Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
File:                     Anes0RLxxsgzvsIvi1PMcNI5CHY.mft (raw, json)
Hash identifier:          JhaNAWcS4wuMJaazMCEAG7nVtgG+V5uYX+eWM+3eNW4=
Subject key identifier:   34:06:68:AB:21:19:AA:45:E5:95:1F:DB:F6:D9:F1:09:86:18:C1:C6
Authority key identifier: 02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76
Certificate issuer:       /CN=0277acd112f1c6c833bec22f8b53cc70d2390876
Certificate serial:       019D99D0B32D7785AFA29AF50DE068837987
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 05:01:24 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:24 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:24 +0000
Files and hashes:         1: ANa1GBLoP5xu32cExEGS1ucyPeI.roa (hash: 03Pv5w9P0hLlvZZZpgrIUfLMLj2sMsn6vZZ11knaFKk=)
                          2: Anes0RLxxsgzvsIvi1PMcNI5CHY.crl (hash: nuHTiakV3BhIVWvYGYYdaXYRaTfamvNeMqg4PFYccUA=)
                          3: e-lNAT2KWm6Z8P-XhIwHGDE5-pU.roa (hash: iVr8GEUOn1LFuRAheK6PX05d/ZM6MxTPjHOQdxUzn8Y=)
                          4: hzOfi7xasUduK6-Dsf-xHmLVWNU.roa (hash: 4jhdSegQbPfAmbaR3QHv7zCisX3cfxYoTmno1EUf1HQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:b3:2d:77:85:af:a2:9a:f5:0d:e0:68:83:79:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0277acd112f1c6c833bec22f8b53cc70d2390876
        Validity
            Not Before: Apr 17 05:01:24 2026 GMT
            Not After : Apr 18 05:01:24 2026 GMT
        Subject: CN=340668ab2119aa45e5951fdbf6d9f1098618c1c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:97:2c:20:57:6f:fe:8e:fc:ee:ce:ab:82:40:
                    df:e3:30:61:bb:2a:40:56:09:03:f7:c3:21:b1:69:
                    c1:65:ca:31:4f:5a:0e:54:5f:54:a7:62:24:7d:93:
                    23:89:21:e9:e5:dc:89:87:9b:87:6d:dc:b7:b0:f5:
                    1b:4f:a9:9a:91:96:e0:72:f0:69:a4:ea:14:e8:c0:
                    1e:22:3e:29:da:1f:21:4e:cf:ce:a1:8b:c2:d8:0f:
                    ba:cd:05:65:46:54:2d:d8:df:6d:93:0a:ed:17:9e:
                    59:54:23:1d:c2:86:e7:e1:09:37:d5:63:85:47:72:
                    1f:d1:2f:f6:c3:2a:a8:de:e9:db:1f:47:da:78:51:
                    0b:e3:41:12:27:ac:34:d9:9a:87:a2:c0:f0:6e:5b:
                    18:6c:04:07:c2:c9:19:52:0e:70:fb:e4:f2:bd:c0:
                    0a:4e:41:11:43:bf:e2:51:5d:6f:67:af:0d:8c:66:
                    00:07:41:07:e1:99:7b:03:0d:8e:d9:1d:65:b5:ae:
                    3d:bb:08:23:40:d3:d6:0b:7b:fb:d7:a7:af:39:1e:
                    03:e4:42:0b:60:a5:c4:47:a1:86:48:86:ff:ec:34:
                    4e:e8:44:04:ac:bb:98:b2:66:d8:b0:80:c9:62:cb:
                    88:df:c5:c8:30:c8:34:46:13:2d:67:46:ae:09:02:
                    68:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:06:68:AB:21:19:AA:45:E5:95:1F:DB:F6:D9:F1:09:86:18:C1:C6
            X509v3 Authority Key Identifier:
                keyid:02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:5a:c3:b7:6f:1d:47:ae:d9:61:47:a3:02:74:c8:0f:5c:7c:
         bb:4e:34:bb:97:6f:7b:cf:a0:f9:36:85:e3:d2:57:d1:d6:5c:
         94:aa:0d:45:62:a1:9a:d3:81:10:20:51:0a:b4:e7:5f:38:91:
         53:e8:a7:9d:02:cc:56:78:ef:84:c1:85:c8:47:1c:30:ac:58:
         d4:3d:e0:76:72:a9:9d:88:8b:d0:ca:25:c8:df:b6:d0:98:bd:
         f3:6e:af:04:50:3e:bb:c9:ec:4f:a5:4f:2c:f3:fb:34:77:5e:
         3a:5a:4a:f6:48:0a:55:08:fd:3a:07:a8:32:b3:d8:40:b3:33:
         a6:e9:b7:9d:d6:f9:5d:bb:1c:85:97:92:dc:44:5c:69:13:9e:
         1b:ec:e7:32:48:d1:23:7b:7f:60:9b:a5:b1:51:26:58:4c:67:
         54:1d:d5:f8:1d:25:5b:73:ff:fa:5c:3b:b7:38:8a:15:99:1e:
         fd:64:ac:11:80:ae:4a:b4:dc:5b:61:1e:18:27:4d:89:c6:99:
         d4:81:04:a9:f5:0b:6a:c5:4a:16:80:17:18:83:c1:2a:2b:38:
         a2:ea:f2:68:fb:88:b2:ae:1b:5d:a3:96:ea:23:28:1b:16:f9:
         bb:90:2e:38:40:89:07:09:91:e3:1a:ca:4b:10:01:a8:77:dd:
         29:7e:13:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:34:37 2026 by rpki-client