Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
File:                     4VaISXYX6PCmBpCvqz75TBGrbXI.mft (raw, json)
Hash identifier:          FNIRiMvi8fpcASyEWy4rhGPmc8wVujNJiaQAOVy2HRw=
Subject key identifier:   1C:7D:F7:7B:13:2E:96:61:80:A6:56:36:73:96:8F:9F:08:B0:A0:97
Authority key identifier: E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
Certificate issuer:       /CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Certificate serial:       019D9CD1CECD1E3F96B57B1A8499AF7624CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
Manifest number:          0382
Signing time:             Fri 17 Apr 2026 19:01:28 +0000
Manifest this update:     Fri 17 Apr 2026 19:01:28 +0000
Manifest next update:     Sat 18 Apr 2026 19:01:28 +0000
Files and hashes:         1: 4VaISXYX6PCmBpCvqz75TBGrbXI.crl (hash: /n7JNfISnmnG3Jrai8vnogCh8X7El5XT2tjrc/iLnpc=)
                          2: 5j7ZwrONA84-aZ-e52NNl2zE11A.asa (hash: taqcj8XblYBWLIWzZLIKNdSuKwH606xS/rmkXvi9QXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:d1:ce:cd:1e:3f:96:b5:7b:1a:84:99:af:76:24:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15688497617e8f0a60690afab3ef94c11ab6d72
        Validity
            Not Before: Apr 17 19:01:28 2026 GMT
            Not After : Apr 18 19:01:28 2026 GMT
        Subject: CN=1c7df77b132e966180a6563673968f9f08b0a097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2a:ff:a1:1e:99:b7:61:67:6e:32:c0:6e:21:
                    f5:6a:57:3d:10:83:45:e9:62:b9:3c:68:0e:47:4e:
                    13:23:e5:0c:c0:da:37:15:66:b7:15:ee:62:89:44:
                    6f:27:83:10:58:2f:a5:11:1f:a4:7e:f2:52:df:44:
                    d0:b5:4d:63:f4:0a:56:61:86:f2:0b:9b:aa:a6:71:
                    02:f7:ba:a1:6a:bd:73:2f:9b:b7:76:0a:31:52:bc:
                    c8:94:d4:aa:af:50:cd:96:c1:b4:3a:35:e7:7c:fc:
                    25:e9:4a:a6:2b:3c:95:87:23:fd:d6:73:bd:11:2e:
                    fc:ab:c1:c4:4e:03:9d:88:68:5e:c1:e0:8a:f3:a9:
                    8f:8f:5e:52:4c:30:54:d4:52:d2:d7:53:68:4a:6f:
                    6c:63:3f:f3:44:9f:6b:db:0c:83:fd:0e:a6:6e:f2:
                    97:b2:95:d5:cc:a3:5a:73:ef:a7:d5:e6:d4:1a:80:
                    03:97:a5:bb:80:69:97:62:07:02:88:b9:77:8f:42:
                    a5:ff:52:9d:1d:a9:fb:09:78:e1:ff:bb:08:4e:14:
                    19:b0:93:76:68:0b:68:37:1c:c2:7b:90:75:00:cd:
                    9d:2a:b0:34:51:fd:59:2e:b7:33:f7:cc:c8:db:a3:
                    c1:01:5a:ac:fd:38:de:57:87:0e:7c:07:5c:83:1a:
                    28:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7D:F7:7B:13:2E:96:61:80:A6:56:36:73:96:8F:9F:08:B0:A0:97
            X509v3 Authority Key Identifier:
                keyid:E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:ea:c5:87:0d:69:ff:3d:3b:0e:0a:c0:b6:dd:6b:38:e4:51:
         bf:bc:6f:28:a2:b7:2c:c0:f6:ae:55:82:fb:7b:a5:20:d6:82:
         9d:1a:16:74:a2:4b:84:7f:39:68:d4:ae:8b:c1:ed:16:b9:09:
         2e:92:63:48:29:8a:fc:a3:c1:36:e0:b6:08:67:29:67:4c:6a:
         c8:38:e3:25:af:8e:06:5b:f2:f6:38:a9:70:ed:d4:f0:91:a5:
         d3:5a:22:26:59:7f:2e:c3:df:ff:48:8c:5c:93:43:24:91:5b:
         f1:d6:17:23:1c:a0:c5:95:33:48:f7:43:b4:92:66:2b:9d:32:
         36:68:5a:2d:6e:f0:ef:a7:94:77:7e:b2:6e:65:6b:e0:5c:fb:
         f6:04:0d:7c:11:38:b0:4a:0d:0d:d4:41:fb:1f:f3:10:c6:1c:
         71:a2:a4:2a:d2:76:4f:e2:ef:d0:00:b6:d6:ec:6b:b8:b3:65:
         73:de:ca:bb:18:f1:e0:35:b7:61:9e:02:b9:ef:35:cf:a2:68:
         9f:dd:26:8d:41:6c:ef:1d:cf:16:40:f9:c7:04:f4:66:51:14:
         15:c6:f1:33:fc:5d:4a:11:a3:34:6a:dc:bc:4e:57:2e:c5:d4:
         27:e3:44:c9:17:6e:84:d4:1d:7b:f5:a8:c9:1c:9c:d7:5b:a1:
         32:17:f0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:00:47 2026 by rpki-client