Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
File:                     N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft (raw, json)
Hash identifier:          bvSpOvVJQbGZLE0PGe0NIulpO5oTbYV9O5Ji0DdGvS8=
Subject key identifier:   79:79:4A:DC:91:B7:1C:A3:6C:44:D7:FC:4C:6C:46:08:4F:10:7E:66
Authority key identifier: 37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D
Certificate issuer:       /CN=37ca50022828d901bf42b2798f7844104b05404d
Certificate serial:       019D9D3EBE894E47F8D58C83A76228BA8F29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
Manifest number:          0CD9
Signing time:             Fri 17 Apr 2026 21:00:28 +0000
Manifest this update:     Fri 17 Apr 2026 21:00:28 +0000
Manifest next update:     Sat 18 Apr 2026 21:00:28 +0000
Files and hashes:         1: N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl (hash: T9vgRs2nymd3jYjCdCXy3dbmTZ++SJyGiqw5NwLMknc=)
                          2: T8qj0TqqRzvgZV6bToFz4c0FM-4.roa (hash: RUkC3kCoEXyWtFRshNXK5Ou2vFrdu7iWv96bVF4GwyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:3e:be:89:4e:47:f8:d5:8c:83:a7:62:28:ba:8f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37ca50022828d901bf42b2798f7844104b05404d
        Validity
            Not Before: Apr 17 21:00:28 2026 GMT
            Not After : Apr 18 21:00:28 2026 GMT
        Subject: CN=79794adc91b71ca36c44d7fc4c6c46084f107e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ef:22:64:c3:34:89:52:f1:f9:b2:be:69:cc:
                    dc:6e:c0:b8:a0:f0:b9:d9:6d:d5:ae:9d:5e:9d:49:
                    b6:5a:b1:38:a0:20:7f:50:d5:c8:21:65:2b:62:9d:
                    a5:d4:f4:da:86:ba:94:2d:84:2b:c0:9b:0d:a4:44:
                    92:15:d1:26:ad:23:65:c5:c4:7d:56:8b:1e:0c:b4:
                    dd:05:7b:2e:cf:60:3f:b8:c9:bd:ab:c8:a3:08:af:
                    7b:a0:f7:fa:b7:5f:23:fd:6f:0e:f2:e4:d1:58:71:
                    79:03:80:2b:76:7e:46:bd:94:8c:a9:95:d8:8b:f5:
                    c8:88:3f:8b:74:42:bf:06:b9:9a:7c:f7:b8:35:98:
                    fd:b3:c1:e9:82:c8:8d:ac:35:d0:73:14:2c:34:46:
                    e3:10:39:83:bd:9a:71:b4:c3:99:c4:b9:3b:2c:e3:
                    9f:67:27:1a:f1:db:c1:ce:5a:f1:38:52:dc:07:e5:
                    fe:c0:71:48:ed:2a:08:2a:ef:27:5c:6e:04:24:93:
                    57:18:20:67:6c:5b:38:a5:6a:16:5c:7b:da:da:82:
                    15:59:e7:9a:97:81:38:d3:5c:b0:37:67:5d:77:2b:
                    e8:c7:e7:a9:a7:0d:16:d3:23:0f:e8:28:f2:63:e8:
                    75:14:68:ae:c2:09:1d:6a:cd:d3:50:26:55:43:82:
                    3b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:79:4A:DC:91:B7:1C:A3:6C:44:D7:FC:4C:6C:46:08:4F:10:7E:66
            X509v3 Authority Key Identifier:
                keyid:37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:67:c8:fd:88:27:b2:19:9f:a7:ba:2e:81:d6:16:fe:4f:5a:
         4a:65:75:a5:df:16:76:0f:12:c7:12:e6:7c:41:97:2d:7c:39:
         16:0a:70:f8:1e:07:c2:aa:76:8e:06:37:03:a6:07:03:7c:0e:
         cf:bb:89:a1:da:33:00:35:9e:d0:a6:72:0a:36:f7:be:5d:d7:
         17:44:7c:1f:50:29:6b:3d:9c:31:b7:e8:61:40:b5:13:0a:87:
         f8:0e:cd:a0:5c:6d:b0:54:26:db:1c:fe:b2:79:66:6e:0e:3f:
         6a:99:f3:05:8c:0e:2d:2f:31:d1:5d:78:8d:0a:3b:45:0a:d7:
         08:82:de:07:c6:3c:a8:78:ae:ab:e3:17:d2:ab:22:1c:d1:8b:
         f2:1b:9f:76:e4:42:d4:d8:ee:eb:18:43:a8:03:b6:d6:fc:06:
         49:77:bb:6f:bd:f9:86:fa:4a:f2:11:b6:c3:0a:8e:58:92:49:
         41:d4:c3:93:74:52:7b:16:74:3c:ca:4c:78:ad:e6:b3:74:75:
         ad:83:f6:83:f8:98:4e:e0:d0:d2:ab:8b:dd:ae:48:1e:e4:cf:
         18:b9:01:5e:d3:4c:b5:63:7a:68:4d:e5:95:31:1b:2b:8b:96:
         17:a9:1c:a7:11:6b:e2:94:5d:08:fc:f0:99:c1:bb:c8:8a:62:
         3d:0b:88:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:08 2026 by rpki-client