Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
File:                     8Q057dsAjRuJ35dBlg2_IET2V_s.mft (raw, json)
Hash identifier:          mbPNLql78M7MNn9vdrnNJCrXFbSIFG28X5UJQL+dSxs=
Subject key identifier:   1C:D6:0E:CD:F6:72:EC:D8:53:5C:B6:6A:03:17:CC:A4:51:FB:50:84
Authority key identifier: F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB
Certificate issuer:       /CN=f10d39eddb008d1b89df9741960dbf2044f657fb
Certificate serial:       019DA309F41FC5EC9B16E0815291F899F8EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
Manifest number:          18CE
Signing time:             Sun 19 Apr 2026 00:00:31 +0000
Manifest this update:     Sun 19 Apr 2026 00:00:31 +0000
Manifest next update:     Mon 20 Apr 2026 00:00:31 +0000
Files and hashes:         1: 8Q057dsAjRuJ35dBlg2_IET2V_s.crl (hash: eITjWhVeAeyF8R7vdjljYN3ABLtzr+8/4CMLENGWQN8=)
                          2: wp6uiGrJ4kjvwZ8tHt_RT5DTcms.roa (hash: VFhk9hTGSYfetlFbp/u5F1XNCOx7IZQTp3tsScBlLMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 00:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:09:f4:1f:c5:ec:9b:16:e0:81:52:91:f8:99:f8:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f10d39eddb008d1b89df9741960dbf2044f657fb
        Validity
            Not Before: Apr 19 00:00:31 2026 GMT
            Not After : Apr 20 00:00:31 2026 GMT
        Subject: CN=1cd60ecdf672ecd8535cb66a0317cca451fb5084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ba:dd:92:b7:e1:f6:39:dd:2d:04:ba:25:a9:
                    94:f8:f2:5b:4d:e7:60:83:3d:83:01:ab:5b:ad:d4:
                    ca:b6:67:b5:b2:b4:24:3b:b5:af:df:f5:83:0c:54:
                    a4:bf:7b:04:db:04:51:63:06:c8:b7:01:1e:55:b2:
                    42:e5:06:72:bf:1d:eb:f3:05:61:d5:01:2d:81:ef:
                    fc:b5:49:51:ec:6b:dc:b9:67:fa:23:f2:74:ef:59:
                    53:19:83:42:fb:ea:51:6d:bb:91:2e:c0:a0:74:23:
                    f6:db:1e:9d:a3:6e:3d:ec:27:25:92:d5:8f:21:f9:
                    84:fb:50:ca:49:f2:4f:80:53:25:f4:58:89:03:04:
                    20:46:ce:ea:39:a2:a1:e6:9d:ed:c7:af:86:7c:cb:
                    b5:9c:38:8c:8a:f8:8b:81:c2:e3:22:cb:a8:1a:4c:
                    69:ca:6d:29:a2:39:ed:6f:08:ef:10:c1:31:d9:d9:
                    0a:98:66:ea:3e:94:97:9c:4c:91:db:7c:1a:48:93:
                    ee:51:cb:1e:c5:e3:18:56:b0:84:5a:7b:7d:63:54:
                    98:51:09:56:8c:93:f3:cc:14:27:d8:a0:d6:16:45:
                    2c:ee:5b:12:00:fb:99:d4:80:5a:17:0c:b9:7a:50:
                    c5:14:2e:42:d3:29:08:72:cb:bd:e6:04:88:b4:a7:
                    27:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D6:0E:CD:F6:72:EC:D8:53:5C:B6:6A:03:17:CC:A4:51:FB:50:84
