Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
File:                     peC5TwtOTIRu-c8nzciBEIdrHPM.mft (raw, json)
Hash identifier:          N+dhtW7rFwYHzhOk8ge6yYWF2Cln77vb35ZUok5xnpU=
Subject key identifier:   9D:53:F7:E5:CB:FB:91:86:92:1A:36:B7:A5:FB:AB:07:44:D5:C7:86
Authority key identifier: A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
Certificate issuer:       /CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Certificate serial:       019D99D00037B8A292BC36DFFEF6267C0F7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 05:00:38 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:38 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:38 +0000
Files and hashes:         1: pbzEOsOOyDKksxCPhBhG-xag72U.roa (hash: iF4hi9XQEfO4uOx6Je7Sgz4Viq0kEg/cT2o7PAWCJTI=)
                          2: peC5TwtOTIRu-c8nzciBEIdrHPM.crl (hash: 1OBQx2CdoKdUDnmrT1bOb+PGPxF+MqQvI2ZUb5gLYhc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:00:37:b8:a2:92:bc:36:df:fe:f6:26:7c:0f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
        Validity
            Not Before: Apr 17 05:00:38 2026 GMT
            Not After : Apr 18 05:00:38 2026 GMT
        Subject: CN=9d53f7e5cbfb9186921a36b7a5fbab0744d5c786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:26:4f:06:8b:f9:c7:ae:17:77:c8:e8:01:1c:
                    6a:01:36:78:2a:04:aa:6d:b5:da:65:fc:7d:08:32:
                    0c:a8:1d:a4:25:3e:b0:f2:97:46:a4:fb:88:96:33:
                    3d:a6:25:1d:1f:b3:5e:13:aa:e4:89:80:ae:95:b1:
                    46:2d:53:92:77:e9:f3:70:2d:d6:27:ea:2c:e4:48:
                    f1:60:8f:49:bf:f2:28:bf:c9:2b:40:01:d4:ff:7c:
                    b4:7f:cf:4a:d4:e5:aa:2d:34:fe:48:a8:1f:d5:91:
                    b3:0a:7c:ef:79:88:b7:19:a3:f9:f1:c4:0f:5c:95:
                    ba:78:7e:15:4d:f0:d5:0c:59:f4:2c:78:f0:37:e4:
                    a1:ea:b7:f5:c3:3b:57:ad:9d:4a:b7:7a:0b:3b:37:
                    8c:ac:74:d8:67:bd:64:1d:87:c7:39:85:b1:b1:fb:
                    be:05:3e:ec:a2:25:36:b0:4c:82:af:ae:2e:22:70:
                    5f:d6:cd:dc:8c:5b:16:2f:ed:2a:d1:47:17:cf:e7:
                    92:34:d0:12:f4:62:48:25:d0:42:2a:da:14:a3:c1:
                    be:93:da:b6:78:08:a3:1a:d2:25:fc:c3:ae:26:62:
                    79:c2:0f:e8:15:e8:6a:28:c9:4c:ee:e7:28:84:a6:
                    eb:ac:e6:2e:aa:a2:22:f4:50:4d:5d:41:b3:62:4f:
                    4c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:53:F7:E5:CB:FB:91:86:92:1A:36:B7:A5:FB:AB:07:44:D5:C7:86
            X509v3 Authority Key Identifier:
