Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
File:                     oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft (raw, json)
Hash identifier:          HVo5JpKDtIqJjEJ3KKeyTRri04rn2Bje2CRCzWS29nY=
Subject key identifier:   9E:6B:3C:EC:53:A8:86:26:D1:B7:B1:48:B9:F4:66:D6:6E:0D:7E:A0
Authority key identifier: A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
Certificate issuer:       /CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Certificate serial:       019DC070ACD538DEA0CF9DBB32851C2C8759
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
Manifest number:          18DB
Signing time:             Fri 24 Apr 2026 17:01:42 +0000
Manifest this update:     Fri 24 Apr 2026 17:01:42 +0000
Manifest next update:     Sat 25 Apr 2026 17:01:42 +0000
Files and hashes:         1: 1D6VdZ93vriFw0vJq3zsA_SVHYQ.roa (hash: wfcEJ94VdVBOXkIE/uYqWDRHCjqI3CAKjspAjKdc5FA=)
                          2: 6ANG8OJh4OznV_DcZX5PWVtHheM.roa (hash: NqWuvD35Q6Kj2pzaFTf900GyG3MSTmGkmgkkAWcoTkE=)
                          3: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl (hash: D3l9Yy9otZdO8HkFgCAypCJiorJwF0aa3DtQ415xRgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:c0:70:ac:d5:38:de:a0:cf:9d:bb:32:85:1c:2c:87:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
        Validity
            Not Before: Apr 24 17:01:42 2026 GMT
            Not After : Apr 25 17:01:42 2026 GMT
        Subject: CN=9e6b3cec53a88626d1b7b148b9f466d66e0d7ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:94:f3:22:d2:60:85:d8:ba:67:3e:05:9c:da:
                    6d:5f:c4:ca:e2:12:ab:3b:27:cf:45:59:de:60:57:
                    fc:8f:83:43:6e:06:46:3c:a5:8c:43:a0:d9:7e:f7:
                    ab:7f:0d:8b:57:1a:f8:f4:7c:f2:7e:e4:49:3b:ee:
                    b9:fb:05:65:c8:db:e4:6e:39:64:05:4d:d8:fe:f2:
                    8f:4f:13:b2:a0:b8:be:cc:52:31:12:bf:d9:49:48:
                    4a:93:7b:21:f5:f2:d0:24:6b:d1:30:ae:5e:22:4b:
                    cf:bd:11:2a:d9:aa:23:85:69:6b:62:ff:dd:e6:fb:
                    e5:ed:e0:94:8d:4c:82:02:e8:c6:c6:2f:11:1a:a9:
                    5b:03:9c:91:a2:7d:87:6e:66:19:89:27:20:75:16:
                    44:c5:c8:a5:1c:aa:71:44:c2:4d:1c:6d:94:54:95:
                    a8:a9:5a:56:96:e7:72:2d:3f:9c:7e:25:27:e0:a8:
                    31:e9:b8:a2:67:50:70:54:aa:d6:da:45:17:6f:20:
                    3c:d2:b4:b3:5f:d0:09:69:ef:b1:95:23:b6:17:52:
                    f1:a1:49:6c:54:df:6f:3e:21:dd:72:fc:4b:2e:e9:
                    ab:4f:f8:fb:67:dc:38:d4:6a:7f:61:ec:b5:5d:ec:
                    76:dc:50:14:da:e8:0d:55:fc:b1:70:9e:c1:44:a8:
                    9a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6B:3C:EC:53:A8:86:26:D1:B7:B1:48:B9:F4:66:D6:6E:0D:7E:A0
            X509v3 Authority Key Identifier:
                keyid:A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:6b:10:3f:aa:b9:b2:e1:50:d1:06:1d:e4:34:70:82:33:eb:
         3c:3b:68:2a:8c:fb:63:51:10:ec:8e:3d:26:f5:7c:aa:e6:c8:
         2e:62:bb:25:04:c5:8a:66:27:e8:25:a9:b3:a2:63:e8:0b:d8:
         ec:0c:17:f5:a0:6e:cd:d7:3f:07:37:d3:e4:12:87:31:95:d8:
         4f:20:8e:45:35:c1:4c:03:6c:64:fa:1a:21:cb:ef:97:ec:f2:
         d2:44:f3:61:8a:f7:28:38:5c:48:92:59:33:3f:f8:37:1c:8a:
         db:5d:24:ac:7c:3e:ad:37:76:99:b8:fe:3e:03:db:af:f2:af:
         2f:53:f5:e2:da:22:c0:c2:6c:b7:de:1d:17:03:a8:97:5c:ef:
         5a:93:10:af:2b:87:f7:53:cf:28:6e:2c:c4:d0:bb:33:e3:0b:
         11:a6:f1:17:e2:83:86:77:dd:c2:f1:2f:0d:23:56:a4:f3:37:
         f0:9d:ec:1c:63:98:bd:26:19:22:81:9d:15:d7:3f:c2:b7:91:
         67:42:19:28:31:27:eb:a8:f4:f6:d8:9e:b9:d5:42:4b:2a:fe:
         23:95:1e:81:db:a0:3a:ec:38:b0:41:13:a0:bc:91:61:57:7d:
         f6:a4:32:da:c5:9d:dc:1c:20:35:f6:77:2d:51:bf:b8:96:2e:
         5c:80:ca:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 00:37:07 2026 by rpki-client