Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
File:                     T5rG_iAxrd4DZoJA48XZHsZxHh4.mft (raw, json)
Hash identifier:          IB+W/6gt/UePuDsA2uSrV/yEBj5jD+m2Ctx3zM6G4XI=
Subject key identifier:   69:2A:C9:68:BD:FF:94:5A:27:2A:F9:81:7C:DB:A3:4D:80:5D:31:76
Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
Certificate issuer:       /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Certificate serial:       019D98BD4859D1BA2F76DF41DC41462C2115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
Manifest number:          18CB
Signing time:             Fri 17 Apr 2026 00:00:34 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:34 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:34 +0000
Files and hashes:         1: 0dAC8_MIFapVxgRzs4TlZHVEeEY.roa (hash: 49clzQhW1ftGGWowSAxsNPEboDX4Z+TOAbVsOQgEQas=)
                          2: P1u4eEpMlt9VP1A_Q7ba9uco-DE.roa (hash: FS9C2EZkw3xynye9bdmDp7IY0lMQ/RYNxAFxC1rEr8A=)
                          3: T5rG_iAxrd4DZoJA48XZHsZxHh4.crl (hash: lpVHc8jumJnOGFXLrtCQoW0FXEyftVHQQMoCylQOU9U=)
                          4: jx00a_pu7cUe7ylsCN_mAD4NHH0.roa (hash: qbhokNXhBId7yUMzZ5kksb51Uw6RLNqqZ85yZyQ9F7g=)
                          5: ug2lwdEDypbroUTh-MUKjX7xHxM.roa (hash: tzIgDVhwzntyEbgry33zKLqLx6I3KowYd/8dZ4T/e/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:48:59:d1:ba:2f:76:df:41:dc:41:46:2c:21:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
        Validity
            Not Before: Apr 17 00:00:34 2026 GMT
            Not After : Apr 18 00:00:34 2026 GMT
        Subject: CN=692ac968bdff945a272af9817cdba34d805d3176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:29:01:3f:24:c4:37:f9:b5:03:d8:5b:0f:18:
                    b3:da:ee:d0:42:2b:39:a7:23:77:6a:95:fa:c4:b8:
                    04:95:2f:84:23:46:ee:2a:40:b0:cf:e8:ff:87:73:
                    03:80:a6:3f:f7:2a:7b:1f:7e:08:de:87:77:9e:0e:
                    90:ac:fd:02:2a:03:1e:c9:2e:79:33:c3:d2:01:be:
                    06:76:e5:8f:9f:ee:b4:a3:69:be:96:f9:bb:47:bb:
                    09:f6:07:a3:12:9d:c9:bc:07:f3:0d:ef:99:03:90:
                    4c:2f:01:41:1e:f2:80:fc:e4:1f:5f:6e:02:e2:0d:
                    84:56:f0:2c:5b:8e:5d:96:a5:b4:68:5d:34:fd:65:
                    f0:e4:50:10:5c:f4:e9:c0:42:78:92:9d:9c:18:3c:
                    ed:7e:fb:82:40:1c:22:76:b8:ee:ae:64:8a:a5:4d:
                    87:b9:02:03:4f:74:13:6a:2d:f4:78:76:8b:85:c7:
                    0e:ad:35:5d:c1:3d:8f:aa:b7:de:08:11:5b:7c:48:
                    14:00:7f:5a:df:6f:40:38:33:8e:00:4c:9c:e4:71:
                    3a:67:f4:00:49:ed:73:04:4f:2e:b3:27:cb:07:46:
                    45:a2:67:e0:0d:81:95:55:0a:11:f4:c7:d2:73:6b:
                    51:cc:2d:c2:35:e4:b0:5e:97:f4:ac:42:fe:94:8d:
                    7c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2A:C9:68:BD:FF:94:5A:27:2A:F9:81:7C:DB:A3:4D:80:5D:31:76
            X509v3 Authority Key Identifier:
                keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:72:95:73:fa:bd:3f:0c:ba:e9:e8:69:27:f2:9e:a7:1e:ce:
         ba:da:1b:42:72:7d:83:50:39:ee:a4:d0:10:c7:10:cb:d1:dd:
         1e:20:c3:87:a1:e4:5b:df:a8:4b:14:75:25:56:e9:cf:36:8b:
         25:03:ae:40:fe:f2:45:02:db:9f:48:21:da:8d:5c:96:00:75:
         f3:1b:ef:0b:0b:84:23:a3:0a:9d:a7:93:23:7f:ea:c0:63:7b:
         af:90:3d:16:82:75:38:23:41:f6:ec:54:b3:4d:01:f0:bf:24:
         0a:f1:49:8e:8a:3e:d6:36:0a:65:11:c8:f6:55:90:4b:b1:5b:
         6f:8c:b5:fa:db:67:1c:97:d5:06:2a:89:fe:2f:59:f0:6c:8f:
         73:e5:9e:5a:2f:76:83:d4:26:fa:78:43:71:22:aa:a0:cf:9d:
         68:33:a7:b6:cb:d1:cf:47:11:35:ea:e7:96:ca:3d:d7:31:1e:
         73:29:3f:1d:89:19:ac:e7:38:d9:04:a0:05:68:80:39:20:68:
         f8:e4:40:9d:97:d4:a2:22:d2:cd:5b:3c:8e:63:dd:94:5d:6c:
         48:13:8e:83:d3:97:92:12:e7:89:e1:ab:d2:9a:e9:a8:06:23:
         87:d7:8a:61:82:68:d0:ee:4f:2c:0e:fb:68:d0:56:8c:39:28:
         a5:0d:a3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:52:28 2026 by rpki-client