Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
File:                     F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft (raw, json)
Hash identifier:          ZNaGqo0kwkQH4HoxUmWIFUfVkBszyjRitDxsk5pq8O8=
Subject key identifier:   B3:F1:D7:C6:45:7A:BD:A3:64:09:A6:7D:43:74:1C:90:E7:CF:17:00
Authority key identifier: 17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA
Certificate issuer:       /CN=178825286beec912d1988d08d2e277f518f3e4aa
Certificate serial:       019D9962BDBDF4AFAC7601AA5FF040467776
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 03:01:18 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:18 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:18 +0000
Files and hashes:         1: F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl (hash: PnJhJOBoHMpHSPFsNS6bjFiNF2580CK6ljmf/HPTFhw=)
                          2: wmdmBy36C4sioDSt5WqVrxm-63Q.roa (hash: 8wiUEWuLJryJwz/QF98ZWBdtlbwsuHHGLWCu3OM2RR8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:bd:bd:f4:af:ac:76:01:aa:5f:f0:40:46:77:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178825286beec912d1988d08d2e277f518f3e4aa
        Validity
            Not Before: Apr 17 03:01:18 2026 GMT
            Not After : Apr 18 03:01:18 2026 GMT
        Subject: CN=b3f1d7c6457abda36409a67d43741c90e7cf1700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:90:d7:0e:83:7c:fa:23:5a:e3:69:5f:3f:93:
                    32:ae:d4:7c:bf:c5:9b:57:d2:ac:0b:45:3a:75:13:
                    34:8e:e0:ec:f1:b0:e9:b9:74:65:93:f6:82:06:34:
                    2e:4f:81:d3:ab:bc:2a:1c:e2:24:de:33:6a:e0:0c:
                    66:3d:c6:1b:3a:b4:50:34:a2:bb:81:e9:93:91:74:
                    9f:fe:c9:fa:c6:71:b9:61:4c:be:4c:b6:84:12:8b:
                    dd:c4:5d:72:74:a3:72:3a:ba:84:52:09:28:28:41:
                    2d:83:c6:75:2e:11:f7:98:d7:6e:a8:fe:96:fa:ee:
                    74:6e:e5:55:2f:2b:71:99:5e:0c:1c:2c:94:7c:67:
                    e8:42:7e:09:2d:0a:f2:87:58:d1:ba:94:9f:10:3b:
                    fb:b0:4b:5e:bf:d5:29:8b:de:9f:c7:75:06:4b:fa:
                    ee:e1:f9:57:7b:be:60:e2:4f:0b:9e:be:4a:13:a2:
                    12:f3:e7:6d:55:db:5b:80:3f:40:c7:eb:dd:c7:0d:
                    fa:0b:f2:f9:f9:49:48:a0:b2:9e:d6:2f:29:08:ab:
                    4f:ac:f1:60:64:30:75:c6:fb:1f:ff:1c:c7:e3:7b:
                    42:06:29:b1:10:7d:3a:31:4c:1c:7f:83:af:18:e3:
                    8d:cb:d9:46:43:66:a1:23:e9:f6:06:e2:5c:78:ec:
                    30:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F1:D7:C6:45:7A:BD:A3:64:09:A6:7D:43:74:1C:90:E7:CF:17:00
            X509v3 Authority Key Identifier:
