Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
File:                     pPTBZVXW8DttbI0KjMvhrx6uxDo.mft (raw, json)
Hash identifier:          SHim/ogbIrVCinCJeXkc9Ce4bs7qYjXipRTcYb3ydfs=
Subject key identifier:   49:F6:99:3E:03:CF:31:EB:FF:83:9A:81:DC:41:90:94:F2:BE:D1:F3
Authority key identifier: A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A
Certificate issuer:       /CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a
Certificate serial:       019D9DE3FF2E303165DF885381C7596A7968
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
Manifest number:          02AA
Signing time:             Sat 18 Apr 2026 00:00:58 +0000
Manifest this update:     Sat 18 Apr 2026 00:00:58 +0000
Manifest next update:     Sun 19 Apr 2026 00:00:58 +0000
Files and hashes:         1: lha0ZmedDVL5ojeX6XufkbgdzDc.roa (hash: aql9eZoUUBsK6RGXxorryRAzls71w3x+Yu3C3M/JeMA=)
                          2: pPTBZVXW8DttbI0KjMvhrx6uxDo.crl (hash: H24B4OhNvLiMto2Lv9WT0CaU5EtLgPBiYAQVfoCt2KA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:e3:ff:2e:30:31:65:df:88:53:81:c7:59:6a:79:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a
        Validity
            Not Before: Apr 18 00:00:58 2026 GMT
            Not After : Apr 19 00:00:58 2026 GMT
        Subject: CN=49f6993e03cf31ebff839a81dc419094f2bed1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:43:c2:3c:21:e8:91:4f:4c:95:cd:53:9e:1a:
                    20:fe:ea:89:7a:2a:d5:6c:3b:2c:62:58:72:4c:e9:
                    7b:38:20:a5:6e:0b:18:86:e9:ee:2d:87:f7:d7:bd:
                    ea:40:36:ff:29:69:f5:1c:a4:f1:63:97:c4:8b:25:
                    e8:19:56:08:ef:3c:f4:41:2e:97:c5:18:0c:27:ff:
                    3d:d4:22:f4:62:f2:7a:88:66:8d:98:80:6c:f9:d1:
                    5f:d3:86:77:3e:72:07:09:bb:5d:8b:4a:18:58:18:
                    5a:0f:e3:10:4a:41:49:a9:d6:47:a5:41:8d:62:19:
                    2b:cc:da:52:17:9c:7c:e1:c2:62:61:a6:1b:fd:f2:
                    f4:54:aa:cd:b3:44:81:8f:08:72:47:1c:40:ef:e8:
                    68:bf:9b:40:ca:18:b3:91:f3:e9:d6:ef:32:9b:0e:
                    48:18:f1:04:e5:40:b9:7d:39:37:f1:ce:5a:27:da:
                    e2:a2:e0:97:d9:a2:50:27:38:bf:8b:17:54:4f:e4:
                    df:1e:9f:10:f5:b0:d0:c9:f5:14:59:d5:76:74:b8:
                    c6:b5:33:b7:fa:27:60:23:2b:a5:a6:c0:e6:39:7e:
                    e5:ad:3a:92:f4:ff:09:17:78:45:2a:e1:45:30:ab:
                    3a:bd:ec:5f:18:6b:1e:b4:51:dc:a4:70:e6:37:17:
                    fa:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F6:99:3E:03:CF:31:EB:FF:83:9A:81:DC:41:90:94:F2:BE:D1:F3
            X509v3 Authority Key Identifier:
                keyid:A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:39:b4:5b:22:23:67:82:d4:c0:9f:e2:09:77:8e:a2:49:17:
         f3:ff:84:eb:57:d3:da:9a:cf:40:f3:d9:41:45:a3:75:b9:16:
         e8:6b:40:da:de:9a:1f:ca:fd:69:38:bd:2c:b3:66:54:95:34:
         d1:5b:9d:fc:6f:06:75:26:d1:a6:da:62:7a:b6:a7:ce:a2:9a:
         57:93:f1:d8:46:37:98:11:19:5d:64:e9:f6:fa:da:17:2b:04:
         22:9d:b5:73:6c:de:ef:35:8d:fc:2e:e8:1d:0f:4e:eb:7e:33:
         b1:9b:d2:92:10:69:1a:92:b7:d6:46:8a:3d:5e:a5:c2:ab:aa:
         ec:80:45:a7:7b:7b:4a:72:0d:bf:2f:e7:1b:c9:ec:e9:6e:e5:
         b8:6c:ff:10:47:81:2a:45:5c:51:c7:83:5c:24:5a:d5:fd:8c:
         0f:b0:b6:67:52:79:eb:4a:08:1a:52:93:d6:7d:5d:84:dd:39:
         91:2e:a4:9d:64:d1:0f:95:fc:9f:c1:96:4b:06:ba:ce:1c:b1:
         d4:75:e9:37:69:a0:50:21:d6:35:1e:f1:da:b9:c6:c9:24:8f:
         4c:c9:04:73:72:50:b3:e6:5c:9f:c3:99:3f:04:e1:84:78:25:
         c2:62:fc:48:e1:ce:0f:ab:98:2b:20:d1:cb:9d:88:92:6f:c3:
         9f:4d:f0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:43:04 2026 by rpki-client