            X509v3 Authority Key Identifier:
                keyid:F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:f9:fc:15:17:03:d7:31:4a:29:de:1a:24:23:b4:d0:8b:64:
         54:78:e9:c5:c4:db:f2:95:75:a3:9c:91:be:2b:81:3b:c4:69:
         65:2e:31:91:0f:a4:0c:b9:4b:07:97:ea:40:26:78:00:a4:b5:
         be:f0:0e:5e:50:8a:70:21:ca:a9:7d:73:55:9f:3a:c8:1d:70:
         b9:be:ce:34:43:69:68:5e:86:65:89:9a:4f:25:85:0d:bd:cc:
         02:e5:11:99:8c:0d:bb:f7:5c:ce:2f:7e:53:9c:86:7e:b9:34:
         f9:76:e0:ac:d8:24:ea:90:07:8b:a8:cb:0a:01:21:77:62:1c:
         a5:20:fa:08:c8:d5:ef:9c:7d:df:ca:74:50:36:fe:a3:a3:2c:
         53:c9:76:b5:d3:89:6e:aa:9c:4f:a5:12:27:05:7d:8d:23:58:
         16:2b:45:7e:74:47:6a:fd:0d:7f:1f:75:49:43:33:e7:df:b5:
         56:b6:be:19:cb:5c:4c:12:f4:05:87:f7:e9:0e:ee:4e:06:f4:
         37:96:ed:6a:67:fe:a5:fd:44:9d:e9:c9:e3:a4:be:08:f3:e3:
         72:3d:65:b1:10:89:4b:13:e6:40:e7:e5:f1:ad:14:37:7d:e0:
         59:53:83:62:8b:a9:e5:19:d1:73:ed:52:e4:c7:5d:1d:95:f2:
         15:f6:80:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jCfQfxeybFuCBUpH4mfjrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMGQzOWVkZGIwMDhkMWI4OWRmOTc0MTk2MGRiZjIwNDRm
NjU3ZmIwHhcNMjYwNDE5MDAwMDMxWhcNMjYwNDIwMDAwMDMxWjAzMTEwLwYDVQQD
EygxY2Q2MGVjZGY2NzJlY2Q4NTM1Y2I2NmEwMzE3Y2NhNDUxZmI1MDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67rdkrfh9jndLQS6JamU+PJbTedg
gz2DAatbrdTKtme1srQkO7Wv3/WDDFSkv3sE2wRRYwbItwEeVbJC5QZyvx3r8wVh
1QEtge/8tUlR7GvcuWf6I/J071lTGYNC++pRbbuRLsCgdCP22x6do2497CclktWP
IfmE+1DKSfJPgFMl9FiJAwQgRs7qOaKh5p3tx6+GfMu1nDiMiviLgcLjIsuoGkxp
ym0pojntbwjvEMEx2dkKmGbqPpSXnEyR23waSJPuUcsexeMYVrCEWnt9Y1SYUQlW
jJPzzBQn2KDWFkUs7lsSAPuZ1IBaFwy5elDFFC5C0ykIcsu95gSItKcnbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzWDs32cuzYU1y2agMXzKRR+1CEMB8GA1UdIwQY
MBaAFPENOe3bAI0bid+XQZYNvyBE9lf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFEwNTdkc0FqUnVKMzVkQmxnMl9JRVQyVl9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mNzBlMWEtNzMyZS00ZTZiLWIzYjUt
ZjU2MmI4OTc0ZDhiLzEvOFEwNTdkc0FqUnVKMzVkQmxnMl9JRVQyVl9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mNzBlMWEtNzMyZS00ZTZiLWIzYjUtZjU2MmI4OTc0ZDhi
LzEvOFEwNTdkc0FqUnVKMzVkQmxnMl9JRVQyVl9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARfn8FRcD
1zFKKd4aJCO00ItkVHjpxcTb8pV1o5yRviuBO8RpZS4xkQ+kDLlLB5fqQCZ4AKS1
vvAOXlCKcCHKqX1zVZ86yB1wub7ONENpaF6GZYmaTyWFDb3MAuURmYwNu/dczi9+
U5yGfrk0+XbgrNgk6pAHi6jLCgEhd2IcpSD6CMjV75x938p0UDb+o6MsU8l2tdOJ
bqqcT6USJwV9jSNYFitFfnRHav0Nfx91SUMz59+1Vra+GctcTBL0BYf36Q7uTgb0
N5btamf+pf1EnenJ46S+CPPjcj1lsRCJSxPmQOfl8a0UN33gWVODYoup5RnRc+1S
5MddHZXyFfaAzA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:46 2026 by rpki-client