Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
File:                     dciLHEH7612r73Q8V6zf_E-nRpk.mft (raw, json)
Hash identifier:          Eg+M/mcz9BpJBze46tB6+EFoFwhWFH3ZvIysFlGPhBI=
Subject key identifier:   82:61:93:18:1F:E6:AC:7F:12:B8:8F:14:2E:D6:75:35:6D:76:19:4E
Authority key identifier: 75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99
Certificate issuer:       /CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699
Certificate serial:       019D9B510D01950A6D507668CC99DDD0F25E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
Manifest number:          1351
Signing time:             Fri 17 Apr 2026 12:01:13 +0000
Manifest this update:     Fri 17 Apr 2026 12:01:13 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:13 +0000
Files and hashes:         1: _QeltRwVrmIgCr-eo6LxBUwzpXY.roa (hash: q8bq7ENqcKxVLtJa6stK4wblRlHycCi1u+gxzHveo3E=)
                          2: dciLHEH7612r73Q8V6zf_E-nRpk.crl (hash: f+iYefuwkeTIFz2aZQi4rfESluMEASJI/rz61pznV1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:51:0d:01:95:0a:6d:50:76:68:cc:99:dd:d0:f2:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699
        Validity
            Not Before: Apr 17 12:01:13 2026 GMT
            Not After : Apr 18 12:01:13 2026 GMT
        Subject: CN=826193181fe6ac7f12b88f142ed675356d76194e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:93:51:4b:c7:91:d2:09:9f:e1:0e:5a:b0:89:
                    b5:03:5f:ff:96:51:77:c1:cb:7a:08:ca:2d:31:d1:
                    ba:f3:77:e4:57:cc:c4:28:c2:67:d2:a6:96:98:c9:
                    22:eb:99:40:3d:c4:aa:44:7f:ac:57:31:ce:be:f1:
                    f2:b1:1b:b6:dc:89:46:d8:8d:27:3d:48:25:38:fc:
                    db:7f:59:63:b8:cc:ee:79:59:8b:f1:35:67:86:bc:
                    58:45:ab:fb:7c:84:04:33:c2:9c:f9:a5:ed:39:5b:
                    34:cb:b5:c9:23:bf:c9:39:77:d3:f0:cc:3f:6b:e7:
                    53:5c:74:7a:47:47:5c:cf:0b:87:6d:60:c7:06:3c:
                    1d:7a:e0:a1:bf:8f:77:e8:5f:1b:7b:f2:58:7c:59:
                    a9:d9:bb:b3:88:09:e8:cf:19:42:6c:72:ac:f4:9d:
                    71:15:a9:ec:8d:d8:05:a8:a9:70:72:dc:b3:d1:cc:
                    73:d0:28:08:63:eb:b1:9f:8a:d1:c6:47:b9:fa:c7:
                    cb:d3:bd:f3:72:c8:2a:30:07:b0:02:86:e1:e5:71:
                    3b:3e:c5:64:b2:76:8b:3e:a9:03:c3:67:c9:0a:69:
                    bb:9e:31:49:60:ff:bd:a6:27:36:bd:09:1c:28:cb:
                    fa:55:6d:31:c8:d0:b0:ab:e0:ac:57:da:28:97:cb:
                    d6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:61:93:18:1F:E6:AC:7F:12:B8:8F:14:2E:D6:75:35:6D:76:19:4E
            X509v3 Authority Key Identifier:
