Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
File:                     G55Be7nssazpSR68KCO7eJNLLN8.mft (raw, json)
Hash identifier:          thp49UaEx2dRW3UhchMA+bUqssq7cICIlelk0NaqWl0=
Subject key identifier:   0F:37:D2:6B:7B:8B:E7:A6:83:1D:03:1B:51:C6:B5:3E:3B:D7:B9:F3
Authority key identifier: 1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF
Certificate issuer:       /CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf
Certificate serial:       019D9A07301B0D3D059C8177ACFB190DF6AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
Manifest number:          1770
Signing time:             Fri 17 Apr 2026 06:00:55 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:55 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:55 +0000
Files and hashes:         1: G55Be7nssazpSR68KCO7eJNLLN8.crl (hash: voDhYyab9biWxPkn1vMRDA+mNkGTaeVC4hnBk6T5V/c=)
                          2: Uq5inBb-jqOud0f_hbs-E8z_-XY.roa (hash: S1HZrn9S5gAaduSRYO2e3A+5aLVn8Wyzjkhn28j1jks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:30:1b:0d:3d:05:9c:81:77:ac:fb:19:0d:f6:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf
        Validity
            Not Before: Apr 17 06:00:55 2026 GMT
            Not After : Apr 18 06:00:55 2026 GMT
        Subject: CN=0f37d26b7b8be7a6831d031b51c6b53e3bd7b9f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d9:c8:f9:9d:7a:6c:5a:7a:45:4f:47:13:dc:
                    4a:9b:96:6f:f6:5d:1e:d0:50:64:71:1e:b4:05:ff:
                    4f:9e:77:5b:d9:4a:0e:cc:d9:a8:82:e9:4a:e0:ba:
                    1c:65:fb:f3:34:5a:9b:5f:e5:7b:3c:de:49:41:62:
                    35:22:0a:33:ae:3f:ec:d5:89:fb:04:87:4b:74:74:
                    99:89:75:6a:0d:85:cd:e0:14:d8:16:f5:e7:7f:03:
                    59:0b:54:18:2f:9e:2c:24:f4:6b:68:6c:9d:7a:d9:
                    9f:05:4f:32:3f:23:b6:9a:f4:70:53:db:cd:02:33:
                    34:62:1e:d7:82:eb:97:37:41:4a:fd:d3:68:18:c2:
                    ca:e4:ef:a5:74:13:2a:cf:40:a4:6b:e4:90:9d:2d:
                    e8:dc:f7:9d:05:32:50:d3:e5:62:00:a2:de:2f:26:
                    bc:d0:e3:c5:7e:47:c9:84:0a:6b:3c:5c:19:3f:88:
                    ee:59:88:77:d6:86:3c:62:64:39:42:ea:c4:d4:e8:
                    d6:c6:56:4b:c9:3f:13:8d:5f:c0:59:d7:86:aa:70:
                    d7:21:40:0b:df:34:07:68:8a:3d:2f:17:b0:cd:2f:
                    6d:6d:d5:be:4c:ac:5d:fd:a9:28:9a:3d:07:d9:c7:
                    1e:19:df:19:0c:2b:ab:76:bc:d7:6d:f1:7a:5f:02:
                    84:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:37:D2:6B:7B:8B:E7:A6:83:1D:03:1B:51:C6:B5:3E:3B:D7:B9:F3
            X509v3 Authority Key Identifier:
