Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft
File:                     FDze4UaxO5Zn3v8_ezDpoaozTIM.mft (raw, json)
Hash identifier:          cPEIYfMjwCJy1jj2kVJ5DFow6K4FGEdzMLOaaXknBCY=
Subject key identifier:   37:65:A4:F7:05:31:D5:76:0D:06:A2:65:70:AB:C7:1F:B5:2D:E3:9D
Authority key identifier: 14:3C:DE:E1:46:B1:3B:96:67:DE:FF:3F:7B:30:E9:A1:AA:33:4C:83
Certificate issuer:       /CN=143cdee146b13b9667deff3f7b30e9a1aa334c83
Certificate serial:       019D99D022B2206390A5D5B7BDB7B31085B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft
Manifest number:          15C4
Signing time:             Fri 17 Apr 2026 05:00:47 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:47 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:47 +0000
Files and hashes:         1: FDze4UaxO5Zn3v8_ezDpoaozTIM.crl (hash: vP+HPcIlOtYokMT1BvnbGszY+RAQFpqjSc585WAJAkQ=)
                          2: oQtEQsDloQjn_yHhdWK48mAuP_0.roa (hash: IBQycGDwnrvsxVfFQ3rFUHD2uAasJQXEOZ891wf4Qks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:22:b2:20:63:90:a5:d5:b7:bd:b7:b3:10:85:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143cdee146b13b9667deff3f7b30e9a1aa334c83
        Validity
            Not Before: Apr 17 05:00:47 2026 GMT
            Not After : Apr 18 05:00:47 2026 GMT
        Subject: CN=3765a4f70531d5760d06a26570abc71fb52de39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5d:1a:2d:8a:1e:49:a7:4c:23:1b:26:4b:33:
                    e7:1b:0c:c4:6b:83:47:73:86:15:b2:91:fe:a1:fe:
                    3a:fe:3b:03:e0:2c:9c:77:2b:85:6b:62:ad:f6:18:
                    c1:88:3b:b1:03:6a:88:2b:46:c2:ba:87:a3:69:bd:
                    58:e9:4c:2f:8b:c1:47:02:c1:d0:8a:53:7c:1f:61:
                    46:c7:41:ef:da:f7:a6:50:91:1e:67:f9:39:68:ee:
                    1a:f8:4d:01:dd:5d:69:83:38:7f:4a:1d:f7:08:16:
                    eb:18:d8:de:77:fa:01:68:e6:94:fb:2c:2e:14:ff:
                    4e:3c:e4:cf:42:0b:c7:dc:d2:d5:95:ae:49:d6:f4:
                    8a:3f:ba:e2:92:4c:b9:c4:4d:87:5f:3b:93:58:f5:
                    1b:cf:81:8c:60:75:6c:7b:c0:dc:e7:9b:41:2d:1c:
                    ea:56:76:cc:0f:0e:c8:83:3c:5b:1a:e1:55:89:e0:
                    f2:a9:cb:2f:24:ed:85:6f:81:8d:40:11:66:37:d7:
                    36:1c:81:20:39:7c:c0:53:ac:c7:28:68:fd:56:45:
                    73:9a:84:40:06:71:f7:ab:df:99:7e:ae:8e:c8:31:
                    3f:47:1e:54:24:af:cc:5c:a4:c2:ee:fa:c2:05:f6:
                    95:54:48:b9:15:70:0b:fa:9c:78:98:a7:27:42:70:
                    80:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:65:A4:F7:05:31:D5:76:0D:06:A2:65:70:AB:C7:1F:B5:2D:E3:9D
            X509v3 Authority Key Identifier:
                keyid:14:3C:DE:E1:46:B1:3B:96:67:DE:FF:3F:7B:30:E9:A1:AA:33:4C:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ef:6e:7e:43:e2:d1:7a:0a:27:c4:c4:24:24:7c:2e:1f:83:
         c3:2a:37:86:f5:9e:43:00:4d:51:41:75:ab:f0:5d:5b:4b:cb:
         b6:68:0b:e2:be:ec:d9:25:bd:57:39:7a:e0:db:1a:88:e7:28:
         c9:d9:79:76:bb:79:fd:be:4f:a0:e5:05:bb:43:0f:68:39:ca:
         5f:80:8a:fb:52:d7:9f:16:f6:20:9d:5e:cf:ac:82:b6:74:e6:
         80:14:4a:26:b9:d7:f3:08:a0:da:f8:7b:2b:bf:35:7e:c7:51:
         fb:f9:93:f6:ef:1c:e6:af:8e:77:c2:91:d0:15:90:bf:8a:c6:
         a5:4d:5a:b6:44:48:db:71:70:19:0c:32:de:fc:d1:d5:27:e0:
         93:b0:ae:56:48:f2:8d:53:09:47:a6:71:31:63:3d:df:6c:20:
         95:ee:3f:2a:3e:8c:3f:07:20:a2:90:b2:89:93:2d:2a:2a:c1:
         7a:ef:4c:30:cb:bb:c6:b6:19:f3:43:d8:f6:ac:4f:09:b4:93:
         fa:8b:b6:84:11:2b:0c:89:e6:a0:05:55:32:d2:39:de:ae:e0:
         20:4b:9e:f1:95:33:a5:69:f6:5b:d1:18:16:dc:70:33:53:7e:
         dc:16:ad:04:83:2b:89:13:d0:21:46:2e:39:f5:78:3f:c4:37:
         e5:66:2f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:11:51 2026 by rpki-client