Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
File:                     TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json)
Hash identifier:          +Y4rDIvkyzoSNF5DcB6afKdA4V5PIICFbZo6CixLpxQ=
Subject key identifier:   C0:D3:B0:46:AB:16:C2:B4:C7:A8:4C:6B:F7:B9:EE:A7:12:17:87:EF
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Certificate issuer:       /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial:       019DDF1FEB2D5F6D6BAF4620DB217DE4AD47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
Manifest number:          18FC
Signing time:             Thu 30 Apr 2026 16:01:44 +0000
Manifest this update:     Thu 30 Apr 2026 16:01:44 +0000
Manifest next update:     Fri 01 May 2026 16:01:44 +0000
Files and hashes:         1: 02kOZkpvmw6H06A_7TJUg4SFXaQ.roa (hash: TpRuYePLiA4791T1EEAGr2x5CqL+fTtzRjsvGFbZMFE=)
                          2: 2uonQk8lw16FeBIvKKSSmhsYIS0.roa (hash: 2dNCmgQW6KMhs3bZJLn40BJuFp8E7ETzKi/EDLa0p5s=)
                          3: 5ziyZMsm-eF8rQKEiPIRLUjKrJc.roa (hash: ST0tOCj/lVMKy70YCsjUG8APQaOubaCeSEbJbdk4mkA=)
                          4: 8EjBwuh_9in2Z1YECnIBdQ9VNrg.roa (hash: PZyLvuJ766MtPxGWe7ycqZ9uJ2ybPMELzypr1ODKQyU=)
                          5: 8iq73EY8SNEMLGjWaX4ccQq1LKw.roa (hash: JmTLodfb4oaon3Tv2+zOKzJurk+8nq1oEroEJejbuII=)
                          6: FwWBUFukI5sYaoIJXPQl_VpBKGw.roa (hash: 1A5Wlz49N8I7V2ONwfh6sYJRe2syIOSrNYZlIXmZWdY=)
                          7: Gy-LFbASJWTVYACt4LtWc2cmLuw.roa (hash: ujJsb5LhZ8X8O1ISoHR/MP5k+2QVAPis3/2ApXdZZ3g=)
                          8: MO6J3ImYDWqYVzymL0l4FvP1thU.roa (hash: e0dvPY/H6He44W+ZncCzFUHFzRAKvhD4nFOOCJSgnhw=)
                          9: NjCxVetchGZ0XWn7taqHcdtexeY.roa (hash: luZWHi8jfVZ+lGh40HXz9Aj5QcdjwpUbYNovF4whMXA=)
                          10: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: TvyZ3euagCy9XszkOC01bspinLblzY2WJpcbZ6kX02w=)
                          11: YtD0hgbunNZVqmVM-mTLvyyQEfg.roa (hash: bXNfm9p7iVN39qRXUc3z+rEBdxvoCN2D2p6tjPh77Uk=)
                          12: aXSOc-PVHMUBKt_487iYToOm7qo.roa (hash: TgcrpfHL47vgaiMhXn3iuqbilgXgoWpFYf29PAeU7PQ=)
                          13: esYBbdHlmzNrFPaZHG9t4u-VPHc.roa (hash: lkNqbXeTq7xSvC4HTyeLweRSSMj+JVz2/1P8Io014A8=)
                          14: gH8loGqHuQUgS7s-27j8UFtooRI.roa (hash: 3c/uPZsoFkC/+vu1WnVFt+9jcD0vxFLrQc/tSOZVhig=)
                          15: irMc3rrBTtXnxu6Y6x7SlrREl3k.roa (hash: odarHoY4Wy3X+9/gV/9gi100gxxZ4b3sXjkX8UmBWCw=)
                          16: jSXCL2nU6ig_-VGukqzzbg83BZk.roa (hash: Az+cF5wKpW/d6F9stZPF4IUccQjeYz6jWseSjP0L2T0=)
                          17: kYEWFQU5-czKs7zv1vGT343BJ-g.roa (hash: xWtvvMN7qcqpohmug6+MXQLfldtO5B6k2u+O9bf+VTA=)
                          18: oitUYkAPeYiroXJK68BhqiN_Xek.roa (hash: zYA61o9aLXKLXeSg2vp84zehihqtVq61hd+jWJCYfGg=)
                          19: rbrxUA36Uj_W2cv5ysZhTVIwxp4.roa (hash: OT7C6O/C6TgYrrzLBRPYDZUiybzraaRPGIJN5wW++Ak=)
