Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
File:                     ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft (raw, json)
Hash identifier:          i/NwvAhn2c/GHBwP06+vaCEPPJ0YOAmiGtFn96mhFYo=
Subject key identifier:   34:5E:2A:8D:8F:82:C8:3C:C7:0E:A0:24:EB:36:5E:F9:C4:20:EA:DB
Authority key identifier: 44:EC:ED:E7:E0:FF:BD:30:8A:CB:91:12:13:68:DF:8D:6C:B2:E9:61
Certificate issuer:       /CN=44ecede7e0ffbd308acb91121368df8d6cb2e961
Certificate serial:       019D9962EEE13318FE5C0737160C458176E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
Manifest number:          18BF
Signing time:             Fri 17 Apr 2026 03:01:30 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:30 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:30 +0000
Files and hashes:         1: ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl (hash: d9/21MVaz3ZJi9TN7aMqCyUt54JrwcI8zQPNt745wj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:ee:e1:33:18:fe:5c:07:37:16:0c:45:81:76:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44ecede7e0ffbd308acb91121368df8d6cb2e961
        Validity
            Not Before: Apr 17 03:01:30 2026 GMT
            Not After : Apr 18 03:01:30 2026 GMT
        Subject: CN=345e2a8d8f82c83cc70ea024eb365ef9c420eadb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:03:2b:e9:ca:dc:33:6f:26:37:54:1a:73:98:
                    6e:48:18:e1:89:75:6f:af:34:b2:2e:50:46:80:92:
                    41:ce:00:53:08:5e:4b:8e:87:43:e7:fe:5e:3d:1a:
                    fc:80:37:1c:f0:59:ed:16:e7:64:b7:96:5a:e3:e0:
                    27:66:50:3b:4f:6b:e2:6b:f2:a5:cf:fc:94:62:27:
                    3b:5b:43:67:57:4e:9a:d3:cf:00:f2:49:02:cb:c8:
                    3a:3b:35:10:6c:4c:dc:2f:af:12:27:27:91:bb:ae:
                    70:00:74:33:b7:33:92:ef:4d:8d:bf:53:17:7f:f8:
                    42:0c:02:68:91:1c:17:ed:5e:7a:98:b6:79:6f:b1:
                    fa:d5:af:76:71:8a:16:f7:a1:dd:c2:e4:bd:c8:fb:
                    ef:15:2b:14:fe:8b:ca:6c:5a:a2:0a:fc:92:dd:a8:
                    b9:50:31:ea:0b:c6:be:b4:10:47:4a:e3:43:8a:e0:
                    2e:33:75:f4:8b:f9:ef:a8:17:95:c7:5d:08:55:24:
                    b2:46:27:5f:26:d2:e1:48:70:49:d6:2a:30:37:51:
                    fc:70:bc:39:ac:28:59:4d:e8:f4:93:3d:f9:cb:f4:
                    eb:03:a6:cd:d1:ce:8f:c3:41:57:d4:74:6a:e7:c1:
                    05:3e:3e:e7:9c:78:a1:13:84:2c:d0:ff:3a:d7:1c:
                    ac:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5E:2A:8D:8F:82:C8:3C:C7:0E:A0:24:EB:36:5E:F9:C4:20:EA:DB
            X509v3 Authority Key Identifier:
                keyid:44:EC:ED:E7:E0:FF:BD:30:8A:CB:91:12:13:68:DF:8D:6C:B2:E9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:22:e1:6f:3a:8d:ee:ad:9c:45:46:bc:7f:e6:94:2c:84:12:
         b9:b7:30:a1:70:60:a2:ea:6c:70:1c:12:14:38:49:bb:10:b0:
         cb:8a:be:f0:ed:b4:14:89:c9:0d:30:e4:3f:c3:b1:42:15:32:
         ee:33:ec:8a:b0:37:52:7a:0c:49:3f:8e:36:9c:8d:23:be:0c:
         49:ec:32:18:83:db:06:00:e0:95:de:89:67:77:13:7f:e3:bb:
         a1:8d:61:a7:d5:95:54:74:5b:e0:a3:85:e6:73:4e:94:44:a1:
         da:52:4f:24:39:1c:66:08:7e:c6:30:e0:86:47:74:f9:1f:45:
         ac:5d:73:0f:70:81:8e:65:e2:db:cf:5f:24:80:cd:b1:21:18:
         1c:4b:b7:9a:d9:7f:a0:6f:cf:fb:df:12:8d:03:08:22:c8:a1:
         57:60:d2:31:20:3b:a4:fe:3b:12:75:3a:3e:6f:c4:8b:1a:e1:
         5c:1c:7a:a9:2d:40:ed:95:ed:9f:29:70:4b:01:2d:b9:91:36:
         ab:a1:01:c2:6d:25:ea:97:46:df:1f:cd:18:e5:6e:c3:7c:1d:
         88:5c:ab:d0:54:f5:9f:08:9f:fa:98:2a:30:3a:10:e5:73:fc:
         1a:ca:a2:2f:81:bc:f5:e7:0f:17:79:04:ef:3e:8c:d1:03:8d:
         dc:b0:6a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:41:20 2026 by rpki-client