Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.mft
File:                     56q82sOtn7MtJK1gyKJsueq41YU.mft (raw, json)
Hash identifier:          wI7i3y/anW7cphYiUHqcGMkP0yeEObcsDPhDjW6gNQ0=
Subject key identifier:   B7:48:A7:65:DC:18:25:B7:1A:3B:13:60:DD:A3:A1:B9:76:8F:C9:9F
Authority key identifier: E7:AA:BC:DA:C3:AD:9F:B3:2D:24:AD:60:C8:A2:6C:B9:EA:B8:D5:85
Certificate issuer:       /CN=e7aabcdac3ad9fb32d24ad60c8a26cb9eab8d585
Certificate serial:       019D98F44FA0A3979943C07D98A1FD922BAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 01:00:41 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:41 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:41 +0000
Files and hashes:         1: 1n-fLpwGNv0XEKkYGc5i5IYYKE4.roa (hash: LdbcjYgR0sUT6a/ZumcXflfofrXMjG43yFEGklbWfOk=)
                          2: 56q82sOtn7MtJK1gyKJsueq41YU.crl (hash: b7S7DUQ+Hc4EI0KZ/GOzM0InrXTCo5badpuG/F/PqYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:4f:a0:a3:97:99:43:c0:7d:98:a1:fd:92:2b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7aabcdac3ad9fb32d24ad60c8a26cb9eab8d585
        Validity
            Not Before: Apr 17 01:00:41 2026 GMT
            Not After : Apr 18 01:00:41 2026 GMT
        Subject: CN=b748a765dc1825b71a3b1360dda3a1b9768fc99f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a6:1d:e4:a7:85:40:d9:49:03:c6:5a:fa:e9:
                    1f:6d:09:42:d8:7d:18:35:db:26:eb:9a:69:9e:9b:
                    a7:ed:87:9e:f1:a8:27:35:97:b1:6e:b5:99:e6:8e:
                    9e:8b:bf:0a:25:40:18:14:28:7a:40:d5:a3:04:27:
                    3b:85:66:9a:cb:6a:c6:2f:a7:cc:cd:36:16:aa:9f:
                    5d:6b:d6:da:05:52:b3:12:de:d1:f3:27:fd:ce:18:
                    3b:56:11:65:15:bb:aa:b0:6e:59:12:7c:95:45:b9:
                    20:52:8b:b4:76:09:de:c8:b3:c6:df:4d:f0:1e:c7:
                    3a:72:fd:6b:37:8b:98:65:1d:6d:e8:cc:45:6e:7e:
                    6b:23:28:5d:86:d1:ea:6d:6e:16:59:08:dc:47:ed:
                    4d:22:8b:9a:4d:3e:ce:a4:29:f0:03:a9:f7:8d:f0:
                    13:06:fe:7f:aa:f6:f2:9c:38:bd:3e:1b:3f:38:1d:
                    50:53:22:48:af:ea:0a:f3:9f:a6:f3:8a:e1:4f:a9:
                    68:80:16:f1:de:27:89:12:f4:fb:a0:8f:08:11:24:
                    29:14:27:6f:7e:7b:76:9f:64:c3:04:ae:bc:c7:8c:
                    9a:0c:bf:19:14:b0:1e:84:04:94:12:05:17:ca:f7:
                    d5:4c:e1:eb:63:48:0e:e6:73:85:e9:9b:6a:cf:e7:
                    e5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:48:A7:65:DC:18:25:B7:1A:3B:13:60:DD:A3:A1:B9:76:8F:C9:9F
            X509v3 Authority Key Identifier:
                keyid:E7:AA:BC:DA:C3:AD:9F:B3:2D:24:AD:60:C8:A2:6C:B9:EA:B8:D5:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:63:a5:5e:e4:b2:d2:70:88:30:24:3d:06:fc:10:02:85:6c:
         43:30:8d:f8:b0:9c:ee:56:4e:dc:fd:36:ae:f4:10:b5:a3:e7:
         40:bf:3c:fb:fa:11:eb:b0:cf:8f:ba:08:50:0d:4a:65:08:5a:
         67:72:bb:b1:c7:bb:5b:28:d7:a5:2c:a7:18:4b:5b:7e:bf:94:
         62:4f:c0:d6:dd:af:0b:74:15:1e:3d:78:f2:68:4a:56:d1:fc:
         40:ac:37:4b:db:1a:75:a3:87:fa:ae:02:3e:53:48:08:96:a1:
         4f:66:61:8f:5a:d1:1b:4b:ad:e1:59:5e:50:ac:b0:4d:b8:3c:
         9c:50:b4:a9:65:02:69:16:4e:bc:7a:81:9b:24:2f:63:6c:c6:
         10:78:23:2f:49:59:43:10:bb:0d:6e:b8:44:ce:42:f7:8c:97:
         74:09:b5:22:fd:cf:8c:b5:60:ed:fe:51:82:b9:89:35:c4:bf:
         48:9d:8f:f9:c9:b0:63:e8:73:45:72:a3:62:da:7d:b8:29:a3:
         27:c7:c0:59:c1:98:4e:97:98:05:a1:52:44:17:b6:db:25:97:
         6e:77:17:78:65:fd:da:93:30:77:21:6e:9d:c2:40:7b:e6:3c:
         ce:ef:0f:3a:5e:e5:9a:61:f8:7e:27:4e:8d:0a:7f:45:f0:0d:
         be:0e:c9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:24:24 2026 by rpki-client