Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
File:                     hoG9ppEHn3qyNfednA73Ur_AN4E.mft (raw, json)
Hash identifier:          jnMo74Zc2qdYnLwPQcPWqAlsRTUvC44JqXXN96B5X7s=
Subject key identifier:   E2:25:00:92:A8:70:14:6E:6C:81:8B:07:85:18:99:4F:D1:00:73:28
Authority key identifier: 86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81
Certificate issuer:       /CN=8681bda691079f7ab235f79d9c0ef752bfc03781
Certificate serial:       019D9B879988959D43244479FEA77DB6C817
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
Manifest number:          0FA6
Signing time:             Fri 17 Apr 2026 13:00:48 +0000
Manifest this update:     Fri 17 Apr 2026 13:00:48 +0000
Manifest next update:     Sat 18 Apr 2026 13:00:48 +0000
Files and hashes:         1: CDpMD_YtLf5sr3vUWD2b37ldTHA.roa (hash: GiFS9+M5y+qgplPNTHBHIZf4CKfaw5vBcEKWbsoxSkk=)
                          2: hoG9ppEHn3qyNfednA73Ur_AN4E.crl (hash: mVdbB/YW1fRK7oz1W5b+LPYZfPu0oTNzG/TI3W2k5sU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:99:88:95:9d:43:24:44:79:fe:a7:7d:b6:c8:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8681bda691079f7ab235f79d9c0ef752bfc03781
        Validity
            Not Before: Apr 17 13:00:48 2026 GMT
            Not After : Apr 18 13:00:48 2026 GMT
        Subject: CN=e2250092a870146e6c818b078518994fd1007328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ad:77:54:e2:fe:21:e6:2b:c4:01:4b:3e:90:
                    c5:29:a0:de:f0:0b:97:9d:70:e4:cb:45:26:5d:84:
                    a6:3c:a9:1e:cf:7d:98:6a:76:3a:52:6a:7c:46:ba:
                    31:9d:3b:ec:0f:f1:26:b3:06:4e:7e:72:b6:3a:05:
                    dd:2c:de:aa:0e:b0:b4:e2:a4:1d:e7:95:01:43:01:
                    15:52:97:36:8c:4b:f6:56:81:7a:e5:25:e0:b8:9a:
                    66:90:a4:93:9b:e3:00:be:87:34:45:4b:c8:e4:a7:
                    93:86:31:22:fc:88:7c:e6:dd:29:25:8a:c4:2e:1d:
                    47:da:a2:76:48:14:7a:e7:46:66:0a:27:9f:33:3d:
                    84:b8:c5:fd:61:f3:6d:02:5a:b2:28:c8:7a:07:e8:
                    84:31:38:40:d0:82:e4:26:a5:56:66:eb:ff:94:c6:
                    06:10:64:a3:f5:6a:2a:2f:b3:2e:f1:7d:cf:99:35:
                    8f:d8:94:52:3d:4b:27:59:c9:e7:8b:52:38:65:cb:
                    68:34:4c:95:8d:83:d8:4f:39:7a:61:fd:bf:dd:38:
                    83:f3:33:94:74:e2:17:c4:90:a4:10:bb:37:ef:46:
                    91:5f:fc:01:40:87:ab:78:42:ec:ae:31:aa:64:0e:
                    34:4d:6d:59:90:96:ec:3e:5b:d5:76:17:50:82:58:
                    d3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:25:00:92:A8:70:14:6E:6C:81:8B:07:85:18:99:4F:D1:00:73:28
            X509v3 Authority Key Identifier:
