Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
File:                     eMceZc96PS4vwrjMPUPUXSs1DfM.mft (raw, json)
Hash identifier:          vOoVft5+eGsdiFrQ/0xVlU5VM/8FhPxK1mmqUhWc4tA=
Subject key identifier:   D8:D8:47:A0:66:10:CD:E8:F3:54:65:CB:DA:EA:4E:64:56:7B:BB:AA
Authority key identifier: 78:C7:1E:65:CF:7A:3D:2E:2F:C2:B8:CC:3D:43:D4:5D:2B:35:0D:F3
Certificate issuer:       /CN=78c71e65cf7a3d2e2fc2b8cc3d43d45d2b350df3
Certificate serial:       019D99628A2ED09420154CB8285A0A5E134A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
Manifest number:          18C0
Signing time:             Fri 17 Apr 2026 03:01:04 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:04 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:04 +0000
Files and hashes:         1: Y6ag-lBJsM_i8uu8_Q1wgqF6IWU.roa (hash: +GrN3dSRT/4nbqd/XITwB0EvlJGkF2GpIgstYLUZEf0=)
                          2: eMceZc96PS4vwrjMPUPUXSs1DfM.crl (hash: BctZ4kw9AWhYMTCkDFjdYipU99u+v4W2G5wVfNb6QrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:8a:2e:d0:94:20:15:4c:b8:28:5a:0a:5e:13:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c71e65cf7a3d2e2fc2b8cc3d43d45d2b350df3
        Validity
            Not Before: Apr 17 03:01:04 2026 GMT
            Not After : Apr 18 03:01:04 2026 GMT
        Subject: CN=d8d847a06610cde8f35465cbdaea4e64567bbbaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d2:7b:8d:60:11:fc:91:7d:ae:03:23:41:29:
                    38:33:a6:36:38:0d:40:6e:ab:5a:d3:cd:5d:5d:2b:
                    32:d0:d3:66:7e:69:e8:40:76:b8:81:a3:81:82:ec:
                    6c:07:b7:ab:82:6c:ec:a4:9a:b0:e7:bb:e2:7c:87:
                    62:c9:0b:9a:f6:04:8b:3f:53:6e:de:d7:c5:80:43:
                    80:e2:74:f9:a6:f1:8f:db:6e:95:64:42:cc:0b:56:
                    74:16:6b:b9:63:86:c3:b7:21:3a:88:ed:e7:29:f1:
                    89:7d:b9:5f:97:27:06:6b:fe:ba:8b:8b:23:4c:01:
                    d2:19:2d:0b:5e:19:21:68:57:74:6d:f4:54:50:4e:
                    53:ae:6e:ec:66:01:8c:80:b1:f3:39:66:da:a5:ac:
                    6a:aa:52:13:6b:c1:68:18:1f:67:de:bb:38:37:b7:
                    a3:8b:cf:32:1b:ec:8c:cb:a2:fc:b2:56:54:a1:59:
                    80:b4:6b:56:c9:cb:e0:1b:f0:29:89:ed:03:6d:b2:
                    af:5a:33:fe:fe:c4:1c:49:8d:67:69:a0:3c:c3:f9:
                    3f:95:66:91:15:da:a6:98:d1:06:40:50:5f:4c:bf:
                    8c:82:77:c9:f1:24:76:46:0e:ff:d1:18:d5:3a:21:
                    3a:b3:55:7c:6e:4e:4f:17:76:3f:de:7e:6b:5c:53:
                    77:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D8:47:A0:66:10:CD:E8:F3:54:65:CB:DA:EA:4E:64:56:7B:BB:AA
            X509v3 Authority Key Identifier:
                keyid:78:C7:1E:65:CF:7A:3D:2E:2F:C2:B8:CC:3D:43:D4:5D:2B:35:0D:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:1d:6a:33:c2:b7:46:fc:bc:06:d7:90:3c:36:c3:ef:ed:46:
         3c:81:0b:ee:28:ff:da:0e:50:41:24:1b:54:08:df:77:e4:c0:
         3f:46:27:6c:13:2c:2c:60:bd:15:ad:15:b4:24:e2:b6:39:cd:
         86:bf:03:df:32:55:61:1a:11:0e:4c:74:c0:2c:e8:73:b6:a6:
         3f:c5:ac:f3:c4:43:08:70:99:45:53:92:dd:03:ff:9f:6d:22:
         e1:1c:c5:d7:cc:ca:99:a5:53:ac:e7:f0:b6:8c:c1:15:3e:ec:
         50:9c:0f:b3:10:1e:80:b6:7f:4a:5b:7a:81:a7:bb:b4:61:a3:
         02:d0:10:a2:c1:5c:67:0a:8c:dd:ed:07:ff:6d:f6:e5:e0:f2:
         eb:7e:b6:aa:67:f8:06:81:1c:06:5e:27:d0:f1:d5:22:9a:07:
         b2:52:3b:b2:b0:65:7b:c3:58:56:82:fb:3f:57:de:d7:1d:5b:
         93:7f:6c:16:91:64:39:d1:ce:22:5b:fd:ec:a9:c7:87:ab:69:
         93:ac:fc:ea:e1:27:a0:76:c7:a6:16:64:9b:28:c0:db:52:db:
         1e:b1:cd:d1:79:2e:90:0f:3b:28:5b:de:08:59:39:fc:1a:4f:
         e7:75:e3:00:60:04:ba:9d:d2:15:4e:e6:bf:ed:43:ca:63:d8:
         b4:a4:50:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:18:56 2026 by rpki-client