Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File:                     s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier:          xxOcPcmXZqcbhDEKWkMp46JNQ3Mkf2GijUNNjB3pXFw=
Subject key identifier:   74:FC:1E:54:F1:EE:0E:35:F5:EC:40:0F:16:DD:61:26:91:90:05:F2
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer:       /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial:       019D5C0409E4D9313911812C7D3FC6E6C0F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number:          18B8
Signing time:             Sun 05 Apr 2026 05:01:01 +0000
Manifest this update:     Sun 05 Apr 2026 05:01:01 +0000
Manifest next update:     Mon 06 Apr 2026 05:01:01 +0000
Files and hashes:         1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
                          2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
                          3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
                          4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
                          5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
                          6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: 8SAsCEvr2DNsmlQKn3GbHO5wH9Ta7zk93TeLxKJCMTY=)
                          7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 Apr 2026 05:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:5c:04:09:e4:d9:31:39:11:81:2c:7d:3f:c6:e6:c0:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
        Validity
            Not Before: Apr  5 05:01:01 2026 GMT
            Not After : Apr  6 05:01:01 2026 GMT
        Subject: CN=74fc1e54f1ee0e35f5ec400f16dd6126919005f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8a:90:25:5c:f9:1b:1a:0d:e1:ad:0a:1c:c9:
                    3c:f3:f9:41:a9:ed:bc:db:b9:2d:00:ec:21:47:50:
                    83:4d:de:23:5d:33:11:33:c5:06:3c:6f:75:43:d5:
                    d3:1e:ea:7a:44:eb:16:2a:84:54:ee:9b:83:b8:e9:
                    b3:7e:c0:96:a8:57:6e:22:44:7a:3d:ad:76:0c:ec:
                    a0:2a:d9:5e:c0:0f:20:c7:44:08:82:b6:a2:3c:f3:
                    d0:09:20:59:f5:c7:7d:86:2c:91:c9:a6:86:8b:13:
                    8b:1f:09:9b:9b:02:1a:a4:ba:0c:b6:df:6a:0f:c5:
                    bf:d1:bf:15:3f:a8:f7:a9:62:2e:3f:f4:8e:0e:84:
                    64:2e:6a:68:2e:48:72:7d:fd:24:f4:cc:a1:47:4a:
                    b5:03:2e:8b:71:13:d6:2d:cb:8a:25:db:5a:0b:69:
                    b3:4e:aa:54:4f:4f:19:62:d1:75:0b:2d:75:53:b0:
                    6f:91:b8:4e:e2:4d:50:dd:f8:5d:d5:b4:a6:33:53:
                    fe:62:18:26:cb:b5:21:05:52:0e:50:76:0f:2d:76:
                    c3:55:64:00:20:ef:93:63:d8:b9:c6:8f:18:b8:56:
                    8e:aa:d5:0b:ae:d8:d7:fb:9c:c8:2a:56:62:c6:80:
                    2a:88:84:77:cf:68:1a:03:2b:43:33:9e:4f:d0:53:
                    a0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FC:1E:54:F1:EE:0E:35:F5:EC:40:0F:16:DD:61:26:91:90:05:F2
            X509v3 Authority Key Identifier:
                keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:8d:6e:49:02:0b:07:d2:83:4e:c9:9e:25:2a:a3:a3:90:ce:
         72:d0:72:ae:d0:4b:09:2a:72:e6:16:86:9e:90:86:f8:ca:6d:
         92:0b:ba:da:25:f4:7f:51:96:0c:d3:4c:76:81:d9:c9:46:a7:
         1d:8d:dd:be:2e:bd:0e:b8:a0:a5:14:00:ce:a4:c4:ab:c7:6d:
         d1:a2:9b:16:77:33:ac:f8:89:d6:75:34:ff:38:ba:d0:f9:73:
         25:7d:25:8a:c6:80:07:32:96:1a:9f:42:0d:74:b4:20:3e:bc:
         8b:72:48:81:eb:da:69:dd:b1:1f:78:87:7a:29:1f:58:91:44:
         58:31:7b:82:24:45:08:6c:ad:ac:83:55:ec:de:ae:99:fa:79:
         68:2a:4a:07:41:77:55:81:37:58:27:a1:3c:7b:05:7d:5f:5e:
         11:9d:c2:15:ed:cf:c4:5c:33:c5:9b:35:6f:3f:d8:eb:51:bd:
         2d:2d:22:51:69:26:47:42:db:1e:d6:ea:f2:2b:58:98:ed:dd:
         83:98:18:13:b3:7f:3e:e8:ec:3b:1f:02:b9:7f:5d:fd:2d:94:
         5c:43:46:5d:7c:f5:29:da:44:ba:72:ee:88:90:0d:6a:5f:b7:
         34:98:9e:f0:33:8f:3a:96:45:1c:fc:94:13:3b:40:f8:fb:cd:
         1f:82:b2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 14:31:11 2026 by rpki-client