Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
File:                     0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft (raw, json)
Hash identifier:          jVdLUzCyy9OEavf/eqe7uXbKdvuZk9ZkllmxiqsMr7g=
Subject key identifier:   69:E5:42:C6:0A:BB:34:88:77:58:CE:DD:D8:0B:C3:F1:E2:67:AB:2A
Authority key identifier: D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2
Certificate issuer:       /CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2
Certificate serial:       019D9B1954F837C2C28D31692F6A3F2C92EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
Manifest number:          1853
Signing time:             Fri 17 Apr 2026 11:00:21 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:21 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:21 +0000
Files and hashes:         1: 0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl (hash: A0gkjwtiCJOjNiEDHrGxXoHnU4xc6megTGGzH1bwkdQ=)
                          2: F1ia1Weaubn8eKzVn8s3JrMAdx4.roa (hash: N+hr1h8NlI+FxivU5QhlJspaJlXj+zDKR5ugxOa3HpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:54:f8:37:c2:c2:8d:31:69:2f:6a:3f:2c:92:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2
        Validity
            Not Before: Apr 17 11:00:21 2026 GMT
            Not After : Apr 18 11:00:21 2026 GMT
        Subject: CN=69e542c60abb34887758ceddd80bc3f1e267ab2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:91:d2:11:54:a6:f4:a7:bb:ad:ba:1b:c7:60:
                    a6:b5:c9:3b:fa:6c:03:cd:2d:4e:d6:b0:fe:5d:98:
                    ab:99:48:11:49:07:b1:a2:01:18:dd:56:39:e4:46:
                    c0:3c:89:48:73:a3:cb:a7:e3:c4:23:56:36:fe:a9:
                    05:95:e6:94:03:cf:e6:55:00:9e:2a:f5:c1:58:7d:
                    b2:05:f5:6f:1c:ec:5a:75:c9:cc:62:f1:0a:9f:ca:
                    d4:08:d6:0d:2b:4b:f3:91:96:a5:c2:8f:66:79:d0:
                    1b:7d:b8:1c:70:af:30:f8:7e:78:35:da:ae:fc:d8:
                    a5:12:2f:cd:4b:b3:98:3c:f4:7c:57:f4:b8:b7:fe:
                    c0:ca:41:10:0c:2e:2d:db:05:13:9f:84:29:19:65:
                    70:8e:e8:dc:35:65:0f:bd:94:3f:7e:4d:73:65:8b:
                    a2:75:0b:ad:b3:28:79:69:c8:26:e8:50:d9:0d:b7:
                    dc:7e:70:d0:62:31:54:9c:7a:13:92:19:81:d4:ae:
                    ef:06:6c:99:b6:0c:c3:01:d0:fc:98:7a:4c:99:92:
                    a0:a9:6d:1f:d3:3f:c8:a7:f1:c5:5e:89:cf:7b:05:
                    b4:e9:eb:26:81:a6:35:3c:34:21:d8:32:91:49:3d:
                    21:04:9c:6b:70:7e:d3:ea:93:be:1e:8d:ba:e3:f5:
                    d2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E5:42:C6:0A:BB:34:88:77:58:CE:DD:D8:0B:C3:F1:E2:67:AB:2A
            X509v3 Authority Key Identifier:
                keyid:D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:4b:9e:6f:14:e8:e8:5c:c4:1f:cd:16:83:aa:88:48:26:82:
         84:d9:c7:93:1a:21:71:5e:e6:3b:b6:4d:51:bb:48:48:20:77:
         50:2d:59:2c:9c:e3:18:9b:12:b4:0f:86:86:29:d5:f0:16:4b:
         ce:20:2c:a6:07:9e:c4:7f:21:1c:cc:33:6d:6d:00:04:99:bb:
         92:52:50:6d:1f:ff:55:4a:99:30:38:1d:31:c7:c4:dc:0a:46:
         ca:e4:af:b6:4f:15:5e:b7:db:fc:79:9d:e6:96:9a:ab:6d:8a:
         b4:06:61:6a:78:55:65:e8:00:13:e8:c4:bd:7f:27:6e:b0:24:
         c2:55:b0:1b:0d:26:a5:3b:5a:bd:75:05:15:89:f1:ff:19:68:
         8b:bc:ee:48:27:cb:64:ff:3e:4c:3a:fa:74:24:dd:86:fc:24:
         25:a5:11:0b:be:c7:2f:68:fe:18:e0:3d:83:91:14:fa:1e:58:
         98:73:1e:f1:2e:5a:23:ce:af:c6:3b:9a:18:17:50:d1:2c:54:
         64:5e:b2:e2:3e:ac:ab:a3:11:0d:6d:d3:bc:ba:70:97:ff:5d:
         f7:6b:cb:f1:ab:98:59:fa:8f:96:4f:66:6f:97:3b:48:e2:65:
         70:7c:0c:b2:f4:b4:8d:f9:3c:b0:4a:63:75:54:85:7d:21:a4:
         5d:f2:22:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:53:09 2026 by rpki-client