Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
File:                     sQvyxqnxpCuKzuASWfkfUUSrivU.mft (raw, json)
Hash identifier:          Oqhsx0JFgflELD93QJ+Di7CPb7bqz4lKcDkImGTEMZU=
Subject key identifier:   3A:74:0E:14:CE:43:51:C3:D4:71:A3:03:1F:DF:DD:57:E3:2B:7B:2C
Authority key identifier: B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5
Certificate issuer:       /CN=b10bf2c6a9f1a42b8acee01259f91f5144ab8af5
Certificate serial:       019D97E1F005A727F77BEE93B33ED5D6C8AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
Manifest number:          0859
Signing time:             Thu 16 Apr 2026 20:00:59 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:59 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:59 +0000
Files and hashes:         1: fe8ukOhhEe7KXEfSiyV_DHengoY.roa (hash: HwZz3DBgstgEomr/Tp/wiHiggtvFxa7jhA0tFGZLzl8=)
                          2: sQvyxqnxpCuKzuASWfkfUUSrivU.crl (hash: v074Ep1WDdsYjpMHh/9igiZOd6ht7R2FQr0QVyHLYFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:f0:05:a7:27:f7:7b:ee:93:b3:3e:d5:d6:c8:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b10bf2c6a9f1a42b8acee01259f91f5144ab8af5
        Validity
            Not Before: Apr 16 20:00:59 2026 GMT
            Not After : Apr 17 20:00:59 2026 GMT
        Subject: CN=3a740e14ce4351c3d471a3031fdfdd57e32b7b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cd:f8:38:54:aa:94:7d:1d:66:63:49:7d:2c:
                    db:9e:45:e4:91:2f:4d:72:f0:bc:e1:5b:1a:12:2e:
                    95:9a:79:e1:85:30:bd:1b:d2:62:83:27:28:88:30:
                    5a:62:44:33:57:2a:7b:eb:89:99:5d:b0:c9:5c:b3:
                    1e:9b:9f:bf:57:1b:6f:ae:86:4a:02:40:25:2b:92:
                    77:56:98:29:9c:0f:a6:f2:ca:7f:db:5d:4f:c4:70:
                    9f:51:73:e0:01:ba:97:6d:94:ed:35:5c:9d:15:d2:
                    47:a5:20:b5:6b:d7:03:fc:94:06:dc:60:e2:05:dd:
                    1a:69:43:49:58:01:cb:fe:73:83:1a:c9:0b:f0:3c:
                    9c:b8:51:70:47:5f:e7:cf:4b:bc:42:4a:50:fa:11:
                    69:18:36:3f:09:a4:f7:d1:b8:c9:20:3e:8b:f6:ff:
                    3d:81:10:41:2e:2a:8a:a0:07:a0:cb:45:49:a5:ba:
                    ad:c0:7e:fc:a9:22:73:cd:0a:e0:27:a3:a8:42:91:
                    d9:52:bf:7e:43:05:53:10:15:86:0d:8f:f0:f0:45:
                    3a:e0:8d:63:d2:00:da:da:cb:01:84:d8:9f:7a:54:
                    94:a2:8b:49:96:ca:69:d7:b8:85:48:fb:b3:c9:c3:
                    44:73:a2:af:4d:8c:b0:de:0d:97:48:ed:0e:56:fa:
                    36:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:74:0E:14:CE:43:51:C3:D4:71:A3:03:1F:DF:DD:57:E3:2B:7B:2C
            X509v3 Authority Key Identifier:
                keyid:B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:83:ef:95:7f:7b:37:8b:2e:02:aa:ab:f5:85:08:90:13:31:
         4f:8a:5a:a0:6f:8e:76:5d:33:ea:ee:87:33:e7:88:01:45:a1:
         e8:14:c3:f7:3d:76:90:b9:ed:08:81:a6:c8:cb:ba:88:93:57:
         1e:70:03:1b:7e:9d:55:a5:b3:0c:9e:f6:e5:f7:b2:2f:30:21:
         bd:f8:9e:2f:17:a7:83:25:bf:1f:39:06:5b:50:f5:c7:6f:26:
         96:bd:a3:7f:c0:43:1d:dd:df:cb:6b:c1:a5:b8:35:a4:cb:61:
         63:43:06:48:8b:c0:46:73:8e:92:68:9a:b3:86:2e:cf:95:01:
         1e:81:98:c9:9a:22:65:26:08:f8:d4:b9:e4:f5:f4:22:f2:0e:
         70:e8:79:c1:00:c3:89:16:40:49:4e:36:fa:42:99:ed:89:b2:
         2c:65:92:0a:f8:76:bb:ef:de:83:0d:f7:22:70:05:83:b8:af:
         bd:f4:9b:26:5b:39:64:c0:2d:3b:70:1a:f5:11:38:6e:60:3a:
         a6:e1:d3:12:3e:a8:6c:21:a1:cb:28:ef:53:86:a1:26:1c:56:
         9f:00:c7:b6:de:d6:86:c0:66:91:c5:bf:9a:96:76:66:ca:02:
         0b:9a:1d:e4:be:88:cc:9b:76:1f:4d:23:6c:02:dc:05:68:3a:
         67:51:c9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:42:20 2026 by rpki-client