Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
File:                     0sHV_U4greXxG2avsQpUyP_ksEA.mft (raw, json)
Hash identifier:          47vijAdMPY0HrksTPhDo46d0X3n/HLBxp52zl8vUkOU=
Subject key identifier:   25:6B:09:81:F3:CC:A7:08:21:7C:E4:77:04:0E:0F:FB:36:DD:FC:99
Authority key identifier: D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
Certificate issuer:       /CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Certificate serial:       019D9AAC45AE4D853E0FA57E7908D6F16CB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
Manifest number:          1783
Signing time:             Fri 17 Apr 2026 09:01:14 +0000
Manifest this update:     Fri 17 Apr 2026 09:01:14 +0000
Manifest next update:     Sat 18 Apr 2026 09:01:14 +0000
Files and hashes:         1: 0sHV_U4greXxG2avsQpUyP_ksEA.crl (hash: fv2EBEfEAL3iC82LMvi6IJW2hszRRL4Kxaje49nZ9eA=)
                          2: HXdTxxWcJtGk43e4sYB_pqFMLTc.roa (hash: RsmEntoDX046XG0OnjFT3g2UwaVd62q2eGZGnABzJrY=)
                          3: aAz2084YN5AIEG28w26S7CIam4E.roa (hash: aLh2/I7u2RUBoHwMQV1fEF1N56viK2J9i2I4M3Pdo98=)
                          4: xjT1qO5EWxpQrrhnqAJVt7vBTz4.roa (hash: jjMJpW6iAOXQaad1T6wVanui4hCLnhsX9J2X5epM//8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ac:45:ae:4d:85:3e:0f:a5:7e:79:08:d6:f1:6c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
        Validity
            Not Before: Apr 17 09:01:14 2026 GMT
            Not After : Apr 18 09:01:14 2026 GMT
        Subject: CN=256b0981f3cca708217ce477040e0ffb36ddfc99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:46:92:0c:26:0f:00:0c:0b:f4:73:88:34:67:
                    05:c9:bc:a3:89:6f:bc:c0:c5:1f:ae:f8:b1:5a:ce:
                    71:e6:2c:ed:53:f1:53:1d:25:23:e3:56:d8:a0:36:
                    46:59:75:ed:94:c1:39:9a:e1:7d:31:64:80:21:e4:
                    b3:d3:0a:be:b0:a1:7d:e5:28:23:d0:56:16:a3:6d:
                    ba:d7:39:54:90:ab:98:37:2c:15:1a:36:98:1f:8e:
                    56:1f:f1:c4:62:13:fd:52:24:5d:88:0e:08:02:e6:
                    46:b3:9e:df:10:8c:59:a3:d8:d5:8b:b0:7f:41:ba:
                    1f:10:10:a1:ed:ce:8f:8f:e0:03:dd:b0:91:f0:ff:
                    6f:42:da:24:45:2b:a7:cc:22:dd:b0:54:9a:2a:5c:
                    bd:d6:7f:53:a8:c9:65:24:04:34:91:80:28:da:8f:
                    e6:4a:61:2a:44:01:68:f1:ac:80:ce:19:07:e1:ef:
                    d9:4a:64:ae:f7:0b:89:af:f9:6b:3d:11:1c:c4:4d:
                    ec:9a:d3:86:e9:42:d5:f8:f4:ea:ce:2e:03:cf:41:
                    26:09:8f:1a:fe:bb:9b:d4:db:eb:23:4b:8b:2f:c0:
                    63:93:2c:25:72:3f:a1:a1:50:36:0c:df:49:7b:7a:
                    0e:26:f3:4b:cd:3f:be:ec:dc:03:74:95:fb:48:52:
                    54:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6B:09:81:F3:CC:A7:08:21:7C:E4:77:04:0E:0F:FB:36:DD:FC:99
            X509v3 Authority Key Identifier:
                keyid:D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:76:f9:95:f7:02:8c:53:5d:64:cd:d2:c6:0d:4a:66:2d:a3:
         36:18:3c:03:2c:1d:1e:38:f3:5f:33:89:e3:c1:42:65:ff:2c:
         4f:de:4e:f6:73:55:2d:fa:bf:ca:ef:62:e4:3e:d9:36:9e:41:
         fe:0e:d7:89:3e:66:76:5c:2b:b7:25:70:a2:8b:10:02:85:c1:
         5f:ae:de:cb:6f:2f:eb:be:83:6c:69:4e:3a:a1:e2:e7:f8:ca:
         cf:9e:44:b8:8c:e3:73:c5:e3:30:1a:e0:c0:77:df:58:f2:61:
         db:5c:9f:dd:b5:d5:66:16:d1:b9:b9:28:d6:e2:5a:92:42:f8:
         85:bb:f3:06:ba:28:63:92:9e:aa:21:57:40:46:43:99:c9:01:
         75:f4:d7:b6:ec:b2:05:e6:2b:5a:ca:95:9f:f1:7a:b2:85:c7:
         60:6f:39:b0:2c:8d:f4:43:23:ca:98:2c:18:c9:39:49:13:c4:
         09:fc:2a:b1:bf:62:3c:14:52:4b:87:43:a0:a8:6a:c2:f8:5a:
         c6:50:43:60:00:3a:7c:61:ed:9d:ac:a6:60:3e:36:b9:5b:24:
         af:23:3d:ad:83:f0:b0:f4:b5:2e:49:13:4a:91:46:d3:0a:c8:
         9a:60:22:c2:07:92:84:6c:59:f2:fa:88:73:0f:6f:0f:4f:ee:
         a0:1a:fa:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:29:49 2026 by rpki-client