Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
File:                     4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft (raw, json)
Hash identifier:          Exe8QqEhef2V1k4wxXtBCQ7rzcSAX2AH+r4VmZrQEy0=
Subject key identifier:   B0:76:AF:04:41:5B:6F:53:E2:D7:17:D1:F6:7B:2E:DE:66:3E:57:F5
Authority key identifier: E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
Certificate issuer:       /CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Certificate serial:       019D98F523C323A5E23FFAAC2919B38988DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
Manifest number:          133B
Signing time:             Fri 17 Apr 2026 01:01:35 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:35 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:35 +0000
Files and hashes:         1: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl (hash: CE3UEwTEnBLY19IhoqIdQa70Q+zPE9/RqPFIlvpCL6s=)
                          2: maEv5ArPl0MhVYV7tQz9rkyTAIo.roa (hash: dBiLGOeBpvZw0H7gef9rbExfaEt6iLiJPLCEXhR/0HU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:23:c3:23:a5:e2:3f:fa:ac:29:19:b3:89:88:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
        Validity
            Not Before: Apr 17 01:01:35 2026 GMT
            Not After : Apr 18 01:01:35 2026 GMT
        Subject: CN=b076af04415b6f53e2d717d1f67b2ede663e57f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:92:22:4c:55:b9:2a:48:a0:c5:96:7d:79:d1:
                    e7:f5:6a:30:c8:5b:50:0d:84:f1:cb:dd:2c:b9:21:
                    1f:46:7c:9c:80:63:3d:c0:f5:64:e6:28:3a:c4:da:
                    87:e3:19:55:0e:2f:c8:ad:4a:ab:7c:c9:6b:d3:4b:
                    7a:0f:d5:42:24:71:58:bb:f9:51:91:12:ec:2c:1a:
                    4d:75:9a:9d:da:7b:39:a6:ef:1e:c4:c6:1b:79:d3:
                    41:8a:be:4a:0e:8e:63:3e:98:bc:19:b1:7c:d4:40:
                    7a:10:7c:3a:c0:6b:04:bc:1a:0d:79:7b:46:ec:6a:
                    4a:36:52:91:3c:96:85:4d:44:26:95:27:f6:e0:1d:
                    32:54:ec:e6:ba:00:cc:3e:bf:86:82:da:59:e9:10:
                    20:7f:66:6b:1a:91:b4:0f:a8:76:a0:39:5e:79:a4:
                    a2:95:1c:ba:a4:92:ec:7f:13:ae:fe:50:90:71:b9:
                    ce:be:f9:69:b4:26:ae:62:f0:d2:0c:56:d9:f3:8b:
                    ac:29:c4:c7:cf:48:fe:a4:43:3e:11:85:6b:44:48:
                    c5:24:d9:a5:37:ac:f3:c1:18:f4:bd:6b:7d:59:9d:
                    eb:c2:2e:b2:fa:e5:be:c7:57:68:56:e9:7e:be:87:
                    a0:aa:9a:6a:ed:4a:d2:7d:4d:86:5a:a0:63:c1:42:
                    cd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:76:AF:04:41:5B:6F:53:E2:D7:17:D1:F6:7B:2E:DE:66:3E:57:F5
            X509v3 Authority Key Identifier:
                keyid:E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:e4:b4:2b:78:23:b6:b1:89:29:cb:8d:78:60:a0:cd:1b:46:
         fd:27:c1:f2:10:62:55:1b:a9:98:06:7d:22:5d:eb:8d:a4:71:
         d6:8c:18:4f:7e:19:bf:ec:ee:6b:9e:cf:ea:58:ca:b1:ea:53:
         0f:da:7e:3f:07:b7:6a:4b:7b:1e:65:59:04:15:78:83:09:65:
         9d:09:0b:33:b4:0d:c9:74:d6:66:71:4b:55:12:48:bb:bf:b8:
         9b:84:dd:ef:f2:3b:b5:ae:49:3b:47:bc:49:ff:a2:75:06:f8:
         28:0c:a5:52:bc:0b:e5:2e:58:96:88:0d:23:55:0d:f4:c3:bb:
         bb:ca:cb:b4:6a:39:8d:8a:87:81:b6:26:84:7c:36:da:a3:8b:
         a5:4e:6c:cc:75:ab:33:f5:51:ea:16:7f:e7:2d:bd:de:a8:78:
         9d:1a:74:7a:f6:99:9e:1a:f3:fd:c2:1a:ce:6f:8c:b9:3d:3b:
         eb:ee:c9:29:2c:72:f5:ef:dc:f0:ab:a9:bd:29:31:56:d0:24:
         26:df:99:ba:78:10:05:e9:40:a4:b0:fc:11:d2:74:97:24:5f:
         70:eb:53:92:4c:7a:f0:a0:ba:a4:e6:46:9f:1c:d8:80:7c:c6:
         eb:dc:50:59:10:eb:20:27:99:d4:41:04:d6:cb:8b:89:8b:84:
         55:c7:70:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:02 2026 by rpki-client