Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
File:                     V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft (raw, json)
Hash identifier:          nhlsHLtn6oxaMIKrc3JCTHsPsyyVaQHVsvi0+/r6sSA=
Subject key identifier:   A2:AB:D8:DD:1A:13:05:37:93:E8:83:B5:64:9F:8F:7F:7F:77:91:1C
Authority key identifier: 57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75
Certificate issuer:       /CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
Certificate serial:       019D97AAC3AF74A973FA5C2C88AB5B2534AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
Manifest number:          18C8
Signing time:             Thu 16 Apr 2026 19:00:43 +0000
Manifest this update:     Thu 16 Apr 2026 19:00:43 +0000
Manifest next update:     Fri 17 Apr 2026 19:00:43 +0000
Files and hashes:         1: V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl (hash: NJykLA2fQBQAXhCE51IR+K85drpGGqRCQHu0NE7bTXU=)
                          2: Vu1SMqSbNvxo8-uVtXs0Eld2o_Q.roa (hash: blwSnQqhNIoWvduAY/JgSuj6c5kvRYhLpvdaBWUqc10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 19:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:aa:c3:af:74:a9:73:fa:5c:2c:88:ab:5b:25:34:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
        Validity
            Not Before: Apr 16 19:00:43 2026 GMT
            Not After : Apr 17 19:00:43 2026 GMT
        Subject: CN=a2abd8dd1a13053793e883b5649f8f7f7f77911c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ba:72:7e:ba:8e:39:7b:0a:62:2a:d2:e6:2d:
                    a6:d2:96:1b:bf:18:0b:be:fd:5c:ef:d1:24:92:7d:
                    1b:a9:d4:7f:cb:01:3a:93:f4:ee:de:df:fc:94:74:
                    30:4d:41:6e:e3:b3:cc:91:51:8f:d3:81:99:0d:e1:
                    c8:39:17:e0:a1:d6:a1:d8:27:65:74:e1:eb:d7:81:
                    2b:8b:2d:74:38:65:6a:cf:7f:70:53:97:1f:34:86:
                    88:f4:ec:a9:a2:84:5b:74:ca:8c:4c:fc:96:60:1c:
                    63:bb:74:71:ed:04:f1:0d:64:95:99:c8:dc:f0:d4:
                    62:72:dd:5b:52:cf:ac:1b:e8:d8:ba:ff:f3:9f:32:
                    e4:12:d9:00:22:db:fc:77:02:fc:eb:b7:0c:26:15:
                    d7:23:a2:d7:ae:5b:c9:04:68:44:c3:4e:47:35:49:
                    af:7d:13:41:88:69:26:89:23:3a:75:fb:88:c8:c8:
                    ba:37:c4:52:b9:32:f4:ac:42:d5:cc:3d:11:56:68:
                    22:b0:fa:6b:0b:76:ed:21:45:8f:8b:e5:91:8e:ff:
                    fb:6b:e3:3a:1f:19:5c:04:03:8b:f4:9b:9f:be:c2:
                    54:13:cb:66:9f:57:a1:48:ee:3c:63:01:78:b7:2b:
                    6e:22:ab:a5:e5:99:99:52:b3:11:cf:2e:67:50:5a:
                    34:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AB:D8:DD:1A:13:05:37:93:E8:83:B5:64:9F:8F:7F:7F:77:91:1C
            X509v3 Authority Key Identifier:
                keyid:57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:02:b5:53:1b:0f:9e:f8:ee:f4:80:7e:d2:1d:11:b5:2f:1f:
         1c:40:5b:26:32:48:6b:20:d4:99:bb:99:7b:c3:c1:4b:0f:c9:
         45:4e:48:b7:b8:ee:99:ac:46:9c:fb:4b:a8:44:08:72:bd:4e:
         ec:05:57:d0:de:1d:e8:64:7b:dd:e9:6f:26:2e:dc:58:49:27:
         2d:e7:4a:e7:ee:d6:2e:d3:db:57:7d:94:7a:8f:64:26:31:ed:
         3e:43:ed:cd:81:0d:4e:e6:7a:e8:a5:d0:0b:e9:99:ef:0e:01:
         ef:7b:f3:74:57:ea:37:5c:8c:bd:9a:f7:10:12:02:9f:32:fb:
         48:19:71:9c:4d:0f:45:6d:db:2c:50:b0:81:9b:4c:97:1c:0f:
         90:a0:f9:d9:25:f9:46:0b:cb:a7:45:cc:a1:71:52:e7:24:a7:
         2e:54:3b:a1:cd:ca:4b:d9:a4:d0:2a:02:87:09:7f:2b:c8:7d:
         4f:00:63:ee:92:3a:64:0a:4d:82:b3:87:9e:02:2b:24:41:4c:
         52:ef:5c:48:50:b9:07:df:08:2c:58:76:d4:69:2c:a1:35:f5:
         de:98:ce:0b:3d:80:be:67:7d:87:35:a9:b9:6c:77:67:26:17:
         6a:3f:7c:02:1d:24:8c:c2:23:ef:cd:78:2d:58:5b:64:77:0e:
         43:8e:1a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:24:35 2026 by rpki-client