Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
File:                     p03gktwuTXKqfmqWDSGtTnl1izw.mft (raw, json)
Hash identifier:          xOMdRkg04+xNBLPQv9TunpOzC4dUR5DyBZMMUVSFdrw=
Subject key identifier:   21:D8:5B:63:C6:D2:3A:C0:E9:A5:9D:E9:A6:3A:C8:4C:02:32:B7:58
Authority key identifier: A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C
Certificate issuer:       /CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c
Certificate serial:       019D9E88BB584515E9EEA6E32CD3730092B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
Manifest number:          18C4
Signing time:             Sat 18 Apr 2026 03:00:54 +0000
Manifest this update:     Sat 18 Apr 2026 03:00:54 +0000
Manifest next update:     Sun 19 Apr 2026 03:00:54 +0000
Files and hashes:         1: HAOGr9qmEHLwQ55VEf6gl-wrCMY.roa (hash: 2L0cffWPWFlhQ1pCasY0Pddusud0MCUWSHUpwa9HyyE=)
                          2: p03gktwuTXKqfmqWDSGtTnl1izw.crl (hash: 7oyL29N2W8e+/G/vXj43ZCO8f0y2W/rr+IvJV6dIS1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9e:88:bb:58:45:15:e9:ee:a6:e3:2c:d3:73:00:92:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c
        Validity
            Not Before: Apr 18 03:00:54 2026 GMT
            Not After : Apr 19 03:00:54 2026 GMT
        Subject: CN=21d85b63c6d23ac0e9a59de9a63ac84c0232b758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:82:d4:b6:42:3b:21:c8:dc:45:72:81:c8:64:
                    fb:eb:c4:b4:78:af:0a:c8:ed:8e:fe:ae:03:e8:b0:
                    be:1d:8c:a0:3f:2e:3b:ce:6d:80:6e:ea:42:b1:73:
                    e7:c9:a8:45:24:30:cc:60:76:e6:bb:bf:2a:5e:d0:
                    a8:55:6c:dd:44:12:dc:c6:c2:de:c4:ad:38:f8:55:
                    f6:32:59:96:a9:46:5a:5a:a6:55:06:be:a4:75:01:
                    24:66:1e:4b:1e:7c:2a:ac:da:f7:47:a8:83:29:c2:
                    d3:bb:f0:99:3e:1f:87:88:65:ae:c1:1a:8b:1e:74:
                    c7:42:60:05:c1:5c:47:f9:d5:82:3a:6f:e0:13:b4:
                    42:2a:c1:61:dc:df:38:27:d3:b2:5f:2c:56:a3:03:
                    52:9b:38:09:d3:c6:95:7a:d2:44:03:47:c2:f9:96:
                    35:4c:84:d1:e7:84:6c:2a:ed:08:0e:bb:ab:60:67:
                    f7:f0:09:8d:43:c9:75:06:3e:0c:88:e2:cf:b9:ce:
                    b0:b3:a6:07:7b:8d:ac:60:08:cd:aa:ad:fa:9c:07:
                    ac:ee:1b:96:92:27:44:c1:39:2b:61:35:5c:05:47:
                    c4:ad:be:1b:8c:31:85:9f:7e:2a:c9:9f:e2:84:d6:
                    aa:c3:b7:16:25:0a:67:33:76:fd:0b:54:78:63:0b:
                    e7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D8:5B:63:C6:D2:3A:C0:E9:A5:9D:E9:A6:3A:C8:4C:02:32:B7:58
            X509v3 Authority Key Identifier:
