Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
File:                     SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft (raw, json)
Hash identifier:          QWXKs0+5pzgf3sPkjBF8oecpFsnH9fhV8iQftIKAMGU=
Subject key identifier:   00:4D:99:9C:AA:E0:23:FF:CB:3C:D4:65:12:57:7B:73:3C:36:2F:E6
Authority key identifier: 49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
Certificate issuer:       /CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Certificate serial:       019D98184AD0D2CC3FC9440F37AC17168E66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
Manifest number:          18AA
Signing time:             Thu 16 Apr 2026 21:00:21 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:21 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:21 +0000
Files and hashes:         1: SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl (hash: 5PM9ODIoicA1gaVRwkur9RwuiGgz3hQ/0AdCEIYnlAU=)
                          2: r_1SBfNhdBcm7JVeR9X_A84AJes.roa (hash: 5FQO7eCKudZ+J7HgNfZUcYEMcJXj0nI8UpKfM1ybpwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:4a:d0:d2:cc:3f:c9:44:0f:37:ac:17:16:8e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49f80697fe2e2d97b591ad5b91580555a44d0388
        Validity
            Not Before: Apr 16 21:00:21 2026 GMT
            Not After : Apr 17 21:00:21 2026 GMT
        Subject: CN=004d999caae023ffcb3cd46512577b733c362fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fc:9d:ac:3e:44:82:ba:66:32:ed:fe:a5:65:
                    42:53:8d:6f:29:a3:4f:1b:4c:53:71:b6:72:8b:d4:
                    c3:49:eb:15:70:b1:ea:e8:09:89:fa:42:4b:b8:42:
                    1b:65:6c:f2:8c:0d:a8:45:48:d1:96:06:61:fe:c5:
                    64:a4:bc:48:d7:ef:21:65:67:87:5d:3e:4b:bd:85:
                    90:ba:1b:8e:71:f9:1f:6b:a5:a1:8d:9d:c1:30:f4:
                    0f:3b:94:98:5a:a7:c6:a4:40:8e:f6:ae:3a:71:96:
                    7a:43:22:ec:42:6a:bf:86:fd:8a:2d:c5:eb:00:55:
                    92:38:d3:2c:8f:ef:2b:b6:34:77:d2:71:90:21:50:
                    8a:69:ed:49:cd:3b:d2:d6:fd:22:50:c1:39:eb:e9:
                    70:75:fc:4f:03:79:73:ac:d1:c9:82:4c:5f:4d:c0:
                    d1:0b:47:1a:98:40:3d:85:8c:40:5c:f2:88:14:4a:
                    f4:34:07:ab:a9:03:28:c2:29:72:e4:64:10:43:5f:
                    6c:6e:c9:02:3a:99:47:e2:89:5a:5b:23:66:31:c8:
                    bd:6f:d3:a9:48:fc:e8:63:5e:06:ad:1e:3e:36:c8:
                    a9:63:0a:a7:97:9a:71:90:d7:22:42:37:2a:11:38:
                    75:85:31:3c:85:68:93:c1:cb:51:dc:ff:17:79:a2:
                    4c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4D:99:9C:AA:E0:23:FF:CB:3C:D4:65:12:57:7B:73:3C:36:2F:E6
            X509v3 Authority Key Identifier:
                keyid:49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:72:46:7f:02:99:ea:da:0b:cc:3b:c5:6f:a7:e5:f3:02:e4:
         d2:05:9f:b5:23:8e:49:1a:97:e5:b8:ca:3d:5e:39:37:96:17:
         86:e5:e9:b4:38:e1:92:bd:72:c1:ab:90:8b:b5:86:4d:ee:e5:
         58:c9:43:54:b9:17:8b:3f:7e:53:61:08:33:40:2d:8e:fc:2a:
         11:32:14:03:7d:68:03:67:b5:51:3f:11:cd:97:9f:6f:b0:0f:
         44:70:26:c6:ca:7f:94:72:b9:41:5d:c3:cc:b3:83:c1:90:74:
         1f:8e:c0:3e:4a:9e:a7:c2:76:d8:fc:f8:08:d1:ef:a3:2e:9c:
         f4:b2:bc:c5:2b:51:d4:d2:f7:15:9e:ab:38:87:0e:f8:bb:b8:
         70:76:0d:55:cd:87:f4:9f:93:6f:65:69:95:1e:e3:4a:c0:d9:
         ac:83:16:04:ba:27:71:a4:36:7b:3a:0b:eb:83:ca:a3:a7:46:
         31:ca:c0:b8:36:0b:ca:ae:18:bd:4d:a5:fb:04:d3:8c:df:6e:
         d7:e8:1b:33:a9:d3:a7:a5:bc:c4:4d:e8:aa:5a:5d:03:82:82:
         ce:4d:35:b2:c3:b6:d4:39:7b:16:07:04:d3:47:5c:51:19:dd:
         9a:c1:ef:a8:00:86:08:3f:86:ae:18:b1:11:71:96:6c:bd:26:
         4c:9c:9d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:09 2026 by rpki-client