Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
File:                     28L_akYQUNSPP9sLUThxVLXWzQ4.mft (raw, json)
Hash identifier:          z7dkW1Y4KfmIplGHwJvpdAuCGZB+PVgEJ2RhF2S68LE=
Subject key identifier:   6F:48:2D:70:44:88:9B:80:C3:24:A3:A5:22:E4:CC:AF:44:1B:48:9C
Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
Certificate issuer:       /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Certificate serial:       019DA30AA744D6C215A4E200E3A1FEC815F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
Manifest number:          179A
Signing time:             Sun 19 Apr 2026 00:01:17 +0000
Manifest this update:     Sun 19 Apr 2026 00:01:17 +0000
Manifest next update:     Mon 20 Apr 2026 00:01:17 +0000
Files and hashes:         1: 28L_akYQUNSPP9sLUThxVLXWzQ4.crl (hash: oYuTSPqJ3ut7oIbEJqaDW91qltVBACd5l5XPHIbNbuo=)
                          2: iQPX0ayEGzxk6a9oqqUew1HkYlI.roa (hash: w9hIv7rUMK4mch1qlrYdJn+0PwXGsWqZECABhq8al9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 00:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:0a:a7:44:d6:c2:15:a4:e2:00:e3:a1:fe:c8:15:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
        Validity
            Not Before: Apr 19 00:01:17 2026 GMT
            Not After : Apr 20 00:01:17 2026 GMT
        Subject: CN=6f482d7044889b80c324a3a522e4ccaf441b489c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:aa:93:7a:b6:fe:61:5e:b4:12:f1:5b:ed:4e:
                    8f:e3:06:8a:ea:3b:9c:61:08:4d:e2:5c:2a:48:d6:
                    d3:6f:3f:24:96:59:3e:e4:da:e4:b1:92:86:e0:10:
                    0a:bb:51:aa:3f:f4:81:15:e7:fc:e0:93:d3:47:3d:
                    17:8e:2d:0b:c8:19:a7:60:c6:9f:4e:ce:96:79:b4:
                    a9:a9:ff:7e:bb:5b:3d:a5:f1:72:03:a7:58:f3:a3:
                    d7:ea:12:24:a3:62:8d:bd:db:e8:9c:93:15:c3:6e:
                    67:ff:95:53:20:6f:f5:30:89:b8:e3:c0:61:9f:eb:
                    42:d6:2f:46:86:28:ce:71:56:44:42:c3:03:01:bc:
                    f7:c3:d2:5c:a9:25:e5:5d:25:bd:72:95:34:ed:21:
                    da:c7:6c:d2:3c:52:8a:18:5f:c6:b2:d8:d6:80:79:
                    f3:cb:d1:85:ba:7e:a3:3e:92:36:24:e6:ef:b3:a2:
                    ae:b1:e2:f1:3c:dd:24:09:8b:4c:c3:4c:d9:9e:81:
                    65:12:85:bd:59:24:21:fb:a3:ae:a4:1e:65:1f:a9:
                    2f:63:4f:02:a3:42:e6:20:94:80:8b:bd:db:5d:97:
                    e2:c7:62:fc:fe:94:c4:c9:70:38:10:15:27:7e:4b:
                    a5:6b:a7:67:fb:6d:b2:72:3e:b0:00:6e:f7:92:f0:
                    e1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:48:2D:70:44:88:9B:80:C3:24:A3:A5:22:E4:CC:AF:44:1B:48:9C
            X509v3 Authority Key Identifier:
                keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e1:1d:71:af:14:9b:43:cd:56:05:d6:a2:44:46:17:7e:3c:
         3f:b0:4e:4c:9b:e6:1a:ce:75:74:0c:2f:a3:f1:8c:24:41:ec:
         97:ad:be:58:20:ba:77:73:c6:75:52:cf:b2:7f:22:43:c5:a1:
         16:9a:78:f9:99:5f:2a:47:a1:7c:3d:61:f8:67:e7:4e:3a:af:
         98:e6:9e:49:22:47:37:21:07:0b:b4:c6:0b:3b:67:42:99:2d:
         58:66:26:e9:2d:cd:12:59:99:9b:75:13:75:4f:69:c2:62:33:
         f4:5a:ef:cf:71:1a:98:4b:84:df:0e:e2:6b:58:25:5d:5d:9d:
         35:17:93:eb:2a:48:42:7e:2c:ce:e4:d8:38:16:6d:3e:83:7c:
         fa:6d:e8:d2:c3:ac:f8:aa:d4:1b:d8:4d:bf:67:a8:78:3b:7c:
         ab:1f:69:f6:d6:0a:6f:78:03:a9:bc:b2:45:85:97:db:2e:c5:
         2d:30:f3:29:81:f3:b6:5f:40:6b:19:88:6a:af:76:22:67:6e:
         de:23:75:06:de:cc:d4:f3:3d:11:cd:89:cd:10:47:1f:ae:6f:
         82:f7:da:6a:e4:e0:3b:8b:43:f2:55:d6:a9:d1:d8:bd:60:75:
         43:63:15:79:79:75:c8:4a:3d:9d:aa:c8:22:58:3e:7f:aa:c1:
         38:73:84:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:56:18 2026 by rpki-client