Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
File:                     1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft (raw, json)
Hash identifier:          ouHNQWvPHfHl6sPJW3v54MxLz2Rn4dpZuVeFD4vNBTM=
Subject key identifier:   6B:A5:94:4A:65:4F:41:03:86:99:A4:90:19:03:12:51:B5:2B:42:EC
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Certificate issuer:       /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial:       019D9C2D692C23B35B1383D57C1F62D1E20A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
Manifest number:          18F9
Signing time:             Fri 17 Apr 2026 16:01:54 +0000
Manifest this update:     Fri 17 Apr 2026 16:01:54 +0000
Manifest next update:     Sat 18 Apr 2026 16:01:54 +0000
Files and hashes:         1: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl (hash: +lDcVoIe6F90pPgunm3CpSwmKgVvyQW+tjs5IOr2lRw=)
                          2: Uznpkkv0JYkSUm9kbpD4n2vwDL4.roa (hash: 88Ax8PWskGYROIxixKAI4HTq+EJ3yI4/MFKViDiNQbE=)
                          3: q-8noEh6b2f7clZvsd5WphsHq0A.roa (hash: Pn5ZPx0J/yGGt821PM9wYpMm6lTxTXU+s7PYclcgTP8=)
                          4: z0K00AN-ZgTId0zC9FJ6gcAWYK0.roa (hash: y8/IKYI2cz+f6Y+MV/xDeMY/QgAZYAuPdjWIF/6Q5+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2d:69:2c:23:b3:5b:13:83:d5:7c:1f:62:d1:e2:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
        Validity
            Not Before: Apr 17 16:01:54 2026 GMT
            Not After : Apr 18 16:01:54 2026 GMT
        Subject: CN=6ba5944a654f41038699a49019031251b52b42ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3a:39:45:7f:96:2e:11:3e:c0:c9:cf:64:24:
                    bf:65:29:c1:f4:c5:08:98:b4:55:19:eb:54:4d:c2:
                    66:d1:40:a8:5f:a4:0a:e9:59:b1:dd:ba:96:53:a7:
                    47:0c:f8:30:ee:1f:89:b8:6e:8f:e8:77:78:48:96:
                    60:05:87:f0:46:4b:25:92:cd:0d:93:84:09:5a:a4:
                    8e:d5:99:c2:f9:aa:0a:7f:f4:6c:ee:dc:cf:c8:81:
                    e9:85:52:8e:c7:8e:dd:3d:ad:3c:a9:40:c5:fd:c4:
                    eb:84:c4:22:1d:0b:6f:63:90:30:ac:4f:3b:e4:9d:
                    86:18:d1:c0:b3:11:25:47:75:ce:8c:74:35:e3:4a:
                    a4:68:2c:6a:06:b9:58:76:53:e4:78:7d:74:01:c8:
                    39:76:5c:b8:04:33:ca:02:b1:3c:47:34:e0:16:5d:
                    e9:0c:c1:4e:f1:c1:24:3e:24:88:40:5a:42:1c:cb:
                    0d:c2:7e:c5:1a:09:09:be:e9:f3:51:87:af:af:86:
                    37:a8:50:bf:f3:8e:a9:0d:2b:4f:fc:47:ae:a7:52:
                    7e:81:31:93:be:d8:e2:31:6f:56:ef:62:f2:f1:3c:
                    ed:57:c1:b1:04:83:99:5d:05:02:6c:05:8b:df:d1:
                    e3:8b:6e:d5:bd:4a:6c:bf:a8:46:c4:d2:16:37:14:
