Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
File:                     1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft (raw, json)
Hash identifier:          O5apllZ1BrQnFY6j4C3hcyTIyBjjZOmXgj6hlao5Qs8=
Subject key identifier:   33:81:9E:1D:78:DD:5F:72:1E:17:9B:0C:D7:33:64:EB:E2:E3:E9:E0
Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
Certificate issuer:       /CN=d58214cfa326611e9d494135a12ce8276f0f1784
Certificate serial:       019D9A74FBDF5D5B9F8A52806880E8FDAD56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
Manifest number:          0A4B
Signing time:             Fri 17 Apr 2026 08:00:51 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:51 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:51 +0000
Files and hashes:         1: 1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl (hash: lYoOkP40TZ4l6RUcIsDn1XWGy3L7G/JlYUL50Lj3svg=)
                          2: B5mgROa_HhZghovwN5tBttE8vQ4.roa (hash: htlrxZ1Q52aR4gDDugtXWGZbxc/WBqlk8qnt1UWg1Vo=)
                          3: IgmLWgxDoTeSu4Zj1Iq-sm2kgMM.roa (hash: Sc1PupxYmmww1l6h7WqQdd4+okMgETcdRza36R2yaQ4=)
                          4: URQ0ixwikEDnD5vaplcoCL7PWCE.roa (hash: U9bd3yHk+qz1wvsZbw78086KKHXfP+Uyk5WS+MvNdrE=)
                          5: csxH9N8tVIrkBDMI7J2H9oHB5ts.roa (hash: YnDsKZSvVyafr0VpozmsvhXFno1wOxr2STYbFQyZa38=)
                          6: eEzl8wdO2N_6D7w_9Bax5AX4F6k.roa (hash: M2fSlXcaKrSdl8K4kyFGKfTwtRUdwGtRzjVZehMj0zg=)
                          7: ltZGgLjX0XyN_sNeCxdT7qUBPK0.roa (hash: bXF+LPFRGG+z/2Erpeh6wrq94VssmzlD+z8l/AbxQ+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:fb:df:5d:5b:9f:8a:52:80:68:80:e8:fd:ad:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784
        Validity
            Not Before: Apr 17 08:00:51 2026 GMT
            Not After : Apr 18 08:00:51 2026 GMT
        Subject: CN=33819e1d78dd5f721e179b0cd73364ebe2e3e9e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f8:ce:75:15:aa:b4:a5:50:ef:8c:f3:36:41:
                    a3:ec:57:d4:f5:fb:1d:69:af:cc:20:2d:59:3a:d1:
                    b9:99:31:4a:46:fe:1e:da:a1:82:78:63:4c:6d:0f:
                    89:2e:70:b8:6f:ee:74:ca:6a:db:c8:3c:71:35:f7:
                    f8:ea:7e:ee:ab:61:eb:45:62:46:1a:07:7e:b6:57:
                    a5:c6:20:3f:10:d9:e5:c7:89:a5:e5:0b:7b:3d:5d:
                    3c:46:04:9c:20:ad:39:d7:9b:d8:26:db:fb:75:e8:
                    2c:01:02:a4:9f:77:fb:6e:d3:81:94:31:33:ed:e7:
                    e6:6b:7c:63:ad:95:92:8e:96:e1:67:28:a1:53:17:
                    0f:c2:ac:02:16:d4:1d:6f:67:db:fc:bc:d3:ea:e9:
                    9c:85:f5:99:6f:2a:b9:71:e6:c8:11:d2:00:1f:41:
                    1f:d1:e1:7d:c9:60:89:cd:e7:b7:f3:6f:e5:b4:d4:
                    16:ae:51:85:e9:8f:07:a5:05:05:fc:f5:ff:17:ea:
                    e3:0b:94:ef:88:a0:0e:27:f2:ce:37:39:8c:94:2f:
                    88:25:46:27:40:9f:3c:c8:a4:c9:2e:90:12:c1:08:
                    5c:94:e4:91:97:fa:26:ca:3a:9d:3c:33:99:43:2b:
                    8c:87:68:ec:12:64:ce:e2:b9:d5:4d:5c:6a:c0:4f:
                    e2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:81:9E:1D:78:DD:5F:72:1E:17:9B:0C:D7:33:64:EB:E2:E3:E9:E0
            X509v3 Authority Key Identifier:
                keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:78:5f:53:0d:b2:04:62:14:56:8f:75:5f:9d:f5:bd:99:69:
         98:67:08:ae:1e:12:8b:15:96:8b:f0:79:0e:6c:0b:f5:79:51:
         54:9b:77:cb:13:b5:e1:b1:30:12:1c:f6:ac:4c:88:28:7c:f4:
         a2:b7:42:de:0a:59:ab:d1:fd:7f:53:00:4d:d7:cc:6b:f8:73:
         24:64:f4:c8:72:d2:8a:f5:d2:67:29:3c:e8:42:b1:37:7c:ca:
         d6:4c:ab:f8:d0:fd:42:79:ab:f5:b3:7d:48:8f:99:73:ae:d4:
         83:e7:04:1e:22:c8:51:84:78:fd:41:dd:e4:cd:7c:2d:87:70:
         3a:99:17:4a:57:14:15:8b:0d:68:b3:3d:bd:5f:6c:12:3e:ae:
         68:bf:28:29:ba:ac:7e:e7:db:2d:70:0b:77:22:54:7c:39:11:
         de:2a:5b:0a:11:37:47:c4:84:00:6e:af:fd:56:4e:58:a7:57:
         db:71:4d:8f:48:ac:93:05:13:e3:ec:25:bb:90:ba:d0:5d:d0:
         fc:a5:a4:d5:d1:ef:25:54:e0:bd:db:c0:da:47:9f:41:33:e2:
         5b:89:85:94:f7:0c:12:0b:1c:79:ca:bf:ae:70:90:45:b9:1a:
         eb:b3:38:1c:78:82:66:12:03:ff:e2:54:aa:96:1e:77:39:55:
         66:26:4c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:01:59 2026 by rpki-client