Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
File:                     inK2D1-0kwAWzrhgzBdKUxNfFhY.mft (raw, json)
Hash identifier:          /k0UZeUGLovw9uh8zDsRDEQsAIEE20fPXk3Og3v7RdI=
Subject key identifier:   F2:5F:64:59:70:34:8D:2B:EF:1F:F8:38:69:0C:58:A3:D2:2B:63:A4
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Certificate issuer:       /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial:       019D9BBEDB766C5F6FC8C9C53FE851FD32F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
Manifest number:          18C9
Signing time:             Fri 17 Apr 2026 14:01:09 +0000
Manifest this update:     Fri 17 Apr 2026 14:01:09 +0000
Manifest next update:     Sat 18 Apr 2026 14:01:09 +0000
Files and hashes:         1: PguFJecoQt--LyHW2Dxlv0ZZ3t0.asa (hash: 0DuH9ZfW8f/p2+Moq7rG/7mXkezlodPdLgpnaG/Lc0I=)
                          2: cSJtDg9vgEHyxl9pdyznOaSGrWg.roa (hash: 76q9DQ4PdJdy77vI2HX3g1+OVo3qLamEUqimf88VMZA=)
                          3: inK2D1-0kwAWzrhgzBdKUxNfFhY.crl (hash: UityWTjkHTtcJyVyaB3it5XWIkxmWXUJDo6ThX1nMI4=)
                          4: nyn8nP7M60E_Gz5chelL2mp7sBg.roa (hash: no7cv4ijMcaVa1AjDdpe2zKmm1N/3cLT1g+7PMJ12Ew=)
                          5: x5mGmJWW7VG2d9fAFZDjA0LUA6M.asa (hash: VX9BMxwn8E44ljUNBHA9sm5zOwxMI5hsQlaAlIe0HNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:db:76:6c:5f:6f:c8:c9:c5:3f:e8:51:fd:32:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
        Validity
            Not Before: Apr 17 14:01:09 2026 GMT
            Not After : Apr 18 14:01:09 2026 GMT
        Subject: CN=f25f645970348d2bef1ff838690c58a3d22b63a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1f:89:d8:26:81:f7:ee:c0:b8:f0:da:49:5e:
                    e2:76:ea:3d:4d:9d:1f:ce:e8:61:1c:9f:64:54:4d:
                    fc:1d:de:50:b7:bc:35:47:5c:8a:66:4b:e3:3c:79:
                    6b:ac:cb:7b:91:8c:6b:63:b7:0b:06:0b:d0:cd:08:
                    de:30:1b:c3:7f:49:b6:44:5f:88:32:2f:17:74:93:
                    23:a9:73:36:dc:76:e2:27:76:6a:1c:d5:ba:70:94:
                    bf:db:b9:1c:3e:75:39:3b:00:83:04:d5:dd:29:50:
                    be:61:a7:e3:63:8d:0f:5e:f6:f3:f7:3a:6b:ee:9b:
                    f7:37:11:f8:5a:4a:06:4d:2d:d6:d0:02:d6:04:1b:
                    9f:3c:65:2d:d4:fe:c0:bc:ee:a3:49:6d:d9:ec:3c:
                    0e:7d:11:8e:9f:c6:34:5b:fb:bd:66:bd:b4:83:0a:
                    f7:04:79:1c:7a:20:a0:38:25:06:91:4a:6f:5b:fe:
                    fc:a0:92:65:61:8d:6e:03:94:4b:a4:65:47:ef:cb:
                    e3:a7:dc:d6:33:c8:4b:2d:2c:8f:bd:79:75:63:4b:
                    6c:23:78:3e:71:de:01:56:5e:c5:29:68:89:af:1a:
                    ad:03:cf:03:4e:29:9c:2a:2e:9e:7b:2e:57:4a:b1:
