Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
File:                     47NZVqQDigk4zNqFWSrVMeSog60.mft (raw, json)
Hash identifier:          w8qV/3xe8rrr5kvY4p5jI2hwQbaLJJTuuv2yGXW4H2w=
Subject key identifier:   90:70:08:18:94:1D:36:2A:E9:8D:7C:42:6F:F7:5C:97:6D:0F:86:0F
Authority key identifier: E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
Certificate issuer:       /CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Certificate serial:       019D984FD91665815614B678B0786BAB98B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
Manifest number:          18C5
Signing time:             Thu 16 Apr 2026 22:01:02 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:02 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:02 +0000
Files and hashes:         1: 47NZVqQDigk4zNqFWSrVMeSog60.crl (hash: WfpnE4iUduTlfJwnR4yUqtzb2UlZLelAR3QsFmba38w=)
                          2: CshAZZODRLNLmNGlI2avtLyw1y8.roa (hash: Hf1RE2bw+HGP7b/6j+X1+6eXzCajo5UkBDMdWtNUDgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:d9:16:65:81:56:14:b6:78:b0:78:6b:ab:98:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3b35956a4038a0938ccda85592ad531e4a883ad
        Validity
            Not Before: Apr 16 22:01:02 2026 GMT
            Not After : Apr 17 22:01:02 2026 GMT
        Subject: CN=90700818941d362ae98d7c426ff75c976d0f860f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fe:f8:91:3d:5a:94:ab:1f:8e:8b:a0:ed:6a:
                    e7:4b:51:64:20:47:28:4c:4f:34:ce:41:d3:c1:d2:
                    3d:78:48:46:3c:aa:5a:30:10:ef:08:b2:d9:58:9a:
                    81:d0:0e:4e:7a:b6:17:e6:f1:e5:47:08:aa:ff:5e:
                    7f:35:ed:53:34:b6:fa:fe:c0:f2:83:5c:80:e5:16:
                    f9:cd:e6:3f:c0:7d:e5:59:d8:b3:09:93:45:44:10:
                    7f:59:39:8d:8f:9d:73:d9:79:b8:37:a9:41:a1:4e:
                    ed:28:a5:87:84:b0:6f:60:b1:5f:03:78:84:7b:1c:
                    d8:9a:e1:a4:9a:42:c6:8f:56:39:60:b6:a8:27:c6:
                    00:fa:b7:7d:2b:dc:50:d0:bf:34:e7:35:3f:db:6a:
                    22:36:b7:85:83:e5:1a:65:04:ed:39:84:61:91:9f:
                    2b:2a:13:eb:d7:fa:1f:eb:ba:88:03:df:b6:de:8c:
                    4f:4f:a5:5b:49:76:dc:a2:09:21:8d:78:68:eb:75:
                    7a:5a:fa:be:08:1c:60:3e:be:fa:6a:a6:ba:98:5c:
                    05:03:25:51:b4:1a:86:56:0a:84:0b:71:6f:75:eb:
                    50:56:b3:83:d7:83:9b:5b:07:e7:12:d4:46:8f:82:
                    d7:a1:af:3c:4d:4d:7f:95:61:e7:7d:5f:fd:e6:b1:
                    2e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:70:08:18:94:1D:36:2A:E9:8D:7C:42:6F:F7:5C:97:6D:0F:86:0F
            X509v3 Authority Key Identifier:
                keyid:E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:bf:70:9e:aa:33:e1:72:da:aa:14:b9:e1:d1:24:5e:8f:9e:
         69:d9:9c:14:04:44:f0:a4:d4:cb:af:df:24:d8:8c:85:de:f4:
         1d:1c:da:de:04:e1:36:40:14:c3:00:dd:6d:c6:2a:cf:82:e3:
         06:66:d6:26:53:c6:0c:3f:a0:af:5a:18:2c:9b:49:ec:9e:ba:
         1d:bd:c3:ec:3d:00:4d:3f:82:b8:86:a9:09:75:b0:6f:17:2e:
         1f:92:26:a4:91:6d:bc:62:48:4b:0b:b7:e9:12:ca:6e:eb:49:
         68:54:5c:9c:ce:b7:86:7f:70:ed:ea:00:9f:48:8f:ea:5d:1f:
         7b:a9:fa:8a:e5:c2:75:c7:cd:01:48:36:4d:fc:ec:83:59:c0:
         e5:21:56:6a:f8:5e:07:ef:17:1f:de:31:24:d5:82:fe:27:74:
         f7:32:e0:db:77:6f:c0:ce:aa:75:35:a8:87:26:f4:ae:f3:c9:
         c4:f5:5c:42:f2:58:0c:25:23:6c:98:f0:79:e0:bf:2f:25:f3:
         bc:c9:b5:4d:be:f8:d3:33:13:ec:70:94:cc:dd:b1:cb:4f:2c:
         e4:97:11:92:30:e3:78:67:00:aa:31:c1:14:19:12:6b:69:e9:
         fb:62:7d:ff:e8:ea:7b:65:d4:38:c6:a8:62:4e:29:74:06:cb:
         a0:77:b6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:25 2026 by rpki-client