Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
File:                     V3EfIIg6YrwGORunslgs5ys_6Rw.mft (raw, json)
Hash identifier:          CSTLmH90pFg5KjGHe0qhBxtX55G/y93vb2GqgPQ0C5Y=
Subject key identifier:   0F:47:EB:6B:6F:02:09:5D:D6:F1:B1:E6:D9:77:C7:06:61:D6:BF:7D
Authority key identifier: 57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C
Certificate issuer:       /CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
Certificate serial:       019D98BDDEC106A41187CFAF261B1A57A3CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
Manifest number:          14A8
Signing time:             Fri 17 Apr 2026 00:01:13 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:13 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:13 +0000
Files and hashes:         1: FYrxidhhtPiG6AB9OzYcqk5p8Aw.roa (hash: mzI1U2535anRJzFg3sJ4dHBKcfZC4WY6B6B0DzwBsDM=)
                          2: V3EfIIg6YrwGORunslgs5ys_6Rw.crl (hash: wW4YmiDYcfUAz9NfOgJBlPB9PT4jBFnLZ5BrjObaOlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:de:c1:06:a4:11:87:cf:af:26:1b:1a:57:a3:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
        Validity
            Not Before: Apr 17 00:01:13 2026 GMT
            Not After : Apr 18 00:01:13 2026 GMT
        Subject: CN=0f47eb6b6f02095dd6f1b1e6d977c70661d6bf7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d4:53:09:f9:f7:b8:3a:2a:75:85:ab:c8:d5:
                    76:8b:52:99:63:b7:cb:d9:58:1e:68:59:03:25:b1:
                    8e:1e:51:99:6f:07:9e:60:a0:af:ea:4f:a5:51:f1:
                    74:85:e4:d7:92:d5:d6:c3:2b:fc:e5:06:ca:cd:93:
                    15:1f:d6:aa:51:cd:da:7d:e7:8f:c5:03:4b:27:cf:
                    4a:dc:cb:ab:7a:da:45:0b:b2:c8:f5:1e:be:90:5a:
                    62:a7:79:36:ec:2c:7a:45:87:c5:98:41:ae:2a:eb:
                    8f:6d:e1:12:56:90:64:5c:4f:bd:dc:4e:53:00:60:
                    da:93:96:30:9e:f5:c4:5b:f2:c5:76:25:94:37:17:
                    46:a2:09:66:ca:9a:f2:b6:59:ea:34:91:d5:a6:1f:
                    46:5c:ee:87:ac:56:ae:9f:6b:28:f4:c6:b1:8e:46:
                    b1:e0:30:e3:81:89:cc:ab:98:54:1c:22:56:cc:ce:
                    43:9d:bd:cc:77:0b:fc:f8:a6:7b:63:d6:3e:2a:96:
                    e3:ef:da:72:10:ac:9e:bb:f8:71:78:e3:df:36:b5:
                    63:c9:98:e9:c4:66:6b:31:18:23:0d:3f:ef:78:21:
                    d0:02:ca:7c:c0:e7:42:0c:26:4d:5f:08:27:d5:31:
                    b0:3d:03:7e:76:22:a9:89:95:2e:dd:2e:ab:bd:af:
                    cb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:47:EB:6B:6F:02:09:5D:D6:F1:B1:E6:D9:77:C7:06:61:D6:BF:7D
            X509v3 Authority Key Identifier:
