Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
File:                     syycJt98zYrTjYm9XUk4C5Ox4Ak.mft (raw, json)
Hash identifier:          dX7CZwfjPmDy08g9kDq+z9OwiIKU9uhdp6t5rS1Gktc=
Subject key identifier:   4A:16:CD:82:08:7C:E5:7A:CE:74:43:C7:80:E6:B1:0A:20:FF:B0:CE
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Certificate issuer:       /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial:       019DA7F9837452C8E9854BF976174ACCBD89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
Manifest number:          1620
Signing time:             Sun 19 Apr 2026 23:00:40 +0000
Manifest this update:     Sun 19 Apr 2026 23:00:40 +0000
Manifest next update:     Mon 20 Apr 2026 23:00:40 +0000
Files and hashes:         1: R23MhGdPnTjalWc2zIuKwc_Sr7U.roa (hash: iRmN53RumdF37AoPcECNqwBrmBrWv1ca0HhyWhpgq9k=)
                          2: TtF2-5jlTeNtomtDsnLXaVfZZQs.roa (hash: bOFctgKhUglT+7Rnoc8CMHSaJ6gExTqm2TI5PVgaKVs=)
                          3: YK_IawN261WogeBGmqdkhiTNN_I.roa (hash: 4EC+vEV7ucG4EBdmqBbe7XaUHceglhtUCKP+XHw06Nw=)
                          4: cxrYDYRve-AK30Fn1TQ9Kqrsm3M.roa (hash: omj5Dxmbd1CeguDg9OXaZDFdwZG6Smx/H+Y39YrtYK8=)
                          5: syycJt98zYrTjYm9XUk4C5Ox4Ak.crl (hash: bNN95xzyUBF3CBmuOhcnq7/ApWV8Cqw4Lk3SUc+hKvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 21:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a7:f9:83:74:52:c8:e9:85:4b:f9:76:17:4a:cc:bd:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
        Validity
            Not Before: Apr 19 23:00:40 2026 GMT
            Not After : Apr 20 23:00:40 2026 GMT
        Subject: CN=4a16cd82087ce57ace7443c780e6b10a20ffb0ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f3:04:07:90:ee:a4:71:58:06:d6:9a:74:78:
                    8f:85:d3:34:e2:e1:75:9b:74:58:b5:e4:66:e8:4e:
                    8f:ed:ee:ca:61:64:70:e5:27:38:f2:4e:d5:8c:3c:
                    4d:8f:97:6e:3f:ea:2e:d7:3c:35:a3:0a:c7:c7:5e:
                    10:95:fe:04:5a:80:f9:0e:05:1e:e6:61:e0:d9:89:
                    69:71:89:ab:d6:3e:93:0f:1e:79:0b:80:d4:54:57:
                    5c:3e:43:ed:db:02:33:2e:19:86:6f:b9:ff:d4:48:
                    48:ca:3e:cc:7c:39:f4:32:ea:dc:c3:d6:36:f9:b6:
                    98:65:a7:e4:a8:a7:14:de:b8:04:ca:ba:9d:d0:3b:
                    80:20:17:33:a0:94:3b:26:65:5d:76:00:e5:1b:1d:
                    ee:f4:f9:80:a1:bb:c3:a7:50:bb:dd:34:55:c4:41:
                    78:85:4d:95:83:30:93:e2:22:1e:6b:cb:00:5d:0f:
                    ad:32:68:fb:0b:6a:97:2c:60:b6:12:fc:2c:c6:89:
                    0c:30:4e:14:7d:f8:3d:52:24:25:60:20:a8:de:f0:
                    f6:4c:2a:aa:21:96:27:40:6b:76:42:44:80:4a:55:
                    1a:22:1f:3c:7f:ac:eb:bd:3b:23:e2:fd:9f:ef:8c:
                    13:03:57:ba:7c:1d:c9:ef:d7:af:7e:d3:a8:cb:4b:
                    f6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:16:CD:82:08:7C:E5:7A:CE:74:43:C7:80:E6:B1:0A:20:FF:B0:CE
            X509v3 Authority Key Identifier:
                keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:5f:36:dc:2e:e9:76:4e:da:2a:c2:3b:de:f1:66:91:a7:76:
         67:93:1c:a0:96:9d:80:51:e5:b0:c4:a0:c8:ca:88:a3:73:77:
         05:00:da:28:dd:14:f8:cd:c2:b2:28:78:c3:20:19:39:d0:aa:
         44:35:60:d0:98:26:14:00:07:aa:03:e4:0b:ab:e5:d1:11:d5:
         35:ef:69:54:6e:9e:63:77:f5:4c:4a:35:21:24:af:9e:ba:26:
         72:1b:94:63:ce:15:20:5a:4d:0a:4d:15:f9:a2:c4:f8:64:a6:
         98:39:b8:0d:4b:e9:59:3b:24:9c:57:f2:53:8e:a8:fb:55:9e:
         fa:d5:35:38:94:e4:b3:79:36:0c:7b:6b:ee:ba:c8:93:d1:03:
         ac:ce:24:c9:bd:87:70:78:98:ba:b3:b2:51:91:01:01:90:23:
         ea:ad:02:d4:65:73:6f:7a:46:c8:16:67:87:fb:0a:72:ab:05:
         00:c6:84:4e:99:63:41:f2:6a:56:79:dc:85:c0:2f:e0:10:e4:
         b6:3b:88:ff:ff:4e:d3:09:7e:e3:e5:70:80:3c:84:c6:2a:70:
         2a:7c:2d:91:a7:96:f1:41:9b:a8:90:94:cc:b7:7f:57:9c:77:
         19:1b:88:7f:fe:e3:de:c6:aa:4e:e3:6d:bb:86:25:1d:55:d4:
         4d:79:50:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:26:59 2026 by rpki-client