Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
File:                     gHcJ57DvuhJwJcg-XTGUxxukKMM.mft (raw, json)
Hash identifier:          N9hL8KPSpQ/HJmB1CjP6ZdIYiXSBKTLcyjvLRpsSBUo=
Subject key identifier:   88:2B:EF:7F:6F:B8:CB:7F:75:91:C5:58:DD:66:3C:D9:D2:89:C5:3B
Authority key identifier: 80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3
Certificate issuer:       /CN=807709e7b0efba127025c83e5d3194c71ba428c3
Certificate serial:       019D99631C69D65AF1C46C5F06A511B7AAB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
Manifest number:          18C9
Signing time:             Fri 17 Apr 2026 03:01:42 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:42 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:42 +0000
Files and hashes:         1: 17V0jzStQoCb_AQ6tvGaBLavGoM.roa (hash: xin2ArbEF/v8y8IFPHvAh0sLnYeJkUxdnoEAhdH3Knc=)
                          2: P3hxeobOBa_A0xJ0xlGfKnSdNVU.roa (hash: mHchc2zREYZlnOuz8p+co3qUvhS0H4UpE0PWUACDroc=)
                          3: fn22VffPk13JEZ43P7QzWAHfKUI.roa (hash: jLIrzazW1c/8A69YDLVF5OeAhGmqg599WqHWOZ8LrQc=)
                          4: gHcJ57DvuhJwJcg-XTGUxxukKMM.crl (hash: /yOt/58VLf6RqChB84HX6+N1PGtGSR2JVs3VibfcWVU=)
                          5: lvjXs-MIPCkpvks5PHkIN5Ickrg.roa (hash: rbC/bc1gnAJSprju+NYQ5fdLrBRf1LuhW2461H5788Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:63:1c:69:d6:5a:f1:c4:6c:5f:06:a5:11:b7:aa:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=807709e7b0efba127025c83e5d3194c71ba428c3
        Validity
            Not Before: Apr 17 03:01:42 2026 GMT
            Not After : Apr 18 03:01:42 2026 GMT
        Subject: CN=882bef7f6fb8cb7f7591c558dd663cd9d289c53b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:88:4d:db:40:e1:03:0a:4a:b3:30:70:d5:36:
                    ef:63:a0:bc:f0:25:d0:f0:a3:19:d2:e5:e9:a2:7a:
                    e1:55:e4:a3:fa:b7:23:a9:dd:01:c1:4f:94:af:6e:
                    95:50:61:94:e1:da:e0:03:86:32:53:e5:54:8f:96:
                    c2:93:44:9c:cd:59:03:5c:05:12:58:8d:59:87:99:
                    2e:54:89:f5:be:98:15:68:9e:ec:33:07:51:dd:ec:
                    c5:3e:04:5d:1d:f9:f3:fc:d5:ef:f7:10:0a:38:bc:
                    6c:ed:73:92:24:dc:52:02:89:e1:c0:a4:0c:4c:4c:
                    b3:b0:5d:27:80:95:73:f1:7e:88:42:de:af:c8:b0:
                    d6:ee:46:d0:94:13:a2:4d:b4:20:aa:54:44:df:da:
                    cb:7b:52:27:f1:89:94:94:cd:d2:e2:57:59:35:d8:
                    9a:6a:93:12:38:43:ef:1d:1b:5d:03:a5:24:2f:0a:
                    f9:14:46:1a:52:21:7b:de:e9:3f:e1:d0:21:a2:e4:
                    51:c6:06:21:c4:04:f4:70:a2:f3:68:0d:69:08:15:
                    b0:17:be:c9:7f:d7:6f:d0:fb:04:c0:d7:d4:b1:5e:
                    32:89:c0:15:18:4b:af:0d:a6:68:4e:b3:31:4e:45:
                    b1:18:71:52:d0:d2:36:a2:2f:f8:40:ff:8e:d8:df:
                    34:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:2B:EF:7F:6F:B8:CB:7F:75:91:C5:58:DD:66:3C:D9:D2:89:C5:3B
            X509v3 Authority Key Identifier:
                keyid:80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:c9:1c:c1:3a:54:d0:c4:69:5c:87:67:84:6f:d7:37:ed:6c:
         6d:e3:09:0c:cb:1b:cf:5a:ad:71:70:e6:ee:8b:2e:cb:14:c2:
         2e:a6:8c:e9:b5:07:3c:8b:5e:1d:22:c5:92:5c:e2:de:c7:ed:
         e1:16:05:97:42:be:a5:fb:73:76:21:ec:7f:de:f1:66:9c:76:
         4f:08:73:cd:1b:48:f1:53:c1:da:ae:95:5c:ec:19:bd:78:01:
         62:3e:43:bb:d7:92:a6:fb:b9:8c:17:dd:ad:c9:66:8b:4b:a4:
         00:ca:b9:0d:b6:83:f1:c0:71:f9:55:f6:cf:67:43:a6:6c:2d:
         85:4c:e5:76:eb:e5:56:f1:a2:be:ed:27:4b:b8:19:84:64:1a:
         f4:7e:97:84:4a:08:9a:14:08:9d:16:8e:ec:7a:d2:b5:4d:b6:
         d3:f0:7c:9a:40:a1:6d:05:7e:21:ee:f7:eb:48:dd:b3:d4:d5:
         c0:d2:76:51:2e:39:8b:6d:75:76:11:31:df:0b:f6:0e:03:33:
         a0:6c:68:96:98:68:d7:39:9f:69:e3:1b:fd:b8:5f:02:9a:fc:
         5f:65:2f:08:b1:5b:35:d0:5c:80:07:23:1c:f0:9d:01:93:b4:
         c8:9f:77:28:db:f1:63:52:82:f3:d7:51:c6:69:ce:65:2e:a5:
         a6:53:04:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:25:01 2026 by rpki-client