Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
File:                     gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json)
Hash identifier:          aEd0YoOWApltd0rdQVxTMnyVuLTtnLDJObTsAddzXbs=
Subject key identifier:   E9:E2:CC:32:E8:80:D1:AE:18:86:9A:9F:23:61:5C:66:A3:6A:0A:3D
Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
Certificate issuer:       /CN=805c0c9f23763c037bd6884745cf8464d2db663e
Certificate serial:       019D99D01E756DD465577FAF568F69AB342A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 05:00:46 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:46 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:46 +0000
Files and hashes:         1: 1YAm7d6nHHlsRDgw1O6_EUuzw9U.roa (hash: riRb4iPkDBtyw2U0WQzBeSsFtt3y8g90iqUigaVwK4I=)
                          2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: rA5/ym5QY1HjwzFNt9/9iKFvjquIGOjqqf/zDddiIKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:1e:75:6d:d4:65:57:7f:af:56:8f:69:ab:34:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e
        Validity
            Not Before: Apr 17 05:00:46 2026 GMT
            Not After : Apr 18 05:00:46 2026 GMT
        Subject: CN=e9e2cc32e880d1ae18869a9f23615c66a36a0a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dc:43:a2:c5:d3:36:57:b0:2a:ca:c0:0c:fa:
                    48:8e:89:2c:cd:a9:4f:dc:d8:de:e8:f7:24:a5:4b:
                    8d:ba:c4:8e:ec:41:2e:53:bb:26:10:5e:2c:31:0f:
                    96:37:6e:00:25:f3:17:d9:00:f2:d3:e8:e7:9d:ca:
                    fd:c8:fd:54:5e:c0:7b:4e:f2:99:f1:b0:00:42:d5:
                    cf:55:e9:3d:86:f0:63:0a:c5:ad:6f:ea:ed:59:1c:
                    f0:31:d2:9d:df:b6:b3:c6:8e:88:cd:c5:9f:47:e2:
                    2f:25:a8:c0:75:64:e3:f9:ec:73:12:d0:e4:2c:f1:
                    84:fc:f9:55:3a:c6:aa:08:9f:20:6e:8e:3c:83:bb:
                    d5:5a:bd:3a:19:8e:8c:b7:63:7f:93:5b:65:75:29:
                    0d:44:f4:e3:3d:96:3a:92:d2:a8:b8:0f:4d:f2:f3:
                    77:b2:fc:4d:b6:a8:fc:63:db:73:b7:c4:4e:90:01:
                    70:34:53:d2:be:ea:33:ce:b1:64:b5:87:8d:05:dc:
                    1e:5d:91:bb:cd:96:6a:6c:ab:80:ff:3e:62:c3:13:
                    d3:c5:70:08:72:c5:38:e7:1c:ac:bb:41:32:7d:3b:
                    21:7d:dc:6e:c5:2f:16:07:d1:b1:22:20:4f:33:4d:
                    b1:34:a6:c7:5d:84:d7:6e:40:35:29:00:42:c9:4b:
                    4b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E2:CC:32:E8:80:D1:AE:18:86:9A:9F:23:61:5C:66:A3:6A:0A:3D
            X509v3 Authority Key Identifier:
                keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:cb:04:d8:b9:ef:a6:2d:45:18:34:71:81:a5:e5:c8:d2:03:
         40:5a:19:13:f5:a4:71:49:bb:12:30:84:e2:fe:f1:dd:76:c9:
         66:48:bb:81:bc:48:d0:a9:de:cd:63:6b:20:e7:88:9b:5b:05:
         67:c2:3b:c8:2a:0d:29:73:3d:0a:e4:e3:ab:74:5d:95:1b:df:
         9a:47:89:41:3e:15:d2:f1:7b:93:0f:3a:c2:b5:62:2d:c6:5d:
         e9:1d:36:53:7f:d3:81:eb:db:be:10:25:e3:c0:4e:76:a3:42:
         1e:5e:ea:2f:54:22:43:e5:a5:eb:f5:86:60:87:7b:8f:6c:f5:
         0f:67:b2:77:c7:73:79:06:57:be:cd:33:5e:fd:13:e8:9e:00:
         cd:fe:0f:f8:7d:42:da:f9:93:19:85:0c:0b:09:32:fb:e6:fc:
         1e:27:eb:f9:4d:fe:df:81:9e:cc:e9:a6:31:ab:61:30:16:b9:
         b8:75:14:74:59:4d:58:b3:07:37:74:9e:71:75:7d:00:7f:df:
         44:47:2d:f2:fa:b3:f0:9f:37:3b:11:0b:1d:90:84:f0:94:b1:
         a4:87:36:60:c3:34:2e:b7:7a:0b:87:a2:03:b4:0e:3c:e0:b1:
         e4:40:22:37:d9:71:e8:d9:e0:40:4a:89:50:ad:13:4a:a5:90:
         91:82:dc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:03 2026 by rpki-client