Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
File:                     rqwbISmrusZTn4DaZVDElyHQqMQ.mft (raw, json)
Hash identifier:          Hc/MsAi9vzW2qdfQbtZSUCurjkXmDuSBLuVucPoibUE=
Subject key identifier:   26:75:CC:CD:81:3A:89:6D:EC:B8:32:14:57:64:13:A9:DF:C8:4A:B8
Authority key identifier: AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
Certificate issuer:       /CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Certificate serial:       019D99D0433448A98460DB5DD4783CF0C27E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 05:00:55 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:55 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:55 +0000
Files and hashes:         1: 3oYuOEcw1b9v0ouS6gA5UBDk4tQ.asa (hash: nrqhWNV+Xc5NkmygiKViAPbV5PLyvcfSxXDvQeMjjJs=)
                          2: UYOEbjPyLAeXDjmWXka43xNSBrc.roa (hash: Ea7vb/KbqpdCWL5Nsui+X7+vrHZiuSMLp+d9Fc0ie4Y=)
                          3: W-LfzjkBmc4oTKnPhjs0kfHNJ6Q.roa (hash: ftW/H5OGOvc73tGHyq9jUHDKeB+UWHSYf4rvMWEvpmQ=)
                          4: rqwbISmrusZTn4DaZVDElyHQqMQ.crl (hash: cskl/r97iyBjxPnZCEnRxy2Tttoy4EnDvQFMtFTC8hc=)
                          5: w_LZxwyOUgD4IGBy1szvQwuznT8.roa (hash: YO+GhiXP/lIUMsu3S7EDreywlrg58HTztRPtniTveWM=)
                          6: x7TD4pUm1hOHrZRLC3TJ-5O5zTI.roa (hash: L8tddTG9LQKbBaTsHjpHN79P5a7dlI7sXDT4x985xho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:43:34:48:a9:84:60:db:5d:d4:78:3c:f0:c2:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
        Validity
            Not Before: Apr 17 05:00:55 2026 GMT
            Not After : Apr 18 05:00:55 2026 GMT
        Subject: CN=2675cccd813a896decb83214576413a9dfc84ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:37:81:e7:0a:23:be:d1:21:fa:26:09:61:a2:
                    35:79:b3:4d:70:85:3c:4a:71:98:1a:e7:58:79:19:
                    e7:1e:53:48:c2:2c:52:62:22:e2:09:35:c3:11:9e:
                    06:1e:42:b3:ae:02:3f:2c:8f:c7:e6:f9:78:84:e6:
                    49:3a:4f:2a:36:71:25:8f:ee:8f:3e:92:95:f1:9d:
                    9f:dc:ec:6b:95:13:61:65:7a:b3:93:f3:b7:6f:4a:
                    d6:2a:e6:75:1a:91:06:c2:37:02:af:97:01:53:25:
                    fe:69:f6:ef:c9:ea:ab:69:5e:75:da:cd:09:5e:d6:
                    4a:84:ab:58:70:f2:01:00:42:9f:09:2c:f5:bc:ed:
                    d2:a7:fd:5b:7c:4c:13:63:57:23:de:90:76:c8:99:
                    e3:ff:4f:27:e3:e9:50:eb:b3:75:ad:ea:a5:8f:d8:
                    a4:88:4e:fd:40:85:f7:50:40:9a:79:1b:57:24:a9:
                    c9:b7:a5:a3:e0:a5:e6:44:55:45:7e:18:00:e4:76:
                    af:b0:b7:63:b8:f7:33:fe:74:0f:11:0e:e7:bc:7b:
                    80:9b:7b:b5:10:d9:51:64:20:db:69:27:5c:10:0d:
                    9e:4e:56:3a:90:9b:37:59:b0:87:13:72:7a:c4:78:
                    74:c4:9a:d9:f3:8a:99:21:67:77:f6:24:51:3f:f2:
                    5f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:75:CC:CD:81:3A:89:6D:EC:B8:32:14:57:64:13:A9:DF:C8:4A:B8
            X509v3 Authority Key Identifier:
                keyid:AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b7:93:14:10:40:d4:d2:98:cf:d5:a7:06:48:c4:d3:ef:71:
         f6:6e:db:7e:ce:80:58:03:e7:d8:df:16:0b:16:23:7e:f5:6e:
         47:9f:57:68:68:33:e7:78:2c:9c:b2:d2:59:ca:54:66:f7:57:
         b7:a2:e5:1c:92:f4:a6:68:ea:8a:0c:25:f5:fd:ad:35:83:65:
         7b:93:14:95:a5:ac:3b:ad:39:68:a0:23:36:9b:d3:ac:62:90:
         bb:68:22:82:52:4d:6c:58:be:aa:56:4a:fa:3f:5d:80:1d:71:
         f6:3e:f9:aa:09:69:78:37:60:a1:94:74:95:af:2f:fa:a5:b9:
         97:57:1a:0e:d4:5c:19:17:9a:f6:99:5a:ce:31:c5:73:c0:7d:
         7f:41:4e:da:57:ec:c2:f9:3a:10:41:d1:d5:13:ba:da:a3:a3:
         c0:89:d0:4f:3e:86:48:32:8d:7d:65:59:15:24:2b:cd:a1:f0:
         1d:6b:03:a3:f0:16:00:40:f9:00:ed:8f:ed:ca:4d:6c:0a:0c:
         20:aa:76:b0:05:41:58:68:b9:95:cf:5e:97:7a:89:87:57:57:
         eb:f4:db:87:3f:b1:d2:26:c3:28:b8:f9:3e:1d:98:ce:2a:62:
         41:90:71:5e:47:63:1e:70:b5:2f:47:6d:57:e5:42:b6:fb:56:
         b2:58:79:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:13:49 2026 by rpki-client