Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
File:                     mpdRVlcXWpRsyNthlsobIVTjgRQ.mft (raw, json)
Hash identifier:          SQc/NtPeI1wj9WXKXlclzXZWslJAu6Z81yffSpwxq6w=
Subject key identifier:   A5:91:45:FC:B5:79:4A:D4:89:2A:65:96:2E:D3:7F:9C:F4:B1:14:47
Authority key identifier: 9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
Certificate issuer:       /CN=9a97515657175a946cc8db6196ca1b2154e38114
Certificate serial:       019D98F45E2B89CE44200A2005A8A8924F0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
Manifest number:          07EF
Signing time:             Fri 17 Apr 2026 01:00:44 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:44 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:44 +0000
Files and hashes:         1: FrWPsdIanKr1Sodt-qzdiaAKot0.roa (hash: MgcORKrAyQmVC5QqwfE0RufXlOwwg9f/50Q+8d4fy2E=)
                          2: mpdRVlcXWpRsyNthlsobIVTjgRQ.crl (hash: U26e2l/NfnTn+7kWIDXscIsGFh0RIaPXA7cSQlcOjJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:5e:2b:89:ce:44:20:0a:20:05:a8:a8:92:4f:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a97515657175a946cc8db6196ca1b2154e38114
        Validity
            Not Before: Apr 17 01:00:44 2026 GMT
            Not After : Apr 18 01:00:44 2026 GMT
        Subject: CN=a59145fcb5794ad4892a65962ed37f9cf4b11447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f1:c8:b8:cb:dd:26:34:73:5c:05:9e:21:45:
                    d6:35:cf:ba:2a:9f:b5:83:19:d5:1f:97:09:27:72:
                    72:b2:e2:53:5b:f9:d7:4c:34:93:f4:d4:70:c0:e6:
                    0e:2a:de:8c:14:9c:fd:1f:4a:3e:36:fe:ef:e9:bb:
                    1c:d3:00:f4:d7:0e:40:68:42:c9:96:ef:2e:18:fc:
                    7b:56:95:fa:45:43:df:93:ad:e0:d8:39:b7:2f:e3:
                    0d:86:f5:c7:b5:e9:32:24:45:b1:3b:67:90:df:72:
                    65:89:08:30:f4:de:a3:1f:75:58:f9:16:56:65:25:
                    af:70:88:b9:4c:fc:17:f3:b0:90:7a:78:33:ba:bd:
                    76:a6:f9:69:7d:1a:ce:b7:a7:e4:3e:00:a7:77:92:
                    b0:dd:69:ba:a8:30:df:49:9b:ff:77:eb:9b:cb:91:
                    32:de:f3:ec:ab:d9:69:05:45:89:ee:78:fb:ef:05:
                    35:60:90:e2:99:3c:16:06:88:29:a3:37:41:fe:7d:
                    27:35:bf:69:a4:ac:5a:94:bd:c7:da:21:19:48:42:
                    8e:bf:07:c6:a0:f6:dc:9f:42:af:b9:59:0c:6b:a9:
                    10:e8:1b:3b:47:e9:83:e9:1d:be:57:42:62:68:3d:
                    58:4c:20:c0:10:39:23:ef:c0:93:22:a8:e2:29:b0:
                    fb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:91:45:FC:B5:79:4A:D4:89:2A:65:96:2E:D3:7F:9C:F4:B1:14:47
            X509v3 Authority Key Identifier:
                keyid:9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a2:25:29:37:e2:b6:a0:e6:61:7d:94:e9:28:74:c7:a8:65:
         44:06:38:6f:e6:4a:c3:19:c8:51:f6:d6:61:bc:82:3e:96:95:
         71:df:25:b8:66:b0:31:8f:d1:1a:77:59:66:15:e1:1d:85:99:
         e2:cc:8a:8e:fc:ff:cb:42:ac:b5:4e:67:e5:c3:cd:b8:c1:78:
         e6:40:7b:70:d3:eb:c2:02:42:9e:16:08:5f:a9:39:71:5f:4e:
         a3:2c:b4:22:8e:ca:a0:cc:e6:bc:55:84:e8:16:27:9d:1c:aa:
         87:87:e5:99:26:7d:4c:d6:08:84:f4:64:f8:ab:0b:45:1f:f0:
         53:17:44:f0:0e:9e:7c:c4:39:6d:37:d7:73:88:86:49:a9:f0:
         a9:ac:2e:1e:fd:ad:96:48:c5:bc:1f:a7:c9:f1:a8:1a:81:76:
         75:18:d2:ff:53:ab:bb:ac:9a:94:63:c3:4b:36:37:ac:3e:83:
         94:cc:cb:2f:ad:52:ae:98:72:e9:ff:bd:b7:e2:a4:c0:6d:cf:
         51:09:82:82:3e:ff:b9:7e:fb:63:ea:e6:1f:75:5a:03:3e:93:
         1a:53:2f:75:30:65:c7:02:01:df:c4:18:8b:71:3a:7d:6a:33:
         f2:06:01:c3:29:7f:67:45:9c:b8:2a:f6:0c:6a:00:d0:b3:96:
         1d:e0:c8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:42:52 2026 by rpki-client