Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
File:                     odAxU3OwmwYapZ8SnVkuq_ezqu8.mft (raw, json)
Hash identifier:          /zQLSZSS14u7GSvCIOV2HHzk6Mbs1dGWj5eFgas0OlY=
Subject key identifier:   1F:2A:F2:C5:E3:9F:62:DE:EB:F5:AA:37:A8:83:31:CF:EF:43:CE:E2
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Certificate issuer:       /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial:       019D8FBADF1F3D91842704AA00893CDE628B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
Manifest number:          18CD
Signing time:             Wed 15 Apr 2026 06:01:21 +0000
Manifest this update:     Wed 15 Apr 2026 06:01:21 +0000
Manifest next update:     Thu 16 Apr 2026 06:01:21 +0000
Files and hashes:         1: 2RbqMRULp-QNoJeRuz3DuXb82SY.roa (hash: vkQ1ietSun4egH0TCTbvv8l/0HXrnZiF/HLYLQxFwJA=)
                          2: IQ2oYAGI7FrbtQw-njklceThbc4.roa (hash: 1eifSLs21UBJXwatNLGZliT9NqFPGyep7LbzCHQLsqw=)
                          3: SVczDT9Xfgd978coimjrauYBi54.roa (hash: 2NMvhKAO0Kl3ePDaF0jcCfpcJYKyAuppoiBwwyO6Eiw=)
                          4: odAxU3OwmwYapZ8SnVkuq_ezqu8.crl (hash: T671pFFbX8jOrhsvm4Ut9/UoUZQtXvNExWziZ6A4L9g=)
                          5: shiZOYC90xd1VuoCTl7MNpPZEuA.roa (hash: imVXTSeIhO/2/5DnYBR7yK1z3YTxchN3faFGSGjnVFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 15 Apr 2026 22:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:8f:ba:df:1f:3d:91:84:27:04:aa:00:89:3c:de:62:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
        Validity
            Not Before: Apr 15 06:01:21 2026 GMT
            Not After : Apr 16 06:01:21 2026 GMT
        Subject: CN=1f2af2c5e39f62deebf5aa37a88331cfef43cee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:52:c6:7c:04:da:5b:43:57:2f:c3:63:cb:
                    10:a2:44:ff:c2:c0:43:1c:50:e6:b4:cc:cc:75:88:
                    eb:c0:2b:4d:d1:03:07:d7:e2:c4:2b:bc:6d:46:e8:
                    05:d2:38:92:fd:9f:16:09:59:fc:0d:02:5e:94:c4:
                    6c:b5:aa:ed:ab:34:46:16:e3:4c:99:53:38:63:e8:
                    3e:37:bb:ac:4d:9b:26:f2:97:db:03:55:84:17:64:
                    11:72:fa:7c:24:dd:d8:60:b1:ac:81:9d:19:64:ce:
                    26:f6:73:9e:5b:12:a1:67:3b:91:17:d3:6a:b1:18:
                    34:f6:fb:1e:1a:50:64:f8:c3:f7:4d:34:00:ae:56:
                    d2:09:32:38:5c:29:34:7a:a2:3f:b4:ce:08:40:70:
                    c6:bc:bf:07:cb:3d:f8:da:8c:46:5b:e3:b0:b0:d2:
                    f8:3e:77:bd:38:2b:88:2c:5b:04:90:f9:9b:54:15:
                    3e:a9:94:5a:7e:af:92:22:23:7b:47:6a:38:54:27:
                    4c:40:07:50:71:49:d9:4e:7b:96:fa:31:a8:94:15:
                    ee:e4:e4:d1:a1:b8:c6:f7:d0:cd:37:98:6d:c9:10:
                    9d:9e:b7:9d:ff:09:97:2b:de:ff:1c:de:e0:50:4d:
                    ad:65:a4:8e:5a:cf:b4:24:f4:36:d6:42:01:b0:bf:
                    4b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2A:F2:C5:E3:9F:62:DE:EB:F5:AA:37:A8:83:31:CF:EF:43:CE:E2
            X509v3 Authority Key Identifier:
                keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:23:e3:5e:d2:53:a5:9d:a0:c8:ea:24:ec:b1:ff:16:1f:dd:
         78:00:d1:f7:b2:27:a3:d6:d4:a4:53:24:94:6c:b3:7b:98:ea:
         af:05:25:b5:ef:63:e3:96:85:9d:8a:4f:fb:26:d2:9c:38:2a:
         ab:3b:e8:85:93:f4:e1:e5:7c:13:e4:4c:19:d8:2b:75:bd:18:
         20:b6:cb:95:fa:cf:a0:82:ee:17:e9:f0:dc:4e:9a:c1:4b:0c:
         6a:6a:ca:d2:4d:e8:e5:77:7b:ac:84:6c:a7:28:d0:66:17:aa:
         d5:54:38:42:67:9d:14:98:bb:be:6a:9f:da:07:08:cc:25:98:
         ab:23:b9:f9:5f:70:53:95:01:ec:5d:a5:e8:9b:ee:1d:7c:8e:
         21:56:1a:98:e3:f8:3e:3d:61:88:42:53:fc:69:6f:c0:cc:52:
         ab:30:7c:b6:a1:58:f3:33:ab:4d:d9:8a:5f:e7:50:a3:2e:ee:
         7d:07:56:5b:86:29:38:e7:51:1e:d8:be:1a:ae:be:05:fe:ec:
         d3:69:38:82:4e:20:a7:6f:52:1f:3b:bb:47:9c:95:d1:e4:de:
         22:ad:da:f5:c1:c6:f6:c6:a6:0a:8c:e0:ee:20:d2:2f:79:68:
         20:b4:8d:ed:75:37:d2:51:34:0a:c5:32:c6:59:e1:17:a2:47:
         10:6e:39:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 08:28:55 2026 by rpki-client