Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
File:                     IwWuBiEvPC-PVzoLVJJEHljyHE4.mft (raw, json)
Hash identifier:          T2tGcn5OnNP8SeakRG46cGaVc4ry5HKJ0sCkvZ0ybd0=
Subject key identifier:   A7:7D:B8:25:D9:2B:56:B5:84:5C:AC:DF:C6:32:1F:F8:92:55:01:F3
Authority key identifier: 23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E
Certificate issuer:       /CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
Certificate serial:       019D97E17F8B952DA27A1ACF2F8838529F7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
Manifest number:          18C0
Signing time:             Thu 16 Apr 2026 20:00:30 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:30 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:30 +0000
Files and hashes:         1: IwWuBiEvPC-PVzoLVJJEHljyHE4.crl (hash: c+jiaBfQqGaRtpi9Y53ufAxt268Ve7DP+xApnM5QQ9k=)
                          2: Oe7wTUeOifNOrZPE6s11kQOKX-4.roa (hash: gsLsf04/fdLsccMrWMJ4qLZbQv2ayrUfRSE5fjnchYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:7f:8b:95:2d:a2:7a:1a:cf:2f:88:38:52:9f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
        Validity
            Not Before: Apr 16 20:00:30 2026 GMT
            Not After : Apr 17 20:00:30 2026 GMT
        Subject: CN=a77db825d92b56b5845cacdfc6321ff8925501f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:07:13:10:67:26:20:23:a5:00:22:76:bf:ca:
                    74:b1:1f:91:ce:0b:34:76:ea:bc:20:2c:8e:28:b7:
                    28:8f:c1:4c:ad:ff:59:63:7d:d2:4f:2b:44:55:12:
                    ef:f7:4f:e9:34:10:cd:ae:c8:83:ed:bc:18:51:0e:
                    4a:c0:ca:2a:65:7a:a5:35:f6:3c:c4:e0:39:4d:7e:
                    8f:ca:7f:c7:4a:fe:a1:f3:f8:4d:15:df:fa:0d:ff:
                    40:f2:5b:d2:ae:00:d4:b2:5a:37:e7:1f:1c:33:38:
                    bd:c7:7c:e1:29:9a:e3:59:02:79:29:6e:9b:f0:9c:
                    72:77:21:aa:42:bb:e5:48:c6:a1:df:34:6a:73:96:
                    fb:6f:a6:f6:0a:64:1f:e5:ef:a2:21:04:39:ef:39:
                    ae:b1:1a:eb:42:73:4f:5f:e7:fe:e6:53:f0:d9:ee:
                    5c:f8:b5:8e:66:fd:da:e0:58:f9:1b:0f:ee:a6:aa:
                    f6:f4:46:bc:18:4b:d5:a1:eb:ca:d6:9b:ac:c0:76:
                    f9:09:6c:4a:ad:e3:5d:96:d6:43:7c:9b:a3:98:87:
                    27:9e:28:da:26:3f:b7:03:97:7b:cd:3b:42:7e:e3:
                    fa:67:41:c2:18:da:e8:18:77:ab:cf:ee:8a:55:8b:
                    2d:c5:21:0a:fd:9b:8d:9c:09:f4:c3:13:24:23:e1:
                    2c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7D:B8:25:D9:2B:56:B5:84:5C:AC:DF:C6:32:1F:F8:92:55:01:F3
            X509v3 Authority Key Identifier:
                keyid:23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:20:26:aa:71:f6:8a:ff:37:79:0e:12:59:6d:38:3d:91:54:
         41:18:c4:be:2c:9e:6d:ab:10:f4:f5:a8:85:4c:3b:8a:9e:25:
         87:60:a6:6a:d5:39:97:54:c8:93:48:d5:9d:8a:17:b7:87:b9:
         7f:a9:aa:65:d2:2e:59:51:b0:2f:df:56:b5:76:05:7f:00:2b:
         b3:b3:51:d2:92:7b:c3:7f:b4:68:b9:ef:40:6c:6c:7d:75:5b:
         f1:31:36:32:70:45:61:05:7d:ea:d6:7b:df:0b:d5:ec:28:e2:
         66:b0:01:c8:fe:16:77:b6:5f:5e:f2:10:c6:ca:e3:fa:75:e1:
         f7:63:ec:c0:8c:00:fd:86:55:ea:2b:d2:c2:23:8c:77:66:bf:
         11:43:c6:2b:1b:9e:03:58:3a:67:ed:13:5f:f2:e0:db:75:b5:
         eb:30:36:93:ae:b9:65:38:d0:dc:d1:ce:fa:0c:8e:5b:18:5f:
         50:50:fe:1d:bd:4a:e3:67:cc:e1:5d:64:28:74:6f:ef:9f:63:
         f3:56:86:06:70:79:6f:dd:bc:71:b5:f5:b7:3a:f4:e5:a5:b0:
         f1:cb:80:0b:aa:f9:58:a9:15:f4:52:c0:7a:48:6d:57:38:a4:
         c5:d8:4f:73:c0:ae:37:87:e5:c2:e7:85:70:b3:82:f8:b8:52:
         4f:e7:c5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:04 2026 by rpki-client