Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
File:                     mnj9TUGkk4S99ufcPrvFAL9m2dU.mft (raw, json)
Hash identifier:          1Nnwiufp+SOH6Wp6TgmKyA+/rOt81AThc/kfa8K1IWI=
Subject key identifier:   15:6D:79:8D:28:38:AF:7B:3D:65:BA:BD:79:A9:20:03:92:6C:94:0E
Authority key identifier: 9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
Certificate issuer:       /CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Certificate serial:       019D98BD5D0E9FB56DF98A8A634636665095
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 00:00:39 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:39 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:39 +0000
Files and hashes:         1: fqe6NyqGeZLZDcQwpvqs6mMdDI0.roa (hash: 2W2OermTlAjnbB1evXIPuqiK3CU6ZGK4qE5cQcpe5Uk=)
                          2: mnj9TUGkk4S99ufcPrvFAL9m2dU.crl (hash: jNu70j0sLxYMlBapmfxGC7A0hqywb/4Iu5rzW/TYbQM=)
                          3: x0UL_tHjtGxiEevSxlF8WJ92kng.roa (hash: d2i4QuG0v0Jk1Or2egUFmUz1aiUe0+YuRvWeIsg+YUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:5d:0e:9f:b5:6d:f9:8a:8a:63:46:36:66:50:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
        Validity
            Not Before: Apr 17 00:00:39 2026 GMT
            Not After : Apr 18 00:00:39 2026 GMT
        Subject: CN=156d798d2838af7b3d65babd79a92003926c940e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a3:3a:81:fd:b2:44:97:77:55:66:95:c2:ec:
                    a0:83:fa:f9:a0:d3:fb:eb:93:36:bd:b1:0e:0b:fc:
                    77:df:20:b8:b1:5b:24:16:ec:de:34:08:87:30:15:
                    83:bd:94:72:ba:07:30:9c:02:9d:bd:3e:42:e4:d6:
                    49:2b:e5:39:3c:62:ff:0b:5c:c0:2b:70:ac:40:65:
                    1d:cb:f9:6b:fd:20:7d:ef:d8:71:9b:28:c7:89:ca:
                    9c:7d:a7:f8:b2:ae:bb:8d:c4:4c:4f:04:55:89:c1:
                    15:3c:c0:bd:68:8f:96:50:16:d4:8e:51:6c:dc:b1:
                    c7:1e:2f:bf:57:a9:c3:f8:2e:17:a9:80:78:bf:81:
                    6a:2e:d0:b0:f4:25:c5:95:1b:a0:a1:28:6d:51:7a:
                    bb:d7:07:65:5b:df:be:04:71:8f:e7:36:df:c7:e7:
                    83:c4:1d:08:d6:ee:d2:5b:6c:5d:1c:e0:a0:14:dc:
                    af:b0:26:73:fa:71:bc:b6:e2:b5:5c:eb:40:a8:32:
                    36:96:49:8f:16:87:7a:c5:c9:51:d1:67:83:b5:03:
                    39:dd:6b:a3:98:c5:8b:59:b6:75:29:14:cd:d2:19:
                    a6:4a:35:be:eb:98:04:af:65:13:ef:31:29:3b:fb:
                    be:ff:91:b4:71:43:95:8d:ab:a3:fa:6f:5f:54:fb:
                    10:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6D:79:8D:28:38:AF:7B:3D:65:BA:BD:79:A9:20:03:92:6C:94:0E
            X509v3 Authority Key Identifier:
                keyid:9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:19:93:de:07:3e:1d:69:42:86:84:fd:15:c0:33:69:9f:9a:
         fb:1c:a4:fb:c6:36:ba:01:72:47:01:76:d7:d4:42:ce:2c:68:
         d3:60:06:87:05:a8:46:19:95:13:36:24:ed:06:c5:2d:85:69:
         04:9e:b6:6e:81:d8:9d:71:82:9e:29:ba:c1:16:de:56:9f:ce:
         df:67:26:6b:ea:ca:44:2f:00:8f:ad:07:64:dc:33:19:40:17:
         38:3e:86:06:6d:95:ef:1c:79:ec:7f:75:84:a6:5b:87:8b:c1:
         81:ad:a3:ae:09:12:0d:af:d7:92:ec:63:85:b9:b8:ad:93:2f:
         1b:2f:a2:38:8c:c7:dc:64:32:0e:d4:e5:17:ac:2f:18:06:2a:
         af:aa:8e:69:b5:21:c3:21:9d:1c:a1:99:e8:23:48:b8:a1:84:
         81:e7:47:df:1a:c7:aa:2a:a4:3d:06:0f:44:cb:3c:27:07:da:
         ff:b4:d7:f3:1c:47:1d:09:fe:73:d0:b6:4f:13:1f:c3:80:fe:
         f9:53:13:3a:6b:9b:c6:ac:fd:16:29:7c:20:f4:9c:57:fa:ad:
         7c:4e:0c:f6:2a:b0:3c:95:31:0f:62:e5:72:7e:56:42:ab:ff:
         27:9a:8a:db:d1:13:f9:5a:6d:82:fb:be:0c:32:f1:b1:8d:0a:
         d2:7a:d2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:53:50 2026 by rpki-client