Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
File:                     y9_OOlNV-GH9xIwyASx4ydr5paQ.mft (raw, json)
Hash identifier:          Hn2NP6XocyVPvI7uIN6KqEdfuvnnDICJDd2fDBGTG/k=
Subject key identifier:   42:6A:1C:44:83:74:93:66:3E:E5:16:2A:6A:2F:3B:F4:AC:F4:58:17
Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
Certificate issuer:       /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Certificate serial:       019D9962C31ED2918E8C7897249C2AE8957A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
Manifest number:          18BA
Signing time:             Fri 17 Apr 2026 03:01:19 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:19 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:19 +0000
Files and hashes:         1: 0hZDbxJrYBFNWkvmSImZbnA7DGo.roa (hash: 57YJGR/yDb+wDZGdceoc2Xq+t08LwYTEo56m7ozgeUc=)
                          2: PTk-Qm4SRO2CGZKyMh3pPECOku4.roa (hash: iHUYxSng1eYpsnCjK8T+uznexsa7QiF4CgUQAgbQr4k=)
                          3: UmiyGlAKeVSGM9owvAHcbjgh7iE.roa (hash: 9qPTC4+fv8bleeF17R0jz4ih1d6GM3RKI4JmMBNNV6k=)
                          4: XKQ33UaszWr3UcKOxkCn_h2IO0g.roa (hash: u7DgA9+pxN/MkyUzWxvuGfSEIEQmvUWyH2yknFwZpng=)
                          5: wruoJGCkndyJjRWEP8IowcC6dp8.roa (hash: 7qigFPgc4Oa1kf4DmFoQRYwnWdqHGod1Ik5fQyi6ptA=)
                          6: y9_OOlNV-GH9xIwyASx4ydr5paQ.crl (hash: imRRCnIv0o70E+6PmlR0Jk3lrPKXCynpxJ1qdIP3HYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:c3:1e:d2:91:8e:8c:78:97:24:9c:2a:e8:95:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
        Validity
            Not Before: Apr 17 03:01:19 2026 GMT
            Not After : Apr 18 03:01:19 2026 GMT
        Subject: CN=426a1c44837493663ee5162a6a2f3bf4acf45817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f8:73:a0:88:f2:cf:ef:18:ef:b8:79:32:59:
                    26:83:4d:82:b9:76:78:98:4b:0f:19:c3:82:87:dc:
                    6c:9f:73:32:2f:b7:d4:78:89:eb:46:f8:2a:67:2f:
                    d3:0f:51:7c:89:04:f0:ef:7f:f7:cf:c9:fe:fa:ab:
                    53:ff:b1:2f:df:fb:03:47:db:24:aa:6f:53:56:81:
                    fc:5f:e6:da:d5:b6:01:5d:6c:6b:0d:d2:fe:75:fa:
                    33:a0:da:a4:ee:1b:a3:02:33:f0:cb:cb:66:1b:3c:
                    fb:f0:66:27:7a:77:db:d2:fb:d2:02:b0:96:e3:fa:
                    82:42:52:16:e0:59:87:2b:7e:0f:8d:be:72:59:15:
                    d1:1f:b8:a1:9d:51:9b:b5:6c:d4:cb:d1:f3:3e:ff:
                    a1:1c:7e:ae:20:60:16:05:b6:55:f0:a0:85:6d:bd:
                    63:63:e8:47:bc:e0:87:49:10:c3:0f:bc:40:07:e0:
                    4b:4c:e4:6e:6a:fa:c5:98:14:0c:77:07:0c:5b:ba:
                    21:d7:f7:b2:50:31:30:53:bc:af:5a:b2:3b:6b:94:
                    d2:c8:0e:5a:c7:a1:a0:81:01:2a:21:86:bc:1c:b2:
                    f8:0f:08:cf:03:61:47:25:b0:b3:95:c7:40:4e:96:
                    86:2c:51:eb:ce:80:08:70:3f:c0:d3:5c:db:d3:35:
                    c7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6A:1C:44:83:74:93:66:3E:E5:16:2A:6A:2F:3B:F4:AC:F4:58:17
            X509v3 Authority Key Identifier:
                keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:6b:58:8b:fe:4d:df:5d:81:14:5d:70:ac:70:70:a7:8e:67:
         d8:0d:fa:82:ef:7c:6e:a3:f7:db:a4:7e:51:97:45:e0:a7:ac:
         01:fd:c2:54:9f:14:4d:ac:bf:28:bb:38:e0:88:a0:1a:e2:91:
         da:82:82:56:f2:be:b4:fe:4b:ba:40:7b:99:c4:c9:5f:33:b0:
         98:41:7b:4a:89:6c:0c:e3:d5:ba:d4:27:1b:d9:19:44:28:e2:
         82:bd:8c:30:aa:33:4a:d1:bd:d5:1d:83:94:af:d0:df:fb:a7:
         33:92:80:36:fe:35:78:c6:4c:dd:5a:d7:7a:2a:2e:ea:f3:f4:
         a6:45:ad:6a:bf:be:c7:5d:eb:13:23:63:fb:86:37:a1:5a:31:
         13:cb:3a:b3:52:ea:c2:15:29:ad:aa:0e:71:eb:f9:2e:2a:46:
         9f:77:85:ff:5b:7d:33:70:26:12:83:30:b9:59:03:fd:cd:f0:
         94:06:c1:fd:41:18:3d:61:8e:32:ee:bc:3a:78:31:fb:18:3b:
         0c:c9:03:55:5b:95:3f:bc:6d:0f:75:d9:ea:32:a5:96:e9:b3:
         54:e3:ca:bd:2a:4b:42:d1:0f:8c:c3:d9:fb:9e:bc:af:ce:38:
         33:c8:91:66:89:7d:ce:87:80:ed:c6:4f:19:10:89:6e:8a:84:
         ca:79:a7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:47:26 2026 by rpki-client