Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
File:                     9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft (raw, json)
Hash identifier:          oPDLDHojzbG8KWYs1SAK0V8pksE8uwWQzqznqXKb9Gg=
Subject key identifier:   4C:92:C2:9C:71:65:91:E6:CE:FA:4B:BD:14:41:B6:07:14:7E:98:94
Authority key identifier: F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
Certificate issuer:       /CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Certificate serial:       019D97E270F9A5D387D4FDBB5F26B71BE93D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
Manifest number:          18C1
Signing time:             Thu 16 Apr 2026 20:01:32 +0000
Manifest this update:     Thu 16 Apr 2026 20:01:32 +0000
Manifest next update:     Fri 17 Apr 2026 20:01:32 +0000
Files and hashes:         1: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl (hash: Xda++VpQO5trS7dEy4ftqJtvB8ChG1W/uonSKKqbgX8=)
                          2: mqnfQZBp8h7WvOAdc-8gqdHYqtw.roa (hash: ewJdIlVBdFix7giIGBtZRJXpQjmTUTAe4SWLnLx8JZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e2:70:f9:a5:d3:87:d4:fd:bb:5f:26:b7:1b:e9:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
        Validity
            Not Before: Apr 16 20:01:32 2026 GMT
            Not After : Apr 17 20:01:32 2026 GMT
        Subject: CN=4c92c29c716591e6cefa4bbd1441b607147e9894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:28:b3:e2:e4:79:a8:25:e6:c5:0d:97:0c:62:
                    b4:60:1e:7f:d5:eb:cb:61:56:88:3f:ca:3f:4e:c5:
                    30:ad:8c:96:18:5f:55:71:ec:5b:99:28:19:c1:8e:
                    5b:35:e5:4b:4b:92:eb:37:02:86:54:74:d2:d6:7a:
                    bb:8f:94:26:6e:c5:fe:36:18:81:30:96:7f:34:2b:
                    b6:92:43:6b:0e:ea:24:67:2c:f5:58:c7:94:c0:26:
                    ce:2b:8f:3d:04:3a:b5:18:dd:e2:fc:7c:15:8b:c2:
                    95:5e:db:de:d4:a4:80:fd:0d:49:ef:0e:b4:51:c8:
                    21:91:ce:d1:00:de:5b:3f:6a:4c:a0:04:de:e8:d7:
                    62:a5:fe:24:59:df:de:21:02:d3:cb:79:a7:5a:55:
                    85:a6:ed:9f:65:a0:9b:37:d1:28:14:e7:1d:97:85:
                    bd:c8:bd:d3:dc:d3:4d:ad:96:fe:37:c8:92:bc:3b:
                    3f:20:0e:ad:d1:ae:c0:23:27:10:d0:e7:cb:46:91:
                    72:b5:5f:75:b9:7a:40:41:90:c8:ae:46:54:c4:aa:
                    83:13:f3:7d:2b:87:26:fc:67:fe:52:37:a0:94:6b:
                    48:85:6c:57:78:d3:dd:0b:3a:c0:e2:63:6f:d4:32:
                    3d:ca:7f:94:da:43:22:4e:c1:04:2b:e0:f1:e6:31:
                    aa:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:92:C2:9C:71:65:91:E6:CE:FA:4B:BD:14:41:B6:07:14:7E:98:94
            X509v3 Authority Key Identifier:
                keyid:F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:0d:a9:64:a6:68:21:92:13:e7:d2:f0:af:a4:bf:bd:d3:92:
         d0:a4:5c:88:af:af:e6:b1:c5:43:c6:e7:da:f1:f7:b7:82:d8:
         a9:bf:90:36:18:a1:4e:d9:a9:9d:bf:d0:1e:95:8e:55:2e:92:
         d5:b3:05:b7:69:56:23:e8:51:53:ee:06:21:82:56:5f:ff:98:
         da:1a:4a:3c:90:3a:f5:b6:e0:9d:37:d1:b3:b4:f9:a3:07:27:
         c9:f4:e2:1a:89:d1:4f:77:e2:46:48:2c:0b:ee:52:33:c7:4a:
         73:cb:b5:c8:8e:e1:e0:1c:47:cc:a4:ca:67:c2:3b:79:2f:af:
         b0:ae:4c:60:61:1d:18:d4:bf:9e:1b:34:75:4c:39:bd:9b:f3:
         ad:f4:2a:12:b1:65:b1:9b:e2:ce:43:fb:cb:21:86:dd:e0:ac:
         9c:75:6e:5d:f3:be:d8:a4:4a:59:f2:64:50:ab:20:b1:3c:e8:
         c4:61:68:ab:9c:ac:18:2a:70:85:2b:4d:a2:85:c6:17:d6:0e:
         c0:97:09:49:00:3e:6a:9f:ea:08:f6:70:23:e6:90:a0:7a:6e:
         6d:c6:e8:60:c5:e8:ca:64:6a:0d:f8:dc:d0:53:79:c6:ae:04:
         d9:15:90:37:ea:13:7a:9a:eb:3f:e4:13:fd:5e:1a:66:bc:e4:
         98:28:4b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:03:21 2026 by rpki-client