Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
File:                     pPLix3U2Usd9u3nL4GmyurA_YN0.mft (raw, json)
Hash identifier:          VfwZNCv+0t5fbE8PLRIF6D+oLkTb3p19kLRvYrQh6Zw=
Subject key identifier:   79:6F:D4:AE:3C:7F:C2:C2:AC:DA:B3:B9:4C:C1:36:23:08:C0:47:D1
Authority key identifier: A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD
Certificate issuer:       /CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd
Certificate serial:       019DA41CCEEA7EDDD8BD8B69C1E6D9685FA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
Manifest number:          18C8
Signing time:             Sun 19 Apr 2026 05:00:44 +0000
Manifest this update:     Sun 19 Apr 2026 05:00:44 +0000
Manifest next update:     Mon 20 Apr 2026 05:00:44 +0000
Files and hashes:         1: JkxzftXxBP-vXJDMHiEIGkiEedU.roa (hash: okOGWD6NJlFcOrkCnqjaP6NoTcyEZKu0Sq4XrnddyYw=)
                          2: pPLix3U2Usd9u3nL4GmyurA_YN0.crl (hash: QOd5hlQk0jsFyWWckdaNJ3N0//pjlHaxatGgihOyq20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:1c:ce:ea:7e:dd:d8:bd:8b:69:c1:e6:d9:68:5f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd
        Validity
            Not Before: Apr 19 05:00:44 2026 GMT
            Not After : Apr 20 05:00:44 2026 GMT
        Subject: CN=796fd4ae3c7fc2c2acdab3b94cc1362308c047d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f3:cc:94:c4:88:c0:02:a0:5b:84:f4:59:aa:
                    88:70:29:e5:20:35:1e:22:80:3f:42:dd:0e:19:fc:
                    5e:98:ea:5c:97:58:fb:fe:5f:b7:3c:ca:13:89:01:
                    57:4f:9e:21:8c:7c:50:01:25:12:bd:be:0c:67:d3:
                    8c:2f:4c:66:ee:b9:0f:da:e7:c7:fd:52:a2:4d:90:
                    93:9c:9a:5b:29:1e:b4:6a:4b:a3:46:98:0a:c3:41:
                    7e:0d:ba:f8:85:e1:44:46:df:5c:69:4a:e5:02:19:
                    c3:21:e9:cf:97:53:bd:a2:c2:6e:df:60:a2:b0:6f:
                    10:ac:aa:c8:5e:e6:b2:81:db:c0:88:fe:66:45:22:
                    bd:0e:82:77:17:43:78:b8:50:94:65:91:dd:50:f2:
                    70:a1:5b:94:8a:cb:ee:98:17:05:ad:e0:c5:97:0c:
                    c9:96:cc:cc:66:22:e4:c7:7f:fb:08:f1:be:1f:3c:
                    02:50:5e:36:72:87:a7:ee:04:cc:71:ba:97:bd:78:
                    27:1c:49:17:b3:50:b3:4f:6b:64:df:5c:21:7a:c0:
                    dd:24:5e:8e:c0:27:73:33:32:c3:4c:b2:8e:0f:68:
                    bd:e2:d5:34:d7:4c:d5:98:82:6d:da:f6:b7:1c:44:
                    b7:5e:a3:a4:3b:5f:e6:5b:a0:6a:af:e2:50:f5:5b:
                    a7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6F:D4:AE:3C:7F:C2:C2:AC:DA:B3:B9:4C:C1:36:23:08:C0:47:D1
            X509v3 Authority Key Identifier:
                keyid:A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:68:b1:6c:f5:d3:39:38:a8:7f:8b:d6:dc:6b:ca:82:bc:f6:
         67:17:19:e4:6a:d1:b8:0f:21:3a:c4:72:29:fc:3b:c0:ff:66:
         82:88:0c:31:a9:24:05:18:ca:50:fa:c5:77:e8:8c:2c:d0:8e:
         d7:58:6c:65:3a:9e:cb:91:ee:a6:da:4c:66:d9:62:8b:0c:b4:
         6c:b1:f3:16:60:45:54:ca:ad:21:8f:aa:dc:c2:41:ec:c8:67:
         b5:12:24:4c:7d:d9:53:bd:ac:a9:54:51:11:c7:6d:e9:f7:57:
         50:72:d8:5a:55:0f:34:15:f9:f1:e5:2d:38:59:ff:ab:ca:4f:
         33:75:2f:d4:d7:51:78:91:5f:0b:2d:ca:9e:85:1e:27:e8:4d:
         e9:82:dc:1c:37:5a:86:48:43:65:95:33:45:fc:40:62:bf:b9:
         f0:fa:92:87:ce:a3:1f:49:0e:fa:20:70:b0:02:2b:ba:c7:f8:
         99:71:68:d2:08:be:2d:34:d5:fb:3f:d3:4d:dc:e9:ea:eb:7b:
         aa:87:2e:2e:68:e4:10:49:35:54:38:3a:98:5c:d9:b9:fe:fc:
         ae:bf:ab:f8:8c:6b:14:47:1c:81:b7:22:36:cf:9d:14:87:45:
         65:38:02:e3:c5:3e:29:52:09:01:b0:89:69:52:0e:2b:dc:df:
         fe:51:2a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:27:37 2026 by rpki-client