Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
File:                     cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft (raw, json)
Hash identifier:          wlmEflsRfitFWwZgQ/KDxudg+yZtm5OgLG33txE6n5k=
Subject key identifier:   5D:1A:E4:13:06:85:B9:A8:F6:CB:8C:96:A2:D5:79:0E:15:81:D8:26
Authority key identifier: 70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24
Certificate issuer:       /CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
Certificate serial:       019D9962D1FC72DCB2CF24C3CB4E0BADEE38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 03:01:23 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:23 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:23 +0000
Files and hashes:         1: Ef6YD8BcZephOBKL_Af_JtVWwVQ.roa (hash: DuYV9Jw3WnzlLPMbHeqIhbHSehBiGNJ5e+2xEYBYW3w=)
                          2: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl (hash: fEjIVLDswevfkff85T9mIG6NxoYVYCLThsLM9gsefkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:d1:fc:72:dc:b2:cf:24:c3:cb:4e:0b:ad:ee:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
        Validity
            Not Before: Apr 17 03:01:23 2026 GMT
            Not After : Apr 18 03:01:23 2026 GMT
        Subject: CN=5d1ae4130685b9a8f6cb8c96a2d5790e1581d826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:17:34:80:b1:81:32:39:3f:62:24:d2:ca:19:
                    74:f0:8e:9b:65:25:6c:58:18:b3:95:b4:1c:99:63:
                    73:42:ab:fa:0c:3e:dc:4c:27:0f:51:67:ce:15:2d:
                    32:dc:7e:e2:23:9c:5e:97:d9:31:b7:cf:f9:ff:35:
                    4a:52:c1:f6:d6:ef:00:99:bb:52:02:47:ef:4f:e6:
                    3c:ed:65:2c:1c:44:0d:cc:cf:4e:06:3e:a2:95:87:
                    ee:8e:a6:9a:8d:02:5e:86:ec:55:0f:12:0b:a3:aa:
                    68:9d:47:89:8e:56:ac:71:2d:d2:e1:16:e9:4f:4c:
                    6b:29:00:a4:de:a0:45:5b:90:d7:03:46:3d:f2:96:
                    d5:51:70:3b:8a:e8:a1:e7:2c:8a:81:cb:25:4c:08:
                    7c:0a:35:f3:34:a1:88:8b:83:eb:79:c3:17:ec:22:
                    69:66:50:a6:6d:90:a7:b5:04:08:f3:98:7a:ef:6d:
                    51:12:b1:71:bd:35:5c:e8:62:d0:cc:f5:b6:0e:03:
                    63:5c:b3:30:46:59:0f:c9:41:f9:26:8d:4d:ad:dc:
                    18:7e:ee:24:b0:7d:cd:ca:7a:1f:b4:f2:b5:d1:78:
                    fe:3f:a9:e7:de:a7:ca:1c:08:9c:93:7b:39:7d:5a:
                    cd:d2:74:f2:dd:ce:fe:0f:3c:d0:62:22:15:f8:83:
                    8d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1A:E4:13:06:85:B9:A8:F6:CB:8C:96:A2:D5:79:0E:15:81:D8:26
            X509v3 Authority Key Identifier:
