Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.mft
File:                     8ve5y7uJUqw_GW580Lik26XeEcM.mft (raw, json)
Hash identifier:          TlWSOvUjR3syxXt6P59v6nqVfxU4eYEK29//gsw8JH4=
Subject key identifier:   E4:3C:27:ED:FC:E3:C8:50:B2:51:51:E7:EC:74:54:0D:1F:44:6E:D0
Authority key identifier: F2:F7:B9:CB:BB:89:52:AC:3F:19:6E:7C:D0:B8:A4:DB:A5:DE:11:C3
Certificate issuer:       /CN=f2f7b9cbbb8952ac3f196e7cd0b8a4dba5de11c3
Certificate serial:       019DA152FE92991C7B3E754D58E9151062E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ve5y7uJUqw_GW580Lik26XeEcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.mft
Manifest number:          01A9
Signing time:             Sat 18 Apr 2026 16:01:03 +0000
Manifest this update:     Sat 18 Apr 2026 16:01:03 +0000
Manifest next update:     Sun 19 Apr 2026 16:01:03 +0000
Files and hashes:         1: 8ve5y7uJUqw_GW580Lik26XeEcM.crl (hash: RZ4mI8fSAL0ffO5O4ON9m5oBtA7IMd0yDVIV7TdrHQo=)
                          2: lLaQc1ctDPh-cPE-9AA0s8dGscc.roa (hash: Ux5HLtFBatxMzdAGaYKiqbznlJjE71eRd4dpv4guF4U=)
                          3: wpXiT9zKEuFbY2sZ8QILGmoJz2o.roa (hash: d6nUNRQj+cfMu4N2osCKD6vLtkCF0ups9dVJELI6Z5k=)
                          4: xMHuniTSE3Y-3LxkkHTP5CAmILY.roa (hash: xj1CN5Ln3lDABOnxZ+zjNuco/ce7EDW4/b7pLQYn79E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ve5y7uJUqw_GW580Lik26XeEcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 09:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a1:52:fe:92:99:1c:7b:3e:75:4d:58:e9:15:10:62:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f7b9cbbb8952ac3f196e7cd0b8a4dba5de11c3
        Validity
            Not Before: Apr 18 16:01:03 2026 GMT
            Not After : Apr 19 16:01:03 2026 GMT
        Subject: CN=e43c27edfce3c850b25151e7ec74540d1f446ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a7:30:ec:4a:30:e5:24:1a:28:52:be:8c:11:
                    58:6d:c8:ec:82:8e:ab:59:38:c4:0f:b9:fa:77:54:
                    c2:b5:53:3f:cf:1e:3c:08:d0:c0:f3:16:c3:f5:b0:
                    90:c2:f8:1f:ec:10:7a:1c:32:0d:41:b8:5b:8f:ab:
                    9b:93:8a:d8:d2:00:fc:ec:bd:59:67:e3:e5:10:0d:
                    a6:0b:b6:26:10:bd:5f:3a:36:30:98:4b:66:f1:34:
                    b3:4f:5a:19:e6:be:c0:b5:29:8a:22:84:e0:57:17:
                    54:8f:cb:fa:c2:7a:65:0c:ab:aa:90:ea:f4:a7:1b:
                    0b:e9:e4:6b:d6:18:c1:ee:e1:b2:d8:cf:74:f1:ff:
                    24:b8:6f:18:a2:e5:f9:dc:28:d8:1f:0a:eb:d7:74:
                    fe:13:c4:a1:12:73:ad:d0:d4:26:59:cd:b1:28:c3:
                    c1:9f:42:50:15:c1:47:ac:f2:d4:0d:c0:0d:30:1d:
                    04:28:d6:d3:31:9d:a6:dd:9d:72:72:f7:60:c4:08:
                    54:35:cc:a1:a2:66:0c:73:06:d8:ed:e8:ed:e4:d8:
                    25:72:35:12:3c:38:5a:80:77:c9:4d:61:fb:40:ea:
                    ee:4c:3f:2e:35:66:99:dd:f6:a9:11:8c:b2:d9:e8:
                    bd:22:57:ac:c8:ca:1f:bd:e2:9c:e8:d4:a0:20:02:
                    03:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3C:27:ED:FC:E3:C8:50:B2:51:51:E7:EC:74:54:0D:1F:44:6E:D0
            X509v3 Authority Key Identifier:
                keyid:F2:F7:B9:CB:BB:89:52:AC:3F:19:6E:7C:D0:B8:A4:DB:A5:DE:11:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ve5y7uJUqw_GW580Lik26XeEcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:93:7f:6d:8f:9f:24:a8:ba:bb:75:ff:20:a9:cf:10:7b:55:
         b0:a6:c5:ca:eb:9f:65:4e:ef:cb:27:6d:ab:41:1b:5f:ca:6e:
         a1:99:92:9c:fa:68:79:7f:28:7a:7d:e8:c2:bb:28:ea:13:42:
         5f:a6:cb:68:8c:57:cc:16:96:01:c5:55:84:5f:c5:89:47:28:
         5d:18:07:f0:2b:17:e3:d3:2f:89:fe:9d:35:7c:27:51:f2:b1:
         f0:72:de:bf:c6:09:41:3c:90:76:27:44:c6:ed:27:8c:19:81:
         d4:7d:13:7a:ac:b2:8e:d6:ee:72:8d:d7:c2:dd:0c:9b:e7:ac:
         e3:43:f2:ee:ec:cd:f1:b4:ae:27:30:05:2b:b3:10:c4:28:85:
         32:58:1f:ba:bd:e8:d9:30:25:a7:7c:90:66:c9:d9:4f:ff:03:
         1d:c7:28:10:3f:40:ca:61:a5:80:56:2e:9c:db:f4:25:f9:70:
         23:e8:a5:83:97:79:d6:d6:e9:32:eb:2c:e9:ed:18:cd:90:47:
         95:ce:d3:cf:e9:5d:e2:f3:87:54:9b:27:0f:3b:3a:bc:99:68:
         95:a8:06:13:7a:b8:3e:f8:91:5e:16:e9:8d:4e:0d:a2:a6:e3:
         46:c3:ef:14:35:85:a2:27:f5:31:02:88:d7:b6:5d:81:62:89:
         74:75:c7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 18:27:36 2026 by rpki-client