Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
File:                     qwbI8iR9IgQcguVVZniB5Q-RVKs.mft (raw, json)
Hash identifier:          PcOQXiBMccGJB8CXvD4YKIxaJXZatOOMEUMUoZF4Iak=
Subject key identifier:   D8:B3:85:E1:E2:EE:7A:B3:F1:95:81:EE:00:7C:1B:C8:3A:12:55:7F
Authority key identifier: AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
Certificate issuer:       /CN=ab06c8f2247d22041c82e555667881e50f9154ab
Certificate serial:       019D981899B510A7DFBA01C5B50E7F09DE11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
Manifest number:          18C1
Signing time:             Thu 16 Apr 2026 21:00:42 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:42 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:42 +0000
Files and hashes:         1: 8bGDeqOLEpqluLGnhA5OPPZlF4U.roa (hash: nyQFlbismgT+/vk7cKh4RxgsOCP+jQOON5dqP3fMM7g=)
                          2: E7RKatZ2-c0USqUVA50ejfPO_LA.roa (hash: Kbpm5sWk9Jg4XBpXaBujpM1V2VgMgPUNQUsGM4QI/6E=)
                          3: MduUx5hRjjKbLaSy2UDLe1Nxp4s.roa (hash: UqToIY/uIMk+vJNVcNlL0gMCWXoA/1adspZCvbwaa/A=)
                          4: qwbI8iR9IgQcguVVZniB5Q-RVKs.crl (hash: zQ53G+sNGjrajaXV5+3chnWWd/KaQphyYj7qyc5MPb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:99:b5:10:a7:df:ba:01:c5:b5:0e:7f:09:de:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab06c8f2247d22041c82e555667881e50f9154ab
        Validity
            Not Before: Apr 16 21:00:42 2026 GMT
            Not After : Apr 17 21:00:42 2026 GMT
        Subject: CN=d8b385e1e2ee7ab3f19581ee007c1bc83a12557f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b8:49:f6:1c:65:64:76:e5:d0:12:e6:d4:95:
                    e6:de:56:2c:f9:e2:c4:8d:06:e4:f0:7e:d5:06:eb:
                    b3:1c:66:70:d8:61:f8:e7:3f:31:58:d8:0e:63:de:
                    ae:d9:4e:87:91:77:71:ed:cd:e9:b0:3d:00:d9:63:
                    f7:36:dc:25:d5:44:e8:22:28:95:11:e1:57:c6:84:
                    2e:f2:fb:dc:ed:0a:c9:82:da:80:ee:a2:64:bd:11:
                    b2:0c:bc:00:54:c3:bb:26:9c:1c:0c:4c:ef:80:2f:
                    06:28:17:31:c1:21:05:47:8f:3d:9e:6e:f9:2e:8f:
                    cd:22:d7:87:9a:6f:d5:a2:b0:dc:12:0d:a6:80:ca:
                    ef:c8:d8:50:2f:ac:90:60:5b:68:a5:ee:fc:dd:0b:
                    76:4f:e1:d1:a5:aa:07:83:5f:4f:89:e1:b9:a2:cd:
                    9d:e0:de:8a:60:39:1b:d6:21:ff:a4:6f:e4:b7:10:
                    14:c6:0e:95:36:d3:06:e5:ff:b9:a8:e5:12:88:ab:
                    0a:89:07:8c:f2:74:23:0e:77:c8:71:13:20:76:fd:
                    4d:04:a4:df:df:f3:93:96:8b:60:7a:e3:20:a7:3d:
                    b0:e6:1a:e4:97:68:d2:4d:3f:c4:e4:b2:ea:95:c9:
                    7f:f0:94:f8:9e:55:b2:0a:d9:0e:98:81:1d:ed:cc:
                    3b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B3:85:E1:E2:EE:7A:B3:F1:95:81:EE:00:7C:1B:C8:3A:12:55:7F
            X509v3 Authority Key Identifier:
                keyid:AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b5:29:e6:ed:dd:e1:f5:21:8d:1b:c4:8a:61:23:ea:c2:a6:
         57:b9:ce:af:56:61:04:f6:9e:47:eb:a2:a8:19:5a:38:49:95:
         83:55:69:09:04:57:9c:71:09:65:b9:ea:eb:bb:e7:1e:ae:c0:
         aa:3f:57:f5:8e:be:ed:99:1f:50:d8:04:0a:5c:f6:f8:eb:9e:
         f0:51:b9:f0:f4:a8:0b:ca:1d:1b:cb:08:53:0f:cb:21:a0:a6:
         c8:2a:9a:d9:a2:39:08:e4:4e:8b:df:3f:7d:cf:4b:05:6d:d1:
         e5:60:bc:69:19:7e:68:76:20:9b:be:f0:78:d8:05:2a:3e:72:
         6f:c1:66:b1:87:25:3d:99:4f:26:98:4d:4a:0a:bb:75:dc:82:
         87:26:98:6b:1f:04:04:98:09:0b:ed:2b:35:3c:69:4c:6c:f0:
         53:c0:dd:70:c3:08:af:84:db:78:86:ea:35:a1:b0:a0:1e:19:
         09:47:d9:87:30:3c:47:98:22:50:c5:07:7d:4d:fb:43:cc:a0:
         f5:d6:e4:8a:de:ff:4c:54:e3:ce:cd:d0:a5:3a:b2:fd:f5:28:
         15:cc:b5:ca:2d:4b:30:d5:4c:bc:68:9d:56:09:47:85:fb:df:
         0d:b4:1a:b6:9e:f9:e1:b3:ea:0f:30:bf:12:28:a0:93:e1:2d:
         57:c4:9e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:39:49 2026 by rpki-client