Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft
File:                     Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft (raw, json)
Hash identifier:          unFbyl0w1JABARS4Bq+eu0ckv8RcXhjRbpqfQ1uU+Z4=
Subject key identifier:   3B:98:33:A8:29:BC:C3:A0:F8:3A:B7:C5:65:0D:C0:68:B5:8B:22:4C
Authority key identifier: 63:CB:FC:DA:1D:C0:9D:88:B3:AF:5C:EF:90:DA:01:62:FD:A3:74:B4
Certificate issuer:       /CN=63cbfcda1dc09d88b3af5cef90da0162fda374b4
Certificate serial:       019D9C9A0DE956A4B5EB19DBE63D71F71980
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y8v82h3AnYizr1zvkNoBYv2jdLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft
Manifest number:          EB
Signing time:             Fri 17 Apr 2026 18:00:34 +0000
Manifest this update:     Fri 17 Apr 2026 18:00:34 +0000
Manifest next update:     Sat 18 Apr 2026 18:00:34 +0000
Files and hashes:         1: 2B_TjSMzG_Qyjy_a889-yEM4ZUQ.roa (hash: 0aiNkMB/Opb3pvqD1jWSeypzZe7gwQQUTXUmi/6/oKI=)
                          2: Y8v82h3AnYizr1zvkNoBYv2jdLQ.crl (hash: zdiru8cgHf5cfUijL/cs2sq1tDhd5nYj/nodaUorWJg=)
                          3: v-DfpxyzzKxt20fKpcz-d2vnkjE.roa (hash: bVMoY+WNqxOIWzjaGvX9XGjb85s1gnx8ahnPJ/Q8OBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y8v82h3AnYizr1zvkNoBYv2jdLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:9a:0d:e9:56:a4:b5:eb:19:db:e6:3d:71:f7:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63cbfcda1dc09d88b3af5cef90da0162fda374b4
        Validity
            Not Before: Apr 17 18:00:34 2026 GMT
            Not After : Apr 18 18:00:34 2026 GMT
        Subject: CN=3b9833a829bcc3a0f83ab7c5650dc068b58b224c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:31:49:fa:94:26:c9:3d:54:16:d7:c0:aa:
                    7c:6f:3e:b9:77:dd:3e:14:04:74:f8:61:0b:30:bc:
                    2b:e9:ab:e4:1b:c0:48:01:c4:5b:8e:15:71:84:06:
                    2b:45:d5:2f:96:5c:a5:ac:e3:51:4f:e4:91:75:3f:
                    2c:7c:4f:e4:2c:c9:29:b2:9a:f9:f6:c0:17:69:c7:
                    bb:12:9e:d2:df:09:38:a8:e9:ba:24:9f:1a:35:ba:
                    eb:64:0f:42:c5:06:8e:c8:4b:45:8b:ce:f5:e8:de:
                    32:65:51:54:d6:79:e3:80:b7:4b:5d:73:16:de:79:
                    53:60:63:fc:18:c4:a1:f0:5f:95:4c:74:cb:75:aa:
                    ed:69:64:87:ef:08:6f:73:d4:6c:a3:e3:a7:7d:54:
                    96:04:a3:bd:8f:ce:fe:d0:b7:63:5b:36:8b:07:27:
                    08:a6:21:f3:ce:db:9e:ab:54:aa:92:6c:89:52:e8:
                    9f:29:ce:64:99:80:c7:fe:5b:d7:79:75:2f:56:1f:
                    9f:d2:8d:73:98:98:c6:2a:31:4e:1c:97:d7:14:50:
                    67:4a:eb:a3:ed:e8:a0:f6:c1:1a:3c:e9:c0:2b:ce:
                    e3:ee:0e:b8:41:c4:65:39:40:6f:c9:16:33:e3:f6:
                    f7:58:a7:34:a1:64:36:b5:4f:cf:44:51:96:fa:71:
                    8b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:98:33:A8:29:BC:C3:A0:F8:3A:B7:C5:65:0D:C0:68:B5:8B:22:4C
            X509v3 Authority Key Identifier:
                keyid:63:CB:FC:DA:1D:C0:9D:88:B3:AF:5C:EF:90:DA:01:62:FD:A3:74:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8v82h3AnYizr1zvkNoBYv2jdLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:1d:98:81:d7:d2:ae:13:fc:55:0e:b2:58:12:99:63:6d:65:
         78:1a:de:cf:68:16:56:c9:53:00:aa:bb:b3:f3:2a:16:40:ea:
         c2:ea:63:97:a1:0e:53:1f:49:97:b1:0d:b0:a0:f9:6d:7b:cd:
         a1:5f:5c:59:a9:2f:5d:2a:c9:9c:af:bd:6b:f5:9d:ed:37:b9:
         02:e7:54:78:3d:e1:44:b0:82:f8:31:3a:c7:61:50:44:14:61:
         07:a3:c0:2d:0a:08:d6:01:86:46:86:7b:26:54:70:e8:69:5d:
         e7:1f:b0:e4:43:11:6e:e7:83:b8:82:28:00:ce:af:27:b8:8c:
         89:28:8a:67:ca:f5:7f:0e:54:4f:e3:24:c8:f1:34:f8:d3:32:
         6b:cc:b4:36:21:bc:36:54:a4:6f:c1:b0:fa:0d:40:87:32:ff:
         09:9f:64:27:b4:cd:80:e5:20:ab:ba:02:72:45:ab:c2:a3:90:
         13:01:0f:73:99:2c:ca:42:c8:4d:19:9d:cb:62:23:fd:38:ae:
         ec:95:fe:8b:14:2e:5e:c8:2a:98:a6:f9:a4:e1:ae:53:d8:b7:
         eb:7a:bb:e4:09:bb:01:27:b3:82:47:cb:87:bb:b9:17:06:6b:
         0c:5c:56:e7:f4:90:57:bd:85:08:38:52:24:51:87:fb:4c:cb:
         99:1f:32:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:00:50 2026 by rpki-client