Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File:                     s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier:          BZ2y2r9XQFCcDVl523ZVUrl09EZLS0NDFqZTurnX9oI=
Subject key identifier:   31:65:C8:3A:C4:0E:ED:D4:0E:FB:E6:A5:1E:6F:D4:23:CF:29:6A:6A
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer:       /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial:       019D8C4BE13796C7FE246142C65EE7508EA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number:          18D1
Signing time:             Tue 14 Apr 2026 14:01:16 +0000
Manifest this update:     Tue 14 Apr 2026 14:01:16 +0000
Manifest next update:     Wed 15 Apr 2026 14:01:16 +0000
Files and hashes:         1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
                          2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
                          3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
                          4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
                          5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
                          6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: u+qBC2sd7q1zwmY/v/N1CylIg7m0+L1E9okx9N5DxHc=)
                          7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 15 Apr 2026 13:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:8c:4b:e1:37:96:c7:fe:24:61:42:c6:5e:e7:50:8e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
        Validity
            Not Before: Apr 14 14:01:16 2026 GMT
            Not After : Apr 15 14:01:16 2026 GMT
        Subject: CN=3165c83ac40eedd40efbe6a51e6fd423cf296a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b3:f0:b5:9d:c8:37:5e:67:13:99:59:57:7d:
                    fa:c1:4c:17:f8:75:a7:69:c7:a4:01:c5:dc:6b:df:
                    1f:f6:31:37:d7:a1:86:66:89:ee:09:04:fa:5d:27:
                    b4:83:9c:be:8d:da:b9:48:59:43:21:31:33:a3:fa:
                    07:f0:c2:93:eb:89:47:b0:9f:95:fd:43:54:3e:9c:
                    7c:4e:76:23:6d:60:f1:ac:ab:e3:9b:a6:ee:ed:9c:
                    27:a6:fb:b3:92:86:a7:f5:bf:64:05:81:96:71:ac:
                    ae:c9:f6:4a:d0:42:19:26:0b:a1:33:9a:d8:b8:f0:
                    8a:2c:8a:17:6a:c3:bf:4c:d7:6e:07:93:90:71:e1:
                    d4:af:12:7c:a3:47:0c:a2:d2:75:07:60:cc:dd:45:
                    88:08:98:9e:50:13:1a:3f:ea:4a:00:5a:fb:49:fb:
                    f5:b6:11:b6:de:75:54:6b:38:45:9d:1e:38:30:17:
                    39:4a:97:48:12:38:d2:53:ae:4f:5e:df:40:0c:0b:
                    d1:40:09:42:28:4a:f4:2a:33:06:c1:c5:9f:04:1f:
                    ac:1e:ae:ad:e8:26:a8:32:9a:fc:75:8c:86:28:bc:
                    fe:72:15:ce:24:e6:c6:af:b5:45:e5:4b:56:81:87:
                    d5:d1:0b:09:39:35:1d:ff:dd:7b:fa:a8:52:97:1d:
                    4e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:65:C8:3A:C4:0E:ED:D4:0E:FB:E6:A5:1E:6F:D4:23:CF:29:6A:6A
            X509v3 Authority Key Identifier:
                keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:5a:73:6a:ad:d8:56:5b:2a:9c:3b:c6:bd:cc:7c:1d:65:ed:
         78:ce:86:53:16:95:a3:31:71:52:77:74:21:82:49:45:20:c1:
         d5:ee:65:2d:6e:9e:01:94:a7:62:dc:9a:1e:65:c7:77:70:e1:
         78:2e:9e:ef:71:c3:4d:ed:69:b7:33:74:65:74:f1:8c:37:2c:
         99:ca:00:45:8c:79:2a:9d:6d:fe:7d:f7:c3:15:82:bc:17:15:
         81:44:34:1f:8e:e0:b3:ad:29:cd:b2:40:0e:fd:a6:67:64:dd:
         fb:6d:a2:5e:b9:f0:67:82:31:9b:ea:88:4d:bb:a0:e5:d6:0b:
         5a:c9:37:b5:fb:04:ed:24:b0:13:51:15:ff:5e:41:69:38:48:
         d4:56:ba:e4:8a:31:d6:69:64:33:81:b3:db:88:c7:ef:a3:53:
         14:c7:b4:c3:17:7f:f2:59:37:21:99:f1:1f:a3:f8:c2:51:68:
         fd:3b:3f:69:b4:8c:6c:f7:e7:89:d7:61:c4:7f:4a:55:7e:5e:
         8e:2a:12:41:7d:f6:7d:20:89:12:91:c2:96:19:4c:93:50:31:
         cf:19:03:ae:91:fe:7e:f6:01:c2:57:3f:e3:e5:d8:41:0f:94:
         b5:5a:4d:f1:2e:7b:11:c5:c0:4c:79:df:4b:3e:e7:92:f2:7a:
         20:7b:79:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 14 22:05:22 2026 by rpki-client