                keyid:1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:51:d0:39:11:d7:47:91:cd:7a:51:03:08:24:5e:4a:e1:2d:
         5f:da:cd:ec:9d:b6:44:6c:40:d6:68:30:0b:fa:1c:c5:45:59:
         03:5f:f8:2f:53:44:05:92:45:24:b8:8e:33:0b:71:e0:ed:15:
         81:38:78:e8:2d:74:54:b0:82:81:92:e1:68:87:cd:89:ff:d5:
         9b:fc:c5:b8:e7:ec:bb:6b:7f:05:2e:4c:e3:c1:00:eb:a2:0f:
         b2:2b:1d:3d:ea:e8:54:5b:9e:18:c2:98:28:7e:05:31:6a:6f:
         32:52:c2:9b:ce:37:05:69:8a:07:58:3d:6d:eb:17:75:a4:53:
         ae:23:88:6d:2e:ad:eb:40:6b:f4:31:b2:10:e4:6b:df:f5:c6:
         83:ca:26:c6:3b:d3:be:67:e7:3a:77:67:47:04:5b:11:3e:71:
         7f:69:29:c5:2d:15:11:4e:f8:22:cf:7f:04:2f:de:62:d4:e4:
         aa:fd:aa:c0:e9:cd:b7:1a:91:0c:5b:11:cc:09:56:30:48:ce:
         9b:66:d3:ff:80:ad:0c:9f:a4:cd:5a:f4:30:1f:66:89:09:7b:
         14:7a:3b:98:1b:df:77:de:1c:9a:d9:41:18:d2:84:7f:92:d4:
         fe:e3:a8:e9:b0:14:76:6b:e0:f8:84:be:28:83:ed:3e:1b:73:
         20:56:59:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBzAbDT0FnIF3rPsZDfatMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOWU0MTdiYjllY2IxYWNlOTQ5MWViYzI4MjNiYjc4OTM0
YjJjZGYwHhcNMjYwNDE3MDYwMDU1WhcNMjYwNDE4MDYwMDU1WjAzMTEwLwYDVQQD
EygwZjM3ZDI2YjdiOGJlN2E2ODMxZDAzMWI1MWM2YjUzZTNiZDdiOWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNnI+Z16bFp6RU9HE9xKm5Zv9l0e
0FBkcR60Bf9Pnndb2UoOzNmogulK4LocZfvzNFqbX+V7PN5JQWI1Igozrj/s1Yn7
BIdLdHSZiXVqDYXN4BTYFvXnfwNZC1QYL54sJPRraGydetmfBU8yPyO2mvRwU9vN
AjM0Yh7XguuXN0FK/dNoGMLK5O+ldBMqz0Cka+SQnS3o3PedBTJQ0+ViAKLeLya8
0OPFfkfJhAprPFwZP4juWYh31oY8YmQ5QurE1OjWxlZLyT8TjV/AWdeGqnDXIUAL
3zQHaIo9LxewzS9tbdW+TKxd/akomj0H2cceGd8ZDCurdrzXbfF6XwKESQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA830mt7i+emgx0DG1HGtT4717nzMB8GA1UdIwQY
MBaAFBueQXu57LGs6UkevCgju3iTSyzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzU1QmU3bnNzYXpwU1I2OEtDTzdlSk5MTE44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iZGZlMTctOTFhZC00ZjMxLWFlY2Qt
ODFlZDEyZGRmMTc1LzEvRzU1QmU3bnNzYXpwU1I2OEtDTzdlSk5MTE44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iZGZlMTctOTFhZC00ZjMxLWFlY2QtODFlZDEyZGRmMTc1
LzEvRzU1QmU3bnNzYXpwU1I2OEtDTzdlSk5MTE44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlHQORHX
R5HNelEDCCReSuEtX9rN7J22RGxA1mgwC/ocxUVZA1/4L1NEBZJFJLiOMwtx4O0V
gTh46C10VLCCgZLhaIfNif/Vm/zFuOfsu2t/BS5M48EA66IPsisdPeroVFueGMKY
KH4FMWpvMlLCm843BWmKB1g9besXdaRTriOIbS6t60Br9DGyEORr3/XGg8omxjvT
vmfnOndnRwRbET5xf2kpxS0VEU74Is9/BC/eYtTkqv2qwOnNtxqRDFsRzAlWMEjO
m2bT/4CtDJ+kzVr0MB9miQl7FHo7mBvfd94cmtlBGNKEf5LU/uOo6bAUdmvg+IS+
KIPtPhtzIFZZoA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:27:23 2026 by rpki-client