Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
File:                     cpnOZKDxYk17stKWnlwRrbqlSFw.mft (raw, json)
Hash identifier:          sn4rPDMKQc1rWjnJFgXb+4BwVJkYxfc5tx0O8SZzzfM=
Subject key identifier:   80:00:F9:F3:36:82:55:1A:67:1C:6D:EC:2B:02:6A:23:CC:3C:BC:26
Authority key identifier: 72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
Certificate issuer:       /CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Certificate serial:       019D996298DFF61EFACA76A88A70DABF8224
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
Manifest number:          0CEB
Signing time:             Fri 17 Apr 2026 03:01:08 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:08 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:08 +0000
Files and hashes:         1: DgE7qpXbhbps6DJDYkdwBbjFG4U.asa (hash: JXqb/d+p8C0uPTZtibuHHJ5kSrbcCvMBiMCMoX7QBZY=)
                          2: K2NfFx3TkrXQP8nQwasIAH5qXuk.roa (hash: eOpjTh0ebYyTZWv6iqBeMtDuPL0eSZ5JWmYsy8J7I/A=)
                          3: cpnOZKDxYk17stKWnlwRrbqlSFw.crl (hash: l/Cc7BZKFoNGjEz6ZOK2J4VPhNWvv10eyA9s7wP7FfY=)
                          4: dazL3iKbsjKxy4HddRH3nz-7Dnw.roa (hash: qq3zl4qFIOovDjZr1RPB2doiGCNi2c1snUt8x3cExWg=)
                          5: jgD1GTXsm3n5JwyXP57oSoUwOXs.asa (hash: nBQL1SbLriRKXkdqanEpebon9wOpjIUD2AKKZwRdH68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:98:df:f6:1e:fa:ca:76:a8:8a:70:da:bf:82:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
        Validity
            Not Before: Apr 17 03:01:08 2026 GMT
            Not After : Apr 18 03:01:08 2026 GMT
        Subject: CN=8000f9f33682551a671c6dec2b026a23cc3cbc26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c3:7c:16:62:ac:97:e1:c3:31:4a:73:57:5b:
                    ba:b7:b5:30:97:19:3d:39:28:c6:ea:4e:96:2a:c8:
                    e1:ba:c3:86:47:6f:1c:c8:4c:85:0d:40:18:b8:a7:
                    7e:79:bd:dd:e8:25:f6:1f:cf:64:13:76:e2:61:bd:
                    6f:1e:fc:ad:4f:67:be:1a:97:99:d6:bc:ce:93:a2:
                    04:d0:b2:06:05:ae:2d:be:84:49:dc:15:a6:e1:89:
                    e6:f7:37:ee:40:e1:b6:3e:a3:8f:ea:15:3f:28:39:
                    c9:82:f0:aa:00:06:4d:77:5b:e1:35:9c:87:a7:0e:
                    0c:85:1f:01:fd:1e:a4:3c:31:02:e7:9e:ef:07:e5:
                    b0:2a:d0:e7:e7:5b:5b:08:e6:fc:e6:b2:c5:0f:29:
                    1b:d7:65:0c:07:23:14:2e:2d:1e:cc:36:b3:3b:30:
                    bd:f1:4a:a3:de:df:08:d9:7b:7c:91:cc:9b:cf:72:
                    41:cd:7f:05:35:52:ae:d8:df:71:c3:2e:00:39:45:
                    e1:09:48:b2:58:07:a5:f4:80:49:f9:05:f9:01:ef:
                    b8:d9:aa:92:fb:b7:f8:3c:12:28:12:1c:2a:c2:40:
                    c2:f8:aa:c0:1b:67:7c:56:88:cb:70:91:2e:f0:96:
                    f8:98:af:5e:7d:6d:b7:a8:fe:f9:d0:77:34:a4:36:
                    a5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:00:F9:F3:36:82:55:1A:67:1C:6D:EC:2B:02:6A:23:CC:3C:BC:26
            X509v3 Authority Key Identifier:
                keyid:72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:18:cb:6e:09:dc:92:ed:f2:56:0e:ae:18:53:92:cd:c5:60:
         e0:2b:54:79:b7:df:74:66:37:1e:ca:59:9e:b8:94:73:5f:bf:
         29:7e:e3:9a:98:0d:b8:0b:58:8d:e0:9b:4e:4c:3e:76:f6:40:
         c9:8e:a2:9f:7a:55:b5:8d:f3:4f:d9:43:e0:23:07:4a:ba:86:
         4c:de:ea:ff:27:08:56:c1:3e:63:52:a1:30:bf:93:ee:f9:49:
         ca:68:25:3e:17:b3:c3:a6:fc:6e:e3:0a:ec:1b:9a:8f:b5:5e:
         fe:f7:5a:cd:a7:b7:53:de:49:49:63:38:32:96:a0:5b:a4:05:
         c4:4c:13:65:2d:70:82:56:8c:2a:4e:2b:c2:bb:3e:5d:9d:b1:
         2c:f0:05:b2:9e:ee:39:fd:8d:10:71:4a:2d:a8:18:e7:db:df:
         f6:78:ec:60:f7:ee:40:f4:2a:84:8f:0c:66:1c:44:f1:90:03:
         a7:df:55:a7:45:48:0e:3e:0a:12:a2:04:7c:93:df:c6:d8:b5:
         46:64:67:26:a7:bb:bf:8a:26:0e:5e:2c:24:09:65:00:21:f3:
         92:fb:5a:77:bd:b9:e8:b9:27:aa:2e:f9:5a:19:b7:42:0e:c7:
         a4:cb:92:8a:93:17:d1:63:d5:c4:07:af:0e:a0:17:0d:93:9e:
         1c:9e:6c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:15 2026 by rpki-client