                keyid:86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:18:15:8e:ac:91:28:f1:11:a2:8a:f2:d5:8a:7e:46:d1:35:
         bf:f9:f0:b5:8b:d6:a1:10:fa:3f:23:af:02:56:e5:c5:6e:d2:
         46:3b:30:06:b7:17:9b:b5:be:72:d4:ef:d3:8c:e3:ff:d3:19:
         7c:f1:cb:70:4d:5f:06:1c:8c:a2:3d:83:02:86:64:3b:42:26:
         9a:45:91:7f:34:22:13:f7:08:64:22:27:03:84:33:51:7d:0c:
         77:c0:5d:69:e9:f8:cb:8a:62:87:a6:9f:19:52:e7:c0:88:70:
         e8:25:42:39:88:b3:0b:6d:89:3c:b9:f8:1e:4f:fe:a8:7d:7a:
         61:06:35:aa:58:8b:35:97:b9:04:21:48:40:8e:82:67:5f:2b:
         2e:53:e9:a8:44:45:43:92:5b:1f:6d:98:ce:fa:21:35:75:75:
         5d:fa:00:29:dd:74:a0:54:2d:e8:22:0a:19:59:65:f8:48:6e:
         53:bf:d3:e9:a6:e9:52:cf:e4:6e:77:bb:d1:29:0a:54:8b:91:
         45:3c:23:df:df:c5:7b:bc:b8:98:24:8e:02:73:0b:06:b2:8d:
         3b:cd:3e:33:36:76:b4:23:b3:38:db:f6:d6:0f:12:dc:cf:81:
         97:f2:6b:7a:43:62:ba:21:ed:e0:63:16:34:a9:6b:fd:0c:aa:
         5a:09:6e:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh5mIlZ1DJER5/qd9tsgXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ODFiZGE2OTEwNzlmN2FiMjM1Zjc5ZDljMGVmNzUyYmZj
MDM3ODEwHhcNMjYwNDE3MTMwMDQ4WhcNMjYwNDE4MTMwMDQ4WjAzMTEwLwYDVQQD
EyhlMjI1MDA5MmE4NzAxNDZlNmM4MThiMDc4NTE4OTk0ZmQxMDA3MzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma13VOL+IeYrxAFLPpDFKaDe8AuX
nXDky0UmXYSmPKkez32YanY6Ump8RroxnTvsD/EmswZOfnK2OgXdLN6qDrC04qQd
55UBQwEVUpc2jEv2VoF65SXguJpmkKSTm+MAvoc0RUvI5KeThjEi/Ih85t0pJYrE
Lh1H2qJ2SBR650ZmCiefMz2EuMX9YfNtAlqyKMh6B+iEMThA0ILkJqVWZuv/lMYG
EGSj9WoqL7Mu8X3PmTWP2JRSPUsnWcnni1I4ZctoNEyVjYPYTzl6Yf2/3TiD8zOU
dOIXxJCkELs370aRX/wBQIereELsrjGqZA40TW1ZkJbsPlvVdhdQgljTvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIlAJKocBRubIGLB4UYmU/RAHMoMB8GA1UdIwQY
MBaAFIaBvaaRB596sjX3nZwO91K/wDeBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG9HOXBwRUhuM3F5TmZlZG5BNzNVcl9BTjRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wMGYwZjQtY2ZmMS00OTMyLTkwMDkt
ZjQyODUwZjgwY2E0LzEvaG9HOXBwRUhuM3F5TmZlZG5BNzNVcl9BTjRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8wMGYwZjQtY2ZmMS00OTMyLTkwMDktZjQyODUwZjgwY2E0
LzEvaG9HOXBwRUhuM3F5TmZlZG5BNzNVcl9BTjRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRgVjqyR
KPERoory1Yp+RtE1v/nwtYvWoRD6PyOvAlblxW7SRjswBrcXm7W+ctTv04zj/9MZ
fPHLcE1fBhyMoj2DAoZkO0ImmkWRfzQiE/cIZCInA4QzUX0Md8Bdaen4y4pih6af
GVLnwIhw6CVCOYizC22JPLn4Hk/+qH16YQY1qliLNZe5BCFIQI6CZ18rLlPpqERF
Q5JbH22YzvohNXV1XfoAKd10oFQt6CIKGVll+EhuU7/T6abpUs/kbne70SkKVIuR
RTwj39/Fe7y4mCSOAnMLBrKNO80+MzZ2tCOzONv21g8S3M+Bl/JrekNiuiHt4GMW
NKlr/QyqWgluZw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:12:16 2026 by rpki-client