Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
File:                     9YgvM_dIDcx7h2N66nY2gonXXC0.mft (raw, json)
Hash identifier:          tKviPMWlVFNuvOapz/sV9YJS4pRdC2iMQmrQBN3GRXM=
Subject key identifier:   22:EC:39:EF:4E:B0:76:D8:80:C1:23:00:68:5A:A0:7F:B1:59:27:51
Authority key identifier: F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D
Certificate issuer:       /CN=f5882f33f7480dcc7b87637aea76368289d75c2d
Certificate serial:       019D99CFD955639C9D76896B3062157BE552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
Manifest number:          05DB
Signing time:             Fri 17 Apr 2026 05:00:28 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:28 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:28 +0000
Files and hashes:         1: 9YgvM_dIDcx7h2N66nY2gonXXC0.crl (hash: p4FtAy0tVFOR5imPSzM0choXQL0ktQAxwRLqNe26Yh0=)
                          2: Fnxy3WJWYvuek9Fr0KYOmQUUsw4.roa (hash: Ch+0FQEjljg05e4GEw4ZsydId/PhinfJoSdNkBFbTQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:cf:d9:55:63:9c:9d:76:89:6b:30:62:15:7b:e5:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5882f33f7480dcc7b87637aea76368289d75c2d
        Validity
            Not Before: Apr 17 05:00:28 2026 GMT
            Not After : Apr 18 05:00:28 2026 GMT
        Subject: CN=22ec39ef4eb076d880c12300685aa07fb1592751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9f:c6:0a:95:0a:18:3e:1e:37:9a:9c:57:5e:
                    dc:fb:e9:a8:34:b7:ab:b6:26:be:95:e6:df:67:7d:
                    ed:82:22:6a:28:8e:3f:0f:d0:3f:6e:7b:20:18:a8:
                    04:87:f9:50:15:e9:dd:f8:89:8d:2a:37:ef:28:cd:
                    fc:ea:fa:6a:2e:f7:c3:ba:18:e9:cf:83:0a:ce:c3:
                    f4:96:c0:b5:41:09:e3:b6:de:d2:6f:e6:b8:50:9d:
                    78:74:a1:29:08:6f:d5:df:aa:af:6a:cb:c0:1e:94:
                    0e:d5:31:b1:0f:49:a7:78:31:61:88:45:aa:54:cb:
                    bb:fd:27:12:84:2e:67:5d:40:ba:fd:7e:f1:b3:43:
                    35:34:ae:de:6b:68:46:65:70:5e:2b:6c:35:1a:4c:
                    16:63:73:a5:36:7c:33:24:8a:45:e7:54:9c:4d:00:
                    db:c0:d2:9e:b2:1d:c1:7a:36:94:8b:b8:d5:e6:e1:
                    df:5e:25:0a:4c:1a:31:f5:21:79:07:42:8c:05:71:
                    04:ee:a4:df:aa:9f:6d:39:f0:bd:2f:9c:ab:71:4c:
                    61:e6:33:b0:3b:44:0b:36:bd:50:0a:d3:b9:18:36:
                    ed:7c:10:d1:c1:c0:21:9c:7f:35:fb:fd:6d:ba:68:
                    2e:df:ca:f4:30:cc:d2:41:f4:0f:68:fa:56:1a:46:
                    11:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:EC:39:EF:4E:B0:76:D8:80:C1:23:00:68:5A:A0:7F:B1:59:27:51
            X509v3 Authority Key Identifier:
                keyid:F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:cc:d6:ce:83:7e:54:94:be:26:68:f3:17:e4:c1:5e:b9:b0:
         cf:8e:f7:99:86:ab:dd:40:02:86:19:06:c5:4a:b2:8a:15:8b:
         b6:b0:bf:98:f7:21:5b:5b:ae:90:89:58:ca:23:06:00:13:cb:
         52:87:fe:ba:67:41:6d:aa:7b:c2:44:59:a9:d7:b2:ae:24:56:
         81:aa:ba:ba:3e:2f:f3:79:81:b7:58:f7:d0:fd:69:ff:72:b5:
         bd:49:ee:21:e1:74:4e:5d:c3:a1:9a:4c:1e:04:e8:62:1f:d4:
         3f:3f:cd:ed:8c:59:ca:6f:cf:78:c9:5c:3a:13:5c:bf:1c:10:
         22:6b:78:9a:c5:aa:e7:2e:b1:a7:aa:b1:b7:02:72:c2:f9:b2:
         2e:cb:17:26:1b:61:99:42:f6:fc:e9:d5:ab:3a:7b:a3:3d:86:
         d4:99:da:bc:ad:db:b6:0d:3a:7b:7d:ea:58:66:4e:d2:4a:16:
         21:a8:87:f8:59:93:c4:1d:47:a8:03:d2:8b:f1:72:ca:8e:63:
         27:c1:65:ac:a8:da:b7:e8:d8:7d:21:9e:0a:c0:08:08:dc:c2:
         2e:60:3a:e5:7b:8d:4c:e4:85:30:19:b5:fd:2d:8e:ad:61:c4:
         a4:c2:b1:7a:51:08:fe:0c:5c:e1:36:e9:d5:6e:cc:78:f4:cf:
         2c:21:3e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:46 2026 by rpki-client