Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
File:                     NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft (raw, json)
Hash identifier:          fjm7kVLeKiVudW6sYvmdd9yjw7KdxAaIC3UuQK38x4k=
Subject key identifier:   55:95:BB:B3:45:17:57:52:4E:E1:14:37:6C:AB:24:AD:73:EA:22:72
Authority key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
Certificate issuer:       /CN=340551ace81314829351a27e399aeddb33246155
Certificate serial:       019D98868E7B7CDF8206220A60FF7FFAFF84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
Manifest number:          18C1
Signing time:             Thu 16 Apr 2026 23:00:48 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:48 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:48 +0000
Files and hashes:         1: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl (hash: YJifD+eOCyF2l/mUuSV0jfFEEiZXJXVOO05f1Wn9iM0=)
                          2: vDpdZCcvfdJi26yR4LIHXfYfDgo.roa (hash: jU09xubxQGTLaA53DPFxDDjlhlI9Ph4C2iltfc6p9xs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 23:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:8e:7b:7c:df:82:06:22:0a:60:ff:7f:fa:ff:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=340551ace81314829351a27e399aeddb33246155
        Validity
            Not Before: Apr 16 23:00:48 2026 GMT
            Not After : Apr 17 23:00:48 2026 GMT
        Subject: CN=5595bbb3451757524ee114376cab24ad73ea2272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:96:ad:9a:d5:4f:d9:1f:80:b0:b6:89:b8:97:
                    1a:8a:5c:ad:cc:1b:e4:f2:d7:c5:f2:8a:28:e9:e5:
                    f1:ab:4f:df:19:21:95:8c:26:25:41:8f:74:12:ca:
                    b7:81:3a:59:1b:fa:3c:c7:cd:52:dc:98:56:8f:ce:
                    c7:f2:ea:5a:2d:ce:97:a0:1e:66:9c:13:7c:d6:58:
                    04:d1:eb:22:a0:ff:c1:dc:a4:76:b8:79:b1:85:5f:
                    3e:ff:53:f1:8b:4d:98:f5:43:eb:18:ab:1e:17:58:
                    89:9a:f2:e9:7b:dd:80:83:d2:54:db:d3:2c:54:4c:
                    f8:bb:78:e2:a0:15:e7:10:d5:10:45:18:f5:43:23:
                    6c:b2:36:7a:5e:87:62:f6:26:97:d2:e5:2a:4b:ed:
                    de:1e:59:1f:38:e8:d7:9c:c0:f3:64:40:70:d4:3a:
                    20:8e:b4:ec:a8:e1:7d:59:72:87:71:cb:12:91:e8:
                    7b:f6:26:16:ba:75:24:0a:4e:16:b5:b8:93:24:cc:
                    f3:eb:64:77:c1:21:4e:e4:7b:2e:ea:ef:98:fc:5b:
                    8c:e6:f2:37:f7:98:b9:97:29:8c:13:1c:04:13:a3:
                    18:69:29:d1:24:cb:61:09:54:83:c0:de:dd:94:aa:
                    39:9f:af:e2:76:16:48:4a:33:f2:a4:d6:2b:3d:a4:
                    7c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:95:BB:B3:45:17:57:52:4E:E1:14:37:6C:AB:24:AD:73:EA:22:72
