Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
File:                     e0fNwhx8siRnTA6v3sY6ID7uMQg.mft (raw, json)
Hash identifier:          3lMUehH9n/in4Sbd3iYoTOaSUvh9gF/O8myBxckC6QE=
Subject key identifier:   C8:44:D6:83:86:C5:AE:14:5C:2E:66:2B:F4:14:36:2F:FE:3B:A2:4B
Authority key identifier: 7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08
Certificate issuer:       /CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
Certificate serial:       019D9D3F887FCEBA26966FC401F80178C498
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 21:01:19 +0000
Manifest this update:     Fri 17 Apr 2026 21:01:19 +0000
Manifest next update:     Sat 18 Apr 2026 21:01:19 +0000
Files and hashes:         1: e0fNwhx8siRnTA6v3sY6ID7uMQg.crl (hash: L5oPr8wlj4XDbj3UpvsCYsqo7LNVngL3FnCd4FrKT80=)
                          2: mR2p5e45av46CgVC8ySc8ptiq3w.roa (hash: HkKfgbvwzrYK3bDQighWrvWFH9JPW7Gk2xH/eoftL1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:3f:88:7f:ce:ba:26:96:6f:c4:01:f8:01:78:c4:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
        Validity
            Not Before: Apr 17 21:01:19 2026 GMT
            Not After : Apr 18 21:01:19 2026 GMT
        Subject: CN=c844d68386c5ae145c2e662bf414362ffe3ba24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7e:fb:15:a5:6d:83:2e:16:30:95:ab:0e:fa:
                    32:c3:09:c3:e6:7e:cb:d9:e1:6c:96:0c:6c:a8:f3:
                    5e:99:b3:46:ca:b9:ae:1d:e0:c7:b2:aa:b6:d2:55:
                    50:b3:08:d0:5c:9e:de:f7:30:7f:5e:95:fb:9c:fe:
                    b4:eb:90:b4:fe:2d:9d:c0:42:cd:52:49:1d:2f:2d:
                    96:89:4a:cd:10:2a:fa:c5:32:cc:d6:21:52:76:1e:
                    11:70:ec:71:59:18:79:e4:4a:32:dc:df:7d:41:f2:
                    40:0c:a1:27:20:44:a4:03:5c:d1:73:9d:14:7d:cd:
                    60:82:ad:b0:76:14:1e:01:52:2b:1c:ae:eb:b1:98:
                    0a:ca:1b:ef:92:10:a7:d9:d5:06:60:3e:2c:a3:2c:
                    a1:f7:5b:18:58:38:1d:2c:6e:2d:8e:39:15:4c:84:
                    1b:d2:c3:a3:9c:28:ca:cd:ec:ee:95:33:bb:97:3f:
                    7a:07:72:26:58:14:a4:44:86:76:75:c2:a4:79:9a:
                    b2:7d:86:8f:41:41:3e:b6:73:1e:c5:61:c0:10:2b:
                    2c:c6:7f:db:0b:af:86:0e:74:71:f1:bf:c4:b4:30:
                    67:67:bd:64:a0:84:54:15:fe:ab:fd:f7:f6:db:22:
                    6b:51:9d:08:e7:a6:eb:3b:69:ef:89:18:34:83:34:
                    7b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:44:D6:83:86:C5:AE:14:5C:2E:66:2B:F4:14:36:2F:FE:3B:A2:4B
            X509v3 Authority Key Identifier:
                keyid:7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:dc:d2:03:bd:94:0b:50:20:fb:85:5b:1c:82:9d:b1:c6:b1:
         38:96:7c:52:d0:d8:8c:1c:99:a8:34:97:52:14:ac:63:c3:44:
         53:99:f9:78:9c:f8:a6:8a:21:98:2d:ec:68:12:e3:88:5e:8a:
         70:29:5e:8c:b9:42:9b:3f:f5:84:ce:14:e9:fb:6a:b0:a6:db:
         5d:7e:3b:c8:9c:b2:70:d6:58:4d:34:5f:41:6d:c1:1d:87:52:
         1d:7a:15:86:cd:4d:a5:ad:0b:4c:65:dc:d5:53:c8:f0:cf:cd:
         51:6f:99:8d:a2:9d:7a:a2:65:f0:49:84:24:fc:0e:7e:f1:a3:
         d0:9e:57:83:23:b5:55:b6:2e:4b:4e:55:f2:f5:a6:81:95:34:
         37:7d:0f:92:67:c9:36:b2:7f:de:1e:fc:40:92:66:aa:28:dc:
         80:c6:4f:c2:e9:8d:72:e0:34:85:11:eb:89:44:9c:7d:20:f6:
         ab:0d:e2:3a:cf:c4:c1:a5:fe:70:b6:31:a7:25:27:e7:21:44:
         29:3e:75:33:9a:7e:79:13:a6:db:a8:4c:86:51:21:6d:04:73:
         b9:ad:d4:8d:bf:49:bc:39:2a:c1:ae:57:33:9b:ec:e4:4f:f9:
         91:92:39:7a:29:bf:00:09:1b:ca:be:aa:e8:28:64:ee:7f:e6:
         2d:1e:0e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:32:48 2026 by rpki-client