                keyid:A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:66:e2:5c:68:33:72:ac:09:01:86:d6:77:25:66:ba:af:a1:
         47:1a:54:e1:11:58:6d:f9:d0:1c:d7:48:fd:c6:d4:15:0d:20:
         dc:16:53:9a:c4:61:a5:48:96:2f:a9:2e:b7:fa:25:20:6e:d2:
         d8:2c:f2:5c:69:da:ef:33:06:62:d4:de:1c:8f:f0:4c:fe:f6:
         0e:85:84:1a:49:63:44:61:dd:46:c6:02:31:a5:b4:d3:ba:a8:
         ee:8d:ad:f4:bb:6e:9f:fc:f9:01:a4:cf:f0:c0:fe:5d:4b:23:
         ff:b3:16:ba:9f:f6:75:05:7e:61:36:51:78:e4:1a:00:08:de:
         e1:db:19:9a:08:55:5d:0a:ee:1a:49:2d:1e:07:d3:8a:b1:75:
         f7:7d:59:b3:92:f4:46:b0:2d:a4:8e:99:ad:66:d2:b5:76:d3:
         2d:73:80:4e:dc:79:74:aa:8a:f8:06:d7:ba:fe:d1:a0:fa:8d:
         dd:f8:23:6c:a4:4a:7e:fd:c5:c5:bd:a4:5b:6e:61:41:ad:6e:
         1a:5c:ce:6f:7c:c8:a8:82:0f:c5:eb:f8:a6:a6:f4:b6:1b:ab:
         90:ae:dd:24:e8:48:9a:77:d1:51:84:da:da:4a:6f:66:10:07:
         bf:9f:66:ae:c1:c9:f9:f6:f1:82:03:e0:ee:82:16:30:93:eb:
         5d:be:12:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0AA3uKKSvDbf/vYmfA98MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZTBiOTRmMGI0ZTRjODQ2ZWY5Y2YyN2NkYzg4MTEwODc2
YjFjZjMwHhcNMjYwNDE3MDUwMDM4WhcNMjYwNDE4MDUwMDM4WjAzMTEwLwYDVQQD
Eyg5ZDUzZjdlNWNiZmI5MTg2OTIxYTM2YjdhNWZiYWIwNzQ0ZDVjNzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyZPBov5x64Xd8joARxqATZ4KgSq
bbXaZfx9CDIMqB2kJT6w8pdGpPuIljM9piUdH7NeE6rkiYCulbFGLVOSd+nzcC3W
J+os5EjxYI9Jv/Iov8krQAHU/3y0f89K1OWqLTT+SKgf1ZGzCnzveYi3GaP58cQP
XJW6eH4VTfDVDFn0LHjwN+Sh6rf1wztXrZ1Kt3oLOzeMrHTYZ71kHYfHOYWxsfu+
BT7soiU2sEyCr64uInBf1s3cjFsWL+0q0UcXz+eSNNAS9GJIJdBCKtoUo8G+k9q2
eAijGtIl/MOuJmJ5wg/oFehqKMlM7ucohKbrrOYuqqIi9FBNXUGzYk9MxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1T9+XL+5GGkho2t6X7qwdE1ceGMB8GA1UdIwQY
MBaAFKXguU8LTkyEbvnPJ83IgRCHaxzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGVDNVR3dE9USVJ1LWM4bnpjaUJFSWRySFBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zODc3MjAtNTc4NC00ZTAzLTgxM2Mt
MTNiMjkwNzUwZmI5LzEvcGVDNVR3dE9USVJ1LWM4bnpjaUJFSWRySFBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8zODc3MjAtNTc4NC00ZTAzLTgxM2MtMTNiMjkwNzUwZmI5
LzEvcGVDNVR3dE9USVJ1LWM4bnpjaUJFSWRySFBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGbiXGgz
cqwJAYbWdyVmuq+hRxpU4RFYbfnQHNdI/cbUFQ0g3BZTmsRhpUiWL6kut/olIG7S
2CzyXGna7zMGYtTeHI/wTP72DoWEGkljRGHdRsYCMaW007qo7o2t9Ltun/z5AaTP
8MD+XUsj/7MWup/2dQV+YTZReOQaAAje4dsZmghVXQruGkktHgfTirF1931Zs5L0
RrAtpI6ZrWbStXbTLXOATtx5dKqK+AbXuv7RoPqN3fgjbKRKfv3Fxb2kW25hQa1u
GlzOb3zIqIIPxev4pqb0thurkK7dJOhImnfRUYTa2kpvZhAHv59mrsHJ+fbxggPg
7oIWMJPrXb4SrQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:15 2026 by rpki-client