            X509v3 Authority Key Identifier:
                keyid:34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:af:5f:d4:24:50:1e:2a:39:43:ee:49:2a:47:bf:09:95:11:
         6e:a3:27:23:7e:67:2a:28:2f:74:89:c2:84:59:e2:4e:5c:01:
         47:58:48:fc:ce:3f:0d:3b:03:34:a3:20:16:0d:38:74:e3:3c:
         0b:69:d2:35:95:7e:1e:ae:4f:b7:e1:c0:5b:f0:bd:0a:dc:89:
         f9:bc:aa:e5:22:ed:79:d5:55:ce:77:48:33:41:fd:87:04:51:
         0c:83:bd:9a:4f:32:65:f9:f3:e2:02:a6:cb:7a:e4:9b:26:a9:
         07:38:2d:d3:b8:4d:29:8d:5a:28:57:96:02:e5:43:01:97:de:
         ad:2b:5e:98:e7:56:5a:21:9f:5b:df:ad:09:05:36:09:eb:21:
         c5:c7:c8:ad:3f:2a:db:da:6d:c5:1c:3c:17:ee:7c:81:6d:15:
         f3:86:fb:7b:e2:30:dd:fa:88:59:52:b8:49:a0:e5:04:af:89:
         6e:3f:d2:a5:b5:fb:f9:c2:81:26:b2:02:49:6b:45:a4:5f:ee:
         e9:2f:7e:4d:7f:51:3b:df:30:f5:67:d8:fa:a1:08:4c:f8:6b:
         70:8d:0d:a0:9f:39:5e:17:26:5c:77:73:92:f9:14:d8:e6:2d:
         9a:15:a7:51:c1:5b:3f:c4:9b:4c:cc:d1:4d:2c:b0:44:13:76:
         b3:51:e5:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yho57fN+CBiIKYP9/+v+EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MDU1MWFjZTgxMzE0ODI5MzUxYTI3ZTM5OWFlZGRiMzMy
NDYxNTUwHhcNMjYwNDE2MjMwMDQ4WhcNMjYwNDE3MjMwMDQ4WjAzMTEwLwYDVQQD
Eyg1NTk1YmJiMzQ1MTc1NzUyNGVlMTE0Mzc2Y2FiMjRhZDczZWEyMjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5atmtVP2R+AsLaJuJcailytzBvk
8tfF8ooo6eXxq0/fGSGVjCYlQY90Esq3gTpZG/o8x81S3JhWj87H8upaLc6XoB5m
nBN81lgE0esioP/B3KR2uHmxhV8+/1Pxi02Y9UPrGKseF1iJmvLpe92Ag9JU29Ms
VEz4u3jioBXnENUQRRj1QyNssjZ6Xodi9iaX0uUqS+3eHlkfOOjXnMDzZEBw1Dog
jrTsqOF9WXKHccsSkeh79iYWunUkCk4WtbiTJMzz62R3wSFO5Hsu6u+Y/FuM5vI3
95i5lymMExwEE6MYaSnRJMthCVSDwN7dlKo5n6/idhZISjPypNYrPaR8WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWVu7NFF1dSTuEUN2yrJK1z6iJyMB8GA1UdIwQY
MBaAFDQFUazoExSCk1Gifjma7dszJGFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkFWUnJPZ1RGSUtUVWFKLU9acnQyek1rWVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hYTM4MDUtYzhhNC00ZjY1LTg3Y2It
MTNlYTU2ZDFmNjNhLzEvTkFWUnJPZ1RGSUtUVWFKLU9acnQyek1rWVZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9hYTM4MDUtYzhhNC00ZjY1LTg3Y2ItMTNlYTU2ZDFmNjNh
LzEvTkFWUnJPZ1RGSUtUVWFKLU9acnQyek1rWVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcq9f1CRQ
Hio5Q+5JKke/CZURbqMnI35nKigvdInChFniTlwBR1hI/M4/DTsDNKMgFg04dOM8
C2nSNZV+Hq5Pt+HAW/C9CtyJ+byq5SLtedVVzndIM0H9hwRRDIO9mk8yZfnz4gKm
y3rkmyapBzgt07hNKY1aKFeWAuVDAZferStemOdWWiGfW9+tCQU2CeshxcfIrT8q
29ptxRw8F+58gW0V84b7e+Iw3fqIWVK4SaDlBK+Jbj/SpbX7+cKBJrICSWtFpF/u
6S9+TX9RO98w9WfY+qEITPhrcI0NoJ85XhcmXHdzkvkU2OYtmhWnUcFbP8SbTMzR
TSywRBN2s1HlKg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:24:42 2026 by rpki-client