                    a2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A5:94:4A:65:4F:41:03:86:99:A4:90:19:03:12:51:B5:2B:42:EC
            X509v3 Authority Key Identifier:
                keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d8:6f:df:73:06:0c:67:8c:86:c4:26:76:20:3b:ba:50:c4:
         03:a6:52:b2:6a:ee:ed:f6:87:33:69:aa:52:b3:f0:a2:c1:75:
         99:10:82:b0:25:70:34:de:0c:41:4b:b3:7d:5b:8f:62:47:76:
         4e:5b:81:1d:11:b6:35:e0:50:e4:ba:70:71:71:24:33:fe:87:
         80:1b:e3:55:1a:2d:47:5f:a4:de:6d:33:30:aa:cf:13:00:63:
         93:e3:41:2c:6f:6c:71:84:ae:fd:5c:fb:28:6e:8a:76:b2:d5:
         05:18:2e:b9:49:2e:60:72:73:33:42:2c:39:be:38:1f:c6:c7:
         1f:32:9b:ac:af:6d:0b:08:b4:fa:bd:0c:e8:2a:a2:d8:cf:36:
         a0:f7:b4:da:ad:5c:37:45:32:c0:0e:ea:83:3d:22:2b:8f:de:
         59:13:19:25:76:17:83:2d:37:0e:eb:f2:13:50:a4:8f:16:1d:
         5b:59:b1:8b:9c:3c:80:06:ee:67:30:5a:31:bb:1d:36:de:46:
         4e:08:a8:ba:71:91:38:a3:c7:a6:c3:ba:87:23:dd:75:c6:36:
         29:0f:2f:0a:03:49:b3:c0:7b:cf:3f:ca:0c:8a:11:30:9b:89:
         46:7f:bf:6a:7f:cc:a9:33:de:dd:9e:e5:b0:b1:b4:91:23:c2:
         1c:e5:8b:bd
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2cLWksI7NbE4PVfB9i0eIKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhM2QwYmMxMWIyOWRhNDRhZDU3MzA0YzNmODU2ODg3MGEw
MTljMjQwHhcNMjYwNDE3MTYwMTU0WhcNMjYwNDE4MTYwMTU0WjAzMTEwLwYDVQQD
Eyg2YmE1OTQ0YTY1NGY0MTAzODY5OWE0OTAxOTAzMTI1MWI1MmI0MmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzo5RX+WLhE+wMnPZCS/ZSnB9MUI
mLRVGetUTcJm0UCoX6QK6Vmx3bqWU6dHDPgw7h+JuG6P6Hd4SJZgBYfwRkslks0N
k4QJWqSO1ZnC+aoKf/Rs7tzPyIHphVKOx47dPa08qUDF/cTrhMQiHQtvY5AwrE87
5J2GGNHAsxElR3XOjHQ140qkaCxqBrlYdlPkeH10Acg5dly4BDPKArE8RzTgFl3p
DMFO8cEkPiSIQFpCHMsNwn7FGgkJvunzUYevr4Y3qFC/846pDStP/Eeup1J+gTGT
vtjiMW9W72Ly8TztV8GxBIOZXQUCbAWL39Hji27VvUpsv6hGxNIWNxSi5wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGullEplT0EDhpmkkBkDElG1K0LsMB8GA1UdIwQY
MBaAFPo9C8EbKdpErVcwTD+FaIcKAZwkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qMEx3UnNwMmtTdFZ6Qk1QNFZvaHdvQm5DUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1
LWQyMTA3MWVmNzM1Yi8xLzEtajBMd1JzcDJrU3RWekJNUDRWb2h3b0JuQ1EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2MzL2FhNjYyOS1kMTQ5LTQxOTctYTMxNS1kMjEwNzFlZjcz
NWIvMS8xLWowTHdSc3Aya1N0VnpCTVA0Vm9od29CbkNRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIthv
33MGDGeMhsQmdiA7ulDEA6ZSsmru7faHM2mqUrPwosF1mRCCsCVwNN4MQUuzfVuP
Ykd2TluBHRG2NeBQ5LpwcXEkM/6HgBvjVRotR1+k3m0zMKrPEwBjk+NBLG9scYSu
/Vz7KG6KdrLVBRguuUkuYHJzM0IsOb44H8bHHzKbrK9tCwi0+r0M6Cqi2M82oPe0
2q1cN0UywA7qgz0iK4/eWRMZJXYXgy03DuvyE1CkjxYdW1mxi5w8gAbuZzBaMbsd
Nt5GTgiounGROKPHpsO6hyPddcY2KQ8vCgNJs8B7zz/KDIoRMJuJRn+/an/MqTPe
3Z7lsLG0kSPCHOWLvQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:37:41 2026 by rpki-client