Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft
File:                     7FraDckAoTyDtwrD9Yf7jC4d8DA.mft (raw, json)
Hash identifier:          zf+W3ZMEn55h8KcoAHf+XZS4lcBcD6INOxjFv5q5Fng=
Subject key identifier:   83:98:BD:33:20:88:A3:3F:DD:B3:5F:DD:69:30:9F:D8:A6:CD:FA:4C
Authority key identifier: EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30
Certificate issuer:       /CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030
Certificate serial:       019D97E1EA3075255943E12D6799DE8FFE5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft
Manifest number:          18CD
Signing time:             Thu 16 Apr 2026 20:00:58 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:58 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:58 +0000
Files and hashes:         1: 4h2CKrEG0zBXhUvh0QRtju6nDO8.roa (hash: 7r8KAs2j6Yww58kBTUpyYdSq5ad0gOR+q03EcWoTYfs=)
                          2: 7FraDckAoTyDtwrD9Yf7jC4d8DA.crl (hash: +kYRmPXLeGBMwodqVsfMHhlEAJcTAZ1+X2eS0xTock0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:ea:30:75:25:59:43:e1:2d:67:99:de:8f:fe:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030
        Validity
            Not Before: Apr 16 20:00:58 2026 GMT
            Not After : Apr 17 20:00:58 2026 GMT
        Subject: CN=8398bd332088a33fddb35fdd69309fd8a6cdfa4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7b:30:73:ad:d4:d2:43:c5:5c:3f:f2:25:9c:
                    d1:fa:5e:89:64:02:05:36:0a:67:80:fc:7d:e3:54:
                    c7:30:47:60:6b:8d:12:a5:b8:a1:56:c2:b1:59:35:
                    ca:ce:39:43:a1:1a:2d:01:c6:bc:ff:ea:3b:30:b4:
                    23:4e:79:ac:94:2c:7f:03:29:25:46:6d:0e:b8:30:
                    c3:f6:1b:b0:c7:33:8b:c8:e6:ed:10:33:39:b2:b3:
                    69:31:f7:57:33:7f:29:8b:72:5b:4b:f1:07:d7:69:
                    00:bd:24:49:dd:c4:52:65:60:f9:4b:c8:2a:19:73:
                    3e:92:05:81:1b:9f:9a:01:69:72:6c:14:96:d1:9f:
                    a1:b0:e2:6a:18:63:b9:6a:27:09:62:83:02:c7:07:
                    bd:6e:44:44:ef:a7:59:13:a7:29:95:aa:0b:e1:d5:
                    2e:e4:04:09:4f:59:bf:b4:e7:aa:13:42:8c:27:c4:
                    e9:3e:36:50:d5:fd:22:68:b3:e7:bb:cd:ae:a5:92:
                    5e:b7:14:bb:33:ee:df:0a:50:23:f1:06:46:82:63:
                    b6:5d:d2:de:43:7c:b2:44:b6:09:74:4a:ba:da:7f:
                    af:8e:ed:e4:ea:b6:6b:78:4f:da:6f:c4:87:88:71:
                    c9:2f:22:b0:02:99:95:21:a4:51:04:10:1f:90:06:
                    3a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:98:BD:33:20:88:A3:3F:DD:B3:5F:DD:69:30:9F:D8:A6:CD:FA:4C
            X509v3 Authority Key Identifier:
                keyid:EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b8:2a:c0:14:99:c5:5e:d4:67:21:74:6d:52:9e:76:e4:98:
         58:d5:83:93:97:e4:6a:08:ca:58:f0:72:21:c5:b0:99:6b:8c:
         1c:32:66:b0:79:9d:1c:49:4d:8b:5c:f2:ba:03:28:4e:3e:4c:
         d2:65:ff:1a:33:67:34:6a:95:46:43:9f:84:6e:2c:3a:1f:61:
         6e:3b:5f:91:77:5c:a9:70:b4:9b:3b:25:ff:8f:48:99:a3:ae:
         80:9a:00:40:f1:34:fe:e3:46:4d:c1:2a:5b:8c:98:17:29:f8:
         b2:be:5c:64:1f:66:5a:c4:d8:c8:63:42:7f:df:ac:30:45:7c:
         a7:fb:b7:8c:54:55:60:96:36:b9:31:5b:2e:b7:c1:60:4e:54:
         73:84:77:20:df:1c:aa:fa:03:a9:cd:ed:6d:e8:e7:57:c7:b0:
         8f:d0:1e:f1:db:3b:d1:87:05:21:9a:70:5a:5c:5f:39:06:c7:
         6e:19:57:aa:3b:ff:d2:29:09:9b:c5:ae:8a:e1:48:22:f7:1d:
         9c:5f:ca:19:a7:5c:17:f1:5d:f2:f4:72:71:e6:5a:2a:a1:22:
         63:fe:e0:8d:5c:ae:8a:21:7f:d8:15:a3:05:49:ec:cf:a5:c4:
         d6:01:ea:6c:be:43:5b:e4:bb:ff:cf:39:47:ef:bf:d9:a1:6e:
         53:cb:6d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:33:07 2026 by rpki-client