Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
File:                     idpg8EnfujS-S06EGLn_SSElxEk.mft (raw, json)
Hash identifier:          o97FTODOo9P+Y8ZpGfpuhHHmasEDu0WM7eV99cj94d8=
Subject key identifier:   92:42:A0:54:93:FE:8C:DB:9C:07:6F:BD:B3:58:43:2F:4D:7E:73:85
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Certificate issuer:       /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial:       019D98867635F47C6A90F0EFAFA047FB5B8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
Manifest number:          18F2
Signing time:             Thu 16 Apr 2026 23:00:41 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:41 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:41 +0000
Files and hashes:         1: 1qEKqAJdH_5JUlUOsEMtQdOuv-Q.roa (hash: OkbONL4Kv2cLwbDetNkEjbv+0531gLH+WXA/3kqlV9c=)
                          2: 9SsHjlBtd69QJ3ndqo-1KhdedKw.roa (hash: qiOm4Fr0eZzz2bsbkMUTFYSa9lmGOwKDeaQIOpLMzdY=)
                          3: JVABJxvLxkj1mSPSAUuE7d0cXpc.roa (hash: 1hA/cynNPGLtZN3nQtWNzvj3MUG4llVicN6VIwab6HU=)
                          4: gX9Z7p1Ob66YosJCGXnZh4miO-s.roa (hash: elm/BD7Osd0BcHbQbq55e8rpGxN0X0LtIG/FC4qO27s=)
                          5: idpg8EnfujS-S06EGLn_SSElxEk.crl (hash: StEwrraUdY6S2tnIUIA1BKJ0HzEdPzkSJJclOWlHCYI=)
                          6: pDrr_bf7Ghe4a7lfLdGTUedQJ4s.roa (hash: hckgwXDzkDTS3YgN/PyJxO9PpMuWCR3QafiNrBSQrgA=)
                          7: sFz5mtE3Mde8lSIcx7T2y7lO-zw.roa (hash: NxGgl9GbDugZBPBW0o4P8z6yiV+CD/pDM33YvrxHjSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:76:35:f4:7c:6a:90:f0:ef:af:a0:47:fb:5b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
        Validity
            Not Before: Apr 16 23:00:41 2026 GMT
            Not After : Apr 17 23:00:41 2026 GMT
        Subject: CN=9242a05493fe8cdb9c076fbdb358432f4d7e7385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b0:b3:c0:00:99:da:ef:d2:02:e4:b1:05:60:
                    ec:dd:00:86:36:6d:a1:16:e3:2d:66:41:2f:25:75:
                    38:76:05:ff:d4:d7:8c:c6:6b:1c:3b:1c:79:f1:24:
                    90:23:71:57:65:1f:66:38:ea:ea:20:bd:d7:e3:06:
                    30:92:0b:a9:28:20:03:df:0d:40:dc:c0:4f:9d:56:
                    2d:6d:df:1c:df:d6:2b:7c:a7:c5:c6:70:db:06:8f:
                    80:7a:e0:aa:49:1f:8d:45:39:74:b3:d2:5b:5b:c3:
                    ed:2c:e1:2f:f8:c1:4d:88:c7:aa:e1:40:5a:af:11:
                    23:fd:60:41:64:97:dc:81:3a:86:8b:3b:9d:39:97:
                    fd:f5:d3:77:da:72:a4:92:76:d4:1d:f0:80:fc:68:
                    d2:cf:79:91:e1:a1:08:23:c9:3f:be:53:fe:50:32:
                    b8:c7:f2:8f:4e:5d:8c:c0:44:ce:a5:69:11:72:3d:
                    96:72:21:34:98:e6:89:ee:38:65:39:34:4e:ef:56:
                    0b:3d:60:6f:e0:a9:af:26:cc:c8:c5:75:e3:ef:ee:
                    64:7d:78:bb:14:8e:4b:49:f8:3c:55:f2:3e:64:10:
                    21:bc:78:52:2f:f0:55:db:5a:04:ec:f7:5a:6a:15:
                    9d:e1:3f:ce:ba:58:c0:86:01:cc:c3:49:a8:e7:23:
                    f2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:42:A0:54:93:FE:8C:DB:9C:07:6F:BD:B3:58:43:2F:4D:7E:73:85
            X509v3 Authority Key Identifier:
                keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ad:f6:b7:2d:c4:29:fb:34:ff:b5:fd:7e:7c:76:1f:a3:5c:
         c1:63:8b:38:26:46:40:4e:1b:ec:23:ab:27:59:6d:75:b7:f1:
         58:9c:5d:df:3e:b3:e0:41:c2:ec:07:54:21:d1:ee:1a:10:ab:
         94:6a:b6:dd:87:7e:79:78:47:ff:15:28:2c:db:70:7e:f3:c5:
         1f:a9:82:35:9d:4e:c0:34:16:62:c3:b8:75:9a:3f:33:0d:24:
         25:ef:a1:ad:95:bb:c1:63:a6:65:98:ed:85:d6:e0:14:78:19:
         18:31:85:1c:51:3d:e9:47:9b:f4:37:61:d9:35:ac:47:f1:e6:
         06:c9:b1:84:32:52:7e:22:68:3b:4e:9b:41:f9:44:3e:9d:1c:
         ee:49:df:7c:39:25:89:33:5b:c7:fe:9d:9f:50:3d:88:1d:a2:
         3d:d0:ab:c7:43:b5:7c:78:16:18:a5:1d:35:91:95:c1:71:0e:
         48:3b:4b:80:f8:37:12:fd:9f:f2:25:8e:1f:8f:22:3c:64:7b:
         9f:3c:0a:35:4b:51:5c:3e:ea:b4:97:6c:fe:0f:8b:c0:7e:72:
         f4:3c:39:20:ef:ee:bb:0b:79:e4:70:2c:aa:16:7d:97:5c:64:
         1d:4e:bf:fe:37:ea:91:5c:36:8d:a0:f4:75:3a:34:ae:7f:19:
         bf:81:db:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----