                keyid:75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:00:84:f9:eb:28:86:bc:d8:6a:ba:50:7d:95:60:8a:c0:61:
         fe:63:b8:4c:4c:a6:b1:8a:3c:ca:2e:60:c3:78:10:a1:c6:67:
         0a:bb:d2:f1:30:aa:17:5b:bf:ed:ae:8d:d1:41:7a:88:52:d0:
         61:78:99:06:13:bc:b5:1e:0f:7f:37:f3:64:e5:94:eb:1d:6e:
         66:91:53:d2:ce:25:d3:17:47:18:78:c2:12:34:83:b3:ec:84:
         30:eb:1f:e6:c3:eb:77:d2:02:8c:6a:3e:f2:ae:0f:90:a5:ea:
         eb:81:b9:b3:81:8e:e8:46:44:a6:98:7d:e9:da:31:ce:51:9f:
         de:5f:bc:4f:6b:29:f6:7e:ef:c2:3f:70:3c:e5:d9:08:9a:30:
         48:55:f1:13:65:b9:14:cd:03:a4:32:19:4c:c0:75:20:60:f0:
         7f:59:4d:d4:5f:9e:38:73:bf:66:72:8a:d4:53:b5:97:fc:8d:
         71:88:62:b0:a5:56:14:d5:f7:24:3d:fb:26:dd:ca:d7:69:8c:
         72:d8:f7:b7:e9:db:87:38:da:b2:e4:b5:00:78:fd:41:8b:29:
         7c:4d:47:e5:a0:c7:6f:43:be:df:fb:7f:db:6d:40:21:62:7b:
         28:4f:c2:c4:65:44:ce:65:4c:50:54:14:83:af:4f:f0:ab:7f:
         f2:0b:e9:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUQ0BlQptUHZozJnd0PJeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1Yzg4YjFjNDFmYmViNWRhYmVmNzQzYzU3YWNkZmZjNGZh
NzQ2OTkwHhcNMjYwNDE3MTIwMTEzWhcNMjYwNDE4MTIwMTEzWjAzMTEwLwYDVQQD
Eyg4MjYxOTMxODFmZTZhYzdmMTJiODhmMTQyZWQ2NzUzNTZkNzYxOTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5NRS8eR0gmf4Q5asIm1A1//llF3
wct6CMotMdG683fkV8zEKMJn0qaWmMki65lAPcSqRH+sVzHOvvHysRu23IlG2I0n
PUglOPzbf1ljuMzueVmL8TVnhrxYRav7fIQEM8Kc+aXtOVs0y7XJI7/JOXfT8Mw/
a+dTXHR6R0dczwuHbWDHBjwdeuChv4936F8be/JYfFmp2buziAnozxlCbHKs9J1x
FansjdgFqKlwctyz0cxz0CgIY+uxn4rRxke5+sfL073zcsgqMAewAobh5XE7PsVk
snaLPqkDw2fJCmm7njFJYP+9pic2vQkcKMv6VW0xyNCwq+CsV9ool8vWmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJhkxgf5qx/EriPFC7WdTVtdhlOMB8GA1UdIwQY
MBaAFHXIixxB++tdq+90PFes3/xPp0aZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGNpTEhFSDc2MTJyNzNROFY2emZfRS1uUnBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yYTIxNjQtMTY1Ni00NGNiLTkyOTQt
MGIxZGVjMzc1NTU0LzEvZGNpTEhFSDc2MTJyNzNROFY2emZfRS1uUnBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8yYTIxNjQtMTY1Ni00NGNiLTkyOTQtMGIxZGVjMzc1NTU0
LzEvZGNpTEhFSDc2MTJyNzNROFY2emZfRS1uUnBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANACE+eso
hrzYarpQfZVgisBh/mO4TEymsYo8yi5gw3gQocZnCrvS8TCqF1u/7a6N0UF6iFLQ
YXiZBhO8tR4PfzfzZOWU6x1uZpFT0s4l0xdHGHjCEjSDs+yEMOsf5sPrd9ICjGo+
8q4PkKXq64G5s4GO6EZEpph96doxzlGf3l+8T2sp9n7vwj9wPOXZCJowSFXxE2W5
FM0DpDIZTMB1IGDwf1lN1F+eOHO/ZnKK1FO1l/yNcYhisKVWFNX3JD37Jt3K12mM
ctj3t+nbhzjasuS1AHj9QYspfE1H5aDHb0O+3/t/221AIWJ7KE/CxGVEzmVMUFQU
g69P8Kt/8gvpBg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:58:09 2026 by rpki-client