Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
File:                     siZANRqyGg3HqqFfq1sRCXdxSjw.mft (raw, json)
Hash identifier:          lXglO5KCRXvDl/P1gVMV0L7PKHUMnl1Ta9lPbrmm7kM=
Subject key identifier:   FD:96:24:0C:42:D5:39:96:05:D6:5B:30:BD:26:15:15:11:B1:0C:FF
Authority key identifier: B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C
Certificate issuer:       /CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
Certificate serial:       019D9BBEDAA1B32534A12EA50DE1DBAEE395
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
Manifest number:          07DC
Signing time:             Fri 17 Apr 2026 14:01:09 +0000
Manifest this update:     Fri 17 Apr 2026 14:01:09 +0000
Manifest next update:     Sat 18 Apr 2026 14:01:09 +0000
Files and hashes:         1: 6OXpRrtZl81uAbaJZrj6hG2s-58.roa (hash: Z7MiZK1QUdB+X/dedEvp9CdKiDJAaHCqww/ap/jKnh0=)
                          2: S01_WqX5A8fIJ61TCAKKbSOBBxA.roa (hash: kl6QxoWn5nkjbADcqJQCEzgHvLeLucFm5DAq4mJA9hQ=)
                          3: V0DG5GfpNDQhY80BVaNKbxP2_OQ.roa (hash: GGZTU575eBVslHsOPGqLGchOk6Yf9luJKsqt+OFhTRM=)
                          4: hOsDm_jLjaABWQYdgF5cRs0nk_I.roa (hash: x7cu1utx5qWvwfcBByX3NCvCKM+cJIOmug/RN9fVkCg=)
                          5: siZANRqyGg3HqqFfq1sRCXdxSjw.crl (hash: ExLVjUTdGyuOHif/OrM+XSrmaSSmaSawh+e86dkAscs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:da:a1:b3:25:34:a1:2e:a5:0d:e1:db:ae:e3:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
        Validity
            Not Before: Apr 17 14:01:09 2026 GMT
            Not After : Apr 18 14:01:09 2026 GMT
        Subject: CN=fd96240c42d5399605d65b30bd26151511b10cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:42:ff:1d:a9:4c:87:48:1f:c5:d2:65:04:3a:
                    fe:f4:93:6c:c6:02:91:13:50:00:c5:2d:af:77:73:
                    1b:d5:a8:87:d3:ff:ee:17:9e:62:53:0f:a6:f4:3d:
                    98:f5:89:89:9d:13:24:a7:93:1e:8a:7a:3c:cb:bc:
                    c2:53:54:57:03:12:40:a3:7e:1c:1c:08:52:86:e8:
                    08:a2:3a:24:60:cd:e0:88:ae:4a:e5:46:a9:a2:b4:
                    8d:a5:be:db:16:e0:eb:ae:43:51:78:f5:24:ca:01:
                    f9:e1:f2:d0:c2:dd:15:ee:72:8b:71:46:25:2c:7b:
                    45:4a:c5:9a:9b:9f:c4:b0:0f:a5:4f:77:e3:bf:21:
                    f4:06:a4:91:a4:e1:ac:6d:b0:da:3a:a9:a8:79:76:
                    5a:a7:29:a9:61:c6:b2:ff:0e:90:8c:1b:b0:ad:c2:
                    25:75:57:21:1e:97:ef:ef:c4:fa:d7:65:ac:c7:86:
                    5b:50:2c:08:4a:1e:12:4f:e6:60:fb:0c:1e:bb:1c:
                    ac:55:a5:84:88:ea:07:f9:db:b8:6c:e5:cf:b3:ae:
                    ba:10:da:5c:e8:b8:26:4e:5a:94:7f:ca:cd:62:2c:
                    fd:ee:cc:dc:9d:89:55:6b:5f:bb:b0:3d:c4:ae:ed:
                    82:a7:6c:65:83:34:10:04:12:0c:75:b8:6f:79:3c:
                    d7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:96:24:0C:42:D5:39:96:05:D6:5B:30:BD:26:15:15:11:B1:0C:FF
            X509v3 Authority Key Identifier:
                keyid:B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:71:34:26:05:33:1a:b7:06:c5:cf:eb:18:68:09:a0:30:91:
         69:e0:08:87:cd:8b:55:83:88:34:cb:6c:a6:b1:31:6a:42:5b:
         d4:1f:76:22:ee:34:5f:4b:14:9f:23:b8:9c:c3:bc:60:aa:6e:
         14:37:e6:4e:2d:0c:e0:7c:69:3f:61:d0:7a:94:67:06:89:7d:
         05:6e:3b:cb:ea:10:a6:fe:91:29:ca:25:28:6b:c6:a3:52:30:
         05:f9:d8:79:66:a8:6a:f4:01:9f:89:46:d4:19:87:a3:f7:2f:
         40:21:e3:5f:7e:0e:d2:4a:d8:6c:10:e6:38:43:42:16:2d:cc:
         d5:3c:41:7d:49:72:e5:eb:78:aa:d3:91:59:97:6c:14:24:36:
         1a:48:7d:d5:91:8e:1c:b1:e4:2c:d8:30:fc:2e:9c:3b:84:00:
         89:57:f8:c9:0b:a0:68:ed:39:f8:b1:05:47:c2:d0:87:97:b6:
         88:17:c4:91:29:d2:28:9e:8b:c7:9a:b4:43:85:a4:7f:a2:50:
         9c:b6:13:5b:82:61:fe:ed:8e:95:fc:f4:2c:a8:a5:ab:ce:b9:
         34:66:92:a2:3f:c9:6b:b9:c7:44:ba:31:55:0a:6f:11:8a:0a:
         47:24:fd:10:cd:75:ea:9d:47:44:2b:8c:db:42:f8:73:99:68:
         1f:73:40:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:50:49 2026 by rpki-client