Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
File:                     xziAeruc4Vt6iSWStvAD8aPha2A.mft (raw, json)
Hash identifier:          o9oY6arjPZu2zgmY1KX1LWZBgzL255eMvNcSABHBn8Y=
Subject key identifier:   B9:EC:A9:80:FB:91:D4:39:88:71:1F:4D:71:62:B1:29:C7:FC:EA:19
Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
Certificate issuer:       /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Certificate serial:       019DD2085CCCB4F14E97C2D1EAEA3578B8AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
Manifest number:          17F4
Signing time:             Tue 28 Apr 2026 03:00:56 +0000
Manifest this update:     Tue 28 Apr 2026 03:00:56 +0000
Manifest next update:     Wed 29 Apr 2026 03:00:56 +0000
Files and hashes:         1: D338NBLG4gy0L0rQfLDLBBvijvs.roa (hash: xpSbCbvFe4HKnfPpEx3Bzh3tFz7qEtAGaiCairLokvk=)
                          2: QPtWU0Le-lGW94gMt-weMxaQnAs.roa (hash: 5vjcWa21i4k2fuEZMcu0bZIC3kY6Cj7yBN5sMrwLc3E=)
                          3: RdR5cSmbR14gpItKWt96zEaO0yI.roa (hash: NnRSJqZRm+JgqhvDLWWc4r16w/z5e4rD4AECWuZmvio=)
                          4: twYt6qj-wTyUeYXy66c4-gjVtXw.roa (hash: Wg1hNsEn74fIoOmvEkDupCA55dXbo6Jgxn8PskTnyqM=)
                          5: xziAeruc4Vt6iSWStvAD8aPha2A.crl (hash: TlTV+vDpot0tjjwKSKutxUHqRmey/vETCzfetEPQQFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Apr 2026 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d2:08:5c:cc:b4:f1:4e:97:c2:d1:ea:ea:35:78:b8:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
        Validity
            Not Before: Apr 28 03:00:56 2026 GMT
            Not After : Apr 29 03:00:56 2026 GMT
        Subject: CN=b9eca980fb91d43988711f4d7162b129c7fcea19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:68:aa:2f:e3:55:ea:20:c2:e0:30:55:05:1e:
                    17:57:26:27:9c:e2:b1:26:b6:52:c4:a2:5d:1b:a5:
                    0c:5f:65:96:02:b4:b1:0e:e1:2b:f5:3d:de:0a:04:
                    85:fa:7f:f9:9e:2e:a1:5a:17:8b:1f:8b:10:3b:50:
                    2f:6d:ce:b0:0e:cb:ba:c5:15:64:9d:56:63:c7:25:
                    3a:28:12:7f:c5:9f:58:0e:1d:92:fd:87:93:f1:b3:
                    59:e8:0c:2d:83:43:74:54:60:38:66:a0:8b:ab:8f:
                    14:bf:9f:dc:c1:20:5e:eb:d1:01:3d:c6:e1:42:b5:
                    19:63:7b:b6:f1:91:fc:ff:8d:5d:f1:c5:ca:fc:e1:
                    14:c1:63:50:e8:cf:fd:b8:fa:03:5a:b8:dd:33:0c:
                    95:75:02:ee:cd:9a:e4:c7:9d:a8:3e:59:ef:28:e8:
                    2b:74:a7:97:2b:5e:4a:70:d6:f9:16:d5:e6:19:fb:
                    d8:97:36:eb:7d:0c:a5:e9:86:ed:5c:90:4c:e2:0a:
                    1d:fb:bb:56:dd:67:1b:62:26:6f:03:76:5e:7a:78:
                    91:27:7e:5e:32:f6:ec:08:fa:cf:85:49:07:90:5e:
                    6b:f9:a3:b0:40:79:99:69:4c:36:81:d3:21:52:0d:
                    98:ea:b3:06:56:93:ec:c6:39:f0:fc:13:2b:d2:84:
                    7f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EC:A9:80:FB:91:D4:39:88:71:1F:4D:71:62:B1:29:C7:FC:EA:19
            X509v3 Authority Key Identifier:
                keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:91:f8:64:a5:45:8f:f6:9c:7d:89:6f:e9:1a:59:c7:ea:1a:
         37:4a:44:67:1f:9e:c6:ce:61:a9:d5:c6:8e:31:f2:2d:6b:9b:
         d4:4b:e3:e6:bf:17:e4:6a:a8:f3:7e:b6:72:57:43:58:21:c4:
         83:a2:21:35:86:91:1d:54:91:fa:7b:5d:c1:ff:3f:50:2c:90:
         c3:f9:30:55:29:6b:3a:26:5f:5a:f7:13:a1:4e:32:ee:1b:82:
         a6:10:7e:de:3a:d0:2d:ce:84:5e:17:5a:13:9e:69:0c:9b:f7:
         0d:f9:d8:b7:95:d0:43:29:52:f3:68:0a:ab:51:73:cb:a9:ab:
         24:c5:59:77:9f:69:28:fe:56:71:b3:d3:3d:23:c8:01:5a:e6:
         01:01:40:d9:82:25:19:df:54:ae:4a:f0:f8:dd:66:c8:f2:1a:
         1b:a0:2c:40:f9:83:33:73:d1:c0:2d:52:ac:2e:6f:cc:f4:f0:
         ea:f3:c4:40:7e:38:b8:b0:11:7e:8d:02:45:a6:da:76:f4:0a:
         91:ed:5c:da:16:cd:ac:af:74:0f:58:7f:89:18:3a:ae:62:31:
         fe:0e:2a:75:aa:d9:65:a0:d6:33:8d:4b:8d:e6:4b:cd:ea:73:
         a8:0e:1e:aa:3e:e0:79:d7:0c:32:b4:4d:af:01:7d:18:1d:5b:
         5a:78:d6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:46:00 2026 by rpki-client