Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
File:                     G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft (raw, json)
Hash identifier:          JMsLEITc1B/6H7m3QuaOY80XV32Fgprm3QfUOAz23xQ=
Subject key identifier:   AC:10:BC:54:A7:7A:C9:C9:B1:25:B8:CC:57:61:38:43:08:EE:FC:65
Authority key identifier: 1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4
Certificate issuer:       /CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
Certificate serial:       019DA29C3C87763AEEFD8C9F9277E4E54B98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
Manifest number:          0D45
Signing time:             Sat 18 Apr 2026 22:00:41 +0000
Manifest this update:     Sat 18 Apr 2026 22:00:41 +0000
Manifest next update:     Sun 19 Apr 2026 22:00:41 +0000
Files and hashes:         1: A9Wb5TUgy6_nes46nQIzu3J2gJ0.roa (hash: HBds/dPFgakP+7Jk7BYLI0SRbVkbpB9JVxok50Ozwgs=)
                          2: G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl (hash: gG/JjHpi8zp3/WzIkyfe6DSrdgsHYW2/1niluFUMaa8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 22:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a2:9c:3c:87:76:3a:ee:fd:8c:9f:92:77:e4:e5:4b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
        Validity
            Not Before: Apr 18 22:00:41 2026 GMT
            Not After : Apr 19 22:00:41 2026 GMT
        Subject: CN=ac10bc54a77ac9c9b125b8cc5761384308eefc65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:72:8c:d1:61:3e:e4:7c:6e:92:f1:e1:8f:6a:
                    d6:a6:6a:17:52:7e:c1:87:f3:11:9f:f4:57:9d:51:
                    d4:f5:c2:48:eb:c0:c8:fd:c4:60:3b:66:95:dd:56:
                    bf:71:a8:36:07:53:ff:d1:be:2a:f9:77:8d:40:de:
                    15:b2:c7:68:8a:3b:1c:c8:a4:49:bc:d9:49:13:f6:
                    45:32:36:bc:f4:d7:1b:a0:49:06:7f:8a:01:d8:3f:
                    3d:ad:3d:2d:8c:5a:dd:65:39:a7:79:d0:24:61:f2:
                    4e:54:d6:3f:98:a2:bf:76:ca:1b:19:d0:89:b4:74:
                    37:6a:74:07:6e:23:ac:3c:e0:ba:e7:d6:55:08:92:
                    36:fa:26:a6:1d:a9:47:ef:b6:4a:65:94:a8:c8:00:
                    fd:f7:79:70:2f:c7:81:da:31:2c:3f:26:ba:f8:dc:
                    92:45:7a:26:16:ff:15:d9:b8:79:da:3e:64:eb:35:
                    ea:06:c1:22:f2:f0:9c:64:1e:6a:f4:96:5b:17:83:
                    09:e0:ff:30:44:23:0c:fa:74:db:9d:4a:4d:66:64:
                    98:22:10:52:26:38:fd:0f:28:ba:7b:94:8a:e7:73:
                    76:b3:df:84:52:a9:5a:c3:c7:b5:f8:b1:d2:76:df:
                    c9:a4:08:86:cc:4b:06:3b:fd:d1:ae:ad:2e:d2:84:
                    ae:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:10:BC:54:A7:7A:C9:C9:B1:25:B8:CC:57:61:38:43:08:EE:FC:65
            X509v3 Authority Key Identifier:
                keyid:1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d7:c1:4a:e2:23:17:8e:1a:3e:cd:ed:64:3a:f8:4f:91:6d:
         8e:fc:19:7c:6b:c2:6c:ca:b7:76:fe:1d:24:53:f8:f0:2a:27:
         52:34:22:e4:fd:36:de:f8:0c:0c:b0:b8:00:d7:a8:f7:fb:35:
         62:6a:df:67:af:6e:aa:9d:ed:e3:8f:0b:b4:c3:8c:e6:fd:21:
         0f:03:b9:41:0e:72:32:ca:29:8d:fb:da:11:ee:4f:62:3c:92:
         03:c9:be:1b:7d:92:74:ee:0c:a4:82:9d:05:a8:66:99:89:86:
         02:8a:ba:14:af:dd:8c:f5:7b:ba:90:37:ec:db:14:39:58:8c:
         52:cc:2b:54:53:17:78:01:f6:4f:09:38:ea:bb:e8:a7:b6:b3:
         1d:c9:cc:42:d3:6a:9a:b2:7b:f3:f6:47:93:07:20:4e:8a:ce:
         70:cc:82:fc:f1:b0:c6:6a:9a:71:47:2a:46:92:7c:9b:b5:52:
         06:4f:96:69:4b:a3:e7:50:a5:bb:4f:5a:ad:cd:e5:6b:f8:5b:
         02:1c:5e:3b:e3:0a:98:ee:6f:36:80:db:fd:28:99:f5:d5:c0:
         c5:80:5a:f3:95:61:f8:fe:9d:4b:9d:81:05:c9:88:e5:c8:e1:
         e9:14:9e:f7:6c:09:b2:3a:ae:49:2f:7a:84:c8:ad:82:db:4b:
         26:15:f2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:29 2026 by rpki-client