Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
File:                     sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft (raw, json)
Hash identifier:          Mdzhhq1tVYxsHSxk7/7EzOT56Q/J82/WI041uj6HF2Y=
Subject key identifier:   8D:2A:58:A4:88:1E:8D:B4:D3:88:7F:9A:D2:79:A4:1A:D8:A0:E3:22
Authority key identifier: B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
Certificate issuer:       /CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Certificate serial:       019D996207E31FD5EA6EB7B1FFC05B66E1DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
Manifest number:          11CC
Signing time:             Fri 17 Apr 2026 03:00:31 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:31 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:31 +0000
Files and hashes:         1: 1ZD-5sWPvLvF_F5r7aK4sjXeBa8.roa (hash: 9g3E8L94O35utFKdVj/OF7X+jv2TAGMuo7bfCk2FBWk=)
                          2: Jgh8TRgca-Yzk4zbDo1y-y8oAjA.roa (hash: 1YiIe3dsEVG85vOw2eS5VT5pNrhUblvJwxJsfNgGFh8=)
                          3: kpO4RG28fYYVmBuJSIXGaHvSxU0.roa (hash: i8inyU2Y1UbsH+wXnBk66d0sVuBHQPuFEaJpwKKuPzA=)
                          4: sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl (hash: VUUUfKHwobZHqNKUht+s/QCMUqSmbYz7YlK2QfbgRWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:07:e3:1f:d5:ea:6e:b7:b1:ff:c0:5b:66:e1:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
        Validity
            Not Before: Apr 17 03:00:31 2026 GMT
            Not After : Apr 18 03:00:31 2026 GMT
        Subject: CN=8d2a58a4881e8db4d3887f9ad279a41ad8a0e322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:7f:72:e6:d4:02:47:0b:40:51:5f:4c:f4:18:
                    7d:c9:a2:ea:bf:d7:95:bf:e4:94:4a:87:31:1c:83:
                    0f:4d:69:7f:c1:94:ed:aa:f7:79:80:93:32:9f:39:
                    55:34:37:66:cb:57:4e:f5:58:f7:dd:e0:39:79:12:
                    74:65:8f:17:80:f1:41:40:66:ba:eb:5b:e3:ff:09:
                    85:53:91:51:16:23:48:56:64:65:95:e5:33:38:bb:
                    29:42:de:c8:aa:95:4f:4d:ff:05:ad:cc:69:a5:8d:
                    82:98:02:42:c9:d0:77:c2:e9:5b:57:fa:1f:17:40:
                    c9:67:d0:c6:72:d9:f2:56:fc:7f:c6:83:3b:3d:f4:
                    28:2c:f7:39:a7:90:29:d2:c3:d7:ce:48:15:da:59:
                    b9:f5:1e:3a:23:86:1a:50:2a:17:50:40:71:e0:1a:
                    78:81:e4:cd:b0:cf:b9:f2:d7:1f:18:e1:4f:84:4b:
                    5d:f2:22:8a:d3:e4:cf:08:0a:39:15:74:15:e3:29:
                    09:53:93:f1:c6:9c:8c:dc:28:e8:b1:f0:9a:ea:70:
                    16:51:e7:19:b4:66:cd:04:2b:dd:27:42:dd:c6:17:
                    2a:ae:d7:a0:28:26:e6:ae:ea:e1:04:26:a8:0f:a2:
                    e4:2a:45:16:58:a5:18:22:1a:7d:76:f3:42:5e:de:
                    d4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2A:58:A4:88:1E:8D:B4:D3:88:7F:9A:D2:79:A4:1A:D8:A0:E3:22
            X509v3 Authority Key Identifier:
                keyid:B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:f3:10:dc:a3:1c:15:71:84:78:83:75:85:53:36:22:46:ce:
         4b:76:3b:7a:8d:32:5c:95:89:d4:1f:68:09:76:ea:ee:08:3e:
         0e:ad:88:e8:dd:fb:e1:6b:77:60:e0:9b:0f:bf:80:ba:30:6d:
         0a:6e:3a:3c:6d:bd:20:38:72:03:d9:ce:63:63:fb:87:35:34:
         20:d9:9c:5b:b1:7c:73:29:90:55:5f:e6:01:0b:23:f8:0f:c4:
         4e:5e:c5:b0:30:1f:ba:b1:03:08:a0:03:49:92:b9:20:98:9c:
         58:26:90:e1:16:5f:95:3b:79:a9:6b:14:a4:c6:d0:c0:3f:a9:
         89:f5:70:61:76:67:7d:dd:f1:4f:64:14:07:3b:a7:18:03:13:
         6c:34:d6:10:67:58:9c:24:19:f8:35:09:4c:4c:c2:7a:99:09:
         29:61:49:84:70:44:a4:8c:9a:a8:ac:58:29:52:11:89:08:b8:
         df:ee:ed:20:57:49:2a:65:04:41:ce:a6:d8:c3:cb:60:3c:39:
         c8:16:59:09:8c:f2:65:43:be:7e:30:18:38:07:3d:ad:57:0d:
         ec:e7:bd:c6:d3:3d:ba:31:6f:3c:62:b7:05:41:b2:1e:89:43:
         ad:72:75:44:a4:6a:42:cf:03:94:d9:f1:63:f6:11:92:e5:2b:
         c3:bc:5f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:08 2026 by rpki-client