Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
File:                     Xo08C2QUychuPJSnFN-yactekWk.mft (raw, json)
Hash identifier:          95kOmgYp+2dXXbMrVeg83pB4bQrdX+JJQH+yL67mf4o=
Subject key identifier:   F3:6B:25:C5:4A:1E:FD:4C:0E:FA:93:5A:BE:70:CC:21:E3:DA:74:49
Authority key identifier: 5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
Certificate issuer:       /CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Certificate serial:       019D973D3C51A57A9BF72FA95D54904AB7A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
Manifest number:          18C2
Signing time:             Thu 16 Apr 2026 17:01:05 +0000
Manifest this update:     Thu 16 Apr 2026 17:01:05 +0000
Manifest next update:     Fri 17 Apr 2026 17:01:05 +0000
Files and hashes:         1: 4hS0kBMyB9H-tHz_FPDfcYD-NR0.roa (hash: +7cyCy/NdgEzdqXIvMYXBG6PX6qWy1L3JHGAtDMeS30=)
                          2: IVJmRlo_N7uujpHOQ1PY0oGuwPE.roa (hash: HId6QIpCvryq7pzO2cSpzlsjWi8B2cu2NyD1dmCRRqc=)
                          3: Xo08C2QUychuPJSnFN-yactekWk.crl (hash: n9tbIW78AvzoCFe/y44KvrVP6GdeFEnxrj3A5gfohu8=)
                          4: YU7DQQUK3WS2GF1fwXGzic4CVRE.roa (hash: 5Kaf0g8MgSwJ+dws3X5JQrcvkrcgCUQzsjR1OpBYhtw=)
                          5: cJHyNL6n_BStyxq8HQ3hJvNAMq4.roa (hash: V4roFS8vi9SUabC+vIIX/fQMu7+uk5jkREg7A/YHemc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 17:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:3d:3c:51:a5:7a:9b:f7:2f:a9:5d:54:90:4a:b7:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
        Validity
            Not Before: Apr 16 17:01:05 2026 GMT
            Not After : Apr 17 17:01:05 2026 GMT
        Subject: CN=f36b25c54a1efd4c0efa935abe70cc21e3da7449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d2:0e:a9:db:d0:15:06:b7:96:a4:47:d5:3c:
                    aa:83:f9:b2:04:e8:a5:24:31:fa:8d:9a:ac:fd:c3:
                    65:e8:35:e0:8c:8f:96:d5:f8:a0:75:26:7d:9b:0e:
                    be:36:5f:8d:d3:74:ba:67:25:41:1e:0c:a5:57:f1:
                    56:fd:4b:7a:93:57:e7:5c:9f:c2:26:6e:16:00:ae:
                    0b:1f:30:94:20:48:24:ae:70:c3:74:c7:c5:0c:99:
                    f9:f6:6d:59:04:74:22:40:8f:9d:6e:5d:e0:fb:8e:
                    9f:dc:3d:92:96:ff:80:a4:60:e4:ed:3c:60:ad:f8:
                    d6:3c:eb:56:6d:3b:1c:4b:41:35:a0:21:e9:2b:4d:
                    74:63:51:a9:91:68:57:5c:fb:dd:d2:81:5d:fe:5b:
                    9b:1c:30:8a:28:09:65:b3:cd:80:af:a9:57:ec:bf:
                    7e:ac:55:2e:6e:08:7d:3f:10:b7:82:91:43:b8:21:
                    2c:53:df:92:5b:e0:61:e5:ba:4f:f7:dc:7f:29:85:
                    6a:1b:94:75:2a:e9:a3:08:8f:6b:1d:28:ee:a8:80:
                    56:c4:a1:99:19:f7:1f:1a:52:08:05:0b:6a:57:6d:
                    3b:e4:53:1e:fc:65:7d:d1:39:c1:b9:18:df:be:ba:
                    17:fc:28:e2:ed:ce:1b:c6:ea:15:8a:e1:e3:2e:30:
                    27:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6B:25:C5:4A:1E:FD:4C:0E:FA:93:5A:BE:70:CC:21:E3:DA:74:49
            X509v3 Authority Key Identifier:
                keyid:5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:0a:54:bc:6f:69:3e:8b:49:3f:26:1c:2d:ec:56:75:21:3a:
         d7:f9:64:6e:7a:16:03:51:31:0f:db:b0:35:c6:b1:14:f8:45:
         23:77:70:46:5f:62:a9:de:49:8b:d2:88:3b:df:13:32:89:bf:
         f1:7a:2a:b3:44:7e:5f:ef:8f:81:8a:ea:24:9d:56:45:c0:15:
         ed:df:33:dd:56:94:f9:90:40:2f:11:85:b4:01:48:e9:b6:b9:
         ee:30:79:bb:00:c2:f2:fb:88:74:8f:a2:6e:0b:2e:02:65:ac:
         ee:22:03:b3:c0:8e:21:cd:36:a1:fc:c5:93:4c:95:19:69:b8:
         8b:7b:4c:ea:fa:94:cc:1e:d6:86:89:ab:cd:7b:9c:af:58:9e:
         7d:5c:3a:61:e1:12:33:56:9f:6a:ed:40:e2:51:70:a1:1a:9a:
         d5:ea:da:e3:9e:32:0f:b0:27:96:0b:56:55:28:1e:ad:2e:13:
         b5:3b:d9:11:e9:4c:de:8d:47:c6:23:af:5c:98:0d:02:94:1b:
         19:b7:aa:fb:28:c8:8b:6b:ad:8e:e0:94:1e:ce:4e:e2:34:54:
         06:f0:84:a1:5a:64:ec:83:1f:a9:e5:b0:55:a1:40:7d:de:b9:
         cf:7f:22:b1:5b:7a:9e:80:80:78:ec:c4:c1:83:59:9a:12:79:
         57:ca:ab:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:35 2026 by rpki-client