Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
File:                     _SYdRTGeg3UYdDbaRL9bmtsESn8.mft (raw, json)
Hash identifier:          eR4rSLQs5wWBqL1uEWNmen3qeSv3uASGJaoXM4R5PEg=
Subject key identifier:   96:B2:DA:37:B1:ED:2A:2D:00:7C:B9:95:2A:73:BF:98:16:E9:9D:D6
Authority key identifier: FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F
Certificate issuer:       /CN=fd261d45319e8375187436da44bf5b9adb044a7f
Certificate serial:       019DD087A4A955FE9F19304E3B350AD89D1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
Manifest number:          18E5
Signing time:             Mon 27 Apr 2026 20:00:43 +0000
Manifest this update:     Mon 27 Apr 2026 20:00:43 +0000
Manifest next update:     Tue 28 Apr 2026 20:00:43 +0000
Files and hashes:         1: JiEsZ1zOe46gzADySdG16eZ5Sjo.roa (hash: 0bq0qa1f8p4Ial4yz+WAIFxn5n2T06ajuz5dHOKo9Bg=)
                          2: ZmDQJclFbfRowgpnHRptrYIeIug.roa (hash: H/7KqBnapWq4unhs3UjmS/EFy+upD+qehXGAkF2UTwA=)
                          3: _SYdRTGeg3UYdDbaRL9bmtsESn8.crl (hash: nZEy2Hn/OBNkx+ODRjki74obANmGCmIqE2cW6HAgflc=)
                          4: gX_bo7WycAyP4eHEuchQhpnD15s.roa (hash: 4TJL/ac+L1uxUdH7FW4vMCHyhAZJAL3RXJ9Pg1etDtA=)
                          5: yNoIji7kPj6SkrPhrYc1VI7PgwE.roa (hash: y0iJCdo0OgTZ1Mu1ZduXdjf6TefpBi+JC2BMHyoKy/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d0:87:a4:a9:55:fe:9f:19:30:4e:3b:35:0a:d8:9d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd261d45319e8375187436da44bf5b9adb044a7f
        Validity
            Not Before: Apr 27 20:00:43 2026 GMT
            Not After : Apr 28 20:00:43 2026 GMT
        Subject: CN=96b2da37b1ed2a2d007cb9952a73bf9816e99dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8e:a6:8e:81:53:a1:19:dd:9d:f0:00:8d:3a:
                    63:1a:c9:8f:03:80:6d:9f:4e:ee:7a:54:23:8f:c2:
                    2d:54:eb:91:c2:4c:04:15:0c:ee:9f:7a:a2:19:dc:
                    86:92:7e:c8:15:3f:ed:fc:db:11:c3:38:cd:84:cb:
                    00:88:9b:77:2c:99:5d:5a:b5:cc:3a:bd:48:ee:0f:
                    57:27:fa:bc:61:c1:97:fa:40:ec:6d:43:6d:b6:4e:
                    20:44:1b:02:8f:5b:63:76:16:51:d9:40:a2:40:2c:
                    da:02:63:64:d8:ee:a3:40:90:80:42:da:47:44:71:
                    f7:8d:29:6c:75:43:e5:77:24:a7:67:25:dc:d3:79:
                    45:ef:80:d3:b7:cd:3e:e0:9f:d1:98:b8:95:a3:cc:
                    ce:3b:29:bc:06:35:41:d0:a9:dc:8a:9e:0f:70:5b:
                    8d:16:8e:33:26:cc:de:bf:8b:f2:1a:52:02:66:3f:
                    dd:c1:06:77:3d:2c:05:ec:76:94:05:6f:db:f9:3d:
                    f4:e1:1a:0c:d5:c6:79:b0:99:a6:98:3c:9d:26:f1:
                    05:dd:f1:de:b8:0b:c4:72:c9:0a:e7:f3:b3:23:ff:
                    0d:b1:43:14:20:c4:ae:50:57:14:9c:69:d1:ca:db:
                    4d:65:41:65:fd:aa:74:65:92:c7:bd:5a:2e:2b:dd:
                    6e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B2:DA:37:B1:ED:2A:2D:00:7C:B9:95:2A:73:BF:98:16:E9:9D:D6
            X509v3 Authority Key Identifier:
                keyid:FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:71:c8:f1:76:ba:c8:73:11:bb:68:54:96:b3:fd:57:cb:fe:
         ef:de:9e:15:13:e5:a7:4c:c2:ed:2d:dd:9a:7f:6e:e3:4b:96:
         d8:9f:a2:a3:86:cf:ba:a2:b0:d3:3b:47:99:1b:2a:81:76:32:
         61:ad:b9:b9:1f:9c:9a:8b:85:63:a5:93:b4:9d:56:e7:fc:e2:
         c8:c3:fd:79:f2:7d:86:8b:46:6a:10:3d:34:7c:7b:00:cf:66:
         e6:3f:63:9d:bb:23:ee:f0:cc:e6:bf:aa:0b:6e:3a:c3:13:a0:
         2a:71:3d:aa:da:40:30:91:30:37:c3:58:5a:1d:fb:c1:80:3c:
         94:4d:0a:13:8c:6b:b0:d8:d6:12:5e:28:14:e6:4f:9f:e8:5c:
         4b:26:9e:1f:0c:7b:6e:72:30:9c:39:42:7a:9e:26:90:ea:47:
         de:e2:14:1d:8c:c4:c4:71:55:45:e8:30:bb:f3:29:c5:49:da:
         3b:c9:85:0e:1d:9b:e1:2b:2a:f6:f1:82:1c:fb:65:7a:af:9a:
         27:e4:fc:3a:44:fb:7f:a6:5f:ac:99:1c:c8:bb:d9:23:bc:37:
         2e:63:08:6a:ce:c7:45:2c:56:3d:e6:f1:da:e7:79:3f:af:eb:
         30:2f:9a:47:38:70:23:05:1c:3c:b4:df:38:41:10:e2:f0:b0:
         d7:e8:83:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:23:28 2026 by rpki-client