                keyid:57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:6e:a7:b2:5e:ac:e6:f2:a0:20:e5:9f:a7:fc:b5:fb:86:80:
         19:89:51:72:ae:f6:58:9d:bb:20:28:b0:76:7b:01:36:c8:c0:
         f3:ee:8e:22:14:27:1b:a6:7e:98:2a:0d:60:22:c6:9e:72:48:
         62:9b:dc:4f:e0:d4:ed:b4:5d:ba:58:94:55:11:95:a2:c7:e4:
         a1:e9:83:88:04:be:9b:2f:38:b8:05:13:94:c1:82:1a:9a:55:
         13:aa:ef:78:2f:89:99:ef:7f:78:4f:83:7b:35:f5:bc:af:a2:
         48:88:33:b5:c5:06:e3:52:64:83:af:73:2e:89:fa:05:e4:80:
         90:df:4d:37:78:53:d1:c4:61:62:b1:33:91:19:6c:98:79:e6:
         80:4c:fe:1b:65:99:d6:17:8c:4b:e3:67:81:18:7f:8c:4d:4d:
         0b:48:02:c6:95:d4:1f:17:7d:71:24:d7:e6:f9:63:c2:8a:49:
         16:b6:31:c5:c9:b3:80:f7:1c:f1:51:8e:1c:2d:51:7b:5b:c2:
         41:c1:5d:6e:f5:76:96:24:72:20:25:82:5f:6e:bb:83:16:08:
         bc:84:46:7f:9d:1c:74:27:f3:fb:67:17:71:fd:43:13:d9:66:
         85:fc:d6:06:f5:87:60:3f:ea:28:a0:da:d4:91:6e:6e:8e:12:
         d0:5b:ca:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yvd7BBqQRh8+vJhsaV6POMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NzExZjIwODgzYTYyYmMwNjM5MWJhN2IyNTgyY2U3MmIz
ZmU5MWMwHhcNMjYwNDE3MDAwMTEzWhcNMjYwNDE4MDAwMTEzWjAzMTEwLwYDVQQD
EygwZjQ3ZWI2YjZmMDIwOTVkZDZmMWIxZTZkOTc3YzcwNjYxZDZiZjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptRTCfn3uDoqdYWryNV2i1KZY7fL
2VgeaFkDJbGOHlGZbweeYKCv6k+lUfF0heTXktXWwyv85QbKzZMVH9aqUc3afeeP
xQNLJ89K3MuretpFC7LI9R6+kFpip3k27Cx6RYfFmEGuKuuPbeESVpBkXE+93E5T
AGDak5YwnvXEW/LFdiWUNxdGoglmyprytlnqNJHVph9GXO6HrFaun2so9Maxjkax
4DDjgYnMq5hUHCJWzM5Dnb3Mdwv8+KZ7Y9Y+Kpbj79pyEKyeu/hxeOPfNrVjyZjp
xGZrMRgjDT/veCHQAsp8wOdCDCZNXwgn1TGwPQN+diKpiZUu3S6rva/LUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9H62tvAgld1vGx5tl3xwZh1r99MB8GA1UdIwQY
MBaAFFdxHyCIOmK8Bjkbp7JYLOcrP+kcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjNFZklJZzZZcndHT1J1bnNsZ3M1eXNfNlJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kMmIwYWEtMjYzNi00ZWVjLWExZTMt
NzE0ZDE5NThiNzdiLzEvVjNFZklJZzZZcndHT1J1bnNsZ3M1eXNfNlJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9kMmIwYWEtMjYzNi00ZWVjLWExZTMtNzE0ZDE5NThiNzdi
LzEvVjNFZklJZzZZcndHT1J1bnNsZ3M1eXNfNlJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmW6nsl6s
5vKgIOWfp/y1+4aAGYlRcq72WJ27ICiwdnsBNsjA8+6OIhQnG6Z+mCoNYCLGnnJI
YpvcT+DU7bRduliUVRGVosfkoemDiAS+my84uAUTlMGCGppVE6rveC+Jme9/eE+D
ezX1vK+iSIgztcUG41Jkg69zLon6BeSAkN9NN3hT0cRhYrEzkRlsmHnmgEz+G2WZ
1heMS+NngRh/jE1NC0gCxpXUHxd9cSTX5vljwopJFrYxxcmzgPcc8VGOHC1Re1vC
QcFdbvV2liRyICWCX267gxYIvIRGf50cdCfz+2cXcf1DE9lmhfzWBvWHYD/qKKDa
1JFubo4S0FvKrg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:07:41 2026 by rpki-client