Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
File:                     e33o0TUz0eNrETWl0umm_zmFzaI.mft (raw, json)
Hash identifier:          XkHUCpUEXquaqf3YwzrXmvt1CseJlM0BLbKWFmTcy6o=
Subject key identifier:   42:67:C2:C0:63:6D:B6:FB:C1:68:C9:69:60:E7:E0:3A:72:29:B7:D7
Authority key identifier: 7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2
Certificate issuer:       /CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2
Certificate serial:       019D98F4C7B050E454B8FF43AB9C4B6913B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
Manifest number:          08B2
Signing time:             Fri 17 Apr 2026 01:01:11 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:11 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:11 +0000
Files and hashes:         1: GGptaUCk5HswofHGiRhoLDBrSsk.roa (hash: a8zAb+DGkHkBUoReMwMr6C/BLIezYKFQteBzpzxwQ3I=)
                          2: e33o0TUz0eNrETWl0umm_zmFzaI.crl (hash: jFGut3MCS4vwTtGuX5buvemYkBtfivTRjTiR6MxjLXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:c7:b0:50:e4:54:b8:ff:43:ab:9c:4b:69:13:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2
        Validity
            Not Before: Apr 17 01:01:11 2026 GMT
            Not After : Apr 18 01:01:11 2026 GMT
        Subject: CN=4267c2c0636db6fbc168c96960e7e03a7229b7d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a3:50:62:c3:63:bd:42:d8:3a:c5:90:62:a1:
                    92:af:00:c0:60:c9:73:88:c9:2b:b2:37:d1:b1:89:
                    75:11:69:e3:59:76:14:3a:b7:9c:e3:2d:47:ec:c6:
                    ba:86:ff:6b:45:37:38:5e:3f:b5:8e:df:39:f1:2e:
                    f0:e9:40:e2:d8:7e:f4:46:7c:2d:da:53:24:d9:e1:
                    a7:5a:6a:6b:43:f2:80:46:e4:f2:aa:60:83:e5:60:
                    68:37:36:fc:99:44:9e:21:5e:72:86:b7:b0:aa:aa:
                    0a:6d:48:78:26:bf:cb:4f:d0:67:e0:51:69:73:74:
                    a9:29:f6:8d:21:89:8b:d9:8e:bf:82:76:42:2b:d3:
                    71:9d:a0:d5:46:e0:a9:c5:c3:df:76:5b:b7:90:f4:
                    7a:10:f7:54:f6:ec:ac:10:17:45:62:ce:74:d0:13:
                    a8:d4:e9:2d:7f:3e:5e:1c:d1:09:78:f1:91:fe:92:
                    a9:b2:f7:36:08:98:ba:a6:d0:94:94:1c:e6:5d:5d:
                    c2:cb:ca:59:d6:d5:ef:c1:b2:fe:8d:42:8b:95:25:
                    ce:a5:4a:85:52:90:de:d2:82:cf:7a:16:c2:27:ed:
                    d7:6e:89:33:dd:3f:3e:e8:b5:47:9f:8b:b2:d9:5d:
                    2d:c9:14:fb:aa:6e:8b:3b:95:bb:51:0f:8d:3c:89:
                    a2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:67:C2:C0:63:6D:B6:FB:C1:68:C9:69:60:E7:E0:3A:72:29:B7:D7
            X509v3 Authority Key Identifier:
                keyid:7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:aa:89:44:b1:00:2c:51:28:53:f2:95:cc:2d:38:4d:d3:86:
         cc:cc:e5:0a:8e:ea:36:8e:a8:68:67:f8:92:7f:97:de:d4:bc:
         50:8b:f6:f2:f7:39:16:74:92:21:51:21:25:9d:30:c1:ad:ed:
         78:e5:47:34:c5:ee:2e:10:4b:91:27:bb:68:c7:6d:6e:f7:25:
         ce:c8:f1:2a:11:ce:36:1b:09:f2:89:ec:51:ca:e2:f7:ba:ce:
         fb:18:81:c8:ed:c4:62:7f:f3:31:bc:d6:cf:c4:a6:a6:25:d0:
         05:ea:0e:6b:c6:7d:bc:07:bf:5d:23:05:8d:df:94:75:51:6f:
         a0:30:9d:eb:4b:ef:4c:6e:bd:3c:69:05:b9:49:1f:62:6d:f5:
         07:20:c5:6b:44:90:98:d3:4b:59:11:93:e7:ec:fd:62:95:c4:
         e3:26:41:fd:5a:4c:7a:2c:17:ec:61:2a:68:87:ea:f5:5e:a8:
         ec:aa:52:db:6e:68:26:16:58:a2:fe:85:19:5e:e1:e2:59:04:
         88:cb:25:75:7b:cf:5c:65:19:ee:2e:c0:9f:69:21:11:2c:22:
         be:c2:9b:84:59:86:46:73:a0:5e:45:b6:4d:5e:8e:fd:56:7a:
         47:c3:3c:a8:d9:a9:15:de:2f:88:ed:95:b7:85:68:ab:93:ab:
         ba:75:6d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:35 2026 by rpki-client