Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
File:                     D1IdJpUmx67jjk-yRUsvCH9p_rc.mft (raw, json)
Hash identifier:          jinzJ8/VSuh345FF5j5VhfRL9MYG9d5Ekb9twgCsHHw=
Subject key identifier:   97:8D:82:59:A5:68:6A:F1:35:62:B7:D9:72:36:29:EF:9D:C1:8B:16
Authority key identifier: 0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7
Certificate issuer:       /CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
Certificate serial:       019D9E5192D9756EF8A3F05B465F280D0716
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
Manifest number:          08AE
Signing time:             Sat 18 Apr 2026 02:00:39 +0000
Manifest this update:     Sat 18 Apr 2026 02:00:39 +0000
Manifest next update:     Sun 19 Apr 2026 02:00:39 +0000
Files and hashes:         1: 79yWfe1C0oJyorvH1Ndj5_ksS2E.roa (hash: VEEzicoUwIVdfyy7u/W5/zZAs5snmAOXbsnXFY4gVR0=)
                          2: D1IdJpUmx67jjk-yRUsvCH9p_rc.crl (hash: T/76EnU6nNAGIfPoOHRaM+FdKGMm2nHXwbp0FaBfdSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9e:51:92:d9:75:6e:f8:a3:f0:5b:46:5f:28:0d:07:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
        Validity
            Not Before: Apr 18 02:00:39 2026 GMT
            Not After : Apr 19 02:00:39 2026 GMT
        Subject: CN=978d8259a5686af13562b7d9723629ef9dc18b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3f:a7:79:1f:b2:ef:91:1f:6e:6e:b4:67:32:
                    ad:cd:56:c1:bf:af:a9:dc:03:81:c8:97:aa:a4:2a:
                    1b:ff:18:90:6d:07:68:19:7f:89:67:d5:12:73:63:
                    5a:ac:34:9d:fe:4e:e0:6e:a9:2e:49:3a:de:9e:9e:
                    72:a6:cc:3a:86:db:8e:b4:93:9e:d5:96:23:67:06:
                    f6:e0:ea:92:7e:f1:05:1e:df:82:2c:af:46:50:19:
                    f6:ca:17:b5:a2:53:e8:bb:79:a3:04:13:7c:3a:03:
                    51:92:5e:39:4d:29:30:b2:5b:0b:54:ba:8b:ed:6c:
                    f3:54:d2:f2:b1:e0:86:94:2f:44:a1:40:d0:6e:c6:
                    48:48:58:0a:84:bd:7e:cd:10:c7:d2:5b:95:6d:45:
                    61:18:db:71:ea:13:d5:57:59:c7:66:5a:33:84:9e:
                    f7:ae:77:7c:34:e7:7a:c4:ac:d9:25:2f:85:47:12:
                    1c:a0:f2:75:e4:51:a2:39:d5:18:d0:8f:f9:fb:f9:
                    8a:1d:b9:ab:08:9d:92:5e:61:63:25:19:88:e0:bb:
                    f2:c6:df:61:98:48:b0:42:42:83:95:0b:df:2a:0a:
                    fe:5c:50:48:3e:2f:7f:37:7a:45:da:b4:cd:91:18:
                    8f:71:3a:82:08:69:8b:7a:3c:32:4d:a6:8a:1d:13:
                    63:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8D:82:59:A5:68:6A:F1:35:62:B7:D9:72:36:29:EF:9D:C1:8B:16
            X509v3 Authority Key Identifier:
                keyid:0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:e9:11:b0:7b:96:59:f6:bc:68:11:b6:ed:52:0e:1c:11:cf:
         42:88:fe:a9:18:90:97:95:e2:17:7d:34:c2:60:c6:7f:02:b3:
         0c:9b:28:4e:54:c6:03:48:32:d8:f0:f8:ef:86:db:20:0f:f2:
         e2:bd:44:98:09:c0:22:af:d3:ef:ad:31:10:73:81:d5:fc:10:
         c6:e7:e7:74:d7:aa:a1:e4:8d:17:56:e2:a8:ae:6e:db:e8:fc:
         5e:90:b5:e3:98:da:25:2b:77:bf:4a:91:9f:fa:7b:00:c4:84:
         37:9e:86:9d:41:85:90:ff:56:4e:f5:e2:d1:1b:31:fb:61:00:
         64:6a:bd:13:8c:73:f0:35:bf:c1:84:68:aa:0f:fd:5e:6b:7e:
         70:a4:11:75:51:7a:8a:ba:b3:ea:81:1e:45:a1:3a:5d:f8:23:
         32:81:97:45:97:26:39:34:5b:cb:9b:0a:93:1d:67:f7:2d:93:
         28:37:ad:40:b3:5b:cc:35:dc:55:95:49:a4:55:82:9f:de:92:
         ca:f9:82:30:b2:e2:3c:a3:4e:29:5a:57:b5:c5:bf:3b:8a:e9:
         ea:e3:af:9f:43:c5:fc:69:64:32:36:e1:f3:47:85:40:16:51:
         8d:23:67:2b:f2:8d:dd:63:69:fc:49:6e:24:f4:c9:87:f6:37:
         13:07:dc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:12:54 2026 by rpki-client