Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
File:                     10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft (raw, json)
Hash identifier:          9/SBTNX3xj+8rl/M29MmjhM5dogkbeYBCIgvFXu5a04=
Subject key identifier:   0E:C5:6D:22:5B:C1:85:78:85:E4:33:21:1B:E9:F9:01:AC:36:86:4B
Authority key identifier: D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C
Certificate issuer:       /CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
Certificate serial:       019DCED0559C4A5B414CD4DDA6F6D71DF3B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
Manifest number:          18DE
Signing time:             Mon 27 Apr 2026 12:00:52 +0000
Manifest this update:     Mon 27 Apr 2026 12:00:52 +0000
Manifest next update:     Tue 28 Apr 2026 12:00:52 +0000
Files and hashes:         1: 10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl (hash: m3ZcdjwcmS/ZmRtfy7tbwRau9X6xqa8o5PsQy0lT2xA=)
                          2: c4zkb26v95y_D2sc6nv7fdxn9Lc.roa (hash: bMZY04nBemF6cIkhBuUz9nxHZyNkGpj8Eh/OlRIxJ2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:d0:55:9c:4a:5b:41:4c:d4:dd:a6:f6:d7:1d:f3:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
        Validity
            Not Before: Apr 27 12:00:52 2026 GMT
            Not After : Apr 28 12:00:52 2026 GMT
        Subject: CN=0ec56d225bc1857885e433211be9f901ac36864b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bf:72:ae:04:ea:f6:97:28:32:11:78:c9:78:
                    d3:57:a2:07:03:15:d6:ec:2f:f0:56:b5:c7:98:cd:
                    b9:6f:72:7d:34:90:8c:54:e2:e7:bc:b1:1d:ae:41:
                    6d:8b:4e:cb:84:f3:f9:8f:4c:54:e1:69:1d:7b:c5:
                    2c:f1:8c:8b:35:d4:9b:c1:0c:17:d6:35:c3:3e:d3:
                    3f:9a:a0:ed:a0:54:18:67:dc:e2:8d:95:57:a1:ba:
                    1f:05:d1:bb:97:40:ad:be:0e:85:3d:ff:a2:dc:97:
                    9f:d8:8a:24:b2:90:66:5d:2c:ae:35:3c:ee:cd:e2:
                    ae:c5:74:8b:59:2b:eb:1f:e3:e0:d6:44:2f:a5:ef:
                    1c:14:e3:76:6c:89:aa:a3:0a:6d:86:63:77:86:49:
                    c4:72:14:d7:d5:22:3b:36:a4:f0:50:dc:3d:d3:c9:
                    f7:de:3a:f5:91:34:01:11:b1:46:48:84:2d:31:4a:
                    ce:d1:cc:51:2d:01:91:5f:88:43:56:1c:78:a5:46:
                    43:c7:d4:06:b6:a2:5b:5d:78:1a:18:1a:65:6b:0b:
                    5f:f7:96:1e:04:78:f3:e1:46:49:d6:ef:53:8e:08:
                    07:95:79:ca:74:3a:7c:64:4e:c9:9f:e2:a7:af:b8:
                    76:3c:48:4c:17:c7:85:38:b7:96:72:ef:50:1d:54:
                    05:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C5:6D:22:5B:C1:85:78:85:E4:33:21:1B:E9:F9:01:AC:36:86:4B
            X509v3 Authority Key Identifier:
                keyid:D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:b1:3b:51:59:8e:3b:ad:a5:36:82:5f:f6:b7:94:93:33:a3:
         ea:be:8c:bb:e7:72:2d:89:36:73:3c:5d:f8:c6:83:14:52:b7:
         5d:dd:6a:2b:ef:a7:1e:6b:88:fb:93:83:ee:92:aa:bd:e4:7d:
         9c:0b:0a:83:88:a9:03:49:ed:7e:46:69:f0:c6:9e:a9:c7:50:
         cd:0d:0e:25:68:bc:fd:a1:ed:6f:26:76:43:59:52:05:94:3f:
         49:54:af:48:79:e4:d6:40:26:2c:01:db:46:2b:5c:d1:27:ad:
         23:f4:67:ef:80:31:b1:ec:b6:a9:55:a6:dc:eb:2f:ce:55:89:
         61:ec:d5:5b:bb:2b:62:d7:ea:82:8d:ae:51:33:ca:30:8d:60:
         c5:ad:a5:ab:f8:d0:df:75:80:6b:eb:b9:60:4b:bc:9d:3f:53:
         b6:b9:18:8a:f5:4f:e1:b4:0b:28:a1:86:2b:15:57:bb:59:ec:
         86:3c:f6:c6:41:d5:39:27:7f:44:a2:a1:70:bc:18:1a:09:9f:
         ee:4c:02:ea:de:06:68:49:86:1a:99:fa:e5:fd:9d:6a:34:9c:
         35:0f:0e:71:89:4c:87:0c:2f:46:39:e5:e9:f2:f0:d4:26:21:
         3c:e8:81:4c:4a:65:3f:6e:8b:eb:19:87:4e:87:fd:e2:50:ff:
         0c:2c:35:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:39 2026 by rpki-client