Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
File:                     S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft (raw, json)
Hash identifier:          YGm+VqTRk578kRequ/F662eZjyiUV9LcNKr32Ln/kc8=
Subject key identifier:   3D:F4:AE:4F:E2:A5:0D:57:0C:BA:81:83:AA:65:46:48:53:24:A8:13
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Certificate issuer:       /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial:       019D9705E6693D36D86CFD32B87B508C4110
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
Manifest number:          18E7
Signing time:             Thu 16 Apr 2026 16:00:39 +0000
Manifest this update:     Thu 16 Apr 2026 16:00:39 +0000
Manifest next update:     Fri 17 Apr 2026 16:00:39 +0000
Files and hashes:         1: AWjl1sPeUn1UTaLBzc5vN4VqISk.roa (hash: DupQAQckzrcSct0AJBlt8pXhO5fHKNphm7GyxXGlo0Y=)
                          2: S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl (hash: Ha396Dg6+DOcIpcmpH+wE0+25MEsHNMcPJxfKH7nmak=)
                          3: cN9-QkcDeRmmddqpx80fjE4LD7s.roa (hash: O0DZXiBII2s8che4/ZMrj0hj9juscGV08AllWCCgxdM=)
                          4: p8O4ZN9Xeldr_QvYtZL9RkkK6rk.roa (hash: KcqVP0b3/1a1YhXbBJeqeSikqnykQvFC4LFHO5+2KLo=)
                          5: yCZntdcD-FiyyzALoPRod_Tynro.roa (hash: A7enThxiUzB12fnWIKjiXX2k7pCD4DTrx01Es4L2jQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 16:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:05:e6:69:3d:36:d8:6c:fd:32:b8:7b:50:8c:41:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
        Validity
            Not Before: Apr 16 16:00:39 2026 GMT
            Not After : Apr 17 16:00:39 2026 GMT
        Subject: CN=3df4ae4fe2a50d570cba8183aa6546485324a813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c7:e1:c9:6c:9e:16:5e:7b:92:03:31:3b:64:
                    98:47:28:7b:ec:dd:a5:7f:96:f7:78:9b:0b:b9:c7:
                    a6:67:a0:c9:11:7d:98:02:55:38:18:5b:cd:74:1f:
                    86:be:90:dd:94:c9:b1:0c:68:16:78:28:8d:a3:f5:
                    7c:1f:16:80:b5:69:7d:85:ca:91:a7:ae:47:fc:1d:
                    ae:22:31:c1:51:38:6b:8e:7c:a5:f5:04:1f:90:9a:
                    64:d0:d9:9b:70:07:0a:7c:b8:1c:0b:24:f0:cb:e3:
                    ed:b2:17:ec:7e:50:ed:d6:b8:19:e5:65:ef:8f:d4:
                    01:9d:cd:3a:a7:49:77:22:e3:df:46:51:c3:f6:62:
                    da:34:72:8a:f8:3d:08:44:36:95:c0:a1:e4:0f:e2:
                    8e:7b:37:4b:f0:26:2b:aa:6f:e5:75:d9:86:3b:03:
                    d0:02:d6:3e:4b:c7:37:23:30:4d:99:c7:19:d7:b3:
                    32:e5:12:6d:cc:34:00:86:de:24:bc:e7:c8:ae:d4:
                    d5:31:63:88:40:ca:fe:70:dc:cb:ec:bf:b7:4b:21:
                    57:67:14:54:01:b7:1b:90:74:1a:70:e0:37:9e:6d:
                    68:81:31:80:b1:e5:f4:16:ab:95:65:4c:4d:cd:ba:
                    4b:c4:db:f0:1e:ad:a5:e1:e2:e4:e9:65:30:31:c0:
                    ae:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F4:AE:4F:E2:A5:0D:57:0C:BA:81:83:AA:65:46:48:53:24:A8:13
            X509v3 Authority Key Identifier:
                keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b9:fc:b0:30:42:76:65:a9:cf:42:1c:f3:2c:f0:6f:c9:e6:
         ef:5e:45:28:f7:c9:ae:33:05:60:6c:54:66:fa:10:56:90:5c:
         e5:d8:a4:6b:1b:41:c2:68:1e:8d:fc:93:01:c0:c3:f7:f9:6a:
         49:7e:40:c4:3a:c6:35:b5:f3:90:05:a4:0c:95:7e:b0:eb:c5:
         67:37:8e:79:f8:fb:85:a9:58:93:78:3b:b3:66:f2:05:e4:3a:
         5a:ca:bc:85:2e:4e:92:ab:aa:82:11:58:94:e8:01:4e:6e:24:
         7c:28:4d:b6:eb:76:63:7c:51:70:05:62:8b:1a:2f:e6:5b:e2:
         b0:ee:17:12:9e:ad:37:d8:83:b5:3c:19:96:94:b6:bb:27:92:
         b9:fb:b3:1c:b0:e2:66:fa:15:a8:b8:2f:f9:bc:fa:b7:34:a6:
         bf:55:58:49:c0:9e:a6:ca:8e:71:1c:59:de:4b:87:cd:c6:71:
         a2:67:03:ee:42:d1:d0:f2:09:33:f2:07:9e:f0:d0:0f:e5:87:
         eb:eb:d7:b9:b8:f8:58:0e:67:83:27:bd:6e:8c:96:37:d8:51:
         f0:49:55:11:d0:e7:7e:01:73:05:ad:12:30:f1:87:92:6a:79:
         3a:b1:8c:40:ae:40:47:42:84:10:16:90:e9:ee:a3:9d:c9:f9:
         ab:c7:83:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:56:40 2026 by rpki-client