Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
File:                     GiR0zlteIgufQxr8hq9OwUD18Ww.mft (raw, json)
Hash identifier:          L+4getZ1vAxuKRp3/xX9k1/q1RBjWYo3zf2f8pek1DE=
Subject key identifier:   7E:B1:30:EC:B2:27:C1:B9:96:80:03:AD:51:F5:E5:AB:05:F2:91:72
Authority key identifier: 1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C
Certificate issuer:       /CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c
Certificate serial:       019D98BD2D9F627D64242F0E4B857B7A6CDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
Manifest number:          0D9E
Signing time:             Fri 17 Apr 2026 00:00:27 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:27 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:27 +0000
Files and hashes:         1: GiR0zlteIgufQxr8hq9OwUD18Ww.crl (hash: acFYt9C/9DRy4KYYZHXbaUoLShMnP0YAB+b8UlKHr2A=)
                          2: SkKZfC38ghmrpySCpGvRpFixxKU.roa (hash: o3RJWOBJfQjmbxei+seF+/aOYTLshRFp1ICoacA0zAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 00:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:2d:9f:62:7d:64:24:2f:0e:4b:85:7b:7a:6c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c
        Validity
            Not Before: Apr 17 00:00:27 2026 GMT
            Not After : Apr 18 00:00:27 2026 GMT
        Subject: CN=7eb130ecb227c1b9968003ad51f5e5ab05f29172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0c:49:1c:57:a7:25:79:fe:89:d4:30:f5:6d:
                    63:94:64:a0:ec:a2:88:2c:e5:ed:33:c9:6c:4c:49:
                    cf:23:38:f7:9d:1d:38:1d:43:6c:06:6c:a4:f8:ed:
                    c0:7b:93:dc:97:1a:04:9e:9e:2f:79:52:62:80:2f:
                    92:6b:62:d6:f0:11:46:3e:52:2a:be:89:9b:05:c3:
                    ac:ff:d3:68:16:a4:aa:e6:d7:26:63:74:3e:ec:3b:
                    f8:f7:b2:a1:a1:19:a7:93:09:20:34:15:e1:20:56:
                    d7:84:13:3e:ba:27:8d:1a:4e:d7:9a:9d:fb:ea:c7:
                    ba:80:9c:95:de:29:7a:17:b6:23:91:af:5b:ee:d1:
                    93:bc:ad:91:b2:c6:4b:6a:64:9d:e0:7c:78:fd:8e:
                    dc:1e:96:62:62:ce:87:54:05:6d:90:4b:e0:e0:fe:
                    07:21:40:0a:8b:0f:84:ee:7a:01:9c:15:d9:5f:a8:
                    1c:fe:0e:10:d6:52:53:69:08:0a:4e:33:9c:ff:21:
                    a2:89:77:c7:b7:92:13:12:79:83:f6:00:9d:3b:f1:
                    34:b1:fd:71:a9:60:5a:cb:23:21:0b:b3:bb:41:b1:
                    d5:76:f9:99:81:f2:0b:70:ad:c1:59:46:dc:c5:24:
                    95:99:70:74:18:a3:a2:eb:11:05:96:f8:dc:85:f0:
                    d0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B1:30:EC:B2:27:C1:B9:96:80:03:AD:51:F5:E5:AB:05:F2:91:72
            X509v3 Authority Key Identifier:
                keyid:1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:96:08:30:d2:9b:d2:7a:e2:b4:05:49:c1:c5:64:0d:40:59:
         3b:d9:83:16:42:ab:f1:ba:ee:6a:eb:c7:2d:cc:c3:04:e0:23:
         3a:e4:72:a6:48:34:80:b5:5f:fe:98:f1:47:62:d9:60:99:ff:
         26:a1:10:1e:38:d9:11:6c:df:67:1a:cf:b2:f0:40:ce:47:da:
         16:a2:b0:4e:fb:c7:d4:8a:94:d9:c1:93:d5:fc:80:6b:ad:f8:
         d7:aa:06:76:20:60:32:38:5c:2d:d7:8e:30:98:e9:44:d4:11:
         e2:81:97:76:88:e1:73:98:f2:4f:30:1f:78:37:ed:a9:73:5b:
         06:44:0b:1a:b6:89:0b:92:ba:b3:7d:29:0a:9e:d0:1d:09:eb:
         03:e4:d1:2d:42:fc:23:66:bd:ab:b0:3c:88:74:8b:96:d2:8f:
         d7:7a:a5:68:71:fc:96:a8:d8:79:b2:a3:17:ce:e7:37:c1:f2:
         3e:ab:bc:bd:d0:08:cb:8b:14:fa:1e:c0:cf:1f:38:fa:3c:36:
         57:97:6d:5a:b8:54:7f:31:35:6b:86:cd:0b:c4:bd:d7:d6:4b:
         b0:e7:68:01:77:6e:bf:08:79:9d:0d:6c:8d:48:ce:69:66:50:
         43:0d:01:0d:a2:23:ed:89:a1:2a:a7:f5:15:68:01:47:0e:1d:
         73:4e:74:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:11 2026 by rpki-client