                keyid:70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:38:80:2a:ad:2d:5a:f5:3c:14:87:49:57:2c:a0:8e:3e:e6:
         95:1c:d2:ab:5f:98:c0:00:71:90:66:c1:9c:5c:21:bb:7d:83:
         a2:fb:64:86:68:bd:9e:2b:92:b5:f4:06:99:6c:e4:d1:f8:b3:
         07:c5:95:01:db:ef:f7:0b:92:1c:8a:34:ac:fa:47:85:af:2a:
         e3:bb:c7:8c:13:e1:64:92:a1:ac:a4:8b:68:6f:f3:b1:91:cb:
         b9:62:d9:1c:38:8a:29:e7:6d:64:75:06:62:50:41:7c:b4:36:
         7a:34:9b:72:e4:39:d2:0c:b2:fb:ae:06:3d:61:6e:c9:53:ae:
         a7:fa:17:3e:f8:be:73:4d:b5:68:7d:78:11:e6:54:fe:cf:3b:
         a8:3c:e1:c0:2a:61:6e:60:e0:ac:0e:9f:e7:58:b9:0b:56:99:
         3d:e1:7e:a4:0d:16:c9:de:41:c8:54:2b:e0:0c:6f:a3:a4:22:
         16:95:1a:52:b0:0e:ca:ee:32:ee:79:cb:aa:dd:7c:80:65:6d:
         92:9f:b4:ab:72:e4:0a:71:f5:01:46:0b:8e:f8:c9:31:48:5a:
         f0:9e:67:b8:4a:93:bc:35:9a:23:a0:4a:b4:bc:10:d0:5f:99:
         12:c2:2b:83:bb:63:3e:22:8e:ff:d2:77:be:58:eb:b8:51:70:
         c3:56:79:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYtH8ctyyzyTDy04Lre44MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMTYyNGZmYzU3MjFjMTU4ZTRjYzliYjA3MWViNGZiODdk
ODhjMjQwHhcNMjYwNDE3MDMwMTIzWhcNMjYwNDE4MDMwMTIzWjAzMTEwLwYDVQQD
Eyg1ZDFhZTQxMzA2ODViOWE4ZjZjYjhjOTZhMmQ1NzkwZTE1ODFkODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBc0gLGBMjk/YiTSyhl08I6bZSVs
WBizlbQcmWNzQqv6DD7cTCcPUWfOFS0y3H7iI5xel9kxt8/5/zVKUsH21u8AmbtS
AkfvT+Y87WUsHEQNzM9OBj6ilYfujqaajQJehuxVDxILo6ponUeJjlascS3S4Rbp
T0xrKQCk3qBFW5DXA0Y98pbVUXA7iuih5yyKgcslTAh8CjXzNKGIi4PrecMX7CJp
ZlCmbZCntQQI85h6721RErFxvTVc6GLQzPW2DgNjXLMwRlkPyUH5Jo1NrdwYfu4k
sH3NynoftPK10Xj+P6nn3qfKHAick3s5fVrN0nTy3c7+DzzQYiIV+IONIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0a5BMGhbmo9suMlqLVeQ4VgdgmMB8GA1UdIwQY
MBaAFHAWJP/FchwVjkzJuwcetPuH2IwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0JZa184VnlIQldPVE1tN0J4NjAtNGZZakNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mYjVhYmUtNmEzYS00ZDM3LWJmNjEt
NjNlNzVlOTUzYTkzLzEvY0JZa184VnlIQldPVE1tN0J4NjAtNGZZakNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9mYjVhYmUtNmEzYS00ZDM3LWJmNjEtNjNlNzVlOTUzYTkz
LzEvY0JZa184VnlIQldPVE1tN0J4NjAtNGZZakNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoziAKq0t
WvU8FIdJVyygjj7mlRzSq1+YwABxkGbBnFwhu32Dovtkhmi9niuStfQGmWzk0fiz
B8WVAdvv9wuSHIo0rPpHha8q47vHjBPhZJKhrKSLaG/zsZHLuWLZHDiKKedtZHUG
YlBBfLQ2ejSbcuQ50gyy+64GPWFuyVOup/oXPvi+c021aH14EeZU/s87qDzhwCph
bmDgrA6f51i5C1aZPeF+pA0Wyd5ByFQr4Axvo6QiFpUaUrAOyu4y7nnLqt18gGVt
kp+0q3LkCnH1AUYLjvjJMUha8J5nuEqTvDWaI6BKtLwQ0F+ZEsIrg7tjPiKO/9J3
vljruFFww1Z5BQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:29:50 2026 by rpki-client