Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
File:                     yNMivrfjY_TUV14eT-7lzLhOEnU.mft (raw, json)
Hash identifier:          ZBQh9huOwomr6owL0M+pPQ4NjkKBNkszNUFWLAJnepY=
Subject key identifier:   4D:D3:DF:33:0F:F3:8A:A5:BC:15:D0:5E:42:6C:27:B5:1F:12:A2:07
Authority key identifier: C8:D3:22:BE:B7:E3:63:F4:D4:57:5E:1E:4F:EE:E5:CC:B8:4E:12:75
Certificate issuer:       /CN=c8d322beb7e363f4d4575e1e4feee5ccb84e1275
Certificate serial:       019DA378C265A0EB87D7FE33B64851628487
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
Manifest number:          18C7
Signing time:             Sun 19 Apr 2026 02:01:33 +0000
Manifest this update:     Sun 19 Apr 2026 02:01:33 +0000
Manifest next update:     Mon 20 Apr 2026 02:01:33 +0000
Files and hashes:         1: h678NT-wkbHRJaqm6iZb8LbOJkA.roa (hash: 6iUrPhfAB1aiMKoStXuUWvzoIVv3KdXK9DA19OIjxHA=)
                          2: yNMivrfjY_TUV14eT-7lzLhOEnU.crl (hash: PbwEE20rzgRzhDkpiWODFwNtfAyC7S/5iAGVR15MTuo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:78:c2:65:a0:eb:87:d7:fe:33:b6:48:51:62:84:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8d322beb7e363f4d4575e1e4feee5ccb84e1275
        Validity
            Not Before: Apr 19 02:01:33 2026 GMT
            Not After : Apr 20 02:01:33 2026 GMT
        Subject: CN=4dd3df330ff38aa5bc15d05e426c27b51f12a207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:59:fa:fd:12:68:d1:0c:28:d6:a7:f4:e5:fb:
                    64:f4:a1:51:73:09:9a:6b:a1:17:23:32:b6:3e:03:
                    a1:f2:9e:46:a4:d8:7c:6b:f9:a0:7d:cb:08:f5:74:
                    35:44:2d:0d:89:04:f8:41:56:7f:94:69:c4:5a:43:
                    e3:f0:8a:0d:46:e0:ad:92:f3:b4:83:91:31:50:86:
                    da:9f:e2:48:4b:91:4d:1f:44:b4:f1:0f:a9:de:7b:
                    c5:79:9c:f3:71:97:e6:15:80:e7:fa:2d:83:c0:ee:
                    03:16:98:c1:99:2c:2b:29:85:b0:05:46:c9:9f:72:
                    44:79:b8:8e:3c:52:ae:da:17:d4:f7:99:86:0e:26:
                    48:bf:ab:79:ad:c6:92:cd:25:fb:66:ec:0b:59:56:
                    67:33:8c:0f:59:41:7d:55:d3:e1:07:34:c9:bc:08:
                    46:65:61:6e:7f:b5:62:19:0a:97:e2:7d:51:be:6f:
                    13:8a:a6:c0:65:2d:e2:1a:52:26:8b:9e:1e:9d:3d:
                    bf:5f:14:48:ef:c7:84:e3:fc:29:05:32:0e:e5:83:
                    17:54:1d:63:46:70:ea:ee:c7:eb:29:e4:6f:5a:38:
                    cb:16:d5:74:87:a6:66:e9:bf:c5:04:68:12:af:8e:
                    5e:6c:b0:97:aa:8c:1a:65:d0:4c:59:b7:6b:59:60:
                    38:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D3:DF:33:0F:F3:8A:A5:BC:15:D0:5E:42:6C:27:B5:1F:12:A2:07
            X509v3 Authority Key Identifier:
                keyid:C8:D3:22:BE:B7:E3:63:F4:D4:57:5E:1E:4F:EE:E5:CC:B8:4E:12:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:7f:36:a6:dc:3f:66:f6:80:2c:d7:c7:83:7b:a7:01:88:6e:
         fb:8a:51:da:5a:97:e5:90:bf:f8:bc:47:e6:16:8c:25:e8:ec:
         d1:36:c9:70:96:d9:11:ae:a1:e2:10:6a:f7:06:38:22:6d:91:
         35:b7:c7:51:cc:77:56:fb:77:d2:ba:a0:6e:47:a7:8b:42:38:
         1a:ac:29:bd:84:ef:aa:87:f7:09:65:b8:c2:a5:ba:9a:e1:08:
         e7:94:25:97:cb:c3:9d:2f:d0:21:8f:ea:24:db:3d:ad:38:17:
         7b:e4:3c:61:59:05:21:69:02:0a:04:83:5d:22:0a:c2:0c:00:
         11:57:c0:1a:2d:6c:1a:39:f0:c7:94:f9:f5:bd:80:f5:a5:e1:
         ae:0b:ee:bf:e3:aa:b5:2a:10:b4:ea:b6:8c:b1:53:82:d8:8d:
         15:71:fb:97:1c:f3:2d:20:2b:8e:91:71:d2:34:f1:e9:bc:4c:
         cb:4c:6f:4e:8b:28:f6:c5:e7:cd:24:76:70:16:bc:08:78:46:
         02:03:8a:4b:79:6b:16:d1:24:d3:73:73:e9:d5:1a:e6:bb:77:
         35:51:b8:11:4a:0e:e7:1c:dc:2a:7a:79:8c:79:0e:d5:a5:16:
         eb:fc:cf:6f:3e:08:32:b9:98:29:e7:da:37:f4:2e:36:19:f5:
         38:e8:ba:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:53:40 2026 by rpki-client