                keyid:17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:9c:1d:fc:29:73:65:4e:ee:42:8c:d9:9e:e4:21:59:5c:92:
         9e:f8:2b:5a:ba:40:da:39:e3:7d:ff:5d:a4:8d:b2:5f:01:91:
         65:3d:28:39:7a:a6:a6:6d:57:8f:42:3e:19:3c:0b:5f:6b:06:
         9c:cc:30:ff:c1:8d:b9:02:af:55:03:7b:a8:94:11:04:ca:37:
         32:a6:81:9b:d4:89:f0:ff:e3:1a:43:ef:e3:22:f2:8d:9a:0d:
         0c:b3:0b:b6:e6:29:35:75:72:12:fe:80:55:e7:3a:00:4c:be:
         85:12:8c:bc:e9:e6:9c:69:48:0a:d0:03:60:d7:09:e4:56:15:
         25:30:6e:79:84:df:ac:50:51:3b:0a:ae:52:17:48:d0:34:db:
         34:c7:b5:07:ba:82:92:8e:56:96:3a:eb:d9:50:e9:11:ce:14:
         22:55:2f:65:91:d5:d1:f5:e9:ad:ff:59:5d:4c:46:d5:51:6d:
         44:ed:e1:27:d6:7b:ad:62:0f:2b:63:03:0d:7c:8c:49:4c:a6:
         b4:6d:96:fa:18:6d:df:a7:80:9d:89:ea:b4:9d:bd:3e:b1:80:
         ff:70:dd:8d:5c:ef:f4:98:3b:d5:a4:b5:93:eb:e8:0f:aa:15:
         85:3d:6b:15:c2:d3:4c:30:0b:c0:c0:93:90:ce:56:4f:ea:07:
         c2:49:8a:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYr299K+sdgGqX/BARnd2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ODgyNTI4NmJlZWM5MTJkMTk4OGQwOGQyZTI3N2Y1MThm
M2U0YWEwHhcNMjYwNDE3MDMwMTE4WhcNMjYwNDE4MDMwMTE4WjAzMTEwLwYDVQQD
EyhiM2YxZDdjNjQ1N2FiZGEzNjQwOWE2N2Q0Mzc0MWM5MGU3Y2YxNzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpDXDoN8+iNa42lfP5MyrtR8v8Wb
V9KsC0U6dRM0juDs8bDpuXRlk/aCBjQuT4HTq7wqHOIk3jNq4AxmPcYbOrRQNKK7
gemTkXSf/sn6xnG5YUy+TLaEEovdxF1ydKNyOrqEUgkoKEEtg8Z1LhH3mNduqP6W
+u50buVVLytxmV4MHCyUfGfoQn4JLQryh1jRupSfEDv7sEtev9Upi96fx3UGS/ru
4flXe75g4k8Lnr5KE6IS8+dtVdtbgD9Ax+vdxw36C/L5+UlIoLKe1i8pCKtPrPFg
ZDB1xvsf/xzH43tCBimxEH06MUwcf4OvGOONy9lGQ2ahI+n2BuJceOwwUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPx18ZFer2jZAmmfUN0HJDnzxcAMB8GA1UdIwQY
MBaAFBeIJShr7skS0ZiNCNLid/UY8+SqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjRnbEtHdnV5UkxSbUkwSTB1SjM5Ump6NUtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lZmJiMDUtODk0MC00M2NmLWFkMWQt
MjhhY2M3ZjMxOTNhLzEvRjRnbEtHdnV5UkxSbUkwSTB1SjM5Ump6NUtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9lZmJiMDUtODk0MC00M2NmLWFkMWQtMjhhY2M3ZjMxOTNh
LzEvRjRnbEtHdnV5UkxSbUkwSTB1SjM5Ump6NUtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJwd/Clz
ZU7uQozZnuQhWVySnvgrWrpA2jnjff9dpI2yXwGRZT0oOXqmpm1Xj0I+GTwLX2sG
nMww/8GNuQKvVQN7qJQRBMo3MqaBm9SJ8P/jGkPv4yLyjZoNDLMLtuYpNXVyEv6A
Vec6AEy+hRKMvOnmnGlICtADYNcJ5FYVJTBueYTfrFBROwquUhdI0DTbNMe1B7qC
ko5Wljrr2VDpEc4UIlUvZZHV0fXprf9ZXUxG1VFtRO3hJ9Z7rWIPK2MDDXyMSUym
tG2W+hht36eAnYnqtJ29PrGA/3DdjVzv9Jg71aS1k+voD6oVhT1rFcLTTDALwMCT
kM5WT+oHwkmKJQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:32:54 2026 by rpki-client