Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
File:                     8mJAZfhrTPmEjex9q4ak24bBXhE.mft (raw, json)
Hash identifier:          OTLkFSHdC9S/9ya17VakvyAYNWMq3FNv1KiueI/hXWQ=
Subject key identifier:   A1:78:C4:F1:22:4E:D4:9A:0F:DA:B1:C9:A4:F1:6E:A5:AD:13:34:00
Authority key identifier: F2:62:40:65:F8:6B:4C:F9:84:8D:EC:7D:AB:86:A4:DB:86:C1:5E:11
Certificate issuer:       /CN=f2624065f86b4cf9848dec7dab86a4db86c15e11
Certificate serial:       019D984FB689AD642625B78D2CE25FD2D3A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
Manifest number:          04B0
Signing time:             Thu 16 Apr 2026 22:00:54 +0000
Manifest this update:     Thu 16 Apr 2026 22:00:54 +0000
Manifest next update:     Fri 17 Apr 2026 22:00:54 +0000
Files and hashes:         1: 8mJAZfhrTPmEjex9q4ak24bBXhE.crl (hash: 7x+lz3b8crddtB1up4AQuEQRJOfMXiG/5uMgragfQqw=)
                          2: B9dQBunPgCxrLiUL8opifDj2bOM.roa (hash: fWD90xCndzZ4WlkSeFBibUlZH38mskA/RfgbZjV3SFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:b6:89:ad:64:26:25:b7:8d:2c:e2:5f:d2:d3:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2624065f86b4cf9848dec7dab86a4db86c15e11
        Validity
            Not Before: Apr 16 22:00:54 2026 GMT
            Not After : Apr 17 22:00:54 2026 GMT
        Subject: CN=a178c4f1224ed49a0fdab1c9a4f16ea5ad133400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7d:b8:6d:23:2b:3c:41:6c:a2:00:c3:14:ff:
                    cc:c6:a2:76:87:01:af:55:a9:d7:59:d6:1c:17:28:
                    17:e0:38:4f:19:19:2c:b0:e1:dc:98:63:59:fc:79:
                    ea:98:27:a8:95:75:b3:63:a1:65:3f:a6:d6:a8:82:
                    8f:04:ba:7c:cb:e2:47:7a:09:03:00:9d:f1:27:89:
                    cc:d7:cc:4c:02:11:30:50:2a:c1:bb:52:11:69:ff:
                    93:24:fe:86:ab:74:65:e4:55:a9:f0:bf:6f:d1:1b:
                    f7:97:8f:2b:54:eb:c9:e4:be:59:51:05:43:8c:8c:
                    55:66:37:80:79:b3:cd:03:f9:18:af:79:e9:5b:c0:
                    20:e0:02:20:bc:ee:36:87:83:39:86:bd:df:66:3c:
                    09:9d:07:dd:bf:05:06:44:06:2d:1e:37:1c:a1:84:
                    2b:48:5f:28:7d:59:9c:90:66:e7:f7:00:d8:5b:53:
                    f1:14:69:f1:4a:2f:9b:db:8a:70:42:9b:3a:bb:45:
                    70:d5:26:6e:48:9d:6f:bd:94:62:11:12:17:73:6c:
                    8e:b9:fb:be:a5:12:cf:63:39:6d:01:ff:53:24:c4:
                    1d:1e:a3:53:3c:7d:9e:8e:d8:16:5e:c3:30:c4:8b:
                    e7:0c:62:ae:f4:ce:df:ea:c3:41:3e:fe:85:71:67:
                    22:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:78:C4:F1:22:4E:D4:9A:0F:DA:B1:C9:A4:F1:6E:A5:AD:13:34:00
            X509v3 Authority Key Identifier:
                keyid:F2:62:40:65:F8:6B:4C:F9:84:8D:EC:7D:AB:86:A4:DB:86:C1:5E:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:2c:20:bb:9d:d8:ea:71:bc:b4:5a:7f:91:6f:94:67:70:32:
         39:e6:2f:00:0d:f3:6f:6c:6c:03:de:da:ca:47:94:a4:4c:36:
         a8:8d:f5:fe:3b:2c:0d:c9:4b:74:24:bc:cb:e7:7f:3d:c9:5f:
         c2:88:cd:5b:82:43:42:b4:c2:4f:bc:a8:d8:50:9a:d6:73:ac:
         b6:9d:96:0c:8c:35:a2:7b:8a:ce:be:43:b8:a4:4c:8f:1d:80:
         27:ac:ed:c4:ae:77:51:22:c0:22:39:f8:e9:0a:ff:0e:3d:d7:
         36:6a:b5:7b:f0:70:bc:cf:bb:44:3b:59:2b:1c:5e:34:27:6b:
         f7:a8:20:db:a6:74:a0:8c:78:a1:ff:6f:79:0e:7f:2b:50:e4:
         5d:17:fa:a4:91:57:86:68:cd:34:0c:23:6b:84:6d:92:45:bc:
         d5:ec:68:3c:71:ef:cb:39:82:34:7a:3e:d6:90:4b:7c:6a:64:
         24:f6:b2:0e:28:67:bc:c6:de:9b:a8:46:40:ad:81:ac:0b:d2:
         e3:65:95:43:08:5d:91:65:63:bf:fe:ad:99:e0:3a:97:94:5d:
         a1:0c:21:6d:95:6a:5e:a1:62:17:5c:db:51:b8:7d:23:fb:ad:
         87:cc:80:12:9a:a1:ff:ca:a6:1d:8d:0b:3c:dd:39:65:9c:e6:
         fa:ea:3a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:27 2026 by rpki-client