                    be:62:11:f6:f0:67:84:ee:9e:f2:b4:5a:2e:71:0e:
                    d6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5F:64:59:70:34:8D:2B:EF:1F:F8:38:69:0C:58:A3:D2:2B:63:A4
            X509v3 Authority Key Identifier:
                keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:79:fd:af:3b:10:3e:77:2a:8d:24:d6:7a:57:3b:93:7b:08:
         7b:75:3e:c7:78:91:cb:d1:ba:e6:a7:20:b5:8b:f9:c3:44:f9:
         c0:1b:4d:a4:84:05:f1:a6:ce:0e:22:21:21:dd:25:e9:01:b6:
         17:e0:8e:b3:a3:65:4a:5e:38:8e:81:b1:6e:13:ad:67:cd:d8:
         a3:f5:a7:76:4b:df:58:d8:42:32:58:4d:73:ab:12:fc:61:6f:
         d8:f6:f4:80:44:73:ec:a1:f1:31:ab:b8:52:47:5a:14:df:42:
         59:36:54:cf:91:2b:02:15:44:63:35:f5:24:68:65:ec:b3:66:
         4f:2f:bf:52:f9:f8:95:88:75:46:fe:5c:4c:fa:08:f5:01:39:
         84:ca:5a:1c:f8:67:ec:1c:77:5e:c4:ab:52:23:50:d4:67:c5:
         25:c1:2a:b2:cb:a8:d2:49:c5:66:92:1a:a3:24:6f:b4:ae:a5:
         e9:e6:6f:0a:88:15:b6:bd:90:79:1d:1d:3d:17:b0:1d:e9:5c:
         fe:70:64:03:7f:03:57:b8:c7:df:96:ac:28:57:de:40:4d:e1:
         b1:9a:50:a1:ab:a2:dc:a9:cb:87:d6:8a:bc:0d:ca:0b:84:98:
         fa:2d:73:b7:1f:f1:eb:98:d9:77:5f:8c:8d:62:29:8b:bb:62:
         aa:7b:65:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvtt2bF9vyMnFP+hR/TL0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNzJiNjBmNWZiNDkzMDAxNmNlYjg2MGNjMTc0YTUzMTM1
ZjE2MTYwHhcNMjYwNDE3MTQwMTA5WhcNMjYwNDE4MTQwMTA5WjAzMTEwLwYDVQQD
EyhmMjVmNjQ1OTcwMzQ4ZDJiZWYxZmY4Mzg2OTBjNThhM2QyMmI2M2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx+J2CaB9+7AuPDaSV7iduo9TZ0f
zuhhHJ9kVE38Hd5Qt7w1R1yKZkvjPHlrrMt7kYxrY7cLBgvQzQjeMBvDf0m2RF+I
Mi8XdJMjqXM23HbiJ3ZqHNW6cJS/27kcPnU5OwCDBNXdKVC+YafjY40PXvbz9zpr
7pv3NxH4WkoGTS3W0ALWBBufPGUt1P7AvO6jSW3Z7DwOfRGOn8Y0W/u9Zr20gwr3
BHkceiCgOCUGkUpvW/78oJJlYY1uA5RLpGVH78vjp9zWM8hLLSyPvXl1Y0tsI3g+
cd4BVl7FKWiJrxqtA88DTimcKi6eey5XSrG+YhH28GeE7p7ytFoucQ7WQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJfZFlwNI0r7x/4OGkMWKPSK2OkMB8GA1UdIwQY
MBaAFIpytg9ftJMAFs64YMwXSlMTXxYWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80MWZlODktMDhkNi00NGY4LWI3NTQt
ZTA4NTA1YzkxMDY2LzEvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80MWZlODktMDhkNi00NGY4LWI3NTQtZTA4NTA1YzkxMDY2
LzEvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgnn9rzsQ
PncqjSTWelc7k3sIe3U+x3iRy9G65qcgtYv5w0T5wBtNpIQF8abODiIhId0l6QG2
F+COs6NlSl44joGxbhOtZ83Yo/WndkvfWNhCMlhNc6sS/GFv2Pb0gERz7KHxMau4
UkdaFN9CWTZUz5ErAhVEYzX1JGhl7LNmTy+/Uvn4lYh1Rv5cTPoI9QE5hMpaHPhn
7Bx3XsSrUiNQ1GfFJcEqssuo0knFZpIaoyRvtK6l6eZvCogVtr2QeR0dPRewHelc
/nBkA38DV7jH35asKFfeQE3hsZpQoaui3KnLh9aKvA3KC4SY+i1ztx/x65jZd1+M
jWIpi7tiqntl2Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:06:29 2026 by rpki-client