Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
File:                     TxI-JI5uwDaOBxI0X3JtcfYPgms.mft (raw, json)
Hash identifier:          90WnR8jpufFNU6N07upPzxXrUdxYyFygJPXINNNgnJQ=
Subject key identifier:   1A:D8:02:7D:BC:93:5C:BC:A3:E4:7C:B5:BC:E1:D0:97:9F:C1:31:C0
Authority key identifier: 4F:12:3E:24:8E:6E:C0:36:8E:07:12:34:5F:72:6D:71:F6:0F:82:6B
Certificate issuer:       /CN=4f123e248e6ec0368e0712345f726d71f60f826b
Certificate serial:       019D9850892300953BFA18460ABC4F385B36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
Manifest number:          18C2
Signing time:             Thu 16 Apr 2026 22:01:47 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:47 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:47 +0000
Files and hashes:         1: 16U2Zcvc6E7UFGeywJvIx4XiVgQ.roa (hash: B22/eCk44cDYUs5H7aJKFJrAI0Ca0WhxkwmE6m9DyGw=)
                          2: TxI-JI5uwDaOBxI0X3JtcfYPgms.crl (hash: GHCXy8lrOaK7YyZ7vVlaSZwhcdl1Cftc//+CSkcsYv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:89:23:00:95:3b:fa:18:46:0a:bc:4f:38:5b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f123e248e6ec0368e0712345f726d71f60f826b
        Validity
            Not Before: Apr 16 22:01:47 2026 GMT
            Not After : Apr 17 22:01:47 2026 GMT
        Subject: CN=1ad8027dbc935cbca3e47cb5bce1d0979fc131c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d2:8f:7a:60:ce:ba:fe:56:18:d2:a7:26:a7:
                    57:ce:da:d6:8f:ed:1b:2b:d9:89:e8:3b:51:06:28:
                    f8:bf:02:2d:5f:dc:9a:16:e5:ef:82:04:29:b8:21:
                    68:5c:d4:c5:d8:a9:b0:60:72:6c:e7:d6:d8:3b:21:
                    69:d1:49:d7:0b:c0:31:f9:1c:c9:23:af:4f:78:0a:
                    85:23:f5:df:ae:b8:e4:45:84:55:26:16:17:9b:92:
                    ec:59:87:dc:50:1f:47:ed:f7:ef:df:e1:cf:f9:bc:
                    c8:8a:35:d0:69:ec:ac:1a:a8:c8:43:fb:4e:76:c1:
                    4e:7d:ed:f4:b3:29:8a:bb:f7:da:fd:31:2f:37:89:
                    ee:49:d7:a9:d4:b7:a7:ab:0c:0f:1e:fd:13:c1:d6:
                    4d:a6:c2:16:76:73:bb:80:d4:d8:ca:0f:47:30:c8:
                    e6:d0:94:a5:e5:bb:06:47:88:18:37:55:4a:63:d8:
                    0d:fd:74:3d:e7:93:cd:87:ac:92:25:f8:ab:2b:83:
                    f6:e3:85:4a:86:f6:08:d0:cc:3d:63:86:cb:d2:0f:
                    cb:6b:ef:f6:7b:1f:d4:a7:48:6f:51:6c:80:9e:0e:
                    5a:1f:cf:3b:fb:28:6c:17:f1:fe:04:34:43:4d:04:
                    7e:c0:b7:0d:c9:fc:86:e1:10:79:ea:95:96:92:08:
                    39:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D8:02:7D:BC:93:5C:BC:A3:E4:7C:B5:BC:E1:D0:97:9F:C1:31:C0
            X509v3 Authority Key Identifier:
                keyid:4F:12:3E:24:8E:6E:C0:36:8E:07:12:34:5F:72:6D:71:F6:0F:82:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:3a:b0:11:e6:52:64:64:a7:ec:18:6d:a7:d3:86:58:22:4d:
         9f:d1:c6:f0:90:dc:1f:2f:da:87:2f:2e:e3:ff:89:ab:2a:f3:
         14:af:94:73:54:ef:0c:f5:79:3a:7e:b0:96:c9:b8:29:1d:71:
         5e:d5:52:45:f0:51:bc:7b:2e:46:41:11:ec:2b:52:7b:ea:8e:
         15:5a:3c:53:47:3b:b0:9c:01:a7:15:88:79:eb:bd:f4:f3:61:
         1b:37:7e:69:a5:91:1f:7f:dc:05:21:3d:ba:e7:61:d9:7b:47:
         38:0e:91:ff:6d:d8:95:70:8b:92:7b:fd:a4:1b:9d:5b:bf:1e:
         8e:17:18:c4:9c:08:eb:1d:cc:67:3b:10:2e:5e:1a:8d:dc:ed:
         af:13:17:96:4b:82:17:e0:39:73:87:ea:6e:4f:f8:b6:46:9f:
         2a:7e:ae:21:19:35:00:2d:44:1e:15:68:b1:89:d1:1d:eb:27:
         c3:e7:ad:59:2b:7f:eb:e2:f3:a6:e5:72:05:39:92:58:65:0e:
         77:fd:f6:17:90:85:56:3e:5a:a0:c7:39:32:d8:41:3d:ff:e4:
         1a:70:37:d4:99:c4:ac:69:ef:cf:31:ed:66:84:f8:65:25:ad:
         cb:f5:bc:e2:bd:1f:e7:52:f3:b5:39:ae:69:ac:9f:74:64:2c:
         b6:29:4b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:59 2026 by rpki-client