Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
File:                     RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft (raw, json)
Hash identifier:          3PfVizrfIlhHjdz/JX7/Jg1WuvQuWeLPI2+m4Gyr3fs=
Subject key identifier:   27:8A:D3:42:56:C9:28:5F:1E:8B:DF:0A:AA:F5:D1:1A:5C:24:D7:96
Authority key identifier: 46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32
Certificate issuer:       /CN=46aa60676c130c6438e45b5a607210e9566b6832
Certificate serial:       019D98869D73C925651E7780E0D79D5D5C0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
Manifest number:          05DA
Signing time:             Thu 16 Apr 2026 23:00:51 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:51 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:51 +0000
Files and hashes:         1: RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl (hash: apNvy0MCMXCYAc8PSRruQGmzw1+bBB3FtNOmbP5JTrM=)
                          2: z-c9Pey3216LPC0KHV3ix--by3k.roa (hash: 3wJbwPppaRKKbJHcpNB2CmCnMT+2mo4g0n5EWgLuCaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:9d:73:c9:25:65:1e:77:80:e0:d7:9d:5d:5c:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46aa60676c130c6438e45b5a607210e9566b6832
        Validity
            Not Before: Apr 16 23:00:51 2026 GMT
            Not After : Apr 17 23:00:51 2026 GMT
        Subject: CN=278ad34256c9285f1e8bdf0aaaf5d11a5c24d796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8c:e1:c5:ef:ae:aa:02:6f:57:0c:d0:cc:6c:
                    be:26:c6:bc:4c:89:b5:f8:55:9d:23:40:d4:8c:5c:
                    15:42:74:39:cc:66:16:51:ee:9a:58:c5:15:fd:5f:
                    1d:30:90:7e:e7:4d:fd:29:39:39:d8:e8:85:a5:5f:
                    93:64:86:94:34:5b:7d:0a:d8:6e:44:4a:c0:f2:20:
                    71:86:f2:89:2c:75:45:48:37:0e:d8:b6:aa:28:1d:
                    bf:7c:32:8f:8d:13:e8:5a:99:24:35:ed:50:a4:0d:
                    d1:ad:48:a8:39:57:35:a6:3a:f9:f6:ff:22:ff:64:
                    4b:7c:1b:51:1c:23:c5:ba:d6:c3:1e:ac:fc:a8:78:
                    db:e7:9f:93:69:69:37:3f:d0:e1:ea:f6:94:f0:ba:
                    c0:a9:46:58:17:f1:18:f7:91:e5:49:18:ab:3e:ea:
                    2a:62:4a:a9:64:1a:e1:68:56:6e:4c:19:cb:4d:e0:
                    1b:d0:4e:7f:90:a5:59:d0:c9:56:48:fa:d5:e1:ac:
                    18:cd:a4:66:fe:e9:2f:ed:1c:c3:82:be:73:13:46:
                    a2:5e:d4:90:a1:66:19:98:07:ff:57:28:5d:05:a8:
                    fa:bd:c1:53:ce:1e:71:01:94:5e:85:fb:90:b2:2d:
                    69:1b:4f:e9:17:94:9c:08:c9:c7:5c:7b:79:3f:88:
                    65:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8A:D3:42:56:C9:28:5F:1E:8B:DF:0A:AA:F5:D1:1A:5C:24:D7:96
            X509v3 Authority Key Identifier:
                keyid:46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:e9:14:5b:ed:a0:1b:3e:43:61:03:50:d4:8f:d8:f3:26:47:
         ec:26:a2:82:98:fe:92:c5:33:2b:a8:e0:68:d6:55:03:12:12:
         4c:11:51:a1:b2:ee:6f:fa:17:53:81:b0:1e:a7:ce:61:89:f5:
         b6:26:cc:e0:84:41:c6:b6:1a:f7:84:5c:ab:d7:c0:18:90:88:
         66:eb:ee:4d:a5:3e:72:19:43:c7:bf:49:82:fe:4a:a4:3e:fb:
         34:c3:ad:c8:b2:ca:5b:69:b8:ab:8c:03:16:1b:13:c0:ac:f7:
         9e:83:40:fc:d2:63:17:a1:3a:2f:c6:29:e0:7d:6a:41:03:05:
         5b:51:01:1e:3b:90:4c:ac:6a:25:40:94:3d:0b:8a:75:8e:09:
         37:de:75:8e:0b:88:50:0b:e7:42:b5:95:05:d6:41:c4:d4:3a:
         28:c0:9f:d8:38:ce:d3:f9:13:bb:b0:b3:56:62:88:5e:5c:2e:
         39:48:05:3b:36:7c:83:be:c7:c4:b3:59:af:49:41:00:9d:2a:
         88:fe:38:90:51:0b:97:b0:1c:fc:a5:84:01:f1:a0:ca:59:4e:
         e6:3e:f8:0f:25:dd:e6:b7:53:37:2a:0f:0e:5a:c8:73:80:f7:
         10:e1:b7:f2:a2:4e:b6:fa:3f:13:4d:4f:58:4f:d7:e4:ca:45:
         f5:8c:b7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:06 2026 by rpki-client