Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
File:                     RIGO8G79biLUcUBKtTikucgH7-A.mft (raw, json)
Hash identifier:          NHOZzuP2GGP39O5qVpI/Izt9tJoyCSnNkRjESS4hnFc=
Subject key identifier:   E5:BB:56:B6:A2:F5:F3:C0:8A:D2:89:EA:71:B4:85:B5:FA:2A:54:50
Authority key identifier: 44:81:8E:F0:6E:FD:6E:22:D4:71:40:4A:B5:38:A4:B9:C8:07:EF:E0
Certificate issuer:       /CN=44818ef06efd6e22d471404ab538a4b9c807efe0
Certificate serial:       019D992B3274A8E9C6DFFB818F753245AA23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 02:00:38 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:38 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:38 +0000
Files and hashes:         1: Q9i-FCkC-t1j39X8T_DbrADXSgI.roa (hash: hTcLuq6cpKXAgg3YJq/YAMv0+iDnhPDuX0a1jXYwiP8=)
                          2: RIGO8G79biLUcUBKtTikucgH7-A.crl (hash: DZRA6sXF3hxTzGAy9l/YTWweCZx5XfYk/ywg/nGwts4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:32:74:a8:e9:c6:df:fb:81:8f:75:32:45:aa:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44818ef06efd6e22d471404ab538a4b9c807efe0
        Validity
            Not Before: Apr 17 02:00:38 2026 GMT
            Not After : Apr 18 02:00:38 2026 GMT
        Subject: CN=e5bb56b6a2f5f3c08ad289ea71b485b5fa2a5450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:03:56:de:fe:ce:55:21:a5:be:16:49:33:b0:
                    99:4e:1d:36:b2:e1:5f:4f:6f:b2:74:fa:58:bd:0d:
                    bc:c0:01:b9:4b:5f:77:f2:fa:78:21:ff:aa:f3:ef:
                    80:cd:40:dc:f5:31:32:16:78:2b:3b:6d:d2:98:6d:
                    75:e3:3a:1a:c5:d0:aa:65:47:63:0e:0b:d2:ee:b9:
                    29:37:99:7f:b6:65:33:34:c5:37:36:2e:24:41:6a:
                    31:27:69:c7:66:76:73:2c:7e:64:cb:ee:11:96:b1:
                    16:aa:fb:23:c2:25:59:e6:1c:bc:43:53:dd:d2:28:
                    23:61:7c:b4:d5:03:8a:c3:0b:7e:dd:ad:73:4d:cc:
                    57:d0:f6:e9:5e:ee:a9:56:03:4c:c9:58:11:48:0e:
                    0f:1f:fe:f0:a9:ab:9f:b9:2c:2d:04:8c:df:b8:17:
                    18:4a:e9:f6:97:e1:fb:c6:94:a2:1a:73:ff:9a:b2:
                    71:12:3f:c1:63:3a:3b:d2:ef:b8:94:df:05:14:f8:
                    ba:08:d1:b7:a4:9f:c7:c2:eb:1b:1f:c1:d1:89:b7:
                    ed:72:a5:01:33:50:08:8e:82:5b:b5:e1:f6:d0:02:
                    4a:ed:b0:d3:bc:74:bc:1a:ef:94:8d:9c:a5:54:8b:
                    51:d2:15:18:d2:71:54:9d:91:da:a6:f3:10:4c:4d:
                    b5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BB:56:B6:A2:F5:F3:C0:8A:D2:89:EA:71:B4:85:B5:FA:2A:54:50
            X509v3 Authority Key Identifier:
                keyid:44:81:8E:F0:6E:FD:6E:22:D4:71:40:4A:B5:38:A4:B9:C8:07:EF:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:bf:c1:da:41:f8:7b:03:1a:08:cc:e7:94:2e:fb:f6:7b:c0:
         e2:59:bb:49:6d:4b:df:10:c1:37:7e:96:c1:72:d3:08:06:c0:
         a3:fa:ca:d0:80:de:08:00:9e:c0:94:13:74:0b:2c:17:b4:8c:
         fe:8f:0d:1b:85:f7:cd:10:77:56:83:4e:e5:77:68:73:14:bc:
         c8:84:05:8c:7d:94:5d:ae:72:a9:81:d3:14:ba:aa:f9:49:a1:
         58:6f:d7:e8:d7:24:7b:71:25:9c:48:cf:0d:1c:3b:19:ee:48:
         6e:18:2f:f5:a2:1a:39:a4:4e:d5:61:16:17:78:b6:cf:a5:e8:
         03:91:3e:86:7a:77:05:13:04:82:c3:ca:5e:9f:4e:18:ac:4a:
         b5:18:a0:3a:87:7f:d5:c1:b9:3b:2f:ef:53:df:52:78:ee:87:
         e4:52:f7:db:0d:aa:8c:77:d6:46:d4:8e:bc:77:3d:af:3e:c3:
         0f:5e:25:e6:ad:f6:ba:fb:e2:f3:f2:07:9e:80:d4:9f:4c:45:
         2e:36:ce:e9:7c:57:9d:7d:81:74:30:b7:af:03:f5:4d:47:ce:
         5d:72:48:c9:d0:8c:e1:21:50:32:2f:94:2b:0f:0f:2f:fe:7c:
         fa:f0:e6:d8:ee:80:e3:17:99:2b:63:8c:77:d2:3c:0c:ef:b7:
         04:c8:0f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:16:20 2026 by rpki-client