Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
File:                     iNCLhhV8ayjmrJguDD_rGj7DKBA.mft (raw, json)
Hash identifier:          hFckod9XygCnkKwlfRqlHZ6G1upOqF2v9ofmTvkMViU=
Subject key identifier:   9E:A5:50:34:CA:8E:57:DB:87:57:E3:05:34:AE:72:57:0E:AB:16:78
Authority key identifier: 88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10
Certificate issuer:       /CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810
Certificate serial:       019D98BDF39AC936C09E452A83DAF857119B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
Manifest number:          07C2
Signing time:             Fri 17 Apr 2026 00:01:18 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:18 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:18 +0000
Files and hashes:         1: 7EYICmxx7jfWFKyNew2yJRdJD-4.roa (hash: C6pdWtI2MDU5VLgQf1VYuNUhvfomAtWCGF4df8IZdjc=)
                          2: iNCLhhV8ayjmrJguDD_rGj7DKBA.crl (hash: 09UKudG+iDYUxNgDjVfAZles9ClQvR/qv9S5C0gLepU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:f3:9a:c9:36:c0:9e:45:2a:83:da:f8:57:11:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810
        Validity
            Not Before: Apr 17 00:01:18 2026 GMT
            Not After : Apr 18 00:01:18 2026 GMT
        Subject: CN=9ea55034ca8e57db8757e30534ae72570eab1678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d9:28:c5:4c:dd:e0:d8:6e:bb:42:fc:9a:ee:
                    53:6d:3b:0b:7c:fb:3f:48:c0:ad:b2:fa:b8:8f:8f:
                    92:97:13:57:a6:9b:4e:9d:94:9d:2d:dc:8a:b5:79:
                    c9:58:68:25:e3:91:c7:6f:c2:ad:8c:74:8d:ff:3e:
                    7c:c8:23:47:9d:e6:7c:96:ec:48:96:05:58:76:eb:
                    e5:28:07:23:02:ce:67:8e:89:fd:c4:60:5e:29:aa:
                    5a:bb:c6:ea:09:c6:5c:e5:80:9e:b6:ca:f6:d0:91:
                    af:50:07:fe:0e:60:d8:6b:ad:18:d4:7f:7c:f5:80:
                    20:3a:54:12:50:60:f5:08:dd:8b:ed:12:d0:39:5d:
                    89:f2:89:fe:25:a8:a1:40:25:ad:27:4d:11:06:fd:
                    7c:75:8a:43:ea:fe:ab:01:d3:41:57:06:0b:36:61:
                    78:5e:e0:27:2f:b0:f7:cc:0c:29:28:59:0b:72:08:
                    a8:aa:14:9e:47:83:13:5b:ca:e5:02:ca:91:da:4c:
                    ea:b7:9c:76:cb:de:70:b3:35:e2:5f:97:b2:dd:29:
                    37:2a:32:4f:b0:26:ae:12:3e:a0:3c:f9:e5:b2:54:
                    f9:34:a4:df:17:44:eb:09:72:97:a3:41:5d:5c:45:
                    ce:bc:f4:b7:85:8d:d7:06:57:2c:31:cc:bc:9c:7f:
                    d7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A5:50:34:CA:8E:57:DB:87:57:E3:05:34:AE:72:57:0E:AB:16:78
            X509v3 Authority Key Identifier:
                keyid:88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:9c:e6:10:e9:0f:a7:54:df:8a:20:b0:de:cc:13:9a:9f:59:
         af:60:cf:27:1a:9a:ab:67:49:1a:38:b8:e7:78:c9:55:49:cd:
         e0:53:48:16:24:61:05:ad:c5:cc:cb:c4:f4:17:a2:94:bd:3c:
         04:da:4e:2f:8e:9c:7d:ff:1c:7e:13:61:ae:d6:0f:6f:a2:27:
         a6:cb:d8:f0:5c:1a:7d:e2:c4:bf:35:eb:b0:d8:63:bb:eb:c7:
         b9:ee:1d:09:73:a9:15:85:8d:cc:3f:17:9a:b5:0f:b7:93:de:
         dc:03:7c:95:e7:44:aa:36:84:27:55:9d:ed:d2:ac:07:04:2c:
         64:6f:7c:fb:5a:71:19:65:00:98:48:2d:fc:32:5c:1e:fd:a0:
         72:7f:25:83:29:8b:b3:7b:5e:46:81:0e:9b:84:30:70:20:51:
         94:dd:9a:02:34:7f:19:1c:a6:a3:74:97:ad:22:73:da:f5:88:
         d2:8e:73:3b:5d:92:1d:43:b4:45:80:75:37:d5:1a:04:48:2f:
         ae:0d:1c:f6:d1:5d:45:e7:7f:84:ec:28:be:e2:a8:c8:1c:49:
         e2:ec:3c:c7:31:f4:2f:7f:44:3e:6c:56:5e:2c:c2:57:5b:9c:
         e3:16:86:bf:3f:d9:6e:62:63:5d:8c:63:9d:95:ec:9b:7a:6f:
         4a:a9:93:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:03:13 2026 by rpki-client