Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
File:                     1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft (raw, json)
Hash identifier:          I7FmGrhPVIMu41BHFKKFo400XFALR2M+ZQbSLjK5ZcQ=
Subject key identifier:   13:5E:21:D2:2B:77:A8:68:2D:AC:52:6A:8C:3F:35:6E:7D:F3:32:19
Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
Certificate issuer:       /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Certificate serial:       019D992B34C87F7E14D61DE173729C3952C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
Manifest number:          18C5
Signing time:             Fri 17 Apr 2026 02:00:38 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:38 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:38 +0000
Files and hashes:         1: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl (hash: KmXzPX+IpdF+vex0gjIM15FXmj0AGj9fksQ7W1sdRr8=)
                          2: IJjjXp-NnXkuXMqifqVCpQIFmVM.roa (hash: FAQDxmr60QdwQ78woSv2S5TsR/jufKqQ3EBTR4pkvxw=)
                          3: QJ9BmvbVTtS7A8Ks_kSD4dd3-hw.roa (hash: YikTmuc2uFJ3g6A35GBcQPgqdQmjHo//OB0ZeNSHvUk=)
                          4: x7kr8s7NqU4B3f01PUE6TDdXkmw.roa (hash: D0Z4Gt2OJKdDOlJ+V6cYS0q2kZL9EpP1fRqlwgKU8FE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:34:c8:7f:7e:14:d6:1d:e1:73:72:9c:39:52:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
        Validity
            Not Before: Apr 17 02:00:38 2026 GMT
            Not After : Apr 18 02:00:38 2026 GMT
        Subject: CN=135e21d22b77a8682dac526a8c3f356e7df33219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b1:23:04:63:e9:a4:e0:73:de:13:3f:98:e0:
                    03:ba:01:30:21:7d:97:b9:16:8a:10:d7:e1:0c:e0:
                    16:35:4b:a9:ce:3c:5e:4d:c3:17:1d:fd:d4:3e:72:
                    8e:d6:29:67:73:c0:28:8c:2e:7a:88:77:42:d4:65:
                    f0:bc:54:0e:d1:ee:d3:01:5b:3c:b8:67:db:64:9c:
                    3f:94:70:8d:ee:d8:41:8d:08:cc:9c:37:95:cd:36:
                    f1:e7:85:f0:30:38:2f:d9:e3:e9:24:39:50:06:93:
                    77:38:52:3c:c6:ff:3e:7d:b5:7b:56:5a:39:8a:44:
                    9e:ae:2a:fa:34:20:39:b2:99:92:97:b2:16:09:9f:
                    37:51:00:58:79:26:ce:c9:88:bf:09:30:4c:73:40:
                    ad:ac:0b:f8:ca:86:10:78:f3:4a:3e:5e:6b:5a:fd:
                    4a:99:06:29:63:4c:ec:75:5f:bb:01:fa:83:93:1c:
                    67:12:4f:8f:b4:82:c4:e2:54:67:0e:9b:10:1b:83:
                    2d:dd:7a:34:bc:b8:d9:c6:cd:9d:5a:63:18:f1:b8:
                    a6:d6:f1:6a:ae:31:47:fe:97:98:08:01:9f:7d:bc:
                    73:0a:28:ab:07:4d:45:df:94:28:bf:06:f3:6c:11:
                    17:a0:7e:d7:87:81:42:fa:58:50:9e:f5:40:bb:8b:
                    36:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5E:21:D2:2B:77:A8:68:2D:AC:52:6A:8C:3F:35:6E:7D:F3:32:19
            X509v3 Authority Key Identifier:
                keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:d0:e7:52:b9:1c:7a:3f:5b:eb:38:89:90:ab:d7:61:ca:0a:
         11:98:c1:42:52:bf:e3:13:c4:49:83:b3:fe:ee:89:ba:a5:ae:
         00:e1:c3:77:36:45:5c:82:b0:87:03:a0:87:b5:4f:eb:bf:e3:
         91:0b:d0:13:77:1a:18:57:6c:42:f2:70:5b:9e:97:59:a2:e9:
         75:3d:34:8e:6c:e0:aa:8f:ef:d5:a0:0f:b8:2a:0e:8d:07:43:
         3e:9c:5c:77:97:b0:b5:99:7f:3e:bd:ac:5d:db:db:45:51:bc:
         e8:b8:ad:15:4b:0a:3b:f9:e1:37:38:40:1e:c2:e6:71:ed:85:
         8b:ce:35:2b:a9:38:8f:03:ea:7f:9f:64:02:64:11:95:b9:de:
         cb:b8:d6:39:58:9a:62:da:71:98:b5:7a:33:e9:00:a4:05:34:
         e1:49:ec:ea:7f:2a:e5:90:e6:fa:08:8f:82:65:a1:ed:8f:a1:
         80:8f:60:a8:69:98:4d:c7:80:67:06:1a:05:22:b9:f9:a4:45:
         56:01:72:58:a0:6c:c7:ae:e3:47:99:d7:53:2a:e3:92:36:4e:
         20:72:00:21:e6:b9:3b:95:f8:80:95:af:bd:66:50:aa:f3:4b:
         eb:8b:fa:b8:73:7a:bb:9a:ad:d2:1f:e3:85:f8:c1:e0:da:42:
         f0:6a:97:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:10 2026 by rpki-client