Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft
File:                     FfXEJ7UOueKq98WswbIoljOrU1M.mft (raw, json)
Hash identifier:          CQIW7B68Gdxe5SNs+x5O7gMBMFzzAQy028fhEc/VNDQ=
Subject key identifier:   5F:89:DE:5C:93:79:47:7E:A9:CC:01:DE:BD:05:2C:E3:3F:F3:75:06
Authority key identifier: 15:F5:C4:27:B5:0E:B9:E2:AA:F7:C5:AC:C1:B2:28:96:33:AB:53:53
Certificate issuer:       /CN=15f5c427b50eb9e2aaf7c5acc1b2289633ab5353
Certificate serial:       019D9D765E6DF3BD081DFD43EE5C18FEC382
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft
Manifest number:          01B1
Signing time:             Fri 17 Apr 2026 22:01:13 +0000
Manifest this update:     Fri 17 Apr 2026 22:01:13 +0000
Manifest next update:     Sat 18 Apr 2026 22:01:13 +0000
Files and hashes:         1: FfXEJ7UOueKq98WswbIoljOrU1M.crl (hash: FsZOoPl13z7bTTNtwu/CvGzHPQtUwJO5EKWFVbZUAgw=)
                          2: QB6IjG25mOKNaxsVjuB38lmC2hs.roa (hash: R3eK+TP7VbOaPSIht9zdm6FFs2zJ4wqUGZxjbXUn4oM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:76:5e:6d:f3:bd:08:1d:fd:43:ee:5c:18:fe:c3:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f5c427b50eb9e2aaf7c5acc1b2289633ab5353
        Validity
            Not Before: Apr 17 22:01:13 2026 GMT
            Not After : Apr 18 22:01:13 2026 GMT
        Subject: CN=5f89de5c9379477ea9cc01debd052ce33ff37506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a4:bd:26:1c:03:a5:3d:2d:fd:b9:26:e9:dd:
                    18:a3:7a:3b:53:3a:ae:25:e9:0f:c2:1c:56:85:39:
                    c5:5b:fd:55:45:14:be:1d:e7:d4:39:02:ac:e1:31:
                    c6:01:be:64:1f:09:a8:4c:67:70:15:6d:f7:41:63:
                    64:c7:5f:ba:21:24:9d:f5:54:2d:f2:ef:6c:a4:97:
                    28:f0:b2:99:1c:86:db:b5:36:28:bd:fe:a5:6c:69:
                    e6:05:37:53:ba:f3:53:82:d7:5a:16:44:15:fa:cd:
                    d3:aa:c7:ec:39:6f:e5:61:44:b4:98:b7:dc:a4:4f:
                    0b:c3:9d:45:45:97:51:da:91:be:14:a7:c3:2a:0f:
                    1e:58:47:af:69:93:74:00:bd:17:76:4a:29:87:b3:
                    65:af:4a:09:c6:9c:3a:14:73:b5:98:5e:18:46:aa:
                    34:66:c6:4f:e2:0c:9b:e7:82:42:df:85:32:84:10:
                    b5:d1:56:c7:bd:f4:cf:bb:2c:0b:96:86:7b:78:96:
                    68:a9:e5:6f:30:91:5c:01:6e:55:9f:69:f2:07:50:
                    c0:01:5f:05:95:7f:44:39:80:4e:75:a7:e6:b2:76:
                    d3:30:c4:db:9b:d4:4e:ef:32:5f:7c:a3:dc:5b:64:
                    7c:58:57:8b:9d:76:77:ce:da:4f:2f:c1:6a:3c:2a:
                    f5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:89:DE:5C:93:79:47:7E:A9:CC:01:DE:BD:05:2C:E3:3F:F3:75:06
            X509v3 Authority Key Identifier:
                keyid:15:F5:C4:27:B5:0E:B9:E2:AA:F7:C5:AC:C1:B2:28:96:33:AB:53:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:f6:a5:aa:a5:10:45:ef:c8:af:9c:10:91:62:75:a0:d9:82:
         bb:a4:b7:c2:8b:4a:d5:6b:59:a3:68:58:22:5d:3e:c2:35:5e:
         0d:65:15:9c:0c:1e:d9:6d:c4:f4:5b:62:19:e0:74:cc:e6:7a:
         1f:2e:0f:d3:f2:8f:5e:72:28:7e:34:69:4c:1f:6f:c8:52:5b:
         4b:25:33:97:a6:07:15:c1:6b:ce:4b:92:62:bb:d2:0c:7d:2d:
         fb:7b:f7:74:9d:78:6f:ff:1c:e1:dc:42:52:88:5c:a8:4f:d5:
         34:10:3b:f4:81:e7:3c:e3:91:0b:bf:a0:57:82:d9:83:5d:ff:
         93:b9:d7:3d:bd:cc:a3:a9:1b:a0:24:ba:8e:7e:3f:17:1d:f8:
         8b:fd:30:5d:3b:a8:21:6d:8c:68:6f:50:8e:da:42:d0:08:8d:
         98:e4:d5:59:8c:84:f9:39:96:a4:a7:2e:4e:7a:7c:14:eb:1c:
         1e:79:8d:7c:25:b1:49:fe:d8:04:9b:c6:1d:a3:3f:57:66:0a:
         68:5a:f0:99:62:fd:8a:25:38:8f:f7:21:e1:eb:6c:27:13:9b:
         30:1e:03:42:a9:d1:1d:5b:78:f5:f9:21:24:27:73:0e:b9:7d:
         b7:2b:07:8c:5e:61:a8:fc:10:da:9d:58:29:1c:7a:2e:52:6e:
         06:ed:bc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:05:19 2026 by rpki-client