Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
File:                     sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft (raw, json)
Hash identifier:          NPQIZkyGvZOB8Ru25K9N57mC096Cd4VVd2B3CytJ+/Q=
Subject key identifier:   46:3B:3C:99:2E:9D:51:EE:A4:E7:19:0D:89:AB:67:A1:02:42:81:F6
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Certificate issuer:       /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial:       019D992B45106123C301430A7691837658DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 02:00:42 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:42 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:42 +0000
Files and hashes:         1: 60O0SRzjGsORJ1LBFnHv2U1PHTk.roa (hash: 3tf/Ui4ibWz+Ljka1guaW3+IweRIpdh9pYNIaOP6ChU=)
                          2: R4SqufV61FjY_qt6XBJL1xKD3Yk.roa (hash: oxpnmOAxuGivN4BOARVKb2erg4+PNj4PUrM7BceH1yo=)
                          3: i8jFdg5Mow9Dh-pthFrBPnRY_7E.roa (hash: cPsXapsQYVV5sthITpOROGImuL+pHXuvlOflhuTnK7c=)
                          4: jJ8Ja4wQj77UXskU4dYzizx-fO8.roa (hash: D/f3chU7o9XZeTFLsqkW7hmyKTnJCw4DJq8f3FXAw8c=)
                          5: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl (hash: RrEixB10POYSn5+svOZjwwNKXM9d5ewRMmPu+ZFNlI0=)
                          6: umCBjEn3NnVHg79eLHC3xk9rgS0.roa (hash: /fSksQdekqYTESP/mXyQvaIFQ1BWx6zsTRDj8qcB0V4=)
                          7: y1bR5jl013Y3lzMs7c_lC8K_wF4.roa (hash: ZOf1GD5+F7Ix58HDKPiEjn4TBv+b/5vVBq1mleIzuFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:45:10:61:23:c3:01:43:0a:76:91:83:76:58:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
        Validity
            Not Before: Apr 17 02:00:42 2026 GMT
            Not After : Apr 18 02:00:42 2026 GMT
        Subject: CN=463b3c992e9d51eea4e7190d89ab67a1024281f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:00:1c:5e:cf:87:52:61:98:6b:0b:be:c3:39:
                    b1:9d:8b:f4:46:5e:02:f1:5b:c2:1b:03:32:3a:1c:
                    2a:32:38:fa:ee:ab:9d:5a:f9:f5:6d:6a:93:61:05:
                    97:b7:5b:92:79:37:4a:19:31:ef:7c:f8:fa:a6:91:
                    15:0c:44:ee:10:bb:41:f9:6b:aa:43:a4:66:a5:db:
                    d7:7a:0f:91:8c:28:6a:de:03:86:72:0d:02:83:e7:
                    6f:fc:45:da:16:9b:37:79:5d:57:dd:28:0d:9f:0e:
                    23:3f:c6:06:8c:d4:b5:a7:47:60:b0:1e:58:9b:c8:
                    75:83:6d:d9:02:dc:5b:ff:a1:41:de:2c:96:a0:ab:
                    8f:9a:92:c1:ab:fd:76:ea:5d:5d:c9:4f:43:49:01:
                    22:d1:2b:95:4d:53:cf:9e:cc:7b:ee:fe:ad:81:47:
                    27:69:55:c3:c0:c5:ee:cd:64:6d:f5:96:6b:5c:9e:
                    00:3e:12:87:d0:7d:0b:db:c3:99:86:d0:d1:f4:43:
                    69:cf:32:78:6f:d8:a9:18:ea:c6:a6:7c:bd:17:6a:
                    f4:86:95:7f:e4:e2:9a:0b:5b:fc:30:33:e9:46:d2:
                    95:52:fd:ce:20:59:74:8b:3f:58:43:f5:39:26:a1:
                    47:b2:7c:be:a7:46:79:73:bb:25:1d:56:1d:c1:ad:
                    04:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3B:3C:99:2E:9D:51:EE:A4:E7:19:0D:89:AB:67:A1:02:42:81:F6
            X509v3 Authority Key Identifier:
                keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:8a:9b:12:a1:b3:fe:37:a5:9c:00:90:09:09:c7:7a:a2:b4:
         96:28:ce:57:6f:88:d2:97:48:77:8d:75:7a:99:06:c6:2f:ec:
         1f:3a:4e:80:f4:58:ec:99:1e:ad:2f:92:46:92:ff:d9:49:47:
         cc:64:81:b8:5c:66:74:10:c7:a7:80:9a:a9:f7:b2:5a:35:43:
         0f:51:6e:1f:d4:bd:f7:d5:86:7b:c8:7b:54:01:ec:94:06:e5:
         c9:99:63:11:a0:67:69:6d:f4:99:ba:cd:53:eb:f9:16:70:ac:
         1f:bf:b8:d4:fd:88:3a:bb:7a:7f:a3:bf:c8:95:4a:e1:53:23:
         37:db:3c:68:66:90:d0:6e:06:43:ad:fd:56:87:ce:05:01:3f:
         74:91:47:7e:27:9e:41:66:4e:8e:a6:a3:2a:5b:96:b8:b3:25:
         5b:1d:bf:3b:fd:a3:44:30:6f:26:f6:0b:1b:b3:12:e4:94:85:
         e9:88:8c:a8:61:66:69:29:b6:94:c6:bb:bb:0d:cf:c4:0a:37:
         ce:ad:af:ad:18:c4:d0:75:fe:43:1a:92:5f:31:98:08:6e:6b:
         76:aa:a9:84:17:02:36:eb:34:56:16:b2:1d:37:81:ba:73:80:
         4b:1c:47:c9:ae:05:31:b6:ff:1c:07:91:b5:a5:c3:69:7b:b3:
         f7:69:94:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:26:48 2026 by rpki-client