Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
File:                     CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft (raw, json)
Hash identifier:          7n5rdXdi65tPMDNzY9jD2QuLGW8ckZ9/Ywi/iq82BO8=
Subject key identifier:   FC:69:FE:D7:E2:9D:17:0B:2C:7D:D1:89:2F:C2:50:AB:A2:2A:BF:4A
Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
Certificate issuer:       /CN=08561d0de62247e2085bf59a73c87d25a2438980
Certificate serial:       019D996299D93B7FF255170D0A41E0970903
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 03:01:09 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:09 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:09 +0000
Files and hashes:         1: CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl (hash: W+udzJGdG95zunpd3FxT18NngVm0K9y9UKfa10AicAw=)
                          2: OC2xnBQTRG6dTo8unU-AfiUJoPo.roa (hash: TCWmomXoe5LhZ7eUQal/1Sd3d3namiJ5LFej1VLenpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:99:d9:3b:7f:f2:55:17:0d:0a:41:e0:97:09:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980
        Validity
            Not Before: Apr 17 03:01:09 2026 GMT
            Not After : Apr 18 03:01:09 2026 GMT
        Subject: CN=fc69fed7e29d170b2c7dd1892fc250aba22abf4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4b:07:ab:17:ed:fc:db:36:c8:fa:6f:3b:05:
                    61:42:1c:f2:76:bf:c2:f0:ed:64:32:9a:3a:37:15:
                    1e:df:79:76:11:f1:17:76:70:bc:d3:51:25:dc:93:
                    ec:42:a2:bd:48:4f:73:a2:8e:00:92:52:97:c5:28:
                    b2:40:b9:26:e8:10:c1:f0:0c:c1:65:75:23:a3:9d:
                    81:f3:ae:8c:f8:60:0e:e7:b7:27:0f:90:94:55:71:
                    0a:a9:d3:b1:c2:7e:7e:fd:70:cb:94:86:5f:d2:65:
                    d2:83:df:48:47:c9:38:c8:58:28:18:7a:05:52:f3:
                    2c:8a:9b:2d:4a:0d:f7:9d:95:fd:76:48:78:12:66:
                    ec:68:cf:d8:3f:ff:a8:d9:5a:cc:d6:11:fa:7b:b9:
                    78:c5:50:29:e3:39:e6:5d:f9:65:ef:5b:d7:9e:e9:
                    68:43:f0:62:25:29:fb:ec:75:7e:bf:be:0b:5f:87:
                    ed:23:6a:9e:09:3e:2d:6b:05:f8:83:19:f1:2c:6c:
                    48:d8:36:b4:97:8d:9b:6e:f4:09:e0:82:cf:61:ae:
                    e4:ee:05:f4:ce:20:3b:a8:21:b0:95:5d:21:03:35:
                    cd:c1:bb:63:19:5b:82:6a:12:47:70:fb:6a:e6:f1:
                    91:05:2c:08:b8:90:f8:f2:09:88:55:2b:a7:2c:53:
                    89:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:69:FE:D7:E2:9D:17:0B:2C:7D:D1:89:2F:C2:50:AB:A2:2A:BF:4A
            X509v3 Authority Key Identifier:
                keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ed:ba:5c:e6:a4:02:e0:7e:3a:e3:a0:54:e9:ba:93:15:ca:
         b5:57:63:dd:0b:d3:3b:63:c0:95:cd:a8:bb:9e:43:15:6f:08:
         47:94:a8:91:fd:40:88:3b:59:1a:0a:8a:8f:4a:4c:b5:5d:3a:
         a0:b6:be:60:fb:b7:0d:fb:6f:43:eb:08:bd:b9:88:e6:cb:0f:
         63:8a:9e:c9:cc:d0:ea:fc:77:c4:74:07:38:a6:b6:d1:b9:3d:
         84:42:f9:fc:c1:1c:54:bb:49:bb:cb:9e:ad:7a:e4:66:dd:d8:
         2f:a4:c5:a9:be:1e:3d:5c:35:83:aa:75:1b:04:04:6b:7c:f3:
         48:7a:a8:30:00:ac:be:03:29:48:15:6d:d5:c1:f3:76:9d:9b:
         7e:c7:c7:ed:e8:27:b1:74:e6:97:3f:75:12:3e:ac:c2:0c:3f:
         ba:16:ae:1d:dd:e3:7c:2f:74:db:b6:65:04:f6:71:cd:2e:e2:
         76:d7:11:25:5b:ec:44:d6:21:53:31:ec:38:09:10:02:59:32:
         09:d1:a0:4a:d9:5a:e0:74:55:1c:41:f2:89:8e:c9:fa:77:e4:
         6c:2d:a1:22:73:40:1f:03:f1:6d:ed:86:3b:d2:c7:28:19:b4:
         e8:9c:d1:52:7b:bf:c0:5a:2f:da:16:93:76:94:21:9f:22:18:
         ec:e3:96:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:24 2026 by rpki-client