                keyid:A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:65:d6:61:22:d5:34:cf:67:0a:87:91:86:7a:61:52:24:b3:
         46:3f:89:d1:12:66:11:64:00:99:8a:b0:72:c5:32:28:6d:2a:
         39:a6:9e:21:a9:0e:1a:c2:24:c2:b8:ab:b6:cc:4c:8e:51:06:
         fe:6e:fb:64:ab:84:e1:f2:b7:85:d4:54:d6:f7:2c:8d:7f:4b:
         e4:89:6d:4f:de:19:fe:54:84:84:1f:b9:0b:23:de:d7:14:8c:
         92:cc:5b:6c:7f:0b:f6:b9:43:16:01:0e:00:3a:88:43:12:6c:
         3a:ea:3a:c7:b6:00:e6:46:1b:75:80:48:01:94:35:dc:30:75:
         6d:22:66:ee:46:d7:cf:75:d9:26:8c:30:d1:e9:a7:d2:89:09:
         1a:8d:dc:dc:e1:cf:06:bb:c8:5b:00:d1:5b:e9:d8:97:29:25:
         90:4c:8f:3c:99:7a:91:bb:d3:66:a2:08:d0:ef:ed:e5:e7:b4:
         2a:3f:8b:87:af:aa:3f:d4:c0:13:75:f7:41:31:52:37:83:8b:
         ea:66:45:02:ff:ba:d0:a5:a7:d6:c8:67:b3:cb:93:a2:96:d1:
         99:23:0f:ee:9c:84:e8:73:df:53:42:f7:36:0f:70:14:15:62:
         45:93:15:5e:31:2d:10:7e:84:c9:27:b9:a3:06:2a:12:25:1c:
         13:59:91:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2eiLtYRRXp7qbjLNNzAJK2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NGRlMDkyZGMyZTRkNzJhYTdlNmE5NjBkMjFhZDRlNzk3
NThiM2MwHhcNMjYwNDE4MDMwMDU0WhcNMjYwNDE5MDMwMDU0WjAzMTEwLwYDVQQD
EygyMWQ4NWI2M2M2ZDIzYWMwZTlhNTlkZTlhNjNhYzg0YzAyMzJiNzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YLUtkI7IcjcRXKByGT768S0eK8K
yO2O/q4D6LC+HYygPy47zm2AbupCsXPnyahFJDDMYHbmu78qXtCoVWzdRBLcxsLe
xK04+FX2MlmWqUZaWqZVBr6kdQEkZh5LHnwqrNr3R6iDKcLTu/CZPh+HiGWuwRqL
HnTHQmAFwVxH+dWCOm/gE7RCKsFh3N84J9OyXyxWowNSmzgJ08aVetJEA0fC+ZY1
TITR54RsKu0IDrurYGf38AmNQ8l1Bj4MiOLPuc6ws6YHe42sYAjNqq36nAes7huW
kidEwTkrYTVcBUfErb4bjDGFn34qyZ/ihNaqw7cWJQpnM3b9C1R4YwvnewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHYW2PG0jrA6aWd6aY6yEwCMrdYMB8GA1UdIwQY
MBaAFKdN4JLcLk1yqn5qlg0hrU55dYs8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDAzZ2t0d3VUWEtxZm1xV0RTR3RUbmwxaXp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi80Njk5NzQtMTE4NC00ODI0LTkxODEt
ZjRhMjc1ZDZiNTg0LzEvcDAzZ2t0d3VUWEtxZm1xV0RTR3RUbmwxaXp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi80Njk5NzQtMTE4NC00ODI0LTkxODEtZjRhMjc1ZDZiNTg0
LzEvcDAzZ2t0d3VUWEtxZm1xV0RTR3RUbmwxaXp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2XWYSLV
NM9nCoeRhnphUiSzRj+J0RJmEWQAmYqwcsUyKG0qOaaeIakOGsIkwrirtsxMjlEG
/m77ZKuE4fK3hdRU1vcsjX9L5IltT94Z/lSEhB+5CyPe1xSMksxbbH8L9rlDFgEO
ADqIQxJsOuo6x7YA5kYbdYBIAZQ13DB1bSJm7kbXz3XZJoww0emn0okJGo3c3OHP
BrvIWwDRW+nYlyklkEyPPJl6kbvTZqII0O/t5ee0Kj+Lh6+qP9TAE3X3QTFSN4OL
6mZFAv+60KWn1shns8uTopbRmSMP7pyE6HPfU0L3Ng9wFBViRZMVXjEtEH6EySe5
owYqEiUcE1mRwQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 08:59:11 2026 by rpki-client