Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
File:                     pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft (raw, json)
Hash identifier:          U2t/5L8r9xvQ87u6RnddPPeRxkxSNYOLKgENjwzCZoQ=
Subject key identifier:   2F:33:1B:23:92:5A:7E:BC:C3:5F:DE:ED:AA:97:A1:66:CE:AB:07:EE
Authority key identifier: A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2
Certificate issuer:       /CN=a566d8337776c98746bd231e69e185db2a9a5be2
Certificate serial:       019D985085B2228D5E23B3D98926B742CDB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
Manifest number:          18C6
Signing time:             Thu 16 Apr 2026 22:01:46 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:46 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:46 +0000
Files and hashes:         1: 7y0LOepFUcA8OxNwETjP06eOGqo.roa (hash: FtFNn3fJLuNl3O3fnntEfGbv+32KsAHr3SqeYeHUCL0=)
                          2: CuUaPGtvCMhbfFTKvA6UReL_F_Y.roa (hash: UAHd42O2KjlmEGP6gn2QJSSuqJWzfTB5HZHwnRpiaVs=)
                          3: JXnp6HlQC-5SqdfjYLJsbtC_UIQ.roa (hash: YlECxxfSPVhcfaZ4wCUWJKldj0fpn0G8ae7MLGJ3YLI=)
                          4: _UUS3q5BecQsPN01euTz6ZXEA3I.roa (hash: /n6cdrP+/xfyaY1mRVl4Rp3lZj1gk+c55nEDkiLkTlI=)
                          5: makv0shcZ5kNgnoatV93mdzUDzA.roa (hash: pcme59je8U1s3r4CfES9LEZanBL2hRJGysIwX84CTmo=)
                          6: pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl (hash: ZGv1sc1K8rEBbpewduQOW11/pJ/6ajR1dWkGlCP3Thg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:85:b2:22:8d:5e:23:b3:d9:89:26:b7:42:cd:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a566d8337776c98746bd231e69e185db2a9a5be2
        Validity
            Not Before: Apr 16 22:01:46 2026 GMT
            Not After : Apr 17 22:01:46 2026 GMT
        Subject: CN=2f331b23925a7ebcc35fdeedaa97a166ceab07ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3c:d9:9a:14:d2:8b:41:41:2c:96:27:a6:cc:
                    d9:90:55:5a:d2:ca:ad:32:58:32:50:14:a0:c3:31:
                    19:f7:c5:0e:1f:c4:54:bd:4c:ab:72:a3:34:86:43:
                    b2:8f:fc:f0:cf:28:c4:06:d0:30:75:e9:ef:49:2c:
                    b6:05:e4:af:3c:ad:63:80:55:e8:d3:71:8c:69:2e:
                    eb:aa:f0:6a:65:47:5e:a6:98:2f:fc:95:78:70:dd:
                    59:8b:0e:5d:d5:95:9f:9e:c1:18:3b:de:81:ed:25:
                    9d:8b:8e:1e:2d:45:99:47:16:c0:83:72:df:ec:12:
                    c2:bd:75:74:d3:88:10:bd:1d:f7:3a:07:3a:5c:60:
                    21:6b:7c:5f:b8:74:6e:af:61:dc:93:a1:31:63:48:
                    d5:98:89:bd:a8:da:29:be:3f:ed:84:9e:11:cc:3c:
                    eb:ed:13:46:cf:f1:0b:97:c1:63:07:66:07:77:a2:
                    cf:3c:65:77:92:e2:1e:b9:b6:ad:c4:21:2c:e9:04:
                    06:51:23:62:04:0a:b7:92:76:85:24:75:fb:8e:33:
                    cc:c5:fd:96:de:63:2c:62:94:cb:bc:c3:63:a2:9d:
                    82:68:b7:dd:88:a8:00:4d:82:0f:f4:c9:5f:70:8b:
                    2b:7d:77:55:37:33:4b:4b:e7:ed:c0:11:24:ed:83:
                    42:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:33:1B:23:92:5A:7E:BC:C3:5F:DE:ED:AA:97:A1:66:CE:AB:07:EE
            X509v3 Authority Key Identifier:
                keyid:A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:4d:60:79:dc:99:98:3b:5c:5a:a5:95:ac:df:84:ad:d3:0e:
         93:98:91:38:e0:f6:b7:fd:09:6b:fc:fd:7d:1a:4e:42:53:66:
         6e:ee:f1:a6:c8:5b:83:95:54:76:9e:fd:f0:da:63:c1:10:c3:
         55:17:83:d0:fe:60:19:51:fd:a8:69:69:c4:86:40:89:f2:38:
         56:65:ee:a9:dc:5f:35:54:69:96:d1:32:2b:7e:e2:b9:e5:f9:
         b4:52:e5:06:a6:7f:31:67:dd:b7:a9:61:c4:58:f1:ad:33:7e:
         c1:e6:b4:be:e9:9f:b4:3d:a9:8c:b1:67:b6:83:46:9c:c8:7d:
         9f:ef:7f:ec:97:8f:4e:38:48:96:b5:35:4c:61:01:f6:65:fe:
         bd:9a:21:c4:0e:53:2f:d2:3e:a1:65:54:98:3e:6b:85:77:bc:
         2c:1d:34:15:aa:b9:84:1f:34:d6:85:d0:7c:89:09:5b:21:d1:
         eb:ee:a1:a5:4a:77:16:cc:87:d3:05:78:64:66:8a:8c:d5:65:
         06:f2:c5:b0:a0:98:6d:54:29:62:6e:0a:66:fb:b9:cd:89:42:
         f6:84:da:37:e5:75:41:96:66:da:86:a4:08:f1:92:5a:c5:b5:
         23:00:6d:2e:18:37:c5:8a:c8:bd:a5:48:a1:c7:b4:c9:a6:e5:
         05:3f:0f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:32:06 2026 by rpki-client