Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File:                     s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier:          pD/6f2u9zbdycW2lONAKCiNlwZM3INXbTp9q8SEsHG4=
Subject key identifier:   7F:BA:FA:F4:DE:3A:E8:1E:97:99:A7:15:62:4E:EA:9A:97:02:2E:21
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer:       /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial:       019D78FB8A6890F45B3BDDDECC92F814842D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number:          18C7
Signing time:             Fri 10 Apr 2026 20:00:44 +0000
Manifest this update:     Fri 10 Apr 2026 20:00:44 +0000
Manifest next update:     Sat 11 Apr 2026 20:00:44 +0000
Files and hashes:         1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
                          2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
                          3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
                          4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
                          5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
                          6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: KLmRCY/j9fjZ6q9c/jTBHQHnND0TJXaNyDdnWA73tes=)
                          7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 Apr 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:78:fb:8a:68:90:f4:5b:3b:dd:de:cc:92:f8:14:84:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
        Validity
            Not Before: Apr 10 20:00:44 2026 GMT
            Not After : Apr 11 20:00:44 2026 GMT
        Subject: CN=7fbafaf4de3ae81e9799a715624eea9a97022e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f9:06:ff:d9:1d:97:2d:f6:3e:0f:7a:1f:51:
                    e3:2a:c7:ce:9f:32:f1:ec:2e:60:a5:b6:71:3d:6b:
                    51:d8:19:87:fa:22:a7:08:06:e6:53:b0:ac:71:22:
                    d0:62:b9:39:00:4d:e8:95:a8:57:db:a6:64:34:08:
                    aa:cc:00:f6:af:2a:08:cf:97:b2:4e:7e:f2:03:cb:
                    c9:5e:3f:bf:cd:c4:9a:e5:bf:12:c6:4b:7e:a0:ed:
                    dd:44:4e:1f:90:0f:cc:92:26:00:10:36:f3:6e:0f:
                    ad:6e:03:79:16:b5:e5:75:a8:9b:27:e9:3c:66:c7:
                    08:3e:91:1f:20:c4:1c:ca:fc:00:ee:83:93:b2:87:
                    69:1a:66:58:4d:69:71:24:3e:68:01:78:30:ae:14:
                    c5:df:fb:02:3b:7d:53:be:a4:da:d2:21:7b:fc:b0:
                    1b:c4:51:eb:08:b9:7d:05:bb:1d:ca:92:9a:8a:66:
                    66:2c:0a:cf:0f:db:b7:e2:ee:08:d6:01:75:a7:c2:
                    22:3e:45:21:a9:ff:24:c2:7b:21:cb:48:52:e5:92:
                    d1:f5:83:19:74:da:f1:87:5e:01:a0:e9:d6:ea:22:
                    ff:e7:05:cb:e7:c6:8e:88:ad:90:aa:ac:4d:fa:bb:
                    a2:ca:bc:1b:f9:7e:84:73:a4:23:d6:ea:92:ff:13:
                    2d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BA:FA:F4:DE:3A:E8:1E:97:99:A7:15:62:4E:EA:9A:97:02:2E:21
            X509v3 Authority Key Identifier:
                keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ad:a8:23:87:86:1b:f4:b9:c4:f7:de:8c:df:49:7d:ab:8d:
         34:44:5a:2c:4a:fe:aa:cb:9a:16:38:6c:a6:7d:0f:95:0b:00:
         46:23:75:c5:5c:5b:49:a5:01:85:65:d3:72:f7:b8:e8:2c:93:
         ea:fd:91:4b:7e:78:15:08:0d:1c:26:1f:87:bf:b6:0b:14:c3:
         b0:c5:40:b4:e3:88:a2:16:a5:43:90:54:fa:02:eb:5e:44:28:
         1c:f8:27:53:07:ab:44:d7:b6:ed:8d:5d:f9:f1:1d:42:80:ed:
         46:77:20:78:65:23:93:ce:44:cd:86:06:3d:48:b2:cb:22:75:
         52:f1:c7:ba:00:35:d8:05:9d:ff:20:31:78:53:4d:fd:b9:12:
         ec:b9:4c:7c:5c:23:38:3e:22:87:e2:08:3c:18:64:17:f9:3b:
         d8:6e:dc:ec:01:65:a0:9f:87:a2:6b:f1:cd:be:6b:dc:b9:45:
         de:a2:8d:c7:38:f9:2e:c8:dc:74:71:50:b5:3a:1e:b8:4f:bb:
         03:a8:ec:f5:04:25:1b:a8:2e:23:e0:cc:42:95:6b:20:45:ae:
         a1:cc:b6:d2:8f:6d:c4:3f:e1:69:bf:15:df:8c:86:6e:43:c1:
         eb:0e:33:3b:28:25:cc:b4:b7:4b:f5:1b:c1:b1:6c:50:5c:9a:
         e3:8d:eb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 05:13:12 2026 by rpki-client