Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
File:                     68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft (raw, json)
Hash identifier:          5j740U1alJuLsGJemzJpl9o9kXA0aJm7AVv8Dnxqmos=
Subject key identifier:   74:12:51:DB:0B:FF:AE:41:04:7D:46:A7:ED:53:D6:7B:64:78:EE:90
Authority key identifier: EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
Certificate issuer:       /CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Certificate serial:       019D984FE18C813113FF41EFBEF25BA09E60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
Manifest number:          18C0
Signing time:             Thu 16 Apr 2026 22:01:05 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:05 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:05 +0000
Files and hashes:         1: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl (hash: wTr+CIfzFwbOb5DBKPJcQB44zWWyGdykNesQ/OO9Yy4=)
                          2: G4a9H5UHMlOF2anZRkuQjAXLX4M.roa (hash: rQpuKOb5jMaJjw/2N1tUEol0BJNqAbDDuFn8EFF/SWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:e1:8c:81:31:13:ff:41:ef:be:f2:5b:a0:9e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
        Validity
            Not Before: Apr 16 22:01:05 2026 GMT
            Not After : Apr 17 22:01:05 2026 GMT
        Subject: CN=741251db0bffae41047d46a7ed53d67b6478ee90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:39:e8:38:be:40:7f:98:23:db:cf:18:82:44:
                    36:5e:8a:6d:80:76:b9:08:9f:9a:c2:b8:e3:5e:67:
                    07:79:b3:9d:3f:67:c4:80:34:a3:19:6d:fe:f1:90:
                    2e:8e:bf:a1:44:50:40:88:8b:ec:9c:46:1a:8b:aa:
                    90:2f:62:4d:ae:39:a2:fd:a8:0a:02:45:eb:25:b4:
                    08:9f:9c:26:0c:15:16:f2:b5:6a:0e:8c:d0:8a:f4:
                    ff:fc:df:a3:11:69:c6:54:6c:e5:c6:f2:f8:7e:11:
                    38:09:e2:40:bb:60:ec:9f:bf:23:52:c7:64:74:6a:
                    c4:5a:48:ad:83:a9:40:89:2f:c1:7c:75:dd:5c:ac:
                    bc:df:b0:ad:66:33:95:6c:cd:12:32:86:18:d2:15:
                    22:a6:03:d4:4c:f0:ed:7e:ee:e9:59:8f:7d:46:b8:
                    c1:18:49:a0:e4:43:04:10:a8:14:e5:aa:ff:89:47:
                    d5:24:d4:bb:80:e9:0b:b6:2e:c2:73:fd:13:14:a8:
                    a0:17:ab:dc:f6:85:50:8b:60:8e:76:eb:25:0e:6a:
                    8d:e9:48:06:25:56:22:5b:df:3d:eb:46:94:c2:37:
                    4d:cd:ac:69:90:d2:c9:b1:ef:85:0a:d3:ff:ab:cb:
                    c1:84:18:9f:04:2c:07:52:bb:c8:7a:70:b3:d7:d8:
                    a5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:12:51:DB:0B:FF:AE:41:04:7D:46:A7:ED:53:D6:7B:64:78:EE:90
            X509v3 Authority Key Identifier:
                keyid:EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:8c:fe:14:ed:ce:a9:db:3a:c2:88:8e:c3:41:e4:8f:99:1a:
         fc:e8:59:79:20:e4:f9:21:a9:e5:eb:e9:8f:24:ed:08:aa:b5:
         2b:a3:69:ec:e4:ea:7a:b4:e3:b6:74:00:9a:27:c4:f4:1f:63:
         91:0d:e4:27:b3:bc:c6:8e:6c:62:36:84:68:95:70:27:8c:0e:
         82:6d:de:cd:fd:bc:a5:54:5e:08:de:1c:07:73:5d:2a:cf:8b:
         9b:9f:14:b9:a1:ff:47:66:4f:16:ed:ce:17:a5:dd:52:81:24:
         29:34:b4:4f:bd:7e:45:8d:fc:c4:e9:2a:7e:94:51:80:c4:bf:
         93:4d:e5:e7:eb:6e:d1:6e:74:72:32:b7:48:d1:3f:9a:52:4b:
         aa:52:0a:5c:c8:77:22:e2:7b:ee:71:d9:b7:22:7f:92:29:1c:
         78:bd:84:34:8b:c9:d0:b7:62:44:e5:fe:f0:1f:c6:e9:3b:b1:
         ed:0c:69:35:e0:6e:82:56:a4:44:01:fb:f9:14:9f:68:c3:42:
         52:aa:50:34:40:9f:ea:f8:70:e3:98:de:be:ed:b2:93:81:82:
         95:36:d8:15:ea:e6:04:a7:71:6e:45:22:1c:8b:c5:80:1f:7b:
         55:42:5a:e8:9c:4d:f0:67:c5:6e:c1:02:8b:71:bc:27:4b:65:
         92:cc:e3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:03 2026 by rpki-client