Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
File:                     Ac8qcbLHv1QcbMBBUc0CB402mSY.mft (raw, json)
Hash identifier:          xvoxBpq1opsmlpfcfpN2vCUFYFzZmu5cWXMufhSDCfc=
Subject key identifier:   45:35:FB:C2:E2:18:BC:13:89:1D:48:EB:BD:44:F0:11:90:F2:8E:27
Authority key identifier: 01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26
Certificate issuer:       /CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
Certificate serial:       019D9998D43B244A9E9A0C7856374D31ED40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
Manifest number:          05C8
Signing time:             Fri 17 Apr 2026 04:00:22 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:22 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:22 +0000
Files and hashes:         1: Ac8qcbLHv1QcbMBBUc0CB402mSY.crl (hash: UKPwSdVs9JWyo6YUbENkVdLIAfVwUZLI8e0zJ1EPQwQ=)
                          2: ldjE34Y5UHyQm9UPuMRXHapL2tQ.roa (hash: l2HlPn4UDyIXeMSyP3+IwTe3CYld8micBXtqct5ZxHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:98:d4:3b:24:4a:9e:9a:0c:78:56:37:4d:31:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
        Validity
            Not Before: Apr 17 04:00:22 2026 GMT
            Not After : Apr 18 04:00:22 2026 GMT
        Subject: CN=4535fbc2e218bc13891d48ebbd44f01190f28e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f1:48:d7:de:da:cc:28:db:3d:32:b0:46:27:
                    ad:80:f6:cb:0c:0f:2b:f3:16:b2:41:3a:c5:1f:64:
                    5b:3b:31:18:40:52:cb:49:68:3d:5d:d2:3b:a9:b3:
                    fc:c1:51:66:ef:0b:3d:01:fd:7f:c5:25:e1:4d:66:
                    db:06:5e:17:da:f0:df:6b:97:4c:21:76:67:d8:6f:
                    e2:70:03:a1:91:77:8c:7f:6d:b6:e7:6c:eb:39:12:
                    9c:b9:0b:9d:d2:d3:ba:d5:04:09:8e:3c:22:9a:36:
                    37:f3:e2:3c:7c:c4:c9:e7:83:b4:c3:75:ef:ff:93:
                    a1:64:14:43:9d:27:83:57:bf:59:ed:d5:f0:4e:d1:
                    15:df:5f:13:b0:09:46:71:77:6f:a3:1b:38:59:47:
                    63:7d:2d:f0:6b:0a:2b:26:1a:8a:8d:5f:7b:f1:e1:
                    8c:cb:c8:a6:2e:1d:cf:ef:64:4b:e8:a3:10:00:ea:
                    f0:a9:62:c8:f6:36:58:60:04:a0:ca:df:7d:5b:24:
                    be:19:96:b2:b4:d7:fe:cf:63:a9:92:c8:f0:72:4a:
                    35:5b:71:e2:4f:f6:53:de:c9:04:89:2f:f0:0f:af:
                    67:56:48:69:e4:28:35:0b:d4:76:6f:cd:34:19:0d:
                    34:d9:50:d4:0c:e7:52:7a:90:ab:43:a3:07:a9:b4:
                    c7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:35:FB:C2:E2:18:BC:13:89:1D:48:EB:BD:44:F0:11:90:F2:8E:27
            X509v3 Authority Key Identifier:
                keyid:01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a1:26:ea:e2:08:f0:08:4c:64:50:04:77:aa:f0:eb:a3:8a:
         0d:4b:29:36:d8:55:00:e9:27:22:b2:fc:85:db:44:65:0a:32:
         c9:24:fb:c8:00:db:ea:65:e5:4b:17:a4:32:80:38:e5:26:32:
         d4:f4:e8:24:dc:26:77:fc:7c:03:5e:6a:d2:b8:d6:04:64:e7:
         d8:df:1e:31:18:94:83:bb:27:6c:59:38:1e:3f:f1:bc:46:99:
         46:f7:91:4e:ac:3d:7c:4e:23:4e:2c:10:cd:2c:e0:1a:ae:1c:
         90:d1:8b:f1:4f:4f:7a:e4:63:62:83:e9:8a:1b:23:94:bc:c2:
         d7:57:59:25:2f:8e:8e:a7:d9:92:7a:08:dc:33:a8:dd:17:a8:
         d6:2b:27:35:3d:10:88:ac:7e:53:ff:5f:cd:27:a0:e0:e7:ac:
         26:96:4a:06:9d:c6:0c:e6:bb:3c:73:92:89:1a:49:36:cf:c9:
         d5:d1:ed:0b:83:30:c4:96:71:b6:84:00:30:81:38:04:ce:45:
         cd:d3:c2:46:44:ab:de:20:0b:8d:ce:7c:b1:16:0f:01:c5:c9:
         51:ba:99:25:06:e1:a7:d9:31:7c:19:f9:26:87:0c:4b:24:2c:
         70:72:9e:c5:bf:81:95:3a:82:9c:aa:3f:49:ea:e4:a1:fd:95:
         55:65:69:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:44:58 2026 by rpki-client