Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
File:                     Rs_EGkGae71tjoxO5oVZW2pAufE.mft (raw, json)
Hash identifier:          lZhiiIi1Ti/v2e5dcujODrXRSvQ6iVpEVz7v6dLJJmw=
Subject key identifier:   3F:BB:42:99:5B:9E:11:B1:79:0C:E3:3D:36:39:FA:CD:F8:0A:09:6F
Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
Certificate issuer:       /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Certificate serial:       019D99D02B74C37004943190FF3985F7CD08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 05:00:49 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:49 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:49 +0000
Files and hashes:         1: PHd3RlGosSCiiJlgByr5DyGNERo.roa (hash: H4E9jAo8k6ZvIudithlFluMLgtGMVfZdqBunaDN8nQM=)
                          2: Rs_EGkGae71tjoxO5oVZW2pAufE.crl (hash: f0enram72QYNYu9cf344ot7QDdxPYh02wDy/kDNFJaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:2b:74:c3:70:04:94:31:90:ff:39:85:f7:cd:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
        Validity
            Not Before: Apr 17 05:00:49 2026 GMT
            Not After : Apr 18 05:00:49 2026 GMT
        Subject: CN=3fbb42995b9e11b1790ce33d3639facdf80a096f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0e:ab:8c:61:16:41:83:27:57:82:2e:e6:23:
                    4e:c3:f0:2d:c2:cc:90:3c:38:e8:70:de:00:6a:21:
                    6a:7e:2b:f8:66:fe:1c:dd:e4:91:7d:81:0a:d7:d9:
                    7a:c1:a4:3e:f1:64:62:00:1e:e2:b1:21:cf:1e:20:
                    a8:cd:ba:62:9b:b5:2c:40:c8:63:e8:d0:b8:a3:16:
                    57:73:32:74:6c:7e:13:e5:c7:5e:82:85:ed:7b:af:
                    26:32:63:91:d7:6b:55:c7:20:ee:fb:4a:ac:bc:94:
                    a0:89:4c:26:3a:65:e3:bc:20:c8:91:8d:f5:23:ac:
                    e9:f4:0e:dd:88:60:d5:cd:ba:ac:5e:31:eb:2e:6f:
                    43:21:ae:45:54:e5:8a:b1:6e:2c:4e:47:ee:1f:12:
                    39:45:c7:4f:b3:40:e3:8f:99:09:da:d8:dc:c9:95:
                    e2:14:47:5d:ac:08:30:42:80:59:44:28:1f:d1:0d:
                    89:f8:bb:e9:ec:af:9f:7c:68:a4:08:6a:2a:db:47:
                    81:0e:09:65:51:78:e6:02:0f:3b:97:69:5f:fd:c3:
                    18:f7:19:17:b4:b6:41:ad:21:ec:ec:e3:81:24:22:
                    17:9a:70:a9:b9:76:db:c3:53:c4:68:63:2c:56:93:
                    4e:e4:43:9d:1a:b5:59:6f:7e:bf:4e:a5:fa:96:db:
                    b5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BB:42:99:5B:9E:11:B1:79:0C:E3:3D:36:39:FA:CD:F8:0A:09:6F
            X509v3 Authority Key Identifier:
                keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:f2:06:e2:45:7f:d4:93:ab:bc:50:1f:02:69:c8:9e:29:f9:
         29:ee:62:92:85:a0:2b:89:c3:31:f0:e1:0c:21:e5:45:ff:79:
         1d:23:a7:44:7a:73:08:bc:87:fc:30:b1:97:77:2c:07:49:ba:
         be:bc:cb:e6:7f:97:d0:e7:71:c5:4f:3e:cc:f0:cd:46:c0:1d:
         da:92:0e:40:ee:2b:27:34:56:92:17:c5:0b:bc:a2:46:fd:fe:
         c2:38:2d:73:37:d7:58:71:27:27:e4:a4:4b:fd:b9:c9:e1:c9:
         e5:2d:f6:37:5f:04:e5:97:c1:a1:94:e8:00:ae:35:49:c2:2b:
         02:d4:b5:89:57:53:51:55:e4:8e:af:32:9b:27:ab:4c:bc:7a:
         fb:cc:28:59:de:6a:d1:a1:d5:e0:9d:ac:93:08:9b:b4:51:39:
         d5:62:18:58:ed:c5:dc:de:a5:40:39:2c:dd:8e:a8:14:88:76:
         a2:d6:37:fe:90:e3:ef:88:f2:d8:59:30:07:da:0e:eb:d9:eb:
         79:4b:75:ba:b1:cb:0c:3d:56:24:1f:f2:f2:dd:8c:69:93:b6:
         94:36:bc:f8:c1:cc:83:8b:4f:7b:62:a6:69:b1:e0:ac:41:08:
         bc:fc:16:66:7d:b3:d2:c6:2d:a5:80:d2:90:25:fc:46:d7:02:
         49:e4:bd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:19:49 2026 by rpki-client