96:0b:37:cb:57:8b:
         27:50:08:3c:1a:c0:b1:1b:62:7c:42:bd:44:41:d0:d5:b5:bb:
         4c:17:cd:6e:ac:61:b9:26:b1:bb:89:1e:10:a0:cd:bc:83:e5:
         9b:9f:4c:b0:f2:78:9c:39:d0:44:22:f5:94:95:37:74:17:04:
         c4:56:4a:ea:99:52:04:20:08:93:ac:23:ed:6e:73:40:2f:c7:
         7c:58:03:e4:ab:ea:91:ab:62:2d:1a:92:c0:da:8f:97:48:e1:
         87:74:1d:b5:94:ef:eb:65:9a:00:04:fe:78:72:98:2c:51:e3:
         18:03:c3:cc:88:e7:57:46:21:3c:28:76:23:6d:fa:99:f1:2f:
         30:8a:9e:fd:38:4d:8e:bb:78:9f:1e:c4:e6:cd:a2:3a:ce:5d:
         0e:ef:b4:4a:84:57:00:7d:82:03:36:dd:48:bf:13:8c:09:87:
         89:c1:b1:9e:ec:b5:bf:10:b6:f7:4c:1e:dd:2d:56:32:e0:ff:
         4c:13:e3:3c:93:95:1e:02:7e:1b:40:54:83:52:da:44:af:de:
         f8:2b:0c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:27 2026 by rpki-client