Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
File:                     CxxtDecMxRgFtjpeIydiJSXQdbE.mft (raw, json)
Hash identifier:          Q/ZRriCabmlslssAufwCCIeyS2Dc9HBTErzWzr+AzLc=
Subject key identifier:   F9:B2:5E:91:68:23:16:0F:EF:07:47:3A:5A:04:F8:0A:8C:B8:78:BB
Authority key identifier: 0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
Certificate issuer:       /CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Certificate serial:       019D988652142B44FBC3B5F7F9D889BAACC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
Manifest number:          0A46
Signing time:             Thu 16 Apr 2026 23:00:32 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:32 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:32 +0000
Files and hashes:         1: CxxtDecMxRgFtjpeIydiJSXQdbE.crl (hash: 9MbT1EzsFOOxPNzbhM4rg1UaBfaihbnCpbkHpmYlsXA=)
                          2: JjNsdw31mkopTJEXLbd7F3jftjY.roa (hash: DFuBhTTsIvaSw7xpZBBqOn0fJhT7O4EMyfeXK8BYOr4=)
                          3: Z3vCIqOr8cFIHfCAG87UHRnj4gs.roa (hash: Nj8uppubigdG8cIGJW1LyHCqaPIHngDL7HFSlaeDITs=)
                          4: jN1MNJJzz6nkhurADJXEP9ytqmM.roa (hash: GRqEsDxhV3ugvj9OHpXpUsMc7ljdeWmRso4kAcjjsao=)
                          5: omXxQha0HM-pJ0TV0_0uSHRjPXE.roa (hash: Jj3CyBugiBkfT/V/5P2VA5GoJM48HMeye5aq9QG9uls=)
                          6: ps5j8iyfZH5bJ04s3Df24Oa-Z90.roa (hash: 561YCOwWidkLUNxZ27ftIMouBGOfKq4wJsC6Y9JLTu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:52:14:2b:44:fb:c3:b5:f7:f9:d8:89:ba:ac:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
        Validity
            Not Before: Apr 16 23:00:32 2026 GMT
            Not After : Apr 17 23:00:32 2026 GMT
        Subject: CN=f9b25e916823160fef07473a5a04f80a8cb878bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:64:0e:9b:90:13:3b:f2:c2:2a:3c:c8:42:5b:
                    79:9e:6a:82:0e:45:4b:0a:34:88:48:77:8c:94:c9:
                    0e:8c:4e:7d:f1:ba:8c:06:b9:f5:f7:ea:2e:a1:f5:
                    84:38:7c:df:b3:76:96:db:9d:23:83:06:b2:91:f6:
                    77:77:d3:da:9b:05:b9:33:7b:1b:0c:83:7e:76:20:
                    b8:a7:8b:7f:b1:1d:85:26:e7:34:5c:d2:2e:79:61:
                    7f:a2:67:62:07:6f:82:22:1a:53:3b:59:2c:ab:30:
                    78:bb:4b:da:64:8f:40:79:01:d1:f9:90:87:6b:78:
                    26:dc:a0:cb:00:30:18:d5:bd:59:cd:67:5e:9f:70:
                    f4:0a:ae:bd:b3:d5:0a:38:96:a8:9b:7c:82:11:52:
                    50:db:7e:c0:25:9f:7d:97:fb:6d:f7:2d:ee:91:5a:
                    96:58:9f:8a:9c:b2:10:08:b2:51:74:29:5e:a4:31:
                    18:a7:bd:a7:10:af:4a:d2:12:67:6e:9d:f4:c8:0c:
                    1d:e7:76:56:9a:42:5a:6e:e4:b7:3a:ad:5b:08:3d:
                    c2:a9:cf:de:22:9c:a4:1a:be:72:2d:72:c8:2d:ff:
                    27:46:22:17:d3:d9:4a:4a:51:35:f7:c9:19:cc:8f:
                    42:8c:cd:23:be:1b:dd:fe:af:1f:c7:d4:60:bc:37:
                    3e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B2:5E:91:68:23:16:0F:EF:07:47:3A:5A:04:F8:0A:8C:B8:78:BB
            X509v3 Authority Key Identifier:
                keyid:0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:5a:6d:bc:e4:8b:d3:99:e2:41:6a:04:33:78:21:af:8d:38:
         c8:50:62:d7:af:4d:90:2f:d8:7b:e7:d3:c3:ba:83:7d:a5:b4:
         31:d9:de:80:3f:06:a0:dc:52:1f:60:89:e8:a0:f3:37:b7:fa:
         15:c3:34:51:43:96:8e:a8:d2:91:0f:32:cb:af:c2:7b:d3:04:
         ee:ac:b7:16:5b:02:4e:66:ac:bc:31:4f:f9:b7:2d:10:c2:d4:
         70:b0:53:33:eb:11:99:7e:e5:9b:31:06:85:5b:83:0e:ad:85:
         67:0f:d7:1d:e7:22:fb:17:e5:55:e1:42:b5:2d:63:61:8d:d1:
         f3:3e:8c:9b:62:40:a4:b9:f5:28:57:62:31:07:3f:4f:19:e8:
         f8:73:78:80:65:e0:c5:24:ea:76:7a:f5:b5:60:c9:cc:50:4e:
         77:79:84:ba:32:bc:ca:30:08:5b:27:08:6a:f8:4f:59:1e:24:
         d3:8c:60:07:9b:f0:91:69:df:8c:19:2d:3b:f3:2c:0e:36:a9:
         42:7f:43:52:46:93:17:50:17:13:3c:cc:4b:83:3f:bc:43:d5:
         a3:42:0f:94:74:c0:81:04:78:a6:59:ba:7d:fb:58:c6:8d:82:
         25:6d:47:05:91:5a:84:da:c1:e2:64:57:e5:ef:3d:2b:a7:75:
         c9:8d:e0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:27:18 2026 by rpki-client