Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
File:                     7ixIe2tr3aIheQctkqjwHo5zZjQ.mft (raw, json)
Hash identifier:          lfwSMZTa44/YlmU1oLLEz0p0ZoYMqj53xHUt5rsGgmA=
Subject key identifier:   BF:75:1A:6B:2D:2A:4A:0A:9A:1E:C3:9E:F5:CD:E3:26:56:A9:C7:6E
Authority key identifier: EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
Certificate issuer:       /CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Certificate serial:       019D99D04216D66FDFE461D0C957E258B642
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 05:00:55 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:55 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:55 +0000
Files and hashes:         1: 7ixIe2tr3aIheQctkqjwHo5zZjQ.crl (hash: Kl3xBeVFJLYN7cfzavQgQxtgjdXVPjiCVY7U2lWZ9CE=)
                          2: _osGDzZycVvwVO8jk7tST0-kMuc.roa (hash: V5At1uVjWkeBJy6WzVu631/zeJQGqErhpfeeQ5kY2uw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:42:16:d6:6f:df:e4:61:d0:c9:57:e2:58:b6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
        Validity
            Not Before: Apr 17 05:00:55 2026 GMT
            Not After : Apr 18 05:00:55 2026 GMT
        Subject: CN=bf751a6b2d2a4a0a9a1ec39ef5cde32656a9c76e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:88:fd:19:7a:5a:a5:fd:83:37:b9:f2:c3:c1:
                    34:cc:83:f0:0f:94:7b:c1:7d:74:e1:7b:27:65:d5:
                    87:ba:fe:79:87:58:bf:f2:6b:27:5c:0c:c1:b7:8e:
                    42:93:7f:13:f6:9d:02:eb:f1:88:13:e0:61:f9:a1:
                    26:70:9e:cd:91:37:78:99:3b:5e:ff:c8:12:77:92:
                    af:9c:d5:14:b2:84:64:ff:7b:66:88:4e:f9:54:c1:
                    f6:2b:87:b8:81:86:ec:7b:a3:8f:cd:c2:9c:2f:b5:
                    a7:2d:de:1b:c7:37:02:82:d8:3c:d0:19:d9:59:8e:
                    44:ab:8a:9a:70:3f:c3:88:1c:ad:0f:46:f4:2e:83:
                    ea:84:f7:1a:28:eb:e0:93:03:96:13:5c:32:47:20:
                    5a:9a:26:fd:7b:dd:ad:e0:dc:ac:21:18:db:e7:53:
                    38:fb:28:59:af:de:0b:dc:b6:ab:d1:55:b5:91:75:
                    a3:b1:ae:a4:15:50:bb:e2:72:8e:1e:83:43:5f:18:
                    7d:d4:bc:a1:26:d5:de:01:d7:5b:bd:2b:2a:0e:b3:
                    73:82:b1:72:08:f9:48:38:fb:f7:9f:fb:fe:77:49:
                    6d:99:86:45:72:ad:22:74:41:ce:57:49:0c:54:53:
                    f4:25:49:fb:94:28:12:8c:6e:28:d6:40:5e:bf:da:
                    74:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:75:1A:6B:2D:2A:4A:0A:9A:1E:C3:9E:F5:CD:E3:26:56:A9:C7:6E
            X509v3 Authority Key Identifier:
                keyid:EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:e3:79:5f:f1:4e:89:ea:65:45:59:50:e0:59:81:2d:7e:b9:
         b2:d5:7a:18:9e:31:1b:fa:90:52:7b:1b:f0:c5:e1:f7:51:e7:
         38:cc:fe:3b:7d:7b:8d:16:59:f8:04:75:2d:59:ca:44:93:e9:
         39:a6:bc:5c:0e:a5:d8:57:18:dc:a3:4d:26:32:ee:c0:7f:4c:
         29:a5:d8:e0:e7:fd:d9:95:a7:45:39:f3:90:26:e8:fc:36:ff:
         fc:26:b5:cd:36:f2:fa:14:c5:b4:19:76:12:75:da:a4:94:f8:
         17:73:62:5e:5f:73:a8:c3:59:b7:4a:3f:c6:42:0d:7a:73:d4:
         3e:c2:f2:e7:0b:df:66:b1:6e:3f:07:63:f3:1a:08:46:f9:30:
         51:f4:f5:6d:e0:ce:52:dd:49:7b:c2:e7:14:69:26:48:95:53:
         ec:d6:42:e5:fe:62:48:f5:4f:2a:9e:8f:e3:48:b8:15:ce:d0:
         29:12:85:7c:d0:83:8a:6a:dc:46:c2:6b:0a:bf:5c:fc:16:f9:
         db:29:5b:bd:1e:cc:10:41:54:5a:0a:34:da:6d:ee:ed:db:22:
         16:8e:77:9a:2b:2f:e2:42:14:92:83:f4:5e:ca:43:8d:e8:f8:
         72:78:28:6f:f3:50:1b:3b:98:b5:de:15:6c:28:f6:86:1e:88:
         1c:db:83:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:18:56 2026 by rpki-client