Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
File:                     Tl67mwUa1ex6Npifw_zJTByrzHQ.mft (raw, json)
Hash identifier:          TIQa74AQAXtGBcMEVp4IVDWV/jZvbLpcts31oJGTCf4=
Subject key identifier:   51:73:3D:9F:3C:2F:1D:D7:E8:31:7A:85:F5:ED:34:23:A5:F1:08:35
Authority key identifier: 4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
Certificate issuer:       /CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Certificate serial:       019D99CFD452346F97D74AEBBC7742856930
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
Manifest number:          18DB
Signing time:             Fri 17 Apr 2026 05:00:27 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:27 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:27 +0000
Files and hashes:         1: IC3KBofEraY-o2Xt0fXEgJfzG3A.roa (hash: KnhXw815iFAaQmnUWwTQE6WQ0M3tQmAE0zW0o+PJiU8=)
                          2: L3xiDt_DxrLi4lqDX4KsweyPBfU.roa (hash: mBvswTZSHAsOBHr7dGG73RpsdwizI277vUMRdc8O0TI=)
                          3: Tl67mwUa1ex6Npifw_zJTByrzHQ.crl (hash: B+2A4TqFGN5ZvF5aJ32zfnipTL0YoXjhftKx7iKiEcQ=)
                          4: ynXUxqrdFjV2uDjhRAtcxC3THvU.roa (hash: +COHT3b/rqZFicrkLpp20JO0GYnlMEA+hKZxaCTFAkE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:cf:d4:52:34:6f:97:d7:4a:eb:bc:77:42:85:69:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
        Validity
            Not Before: Apr 17 05:00:27 2026 GMT
            Not After : Apr 18 05:00:27 2026 GMT
        Subject: CN=51733d9f3c2f1dd7e8317a85f5ed3423a5f10835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:40:7a:fc:68:47:04:ca:cd:49:96:df:2a:e0:
                    65:24:c6:cc:0c:36:87:95:cc:63:ef:60:9c:f2:a0:
                    4a:bc:47:d1:01:57:b5:d3:d5:cb:03:a7:3a:a5:1f:
                    8b:43:fc:8d:ba:c9:d0:94:30:df:4e:ab:f8:97:bf:
                    d1:11:a6:ba:ee:06:f8:62:fd:87:eb:7b:be:c9:de:
                    e4:38:7b:0e:81:88:17:51:f7:fb:d5:20:df:be:fe:
                    5f:ab:aa:37:7c:e1:8c:3b:2f:6f:d6:eb:0a:65:ea:
                    a2:6c:b9:7e:cd:b4:f6:a5:7e:a7:44:1d:24:42:d4:
                    48:99:48:01:e0:f1:40:03:8d:a0:d9:76:b8:a8:09:
                    d1:5e:9b:86:af:35:d3:14:eb:5f:34:c2:39:69:91:
                    ab:d6:8e:6f:b0:27:c7:da:ef:30:a9:15:44:bd:2b:
                    1b:c2:bd:f5:58:2b:4b:49:3e:e0:e3:af:6d:f5:8a:
                    2c:f0:ee:a9:f4:01:e0:7d:b9:b5:a0:8e:10:1e:59:
                    38:13:c8:52:ec:a6:7b:70:3a:e8:05:7d:9d:7e:f3:
                    90:29:4c:44:eb:fd:98:9a:19:8c:55:58:8e:80:5a:
                    9d:ad:79:c0:63:59:54:e7:35:aa:d0:78:c6:ec:0b:
                    52:a0:03:a8:17:2e:17:4b:65:69:ba:95:2f:c9:3d:
                    3d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:73:3D:9F:3C:2F:1D:D7:E8:31:7A:85:F5:ED:34:23:A5:F1:08:35
            X509v3 Authority Key Identifier:
                keyid:4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:12:53:61:cd:fd:a6:a8:93:09:e7:97:d2:2c:79:41:30:b5:
         16:54:dd:4b:5d:d2:9b:32:39:14:ce:38:24:96:2d:4d:b7:a5:
         c2:ba:21:0b:aa:29:b1:d6:08:1f:05:86:67:cd:3c:95:2e:3e:
         f7:d4:2a:34:2d:48:5d:15:08:e9:76:27:26:56:53:11:17:73:
         1a:cb:15:e2:1c:8f:ee:71:be:a0:94:9a:aa:68:02:83:c2:17:
         2a:03:76:b6:ae:f9:16:4c:b4:f7:43:0d:02:a1:4e:93:1f:61:
         af:13:fa:f5:50:8a:25:4e:ac:36:0d:16:f4:74:df:11:f7:2a:
         ce:88:c6:37:62:90:37:6c:16:31:c8:c8:81:ef:b8:d9:a3:61:
         f2:69:d6:49:49:3d:68:85:8b:4b:e0:05:c5:ff:71:17:46:55:
         87:57:0c:c5:62:f6:44:c0:dd:7f:c3:5a:f9:19:0d:a7:49:86:
         f5:7f:bf:6b:41:65:b8:92:03:4b:14:ce:8f:53:1c:05:0e:c3:
         10:d8:ad:ea:c0:5c:10:d9:1c:63:ff:e1:88:8b:3b:ab:cf:74:
         94:54:d1:2a:5a:12:7b:e6:58:04:62:f7:03:7d:f0:5e:20:13:
         b2:a1:b9:a9:a0:98:80:67:84:ec:13:ab:2f:9d:ee:dc:d9:3e:
         de:6a:03:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:59:51 2026 by rpki-client