Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/xC-Eb32rEnhmuie_qWS6fS3iBEw.mft
File:                     xC-Eb32rEnhmuie_qWS6fS3iBEw.mft (raw, json)
Hash identifier:          r0vzKiJaGSNYuU/doFPymX0P9QT4V4WzQdtLbTZHMmI=
Subject key identifier:   B4:8D:60:78:F8:D9:3D:13:9F:AE:E5:07:A0:ED:8B:FD:67:81:F7:F5
Authority key identifier: C4:2F:84:6F:7D:AB:12:78:66:BA:27:BF:A9:64:BA:7D:2D:E2:04:4C
Certificate issuer:       /CN=c42f846f7dab127866ba27bfa964ba7d2de2044c
Certificate serial:       019D9A74C47180F50B2FF26FBC4836A0DF5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xC-Eb32rEnhmuie_qWS6fS3iBEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/xC-Eb32rEnhmuie_qWS6fS3iBEw.mft
Manifest number:          0D3A
Signing time:             Fri 17 Apr 2026 08:00:36 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:36 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:36 +0000
Files and hashes:         1: 1oD3DQlb2sSHs0JF22_x35kNpTk.roa (hash: eBI8fUe/pu8PSfFnAUNY0T6g3tEzgKxX4TEnw9lT2XU=)
                          2: xC-Eb32rEnhmuie_qWS6fS3iBEw.crl (hash: WR9J1TzI53ntKkF+lm3+iKq5WVxMOQ5IvIhY7Wy+RY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/xC-Eb32rEnhmuie_qWS6fS3iBEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/xC-Eb32rEnhmuie_qWS6fS3iBEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xC-Eb32rEnhmuie_qWS6fS3iBEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:c4:71:80:f5:0b:2f:f2:6f:bc:48:36:a0:df:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42f846f7dab127866ba27bfa964ba7d2de2044c
        Validity
            Not Before: Apr 17 08:00:36 2026 GMT
            Not After : Apr 18 08:00:36 2026 GMT
        Subject: CN=b48d6078f8d93d139faee507a0ed8bfd6781f7f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:29:ca:e4:b7:df:b6:b1:38:48:96:44:ad:82:
                    bc:1b:30:99:55:6d:51:1c:9e:9a:1e:76:d9:38:70:
                    b1:85:81:b4:cc:6e:3d:76:29:84:bd:d0:b0:e5:5a:
                    cc:c8:13:9a:9a:b5:4c:58:59:db:e9:1c:9f:f0:a3:
                    92:e7:05:ea:5d:11:7f:d1:02:0d:73:62:81:8f:9b:
                    50:9a:ef:f2:42:4e:62:f5:8d:52:e0:b6:93:b8:eb:
                    63:69:e5:52:7b:be:ff:7a:c4:44:11:21:48:72:d0:
                    83:7d:23:6d:69:34:49:07:f1:94:9f:b2:3c:ae:49:
                    0b:03:4f:1a:56:32:68:61:a2:30:2d:f5:56:16:22:
                    23:a2:2f:9c:d8:4a:6c:24:2d:43:e1:60:29:de:36:
                    04:e0:35:e0:c7:f9:45:6e:f7:24:dc:3f:b4:46:e9:
                    a9:2f:87:bb:32:1e:6f:d1:7c:d7:b2:7a:0a:23:9e:
                    2d:5b:15:bf:42:2a:40:43:84:0b:89:cc:cf:fb:4a:
                    e8:f7:92:90:f7:dd:88:7f:88:42:96:9b:92:3e:7a:
                    98:0e:86:14:c4:0e:1d:8d:fc:91:4c:35:a7:c7:32:
                    b0:53:2a:6c:4b:2f:c2:eb:fc:f7:da:ab:9d:14:53:
                    bd:22:f0:d7:3b:50:50:c3:93:4a:e2:c7:24:49:27:
                    e7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8D:60:78:F8:D9:3D:13:9F:AE:E5:07:A0:ED:8B:FD:67:81:F7:F5
            X509v3 Authority Key Identifier:
                keyid:C4:2F:84:6F:7D:AB:12:78:66:BA:27:BF:A9:64:BA:7D:2D:E2:04:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC-Eb32rEnhmuie_qWS6fS3iBEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/xC-Eb32rEnhmuie_qWS6fS3iBEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/xC-Eb32rEnhmuie_qWS6fS3iBEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:77:9e:f1:bb:6b:f8:d5:56:ae:97:0a:d4:da:87:8b:a1:f9:
         af:97:17:47:66:38:28:d4:89:e9:f3:03:05:e7:66:6b:c5:f0:
         96:b3:fd:6d:7e:6c:fd:eb:1b:ff:8c:41:40:9e:98:a5:44:3f:
         00:a8:34:55:ba:4c:42:41:42:66:f2:e3:f1:38:89:7c:8b:9b:
         71:88:29:41:91:35:bc:3d:c3:08:98:28:f1:24:20:d2:5d:c2:
         b1:7f:e3:f5:93:28:8c:2b:8b:09:59:c8:37:65:c6:bb:3c:da:
         30:db:5b:0c:48:9c:2f:da:62:86:fe:db:e7:0b:73:14:62:2f:
         20:b9:1e:8d:63:27:70:a9:73:52:4a:f0:9f:43:f3:c1:4a:e9:
         8b:4f:a4:79:1f:f9:4e:6d:7f:d7:8f:67:62:3a:57:01:5a:fa:
         ea:c0:67:f8:ec:5a:67:8f:d2:56:a8:8b:e0:d6:36:7f:3b:02:
         69:cc:3c:da:98:bc:41:eb:56:4c:bc:47:d2:02:e4:a2:0d:56:
         97:d2:67:1f:2c:b1:a2:ed:a8:2c:d4:b6:43:67:b6:77:bb:b8:
         ee:1e:33:50:2e:86:95:ea:63:53:63:b1:dd:9e:84:f1:6a:13:
         b3:2a:aa:c0:8d:b5:1c:55:4c:25:e7:df:3a:bf:65:af:2b:d4:
         b5:60:e8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:29 2026 by rpki-client