Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
File:                     GNwjUhF2AjItdBxRNoyouN0aPqo.mft (raw, json)
Hash identifier:          n7HLpVspjEfgjPKeaOD9Pygjb3qgR0dBmUv4IQY6Fkg=
Subject key identifier:   EC:EC:9F:CC:01:55:28:A9:57:7D:A9:26:B1:D9:E6:BC:2B:97:84:BC
Authority key identifier: 18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
Certificate issuer:       /CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Certificate serial:       019D992B398C40041A19D3CF81A1A36CE92A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
Manifest number:          0A68
Signing time:             Fri 17 Apr 2026 02:00:40 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:40 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:40 +0000
Files and hashes:         1: GNwjUhF2AjItdBxRNoyouN0aPqo.crl (hash: WWOWbAeDx3Z4XHkBhitCsF/fqrBOxwPI589LfVVzr1k=)
                          2: nTSOIsFCXPktLiPKU0rpSqAxP9c.roa (hash: p4pPo4o8ji9IxG+yykgVyf22JPwriVlViBGbSDBIE2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:39:8c:40:04:1a:19:d3:cf:81:a1:a3:6c:e9:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
        Validity
            Not Before: Apr 17 02:00:40 2026 GMT
            Not After : Apr 18 02:00:40 2026 GMT
        Subject: CN=ecec9fcc015528a9577da926b1d9e6bc2b9784bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:aa:ff:e7:5b:0a:68:87:50:59:20:60:54:06:
                    d8:ef:74:22:54:77:dd:fd:11:5e:55:e7:70:a2:a0:
                    b3:6c:0c:cf:86:1d:7a:f2:6d:23:87:53:de:88:3c:
                    a2:1b:e1:ed:2c:c8:59:0b:09:ae:50:f5:56:65:2c:
                    58:8f:00:f2:fb:59:23:c3:f3:26:04:0e:b0:98:22:
                    ea:27:c3:28:1e:a1:03:4a:eb:3b:44:93:c7:ff:74:
                    7d:49:ac:23:ac:bc:94:a6:24:58:d5:3e:b4:ae:26:
                    d0:6e:f2:4c:98:7f:bd:78:26:75:0a:a4:8b:60:4e:
                    7f:1f:3c:7e:98:2c:f8:b9:3f:76:ef:df:d4:1b:a5:
                    cc:21:76:2a:fa:49:28:8b:51:d1:bc:d3:56:f5:31:
                    66:be:ea:28:99:a9:27:e0:c6:82:ce:f9:53:4f:bd:
                    54:9a:ba:ed:45:5d:70:c6:6a:71:b8:f8:b6:dd:30:
                    21:02:d9:cf:44:8d:56:da:0c:30:4e:ed:de:65:a4:
                    00:58:a3:27:6a:39:72:3c:ae:1d:7e:48:f8:40:58:
                    46:f4:fe:c3:3d:b0:8f:9f:99:90:26:fa:a7:aa:27:
                    e7:c7:e3:7e:b3:46:0d:56:79:23:5c:0b:2d:f0:02:
                    7c:66:de:95:22:cc:38:93:a3:f2:01:2b:aa:45:18:
                    8a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EC:9F:CC:01:55:28:A9:57:7D:A9:26:B1:D9:E6:BC:2B:97:84:BC
            X509v3 Authority Key Identifier:
                keyid:18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:ab:c4:f5:4d:e7:3e:e4:e6:7a:7d:fb:41:dc:9e:4e:3b:40:
         af:88:e3:10:0f:49:72:74:dd:55:4e:22:80:d1:7c:25:6c:c0:
         10:d3:ad:f7:7e:ae:fe:e2:d2:20:4e:c5:eb:ec:cc:36:ca:24:
         6f:4c:c6:ec:bc:fd:a6:44:be:04:3f:c8:1b:0b:08:3e:cb:64:
         4b:55:00:00:e7:eb:49:13:69:ab:30:10:cc:b5:de:db:9b:ab:
         bc:ab:10:01:b7:ed:47:af:f3:a8:22:df:24:48:8b:5d:84:ba:
         91:ae:e8:a8:85:fe:7b:82:0c:56:f5:bb:8b:39:37:33:ca:36:
         88:1b:9c:47:0f:dc:52:6f:9e:97:d0:70:93:25:67:23:6a:61:
         01:57:4e:6c:b2:e9:64:d6:c1:6c:78:51:11:07:ad:19:59:a7:
         36:60:e9:c2:63:a2:f1:d9:37:d5:55:1c:56:d3:7e:37:d0:00:
         de:1c:0e:76:60:03:92:41:b3:3a:b9:39:d4:0f:dc:26:2f:37:
         e1:31:cd:93:30:a0:8a:c9:b1:3d:4f:d0:ab:1e:91:31:b1:b6:
         41:4b:ba:3b:ac:5c:98:af:f2:e3:97:bc:b2:f6:67:84:33:98:
         79:66:67:0a:fe:d1:3e:77:f2:69:40:7b:33:2a:b2:0a:ac:62:
         a9:40:f0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:22 2026 by rpki-client