Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
File:                     X4anFB9vt7TCi84xRGe2FU4Pk3c.mft (raw, json)
Hash identifier:          meYJE8a1zDwN1izzE87OJ2Fh6Vl4C7qrDdMuyqY/M5Y=
Subject key identifier:   4F:EE:6B:68:C8:1F:4C:F6:62:4A:97:63:78:80:69:28:9F:86:5D:97
Authority key identifier: 5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
Certificate issuer:       /CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Certificate serial:       019DA3E6C20E2ABB409F9F55B5ED4A5B0120
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
Manifest number:          1061
Signing time:             Sun 19 Apr 2026 04:01:42 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:42 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:42 +0000
Files and hashes:         1: X4anFB9vt7TCi84xRGe2FU4Pk3c.crl (hash: q8J2Ze7GWWIX4VdvpCJ1bafR6Bm9bv2gm6tKVwTLy50=)
                          2: o10KDQLCNX_eEti6B07ro4cJyK8.roa (hash: hy+4KJvTq+cRULOZkT8/acKHvswCR6Ar2bCCrvuaUxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:c2:0e:2a:bb:40:9f:9f:55:b5:ed:4a:5b:01:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
        Validity
            Not Before: Apr 19 04:01:42 2026 GMT
            Not After : Apr 20 04:01:42 2026 GMT
        Subject: CN=4fee6b68c81f4cf6624a9763788069289f865d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6f:0b:47:65:0a:c2:f9:e8:cf:ae:28:a1:7f:
                    24:53:98:5f:c7:f7:15:81:6d:68:07:45:24:a7:3e:
                    a8:af:70:09:49:70:4e:09:09:14:6e:cc:c4:95:09:
                    00:6b:65:71:44:fa:12:0d:a2:32:02:ab:53:57:5c:
                    21:30:68:0d:81:b5:19:20:14:72:1d:5d:2f:d0:5a:
                    14:ac:a8:40:26:52:f3:a0:63:3b:c0:ff:39:69:cc:
                    0f:22:e8:ce:5e:ab:aa:43:f1:99:71:8d:64:2e:6c:
                    d2:a8:eb:3b:56:33:13:44:f0:ca:32:38:1d:7b:6d:
                    c6:43:bc:88:c2:26:42:15:13:62:54:db:a3:a0:af:
                    4c:ce:b8:1c:6f:9f:2d:a6:88:d9:bc:8f:0c:db:5b:
                    4f:93:e3:06:63:00:55:81:56:7d:85:76:16:16:48:
                    cb:da:8d:77:df:af:69:a8:7c:f3:2a:12:26:e8:6f:
                    e2:96:ca:2e:5b:32:10:43:12:d6:f8:f0:a4:bf:f6:
                    57:55:58:90:af:36:8b:b6:92:41:23:6c:54:7a:69:
                    6f:63:25:4d:53:50:2a:f3:7a:91:81:57:b0:cf:b2:
                    63:bb:f2:3c:dd:b6:4c:5d:7c:76:4c:5e:59:eb:14:
                    ed:5f:38:13:ad:ca:fe:d4:85:19:33:fa:b3:16:56:
                    6a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:EE:6B:68:C8:1F:4C:F6:62:4A:97:63:78:80:69:28:9F:86:5D:97
            X509v3 Authority Key Identifier:
                keyid:5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:14:1d:30:19:61:4d:50:c9:39:bd:8e:15:39:1f:2c:7e:30:
         fa:a7:fc:51:01:59:aa:c8:c2:51:07:9f:3e:84:31:be:52:7b:
         14:f2:b0:ce:0b:99:e3:27:3b:1a:e1:3d:4a:a7:73:5e:2b:16:
         75:69:45:f3:c5:12:b2:25:cd:bf:3a:df:7e:b6:34:5c:30:39:
         b1:fd:e5:93:c1:2d:08:ab:63:0c:e9:b3:00:fe:b9:6d:d2:7f:
         78:ba:06:21:df:ae:d6:3e:50:c9:a2:04:21:92:78:71:db:be:
         8b:85:8c:ed:42:25:56:be:64:e1:f6:a6:6a:da:88:4e:a1:83:
         69:61:bb:cd:5c:5c:a6:fb:5c:65:60:eb:3f:8a:52:6c:09:eb:
         9e:12:f4:05:84:a3:c6:01:c2:21:eb:d5:11:81:80:b0:a1:05:
         f0:62:a6:d1:e9:c8:96:f3:47:7e:68:3b:71:ea:ad:35:10:16:
         6f:b7:de:e2:de:60:45:5b:65:a2:cb:55:a8:f6:75:5f:fe:09:
         60:77:36:c5:19:c4:50:8a:f8:1c:8e:8e:75:90:48:15:3a:ac:
         88:4f:87:13:63:bc:7c:2e:93:d7:78:b8:ba:cf:24:08:71:7a:
         61:56:cd:eb:be:58:77:1c:16:d1:23:cf:11:8d:e6:73:6b:26:
         a4:7c:a7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:01:16 2026 by rpki-client