Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
File:                     d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft (raw, json)
Hash identifier:          yAwxmIAZ/0f9Ac460H11rJ/7sLqKEyoFX7YNwXQxOq4=
Subject key identifier:   FC:17:18:63:7B:39:FE:38:B3:59:E3:88:AE:74:EF:C4:FC:1A:6C:B7
Authority key identifier: 77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E
Certificate issuer:       /CN=77c7b457f9af042924142373ce090f7fa876257e
Certificate serial:       019D9A74D489326E4B5D8AF126703543399E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
Manifest number:          1182
Signing time:             Fri 17 Apr 2026 08:00:40 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:40 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:40 +0000
Files and hashes:         1: VxfD5b_ylAB_MTnBIwWLQed3wsQ.roa (hash: dPV7nvv66J/N7qMIMaqxbPZi7u5SK+lm/oBP/6Z99x8=)
                          2: d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl (hash: RkZnd8CK9U7293n3Xn2xxxAeLElaWIOolU9/T9AFHWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:d4:89:32:6e:4b:5d:8a:f1:26:70:35:43:39:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c7b457f9af042924142373ce090f7fa876257e
        Validity
            Not Before: Apr 17 08:00:40 2026 GMT
            Not After : Apr 18 08:00:40 2026 GMT
        Subject: CN=fc1718637b39fe38b359e388ae74efc4fc1a6cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:5a:d5:b2:a9:0b:df:a0:75:b7:73:08:8d:
                    bc:7f:9c:b1:20:89:42:5e:16:4d:cc:e1:ad:33:84:
                    4e:46:2d:df:4e:09:fe:92:0d:15:ae:90:78:20:57:
                    6f:a0:d6:9e:98:96:b0:5e:f4:3f:28:81:b1:fa:d1:
                    1c:eb:fe:5f:52:16:91:fd:75:32:77:70:1a:0c:5c:
                    8c:7d:d7:57:ae:0d:70:4e:6d:83:ed:e4:43:3e:4e:
                    85:fa:0f:a4:5f:2b:b9:2c:cd:5d:a7:28:8f:26:37:
                    bc:25:dc:18:83:ae:c9:18:9b:35:6b:31:31:ff:11:
                    94:b1:24:38:bb:55:ab:5a:5c:91:b8:b4:20:99:5b:
                    b5:c4:a0:65:b8:3b:b6:3e:76:78:f0:46:a2:61:aa:
                    09:75:a4:66:b9:50:63:3c:bb:4b:61:b2:39:92:b6:
                    9b:1d:2f:2b:a7:bc:64:44:9c:f0:94:2a:ac:7a:fc:
                    16:3a:cc:1c:72:4f:45:68:9a:42:51:88:99:99:e1:
                    c7:36:28:54:8c:e0:4f:64:6e:6f:f7:d4:7b:eb:af:
                    c1:bb:ad:84:ae:01:55:4a:d1:87:eb:d1:45:bd:ee:
                    98:72:81:89:91:e3:3f:97:f1:f2:b2:05:10:e8:06:
                    2d:92:3d:c5:54:f4:40:e9:28:31:7e:3d:61:8e:f0:
                    50:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:17:18:63:7B:39:FE:38:B3:59:E3:88:AE:74:EF:C4:FC:1A:6C:B7
            X509v3 Authority Key Identifier:
                keyid:77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5a:ad:a7:31:a9:24:22:5e:91:35:fa:b0:99:08:25:20:44:
         40:81:69:5f:9d:f0:b5:1a:86:64:19:d6:9d:81:f5:2b:06:12:
         64:e4:1b:14:ee:3b:1b:a6:f9:ea:9a:3e:65:9d:c2:e6:5f:53:
         a2:70:4b:8e:1a:43:43:ac:23:27:67:5c:74:a4:b2:7c:38:b2:
         91:55:2c:0d:34:c5:d8:96:ab:d5:ab:0e:94:3e:22:6e:5f:ad:
         95:d6:f0:b5:3c:e5:49:37:93:c1:4f:40:03:18:f0:81:f0:ee:
         4a:ea:4e:e4:07:ba:5c:3d:17:01:34:dc:3e:58:74:c2:11:de:
         7e:1e:16:ed:af:41:35:c7:de:6d:81:01:a1:27:7b:f7:81:a3:
         7a:c6:20:f6:2f:e5:14:49:94:15:09:c1:22:e3:cb:52:72:60:
         b1:ea:48:a6:b5:8b:7b:56:75:df:28:66:da:07:0e:37:ff:2e:
         31:72:10:b0:1a:64:94:61:0a:d8:42:cd:42:60:ee:4b:f1:db:
         57:c4:7c:09:f5:a3:97:2e:7f:57:79:70:80:7f:27:99:8e:f8:
         45:56:cc:bf:29:f9:24:41:61:a5:b0:46:0b:8b:56:d8:db:3e:
         03:40:7a:e0:f8:95:71:ef:6f:a8:fe:dd:87:e3:e7:d7:52:9b:
         20:9f:79:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:10 2026 by rpki-client