Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
File:                     JWvhdrMT4aigUPZwr1dncbZV1hE.mft (raw, json)
Hash identifier:          a7vuea3zfEjC/Y7l368V4b4aC7DBdpIY3oWe6dTLFzA=
Subject key identifier:   E9:F4:09:F5:87:FC:12:A9:BF:E1:9F:70:24:31:42:DF:67:B9:F3:3E
Authority key identifier: 25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
Certificate issuer:       /CN=256be176b313e1a8a050f670af576771b655d611
Certificate serial:       019D99628E0CCE28227AF68B958A8D9A3B06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 03:01:06 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:06 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:06 +0000
Files and hashes:         1: JWvhdrMT4aigUPZwr1dncbZV1hE.crl (hash: NWOfFMascL7l0O9Miv2BAG395svwIHWYhYFhZ0XWZWg=)
                          2: p2IMZfuSyzWUQCvrAkoFeLo46oo.roa (hash: hxar/HLUHEBtlzcjTx3TaCuWIzPYRzZYjjh5egyYeWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:8e:0c:ce:28:22:7a:f6:8b:95:8a:8d:9a:3b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256be176b313e1a8a050f670af576771b655d611
        Validity
            Not Before: Apr 17 03:01:06 2026 GMT
            Not After : Apr 18 03:01:06 2026 GMT
        Subject: CN=e9f409f587fc12a9bfe19f70243142df67b9f33e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:95:3f:0b:0b:3d:fe:e6:ce:82:ba:13:8d:42:
                    ad:01:02:3d:9c:56:6e:b3:5e:f2:16:4a:0d:c3:88:
                    ea:6f:b6:73:89:28:79:ef:8a:da:d9:9f:c1:ac:ab:
                    c9:d0:15:63:ce:f5:05:b3:79:35:e4:da:6d:86:99:
                    c1:72:c0:60:0a:91:ab:4c:e4:5f:f3:3c:a9:82:94:
                    d5:e4:6f:a0:bd:d0:3a:1a:11:d5:dc:68:27:2f:06:
                    2d:ab:8e:8e:4f:54:ff:aa:23:de:94:26:b3:4d:79:
                    e5:4a:99:39:fc:fa:d3:a8:60:55:9e:69:45:45:ed:
                    96:fe:f1:f1:d6:b0:73:f6:4a:90:ed:36:53:40:3d:
                    53:6d:64:84:d8:65:4a:2c:05:1c:f3:d9:05:7e:83:
                    f9:c4:fc:4e:8e:74:de:53:30:38:67:f1:82:7a:45:
                    bf:07:19:f1:0c:58:04:f6:3b:fd:7a:d0:f1:96:57:
                    cb:7b:1e:c5:f3:5f:41:ab:0d:7d:06:3b:7c:00:36:
                    2d:86:62:b9:27:27:d7:4b:54:de:99:be:87:c1:15:
                    89:3b:16:56:f5:97:d1:e4:e9:2e:5d:0f:d4:07:50:
                    51:c1:43:52:d0:fd:24:88:7b:c5:af:d8:62:96:ab:
                    8c:ef:0b:28:93:2a:f9:62:de:37:c5:37:b7:3c:3b:
                    7e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F4:09:F5:87:FC:12:A9:BF:E1:9F:70:24:31:42:DF:67:B9:F3:3E
            X509v3 Authority Key Identifier:
                keyid:25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:65:90:3f:53:f3:26:70:e7:24:9d:e5:20:5a:9f:f1:d7:40:
         aa:ca:24:e5:1f:a4:97:02:a6:24:f4:41:6e:fa:78:c4:2e:12:
         f1:02:c9:96:f6:07:04:6a:e6:54:1a:96:4b:86:24:81:26:60:
         f7:06:68:c9:0a:a7:97:fe:0a:a0:b9:81:dc:27:f8:de:ad:1f:
         32:fc:2c:83:8c:69:6a:dc:50:d0:bb:fe:5e:6b:5f:e0:b7:f4:
         ae:4c:5c:94:a1:4a:d4:51:b3:20:38:42:a4:80:dd:cf:6a:cc:
         35:67:33:66:e4:63:6f:f9:86:03:57:d5:10:a1:f1:0b:d3:9d:
         19:48:74:10:df:f2:3c:73:5c:45:fe:71:b4:6f:a1:ce:b0:d6:
         24:d2:0a:c2:03:c8:12:c9:27:a2:e5:7e:e0:da:be:69:a8:42:
         e2:4c:5d:04:9a:96:11:5a:9c:6e:a5:fa:7b:e6:79:78:cf:35:
         78:7b:4f:a8:7e:af:99:a1:54:fa:90:3b:c8:f4:ab:48:6c:84:
         69:6c:37:30:e1:8e:62:17:56:05:b0:55:85:29:32:3b:5c:85:
         8d:00:0b:d9:06:31:ee:97:98:3a:d7:3d:64:e6:c8:b1:4c:92:
         14:19:b4:08:1e:6d:3b:cc:d5:99:47:24:8d:0b:95:d2:c5:9a:
         14:ef:76:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:09 2026 by rpki-client