Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
File:                     S3tzzZvRdD99P17GvVChk170gB4.mft (raw, json)
Hash identifier:          x66TgFztuKay9X/0hi2+ExMNYqjBc9CmAA0Tf97PSJE=
Subject key identifier:   07:34:2B:93:9B:AF:B5:EA:72:0F:C3:66:AF:9E:A0:98:20:38:25:A7
Authority key identifier: 4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
Certificate issuer:       /CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Certificate serial:       019D99D01890D534DAE6121B0573C236E510
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
Manifest number:          1851
Signing time:             Fri 17 Apr 2026 05:00:44 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:44 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:44 +0000
Files and hashes:         1: S3tzzZvRdD99P17GvVChk170gB4.crl (hash: dRsLc31BFC3XCC8pyobJWNEzHoMeRd/4iOKQ/Rn0Fag=)
                          2: eng9RYXhOr-5HaI5uOyelA6wzbc.roa (hash: LlIBH4V68aJMu/FCHYy8zCpNmTkO2PE9LFtoa1D1JsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:18:90:d5:34:da:e6:12:1b:05:73:c2:36:e5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
        Validity
            Not Before: Apr 17 05:00:44 2026 GMT
            Not After : Apr 18 05:00:44 2026 GMT
        Subject: CN=07342b939bafb5ea720fc366af9ea098203825a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:14:c9:79:05:65:ef:54:ae:92:4e:22:67:a7:
                    32:16:1c:54:7d:4d:19:30:78:4f:ca:0e:73:25:ac:
                    65:a8:bc:be:01:09:ce:95:e6:8e:04:48:fe:35:f2:
                    05:f9:7f:65:83:a0:55:f3:72:fa:a5:45:35:fb:06:
                    30:89:14:b5:05:42:43:b5:75:1a:ee:53:0f:27:77:
                    30:93:6c:2e:c6:78:69:14:0e:7b:f7:33:f9:57:b6:
                    b5:73:83:b7:e4:65:19:7f:72:29:0f:e7:c5:25:06:
                    a5:e1:fe:dd:2e:59:14:e6:eb:04:59:45:d2:f6:ec:
                    24:94:b4:be:ba:c8:5f:53:cc:80:64:35:d7:aa:61:
                    f2:a2:13:9d:92:ce:f6:1c:53:f9:df:97:db:c5:55:
                    6d:fa:56:28:8a:21:3d:60:98:f2:8c:82:63:7c:21:
                    ae:07:43:86:f7:ec:e3:21:6e:7f:64:5f:93:0b:89:
                    84:68:36:a0:01:dc:26:93:fb:ea:db:dd:dd:ca:b2:
                    2c:30:b6:24:13:d6:48:13:1d:03:1d:29:92:22:6e:
                    f2:7b:94:53:0a:0a:2e:35:93:9a:7f:c2:fa:6e:6a:
                    44:4e:53:50:d5:9d:9c:fa:fc:d7:f2:e6:50:e1:d6:
                    5e:41:82:04:76:fc:ab:7c:21:f1:5b:0c:b0:f2:d5:
                    8d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:34:2B:93:9B:AF:B5:EA:72:0F:C3:66:AF:9E:A0:98:20:38:25:A7
            X509v3 Authority Key Identifier:
                keyid:4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:96:e2:15:56:a9:b6:e3:f7:06:0b:8f:df:6b:2b:19:c5:a4:
         70:fd:0f:7a:c9:3e:3f:a6:6e:99:0b:7c:2d:45:a8:a8:33:b6:
         a9:d3:ac:d6:a9:58:66:ab:5f:82:86:98:50:87:e0:22:19:63:
         8c:ff:ca:63:e9:2c:a7:97:a1:cd:1c:01:c7:74:92:fc:a3:4b:
         eb:53:ce:f9:e6:53:b4:5e:95:6d:6b:c3:58:af:62:b7:64:16:
         3d:1f:bf:8f:6a:4b:bc:82:85:76:f5:4d:2d:47:52:64:fb:41:
         37:c2:36:0d:11:3d:63:63:d8:5c:a2:10:60:53:b0:12:56:f5:
         61:8e:69:a4:98:c7:0c:58:ee:b4:05:e8:ff:de:6a:79:99:0a:
         db:48:1e:68:9f:9e:85:3b:7a:1e:81:28:87:0f:3a:d5:30:bc:
         28:d5:a1:2a:13:3b:63:43:dc:f0:97:1a:8a:77:34:86:b8:c4:
         a0:e8:bc:c8:ed:32:8b:f2:08:53:79:06:13:9f:47:d6:d7:bf:
         7a:dd:8a:57:b3:6f:a4:d6:34:40:63:03:29:64:19:d0:47:d4:
         76:7f:df:a8:00:94:c4:38:64:db:85:f3:ac:e5:29:48:59:96:
         e0:c7:30:b4:c0:e8:4c:ea:fd:2e:fd:99:6a:5c:6c:b3:8b:9b:
         81:80:75:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:52:33 2026 by rpki-client