Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
File:                     DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft (raw, json)
Hash identifier:          wyrqxKa8HHzVjexHEBpjujbji+9ZgGD3/F+90ovM5NQ=
Subject key identifier:   2E:FF:21:40:F9:C3:0F:C7:75:C1:41:55:44:E9:DC:12:7E:17:83:B1
Authority key identifier: 0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75
Certificate issuer:       /CN=0d026a518947dd5bd3981ed0669c11c5621d0475
Certificate serial:       019D9BF56CAD1124383979FF8FDF28E87F70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
Manifest number:          0B8A
Signing time:             Fri 17 Apr 2026 15:00:45 +0000
Manifest this update:     Fri 17 Apr 2026 15:00:45 +0000
Manifest next update:     Sat 18 Apr 2026 15:00:45 +0000
Files and hashes:         1: Ajd0L8XQdcyvJF9_JDszHwb-ypM.roa (hash: JhIrWGN9lZ7WVHOAnXcV9RrmyiG8gnQ8alzgC7IHdko=)
                          2: DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl (hash: 50UVPhMLfC83nrHiajQ0zRya62iEoemIRF4DmgA4oKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:6c:ad:11:24:38:39:79:ff:8f:df:28:e8:7f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d026a518947dd5bd3981ed0669c11c5621d0475
        Validity
            Not Before: Apr 17 15:00:45 2026 GMT
            Not After : Apr 18 15:00:45 2026 GMT
        Subject: CN=2eff2140f9c30fc775c1415544e9dc127e1783b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:db:ef:22:03:06:fc:c1:b8:dc:ea:c8:5d:10:
                    4f:50:81:2f:a0:02:4a:50:c7:20:85:41:d3:6b:99:
                    a5:74:b6:c1:78:5c:a1:b0:d8:54:91:1d:1d:4c:f3:
                    f1:5b:81:18:de:2f:d5:74:e1:33:5d:7b:39:a6:17:
                    f3:69:72:78:ce:1f:95:29:6c:df:f3:31:22:41:68:
                    1b:94:33:5d:f2:1a:bc:c0:f4:1a:0b:7f:34:ff:2e:
                    86:bc:9f:4c:ee:b5:78:49:fb:d1:bb:5c:11:84:78:
                    fb:0d:3f:fe:dc:22:6c:bc:21:fe:97:00:ab:41:1f:
                    6c:99:54:2e:b1:ba:69:db:05:05:e9:66:24:cb:ce:
                    97:b2:a7:9a:31:54:b2:bf:ad:97:c8:e0:b1:18:b2:
                    12:a9:79:a0:68:73:6e:96:db:a9:bd:d5:f3:0b:1b:
                    96:1f:e0:be:8c:da:0d:bc:43:78:fa:6d:d9:4b:42:
                    62:20:a8:19:e8:c2:2f:60:93:f3:3d:d3:7a:d7:8b:
                    86:7d:fb:11:48:28:1a:b7:d1:6a:4d:e6:de:6d:ea:
                    84:ed:13:4e:df:64:9b:9a:81:ab:7b:80:ae:e9:79:
                    eb:7e:c0:b8:21:33:e9:cc:a5:ba:0c:7f:c1:1c:7e:
                    ad:b2:04:12:5e:60:7a:2c:7d:da:7e:8c:c7:0f:3c:
                    8e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FF:21:40:F9:C3:0F:C7:75:C1:41:55:44:E9:DC:12:7E:17:83:B1
            X509v3 Authority Key Identifier:
                keyid:0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:bc:82:03:49:8f:42:f4:f7:c3:95:52:c5:40:f5:d5:1e:09:
         9f:2c:37:f8:5f:b3:cb:ea:93:c2:1c:9c:81:41:74:7e:3e:87:
         bf:e6:b7:a5:8e:05:27:b1:86:82:23:e4:f6:e9:bf:8b:ae:5b:
         cb:6c:cf:36:f4:5e:22:ae:11:13:cc:b8:4d:a6:4c:53:bd:2b:
         b3:d8:5e:63:65:58:66:44:bf:a8:c5:8e:95:96:a5:21:fc:9a:
         2f:19:e7:21:45:8a:18:b0:98:71:f5:8d:e1:d5:cc:d1:74:f0:
         04:76:23:09:cf:be:45:a5:f1:c0:81:e4:63:e8:05:71:27:b2:
         f3:99:48:e4:d7:0c:04:9b:10:d6:34:07:fc:dc:3b:c9:1b:1b:
         2c:fe:47:39:a6:2e:74:ff:d1:f7:7e:57:82:0e:07:da:46:25:
         a0:ca:af:09:6d:96:78:f5:0c:bf:e3:24:74:e0:db:b8:07:55:
         11:6a:33:67:3a:d6:b7:95:b7:ee:18:da:be:d9:81:c8:27:e4:
         39:80:b3:c0:3c:a0:fa:6e:3f:74:62:68:bb:12:37:c6:b4:b6:
         a8:c2:c3:04:57:d4:31:22:8e:3e:94:cf:67:43:91:b9:fb:ec:
         28:b0:f5:f0:d7:76:54:52:d8:d6:0f:f4:de:d7:e6:97:db:04:
         5a:72:0b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:58:46 2026 by rpki-client