Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
File:                     rtyPMnpGGWTAqHqceAlAHFfIbUE.mft (raw, json)
Hash identifier:          dOPpvEP4mix6T7fH8EFxbz7q9LXm34GzVwydcF7YdKs=
Subject key identifier:   75:0B:97:C0:BF:0C:29:52:F1:7F:4C:0F:71:1F:7F:E6:33:9D:F7:3D
Authority key identifier: AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41
Certificate issuer:       /CN=aedc8f327a461964c0a87a9c7809401c57c86d41
Certificate serial:       019D97AA9A62C7F72F669A8EAC54781FA60C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
Manifest number:          18C0
Signing time:             Thu 16 Apr 2026 19:00:33 +0000
Manifest this update:     Thu 16 Apr 2026 19:00:33 +0000
Manifest next update:     Fri 17 Apr 2026 19:00:33 +0000
Files and hashes:         1: r9eaNKOzK8PPUei6RdKb9LkqhTI.roa (hash: +R7LC8z04wYSjkyWe1Pk5HhKfodwp2zyyiW39xvrzog=)
                          2: rtyPMnpGGWTAqHqceAlAHFfIbUE.crl (hash: DbHzD8S9xSe6+QIXF1hn16WCzxLW+I1XYBczbSKD1TY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 19:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:aa:9a:62:c7:f7:2f:66:9a:8e:ac:54:78:1f:a6:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aedc8f327a461964c0a87a9c7809401c57c86d41
        Validity
            Not Before: Apr 16 19:00:33 2026 GMT
            Not After : Apr 17 19:00:33 2026 GMT
        Subject: CN=750b97c0bf0c2952f17f4c0f711f7fe6339df73d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8d:4d:d6:1b:87:d0:01:b2:9a:18:6d:48:12:
                    2f:74:90:0a:65:f4:c1:d7:66:e6:3e:df:48:14:db:
                    06:8b:8b:fa:ef:c8:79:c1:51:ba:9e:f3:5e:52:31:
                    ee:47:88:0b:3c:28:63:de:b8:8b:66:73:8c:95:c6:
                    75:77:39:2d:81:b3:68:d1:fa:45:31:ad:00:95:db:
                    42:d1:bb:6e:fe:2f:7d:5c:43:6b:b5:e1:0f:f1:f6:
                    89:51:fd:f2:c9:00:cc:cf:e2:d4:ee:5a:3a:41:8c:
                    1a:51:8c:54:d3:7d:3d:8c:c0:f1:cc:78:6f:c9:b4:
                    f3:6b:94:c3:26:41:db:90:e1:ec:eb:c5:2a:16:44:
                    9b:b6:cb:6f:d0:0d:ec:86:a7:cd:d6:d8:15:5c:d1:
                    58:32:f6:2a:17:b8:b6:4c:b7:5f:ab:d2:f7:78:df:
                    d4:63:08:87:e1:49:1d:8b:42:f7:a2:a4:8d:18:79:
                    98:b3:62:f2:54:78:b9:6c:47:2e:87:9e:dc:e0:25:
                    37:b1:b2:8e:76:7a:11:dc:29:b8:01:c7:6a:3f:2c:
                    02:f2:76:b2:80:99:84:f5:06:a9:86:be:a7:5f:29:
                    17:da:a4:5f:96:b0:93:a1:95:3d:d7:7a:59:8a:c6:
                    e0:fc:64:2a:49:56:4d:20:f1:13:ad:2d:59:6d:2e:
                    bf:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0B:97:C0:BF:0C:29:52:F1:7F:4C:0F:71:1F:7F:E6:33:9D:F7:3D
            X509v3 Authority Key Identifier:
                keyid:AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:a8:06:76:1a:50:72:b0:7a:91:2c:45:86:64:7e:76:b0:7b:
         dc:78:b2:98:e2:9b:09:99:b0:9e:35:e2:7f:0e:11:36:4d:d4:
         b1:2a:e0:cd:df:c6:9a:e3:07:c0:bd:60:84:b5:5c:33:ac:ad:
         fc:1e:bc:8d:74:2f:17:d8:71:b5:76:8e:bc:1a:ce:fe:f1:dc:
         e6:81:97:a0:70:1c:79:02:1c:48:e7:8f:e3:0b:7e:4d:4b:20:
         92:a6:91:dc:9c:8a:e7:7b:e1:2a:2e:10:05:31:c4:aa:e7:a4:
         dc:64:0b:95:01:c8:c8:4b:d1:3f:b7:c0:0e:3e:25:ac:bf:d0:
         5f:d3:3c:31:41:55:6e:ed:81:1b:3b:68:a7:97:c6:3d:b8:3c:
         2b:31:ad:12:6d:b0:d8:8c:40:ed:a9:36:6a:2e:db:2a:21:10:
         e3:bf:dc:3d:0d:31:5e:59:39:3c:99:fc:bd:ca:f0:26:f9:47:
         8e:8d:cf:15:10:5e:8e:0b:09:7d:4d:76:ad:7c:4b:9d:8d:70:
         03:b0:df:48:dc:7d:ed:50:80:77:50:51:5d:7e:55:13:24:4d:
         05:9f:b3:38:99:2e:7f:02:0b:8d:0a:f8:e7:c7:cc:04:9c:16:
         55:bb:61:c8:66:c9:60:65:4f:74:7c:c3:14:af:29:48:2a:90:
         f2:00:92:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:54:56 2026 by rpki-client