Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
File:                     1z6DFGpDhp9ldFHnbQowXxWnruk.mft (raw, json)
Hash identifier:          XqxeWwYRet3NuWxdLjdk1o/WHfUf/rzAFXhouRlDqFU=
Subject key identifier:   98:DF:7E:67:BD:AF:55:BF:5F:36:E1:A5:7C:B9:60:0C:B6:B8:10:80
Authority key identifier: D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
Certificate issuer:       /CN=d73e83146a43869f657451e76d0a305f15a7aee9
Certificate serial:       019DD08824EB000272D6D11CE9A4C4AB9479
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
Manifest number:          18E0
Signing time:             Mon 27 Apr 2026 20:01:16 +0000
Manifest this update:     Mon 27 Apr 2026 20:01:16 +0000
Manifest next update:     Tue 28 Apr 2026 20:01:16 +0000
Files and hashes:         1: 1z6DFGpDhp9ldFHnbQowXxWnruk.crl (hash: 3OD3n5UPgjSdtIgBa2fxFz6ct3MLMSZ41z41Akkg2U4=)
                          2: PWv6yFyiEMB4Oa2Tl2AohiTN1ck.roa (hash: GD/HWU3t0dVz2XNxiVj2DMFTslgyISmS+UP1+CaEce4=)
                          3: hK7GLmuFR-UZU_nfZ_fdsEwflNw.roa (hash: qSG+GFEeR/GOxXMLx7StdEf6sz41a8hoOmnDw6GdlPY=)
                          4: jXdXWkgPJAckS1tbfXfBM3oOl2g.roa (hash: R2Qr1JCatkYhkl5XRuMbtN2cCVq0Xmr5HkM/fW29yJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d0:88:24:eb:00:02:72:d6:d1:1c:e9:a4:c4:ab:94:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d73e83146a43869f657451e76d0a305f15a7aee9
        Validity
            Not Before: Apr 27 20:01:16 2026 GMT
            Not After : Apr 28 20:01:16 2026 GMT
        Subject: CN=98df7e67bdaf55bf5f36e1a57cb9600cb6b81080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c7:b1:5d:e0:29:62:c7:e0:44:32:ff:48:14:
                    44:d2:49:39:3c:ef:dc:b2:c9:35:4a:e5:fb:45:ef:
                    c2:59:79:84:78:87:12:a5:60:bd:a2:83:fe:63:6d:
                    37:42:ab:f8:e9:11:52:16:91:c8:62:81:db:d4:37:
                    bc:2b:b4:23:54:84:18:00:45:90:d1:a1:57:49:0f:
                    5a:cf:bf:22:3a:a0:fe:e7:97:ef:03:7d:14:cc:63:
                    2d:53:3c:ef:37:32:53:5b:49:5e:2f:21:53:e2:63:
                    0c:71:b6:ff:fd:4f:a6:73:a7:26:99:88:01:96:06:
                    65:51:67:63:b2:23:62:27:01:9a:ed:19:2e:7b:7f:
                    16:b5:a2:bd:e8:04:ab:16:e0:13:99:f9:6c:06:fe:
                    8b:88:b0:31:1c:ed:1c:13:e4:21:21:3c:57:97:8b:
                    bb:91:79:ed:7c:d3:c2:08:a7:cc:32:28:33:eb:49:
                    e9:b2:c8:22:33:4f:41:2c:18:37:7a:cf:8d:b5:2c:
                    f9:f6:1c:70:4e:1a:c8:80:63:b9:30:67:af:7c:d5:
                    cc:86:93:c9:61:02:94:05:d2:fb:c3:00:d1:b9:71:
                    23:f2:f5:3a:0e:78:bd:ac:ed:ae:b3:e4:6a:f1:ea:
                    76:6d:75:61:cc:05:10:62:df:a6:22:85:42:dd:cb:
                    fe:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DF:7E:67:BD:AF:55:BF:5F:36:E1:A5:7C:B9:60:0C:B6:B8:10:80
            X509v3 Authority Key Identifier:
                keyid:D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:4f:f0:c0:66:fa:31:e7:ff:7e:8f:fd:e3:13:63:8d:2b:a1:
         f4:53:65:47:34:34:e4:63:d9:2b:be:bd:f8:b4:ea:7c:8b:00:
         9b:49:f6:e5:c2:6a:56:44:af:0c:64:01:de:74:3a:55:c6:b5:
         fb:34:6e:34:c1:55:c3:53:3c:bb:08:fa:c2:1d:4b:f0:7a:0f:
         3b:96:b5:30:de:a4:b1:88:06:4a:7e:09:f6:8f:72:cf:29:9e:
         ef:33:01:43:d5:4b:c3:68:81:c5:5d:af:4f:54:9e:c8:55:63:
         1b:e5:b0:41:7b:2d:c2:d3:ed:68:19:c8:87:a2:4f:a6:81:d4:
         fc:df:c2:25:c3:89:70:f1:c2:66:39:80:df:86:70:ce:37:84:
         52:07:1a:5b:ef:0b:9f:ea:09:0e:53:91:89:49:02:bb:a4:69:
         7d:df:16:8e:6e:ce:15:76:59:d9:df:e2:5d:a1:3b:ed:8d:e1:
         09:b9:18:40:c9:77:0a:e4:13:36:9f:ee:0f:5d:cd:3e:b1:82:
         c2:27:74:ec:39:23:f4:99:96:9a:82:72:46:e8:39:36:8b:a2:
         e1:1a:a4:9d:4f:dd:e9:c2:16:89:5d:e1:1f:81:14:6f:7b:f1:
         71:c7:8d:71:75:59:7e:fb:84:84:7f:21:e6:3b:a5:ff:60:36:
         45:c8:28:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:30:07 2026 by rpki-client