Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
File:                     B9dTNfd79CQJdid7HdDhm7I6jh0.mft (raw, json)
Hash identifier:          ShVM9RLCWwNKNaWdjPjiTwNLcUAdM3P+zS3f2MRX+nY=
Subject key identifier:   34:73:2D:0E:17:D9:E6:59:DE:BB:85:F0:94:1D:9F:3F:EE:C8:4C:F0
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Certificate issuer:       /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial:       019D99D015E967B86FD3764B6F6D0BAF0FA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
Manifest number:          18C5
Signing time:             Fri 17 Apr 2026 05:00:44 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:44 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:44 +0000
Files and hashes:         1: B9dTNfd79CQJdid7HdDhm7I6jh0.crl (hash: 88cBpkkIKKai+xZ/sJ01OsYDVZhkqfJy4+1e5xn6Wjo=)
                          2: VuZOG8s543NfcGdXf57yIIrySJ8.roa (hash: Z7XKmPS1GYE3f8Q+rg/H8yChwaPlHaJspMgwTyoFFv0=)
                          3: sZxFDMEjV4E6bBsRgrZxjoy7_tk.roa (hash: zq0CNZddr6RR3XPpn+vNQeYgJJau/bg5D4OmfDaVY/s=)
                          4: tdeCucXFWGUBsGHwqe6hB6aeUEQ.roa (hash: enVyFjAXmV6jKlcwgcqYoRWX2/X4d1HEfq19dhiH9Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:15:e9:67:b8:6f:d3:76:4b:6f:6d:0b:af:0f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
        Validity
            Not Before: Apr 17 05:00:44 2026 GMT
            Not After : Apr 18 05:00:44 2026 GMT
        Subject: CN=34732d0e17d9e659debb85f0941d9f3feec84cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b5:6f:f8:74:db:26:b9:77:ff:b0:76:04:a2:
                    7f:54:b3:a7:43:5d:de:10:fa:e8:7e:ec:d0:69:96:
                    1a:d0:fa:e3:a6:5a:31:85:64:c5:7b:8c:5f:57:6e:
                    7a:3c:95:9f:0c:5b:75:a0:9a:d8:52:4d:88:2e:7d:
                    2f:33:a0:1e:dc:a4:47:70:4f:08:94:3f:21:d3:c4:
                    39:c8:20:c2:10:44:73:66:ee:0e:30:36:2b:ea:63:
                    3a:41:5a:d1:1e:b9:10:07:f6:b1:8b:67:d1:30:be:
                    fd:ee:39:48:a9:ae:25:f4:3c:96:eb:5a:cd:84:16:
                    9c:33:07:da:53:37:2d:01:e3:63:0b:00:d4:d2:3b:
                    05:fd:d8:b7:41:7e:18:71:44:04:22:e3:c7:a5:b7:
                    a7:8b:12:a0:1a:36:04:c2:40:b2:bb:79:58:97:54:
                    6e:2f:1c:ea:5a:ea:35:68:fb:8d:74:3c:42:e6:4c:
                    21:fb:78:c7:aa:74:90:b5:18:0b:fa:6f:53:a6:2e:
                    92:f3:61:ca:59:2d:73:c1:5c:55:46:f4:3b:ef:9d:
                    ab:f0:8d:7c:fb:dc:88:a7:cb:77:ea:71:95:af:3b:
                    71:4f:cd:2e:fe:a6:c5:23:a3:bf:c7:32:45:7a:7e:
                    de:9d:a5:54:cc:de:34:f0:96:96:b2:be:6b:27:f9:
                    37:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:73:2D:0E:17:D9:E6:59:DE:BB:85:F0:94:1D:9F:3F:EE:C8:4C:F0
            X509v3 Authority Key Identifier:
                keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:0e:bb:14:cf:b0:c4:12:6e:03:87:da:61:75:be:0d:4f:11:
         f6:c6:aa:7e:1a:73:91:fe:5b:5d:b6:3e:91:98:50:57:0f:b3:
         15:9c:39:fc:99:85:78:43:a0:26:20:ff:35:34:95:71:18:a4:
         bb:18:1d:18:8a:be:ef:04:17:0d:23:68:37:83:36:de:54:25:
         20:a5:ee:b1:65:84:99:b4:a4:cd:48:f8:a4:ca:30:27:8d:d1:
         9a:fc:c5:90:1b:6f:8e:d5:43:e2:e3:76:41:8b:3b:90:d7:fc:
         02:a6:bd:b1:40:f8:fd:18:43:0e:17:45:e9:61:57:73:95:ac:
         6b:a2:0d:4c:d0:53:b1:ac:60:98:46:b3:42:9f:31:24:4a:8c:
         9b:09:d0:13:f2:99:26:ba:74:13:b2:47:72:4f:b0:66:43:08:
         82:f9:87:62:8f:3a:5c:3d:65:ff:8d:d6:79:57:7e:92:e9:3d:
         d7:7c:af:0e:5f:05:dd:5b:96:e5:f5:6c:8c:17:2a:79:cd:a2:
         e0:85:30:cb:c6:ba:31:48:f9:3c:4c:7e:dd:e5:a7:fb:83:eb:
         0b:7d:83:30:1d:ef:91:57:6d:1e:77:cb:f6:94:67:91:0b:79:
         3e:d6:53:e1:c7:dc:86:9e:e5:f7:8d:95:68:f9:5e:00:cc:82:
         ce:97:8d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:03 2026 by rpki-client