Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
File:                     V3zTsjkfRybBqonV7T0ECCMlI1U.mft (raw, json)
Hash identifier:          5WnhwisNgVz2jQYzvtTFfI0sv4iIWSBtrBdxcYQvtiY=
Subject key identifier:   8D:7D:EB:9A:CD:3C:95:38:3F:14:74:C8:8F:48:93:84:74:B1:03:F9
Authority key identifier: 57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
Certificate issuer:       /CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Certificate serial:       019D9B5046DA9FDBCAE7D0486A4DBF2B38AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
Manifest number:          0433
Signing time:             Fri 17 Apr 2026 12:00:22 +0000
Manifest this update:     Fri 17 Apr 2026 12:00:22 +0000
Manifest next update:     Sat 18 Apr 2026 12:00:22 +0000
Files and hashes:         1: V3zTsjkfRybBqonV7T0ECCMlI1U.crl (hash: Q3sNtqDVh7LR3MgXm8P/E2CPIQfdDmBX2VH2P/Dq8rI=)
                          2: X4f6FdUM7-oxmTPyJDPnSjOJQjc.roa (hash: G+8NGrdkwPv6Os9FA75QeRzjamvnyvobATUloFoNoiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:50:46:da:9f:db:ca:e7:d0:48:6a:4d:bf:2b:38:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577cd3b2391f4726c1aa89d5ed3d040823252355
        Validity
            Not Before: Apr 17 12:00:22 2026 GMT
            Not After : Apr 18 12:00:22 2026 GMT
        Subject: CN=8d7deb9acd3c95383f1474c88f48938474b103f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6c:0e:50:96:61:56:87:95:22:6f:63:83:fc:
                    ea:e7:7a:b4:1f:12:d8:a4:f3:a0:dc:2a:05:8b:26:
                    63:a3:e3:52:d6:d2:8e:b4:8c:ae:06:af:83:2e:5c:
                    f0:42:30:9d:84:c7:4c:54:0d:a3:32:58:a7:92:93:
                    6b:4d:7a:df:b8:56:80:54:3b:7b:51:b8:b0:81:6e:
                    ff:31:10:92:73:bd:92:65:49:55:d8:0a:f9:84:8a:
                    ea:07:15:98:e7:1a:92:b9:c6:c0:cd:8b:31:4c:dc:
                    34:04:76:1c:dc:f9:ee:db:5b:01:68:21:79:f6:b0:
                    f3:29:9c:b2:d3:0f:1e:de:32:2a:ff:63:66:eb:de:
                    a9:c4:3d:3c:30:1e:39:b2:64:c8:23:00:82:60:7f:
                    3f:aa:c3:07:99:34:38:37:aa:78:87:b3:82:a8:0c:
                    25:8f:62:1d:94:94:a1:e3:bb:27:0c:c4:d1:d7:36:
                    5c:6f:7e:2c:93:7c:a0:b9:60:36:27:45:b2:a7:e0:
                    83:4f:c3:2c:6e:92:31:e8:cb:52:80:8c:29:1f:d1:
                    53:8d:8d:10:e1:84:c6:ab:6f:67:bb:01:f2:7e:39:
                    1e:0a:7a:5b:ef:d3:01:c6:d2:14:08:54:4e:c1:90:
                    ac:d3:d8:e4:4a:da:c8:b7:5a:61:d0:41:e8:1c:1f:
                    d3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:7D:EB:9A:CD:3C:95:38:3F:14:74:C8:8F:48:93:84:74:B1:03:F9
            X509v3 Authority Key Identifier:
                keyid:57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:10:b7:4a:c5:8b:b0:d9:b5:11:36:43:cf:f8:25:7f:46:69:
         4d:bd:79:45:f8:9e:16:33:48:cb:bc:1b:f9:d4:cf:6e:6e:57:
         ec:78:e2:3e:c4:c1:0f:14:51:64:4a:4b:1c:f7:f7:63:86:57:
         b8:af:e9:66:7b:06:be:8c:15:0d:e8:87:ad:91:89:b1:a2:d4:
         df:79:59:78:47:5a:69:59:a8:3e:cd:e3:a9:95:ab:97:28:b7:
         ca:c5:35:b3:9b:7d:3f:0d:05:5c:92:d6:9c:9c:3a:7a:c6:4b:
         bd:9e:cc:1a:69:03:6b:1f:93:16:fb:b0:d6:2a:14:97:8c:0c:
         07:89:1a:ec:5d:59:35:af:fc:00:d0:46:9c:fe:2d:1a:42:88:
         1d:20:a1:c2:64:ae:4f:bc:7e:12:82:c8:c7:f0:bc:4c:43:05:
         9d:e7:69:7d:57:5d:e1:68:47:62:13:6d:f6:1d:9b:2a:b2:bf:
         04:fe:66:a7:25:12:4e:27:72:24:a2:e0:b8:1f:3d:14:b8:81:
         e8:42:05:04:b7:a2:5d:41:64:c6:52:2b:8d:0d:1f:2b:f4:ea:
         81:de:c3:1d:ec:5d:74:be:e7:1e:ef:88:f0:a6:03:9d:fd:0d:
         f0:c8:88:1d:07:00:35:8b:25:a1:6b:fb:91:21:ef:4c:f2:d7:
         dd:45:94:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:07:30 2026 by rpki-client