                          20: u0RIuGfpHnx-Tn2Xp-wlaIQU95A.roa (hash: VuT5SalQp4yYIzm6lgKxTmu1Rlv5TD85uBnxUVTY7eo=)
                          21: yLMV5lCxmugxTcjR0kvs8qTvDQs.roa (hash: VAFUfjT6/8ZbId3UHCjjJDfpK2X5rUeLGtPsXPOBDAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 14:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:df:1f:eb:2d:5f:6d:6b:af:46:20:db:21:7d:e4:ad:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
        Validity
            Not Before: Apr 30 16:01:44 2026 GMT
            Not After : May  1 16:01:44 2026 GMT
        Subject: CN=c0d3b046ab16c2b4c7a84c6bf7b9eea7121787ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f6:70:29:7d:29:5b:24:70:e4:25:a9:6d:be:
                    27:6e:f0:9f:a0:00:d0:b2:34:f2:60:db:49:23:ce:
                    dc:74:14:ba:9b:04:31:7b:74:39:92:ef:55:9a:c8:
                    30:54:79:d9:e9:b2:bc:0c:05:4f:a0:a1:e2:8c:33:
                    18:ff:6c:cd:6a:71:2f:3a:b6:dc:7b:33:4e:96:ca:
                    c3:52:9f:ee:28:ce:11:77:52:70:29:54:eb:58:c8:
                    32:b5:2a:dd:40:dd:ff:a9:4c:69:a3:9d:30:30:8c:
                    4a:80:30:b2:ba:39:c7:59:45:19:fb:00:9a:25:70:
                    25:6b:5c:dd:b6:34:1d:78:5b:f0:80:1d:63:80:e3:
                    47:53:fc:31:43:b7:f7:da:49:b5:38:60:a9:f7:6f:
                    76:b5:55:35:e1:21:4e:6f:f4:88:5e:75:5e:61:7f:
                    4a:86:c4:7e:d6:f8:88:83:d3:49:ec:7f:a6:13:92:
                    f3:11:93:95:f8:f9:07:15:49:8f:89:7a:e2:e4:d1:
                    b4:aa:90:98:80:cf:b1:72:3f:69:32:83:a3:96:7e:
                    fb:ae:41:eb:9a:e3:26:15:c1:ce:db:e6:38:a7:f9:
                    3f:aa:4b:70:f3:22:b6:da:82:a8:31:98:2a:3a:67:
                    d2:21:42:78:46:14:02:d6:fa:4d:d5:98:0f:78:fd:
                    cc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D3:B0:46:AB:16:C2:B4:C7:A8:4C:6B:F7:B9:EE:A7:12:17:87:EF
            X509v3 Authority Key Identifier:
                keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:12:8d:34:8f:4e:64:33:f5:02:46:3f:53:41:9a:39:63:76:
         71:49:14:55:4e:70:15:e7:78:3a:3d:fe:da:da:38:4a:05:d1:
         a0:6a:aa:bf:b6:e8:c0:bb:75:97:f3:25:65:98:2a:c9:53:fe:
         5b:cb:61:cb:76:c1:5e:f5:88:35:93:f3:66:34:3a:8c:cb:c0:
         62:ab:e1:92:65:ee:f1:5a:46:fd:08:12:74:9c:d5:06:43:d2:
         cc:e4:7c:a4:b5:45:66:36:83:ac:a4:29:4f:70:bf:8e:b5:85:
         2a:fa:36:65:f2:ef:86:1e:93:fe:4b:d5:ca:cf:56:fe:c5:86:
         4d:6e:bb:16:14:11:02:11:37:a8:83:33:6d:6d:44:a2:99:17:
         2e:28:26:3f:04:08:df:cf:bc:45:fd:cf:79:11:92:7f:f9:93:
         2b:c9:09:2a:5a:70:6c:66:bb:e2:af:f9:1e:cd:1b:44:a3:db:
         27:7d:99:db:d1:ff:cf:3d:a9:37:6d:c3:c8:41:54:15:2a:87:
         7e:ff:69:4c:28:97:c3:61:66:98:fd:b1:c2:d8:b1:f0:aa:94:
         de:1f:c5:39:1d:cc:28:53:29:49:39:c4:9c:10:0d:bd:ad:06:
         66:32:13:39:1e:07:61:39:14:fc:f9:b4:10:10:8c:71:4a:09:
         cc:7f:66:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:42:05 2026 by rpki-client