Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
File:                     mUqt73Cb43uczULMK4xzLDlxUPo.mft (raw, json)
Hash identifier:          mR4o9eTjF/KuIsHj/2XBEB8wI/WAD5tCUp1LDlJR3ek=
Subject key identifier:   6A:68:A1:74:F2:D7:95:4E:D9:5F:F0:86:A0:C2:47:61:EB:FE:D2:01
Authority key identifier: 99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA
Certificate issuer:       /CN=994aadef709be37b9ccd42cc2b8c732c397150fa
Certificate serial:       019D98F4612D268894D4FC16D3B5C757E9EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
Manifest number:          18A5
Signing time:             Fri 17 Apr 2026 01:00:45 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:45 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:45 +0000
Files and hashes:         1: alIVB3DRNeac3-KBgtiTOAlVqYg.roa (hash: 5rWQXWfQK4PnnDUyWE3w/iefHP9zcHf0QTSdTcrqmsE=)
                          2: mUqt73Cb43uczULMK4xzLDlxUPo.crl (hash: M0ub045myXjJzS5DE3Jl+47Wvr3hujuDRiEzFa8oGY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:61:2d:26:88:94:d4:fc:16:d3:b5:c7:57:e9:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994aadef709be37b9ccd42cc2b8c732c397150fa
        Validity
            Not Before: Apr 17 01:00:45 2026 GMT
            Not After : Apr 18 01:00:45 2026 GMT
        Subject: CN=6a68a174f2d7954ed95ff086a0c24761ebfed201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:22:56:23:3d:28:24:68:b5:cf:de:a7:ec:
                    e7:c4:07:55:78:8c:df:b0:af:0d:c1:e3:2f:e1:8c:
                    00:f2:c4:e0:f8:1d:ff:4b:49:ee:eb:6e:e8:ad:99:
                    db:92:3f:2d:43:09:9f:42:91:d8:30:cc:38:66:0c:
                    2e:5b:66:a8:a4:f2:b5:d0:92:8a:9b:b4:26:b4:60:
                    84:f6:64:81:6d:5e:1a:36:9c:c0:22:7b:7f:96:34:
                    06:9f:b2:28:7a:a8:ca:c6:a8:39:29:f7:14:02:04:
                    fb:5a:48:69:a2:13:31:ca:6b:35:1e:dc:1c:4f:41:
                    1b:64:12:fb:98:d6:be:ee:27:2a:96:eb:66:bf:a1:
                    bf:38:94:16:a5:86:5f:95:b7:ee:fc:50:4b:62:19:
                    31:09:a2:9e:1c:40:46:84:81:43:04:57:3b:48:54:
                    87:3d:c0:6f:19:3b:2a:8f:5a:0d:6d:22:42:92:64:
                    7d:73:3c:1f:3b:0e:41:78:be:b9:a6:63:01:64:dd:
                    54:c8:f9:b6:ec:ce:46:36:09:69:c0:b0:c6:2f:4d:
                    b3:06:bd:87:26:72:76:ff:2d:53:73:29:34:8a:bd:
                    18:a2:6a:ad:dc:c9:e5:96:cb:cd:1b:c2:07:6b:37:
                    e2:32:b1:fc:cb:70:ee:41:b2:9c:23:8d:c9:04:93:
                    46:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:68:A1:74:F2:D7:95:4E:D9:5F:F0:86:A0:C2:47:61:EB:FE:D2:01
            X509v3 Authority Key Identifier:
                keyid:99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:75:ba:65:0a:f7:6b:53:56:db:d4:94:96:20:11:6a:75:ab:
         cb:67:fa:6f:87:a8:c9:aa:12:92:4e:4d:d8:0b:b2:10:54:95:
         39:36:29:b5:b9:83:f0:4b:35:aa:8f:08:0f:5b:65:51:95:56:
         4c:4f:d5:42:e0:e4:27:9a:7a:3f:47:85:8f:99:6f:7a:96:98:
         c6:39:79:e9:c2:af:7d:ef:45:60:f4:78:91:14:80:2a:eb:e1:
         2e:61:4e:b3:26:cf:20:9b:ef:b7:fa:ca:73:87:f1:3b:a2:45:
         97:6b:69:c7:05:4c:6e:1d:b3:4f:dd:8f:b3:dc:4b:e0:8d:11:
         8e:f7:37:29:f4:c3:ff:69:92:b8:3f:e2:85:da:59:e9:37:98:
         1d:29:b7:1c:e3:dc:5a:21:ba:a2:03:2c:47:9e:a6:60:ff:05:
         e6:0a:1b:47:61:bd:14:a0:eb:84:eb:b8:5b:59:ef:95:0b:5d:
         b7:5e:e6:bd:07:58:33:98:7e:44:9c:0d:a0:70:0a:2c:08:f8:
         78:3f:50:83:ba:7d:14:80:c6:4d:fb:46:b9:77:37:43:4a:d3:
         3f:f1:67:68:93:bd:c9:ad:0b:83:cf:86:ef:9b:f1:b5:8e:d0:
         f1:0c:45:11:17:c0:ae:29:19:9a:ec:6b:f1:00:a9:61:15:e0:
         7f:f5:08:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:13 2026 by rpki-client