Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
File:                     gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft (raw, json)
Hash identifier:          sUA/Vu9WuM82xMwGw+7lwphGSmrTSloG4dRlOMjq+2M=
Subject key identifier:   57:1E:71:DE:DC:7E:C7:61:C9:6B:AC:B4:C3:DF:00:A8:CE:46:89:44
Authority key identifier: 82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1
Certificate issuer:       /CN=8293905afa134944f0630c949f3abda40646dac1
Certificate serial:       019D9BBF273D6109155F18770014E2DFA01D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
Manifest number:          18C7
Signing time:             Fri 17 Apr 2026 14:01:29 +0000
Manifest this update:     Fri 17 Apr 2026 14:01:29 +0000
Manifest next update:     Sat 18 Apr 2026 14:01:29 +0000
Files and hashes:         1: ATLOmeA5cf4AwJ9U-Q-N1ldTcPE.roa (hash: hnP5uN1NwwvHi/WK/M6S1b6bdfJWGxirQCx3zSYRXtM=)
                          2: gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl (hash: hyRdxVZSRXaiZah2H20qDuVWZfHzkV54y/9Ia3zrqYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:bf:27:3d:61:09:15:5f:18:77:00:14:e2:df:a0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8293905afa134944f0630c949f3abda40646dac1
        Validity
            Not Before: Apr 17 14:01:29 2026 GMT
            Not After : Apr 18 14:01:29 2026 GMT
        Subject: CN=571e71dedc7ec761c96bacb4c3df00a8ce468944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:05:13:e7:a7:56:f1:d0:e4:1d:24:19:06:19:
                    6a:ff:90:1b:13:70:dd:11:7e:ab:cb:21:2f:44:00:
                    84:3b:d5:34:e7:dc:ad:ff:fa:37:04:5a:5d:d8:fe:
                    e9:78:6e:20:b2:f8:e9:77:62:b7:73:1e:ef:94:a0:
                    41:62:5f:97:7f:f8:6b:d2:0d:cc:77:20:e9:e1:5d:
                    b1:ed:3a:30:71:fe:9c:d2:2b:67:f2:0b:62:79:ca:
                    7a:f0:1a:d8:d4:aa:17:d2:e5:6f:3a:8b:45:61:3e:
                    3c:0b:55:08:78:00:b4:c1:70:39:2e:18:8a:af:64:
                    6a:db:ab:71:67:4a:b1:46:ab:b1:c0:31:6f:5e:49:
                    4d:a3:27:8a:07:22:4a:be:40:42:c4:67:e9:28:5a:
                    19:d8:f1:05:c1:40:e2:94:22:44:89:74:50:60:85:
                    83:eb:fe:70:43:47:0f:d3:30:7f:23:60:59:dd:6d:
                    a8:a3:a0:5c:db:9c:ac:be:7d:c4:3a:2a:03:e6:e9:
                    dc:1a:9c:24:a4:55:9c:23:b2:03:01:75:6f:e3:7e:
                    6a:2b:bb:3a:76:86:72:54:e0:5c:ed:7d:a8:26:54:
                    28:03:88:c9:05:a3:44:cd:26:17:fa:78:70:dd:81:
                    77:47:82:8e:db:36:39:fc:69:63:1d:12:29:f8:fc:
                    9f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1E:71:DE:DC:7E:C7:61:C9:6B:AC:B4:C3:DF:00:A8:CE:46:89:44
            X509v3 Authority Key Identifier:
                keyid:82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:d0:7a:5e:86:c7:d2:af:db:05:92:ef:96:35:7c:4c:fe:44:
         c8:c1:c7:83:ca:21:09:10:dc:88:d9:9f:89:48:35:74:cc:09:
         74:72:56:f4:ac:d7:e1:f5:a0:71:fe:ab:29:6b:5b:03:d6:47:
         67:f9:8c:96:95:1f:c6:0e:ed:8e:9a:7d:2c:86:e1:da:09:cc:
         ca:c4:4a:65:5c:c8:8c:03:31:5e:ad:a5:7f:14:6b:06:0a:4c:
         da:53:10:b9:e8:f1:0a:c1:53:b8:a5:b0:09:08:f8:86:ab:b1:
         03:cf:c7:96:f8:74:f2:a1:62:d4:56:bf:e4:a6:0c:78:43:7c:
         d2:5e:ce:9f:60:9e:e2:f7:f0:05:c7:99:7f:82:54:0d:e5:a8:
         8b:d4:6e:a2:a7:8f:1f:1b:6d:4a:15:d6:e3:3c:37:4a:2c:85:
         07:a9:cf:6a:29:0f:01:5b:02:30:04:a7:3e:d1:37:07:a8:6e:
         0d:e3:c2:1f:f4:4d:e2:1d:ee:34:c3:c3:8a:ec:29:ff:bc:fd:
         7c:97:63:1b:50:82:41:27:f9:ff:de:47:24:ce:35:91:ca:41:
         0b:29:57:91:ef:bc:f5:fe:d0:c1:3c:0f:ec:0e:a7:21:21:5f:
         85:36:dc:89:82:d8:5c:29:e5:e0:3a:d2:19:b8:d5:f6:27:b1:
         5c:b8:75:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:44:31 2026 by rpki-client