Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
File:                     DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft (raw, json)
Hash identifier:          CHZGVLJIMBws3XQ4xgqtwTIxhVfGwx0Edz2cEac3Je0=
Subject key identifier:   0D:29:42:8D:89:EB:00:E3:01:FF:2D:E2:6E:4C:63:17:F7:86:A6:4B
Authority key identifier: 0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05
Certificate issuer:       /CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
Certificate serial:       019D992BA3BD46AA449A9C50AFA5BB66D6A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
Manifest number:          18C5
Signing time:             Fri 17 Apr 2026 02:01:07 +0000
Manifest this update:     Fri 17 Apr 2026 02:01:07 +0000
Manifest next update:     Sat 18 Apr 2026 02:01:07 +0000
Files and hashes:         1: DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl (hash: T87zy/ceB55mPr+OnmAS+GjpKhHnZhloTSwKxYvA/ic=)
                          2: Eo2yGv92Iskz5EbG0NmCt1URmKk.roa (hash: fxnebqPHQp7jptxrhNUpFE2k+KgOhPZJRXJqh9LjE7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:a3:bd:46:aa:44:9a:9c:50:af:a5:bb:66:d6:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
        Validity
            Not Before: Apr 17 02:01:07 2026 GMT
            Not After : Apr 18 02:01:07 2026 GMT
        Subject: CN=0d29428d89eb00e301ff2de26e4c6317f786a64b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:29:9d:86:bb:bd:eb:4b:20:5a:4d:88:29:a1:
                    4d:7d:dc:b9:2a:72:a3:e3:a4:c3:0e:86:f3:83:b9:
                    16:31:ef:8a:7f:df:80:e6:f1:67:8d:11:7a:4a:77:
                    d8:6d:83:62:b8:e1:53:c5:c2:dc:0d:0e:ec:ff:c8:
                    e4:ab:b1:8b:52:4f:ac:ed:dd:28:4e:b8:ae:5a:6c:
                    54:a2:b9:23:41:f2:6f:5c:54:65:71:b3:49:35:31:
                    32:96:4d:27:75:9d:6f:1d:e3:21:26:de:49:dd:aa:
                    64:9c:ca:f6:28:01:8a:06:c3:c6:c5:24:84:ac:10:
                    44:39:74:db:5b:58:cc:e9:11:17:d4:1d:f4:14:8f:
                    ef:bf:17:7f:99:93:c9:1b:26:22:fd:73:f0:f0:03:
                    bc:87:92:c1:f5:ae:84:98:90:9a:f8:11:33:93:cb:
                    f7:02:99:d3:56:c4:11:d3:3e:d8:f9:10:5e:31:ef:
                    15:4b:28:c2:af:e5:02:4e:d1:a9:fb:96:d8:df:5f:
                    ea:95:5c:36:3a:6b:5a:2c:a6:0f:b5:ba:36:89:00:
                    02:66:f2:4c:34:f3:5d:2e:d6:e1:eb:32:40:c2:bb:
                    ad:93:cd:d0:4a:83:59:8f:17:98:d5:49:95:43:53:
                    3a:fa:21:c1:24:52:83:48:28:07:ae:15:f9:31:9c:
                    ef:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:29:42:8D:89:EB:00:E3:01:FF:2D:E2:6E:4C:63:17:F7:86:A6:4B
            X509v3 Authority Key Identifier:
                keyid:0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:39:b1:09:50:fb:7a:ee:4f:e4:9b:fb:8e:9f:2f:e5:65:b4:
         1a:d8:a6:f2:b6:17:24:d1:18:2d:8e:1c:bd:0c:e0:64:bf:e5:
         13:d2:b6:9f:ab:84:0a:29:d0:85:47:51:eb:16:5c:c5:54:a6:
         69:38:af:52:7a:e7:55:d2:d3:6d:c1:ea:29:ff:a1:23:d5:7f:
         3d:9c:ac:1a:e1:e8:d8:2c:0d:ff:03:b6:fa:1f:d8:7b:a4:da:
         ae:12:5c:7b:96:5b:0b:ba:1f:c3:92:55:9f:20:54:b8:a9:2e:
         c6:57:1a:01:e9:bc:d6:ed:f8:53:9f:59:2e:ff:00:80:ac:a2:
         43:f8:f9:2e:55:69:62:5b:dd:c0:8b:4f:14:91:8e:8c:c0:13:
         ae:57:80:79:6b:c4:a5:9a:54:32:9e:5d:b6:45:74:43:1f:12:
         cc:ca:de:f5:d9:a6:ed:fc:e9:fb:89:e1:0a:40:c0:f5:5f:73:
         0e:8e:09:5a:d8:aa:ac:b2:b2:ec:17:2c:b6:41:2f:bf:f5:93:
         97:c2:91:3b:5c:40:fc:8c:a5:36:ef:b0:32:dd:ab:64:e7:a8:
         dd:66:56:45:67:60:32:cd:bc:ec:eb:a2:33:85:b8:4b:9d:0b:
         3f:ab:e2:66:d7:e9:34:51:7e:37:41:96:83:9f:b9:af:28:b2:
         85:40:a3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:45:27 2026 by rpki-client