Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
File:                     IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft (raw, json)
Hash identifier:          Ua8S9wDVVyyMLW9Ryuf3Ibx+aIkJCO0VXhhQGToZGd8=
Subject key identifier:   A1:96:69:E5:DE:9D:74:88:2D:12:77:43:96:57:9E:63:EE:0F:AC:26
Authority key identifier: 20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24
Certificate issuer:       /CN=20820f796481ac0e9637c962414597b1fe227c24
Certificate serial:       019D9D75AAB3D2609105251971192FB838F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
Manifest number:          03D9
Signing time:             Fri 17 Apr 2026 22:00:27 +0000
Manifest this update:     Fri 17 Apr 2026 22:00:27 +0000
Manifest next update:     Sat 18 Apr 2026 22:00:27 +0000
Files and hashes:         1: IAWiQMEI7lBYE-yiLrq0N4vd600.roa (hash: 7MWeCmwerIQVPacLYiQfFeLxjpHdbEK+iRaLdCOlJtE=)
                          2: IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl (hash: Z+l4JGf0M570z4flglvVX/N01Nw+Z1eVOhHGCmX4cCQ=)
                          3: NHFVYka2133iQXjNTWLuhJeJRYs.roa (hash: r4c2sIYwncDluECLH+MlpQyTtLc+nzIN7UPvDkikTYQ=)
                          4: gvthCNIXZpaMb2ZutbDvX6DCkBk.roa (hash: tPtLLMo+LPUP4l2VgdhxLWlnMKhOqjN726EsOHNpydc=)
                          5: yZlYavUaF5ZkpQPJOyNlBAVw7XY.roa (hash: Mu3AswMCG2U7NEViX0UJQTVg05J0CMB40dFTF5KkWro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:75:aa:b3:d2:60:91:05:25:19:71:19:2f:b8:38:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20820f796481ac0e9637c962414597b1fe227c24
        Validity
            Not Before: Apr 17 22:00:27 2026 GMT
            Not After : Apr 18 22:00:27 2026 GMT
        Subject: CN=a19669e5de9d74882d12774396579e63ee0fac26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:51:7a:dd:db:78:f2:13:1b:88:62:8b:35:de:
                    e6:4f:d8:1a:ff:2f:10:4d:49:f9:cd:39:39:0b:9f:
                    e3:47:54:5f:2a:86:1f:32:30:25:17:79:7d:55:d2:
                    06:79:d8:a4:f3:56:e8:a4:b2:ad:65:07:6a:39:d3:
                    d2:3f:a6:07:bd:9e:7c:45:92:e4:6a:71:b0:7b:36:
                    f8:3e:af:56:35:66:c2:e7:d2:7f:ac:5e:4e:14:90:
                    da:13:ac:32:b8:80:02:0d:14:76:ce:09:94:74:bc:
                    61:7d:fa:8d:e4:4f:d1:12:f3:ba:e5:6d:5f:e3:a8:
                    68:4e:e1:a7:13:9e:31:4c:8e:a1:5e:b6:51:1b:03:
                    a2:c1:af:d5:95:6f:d9:55:ec:f6:6b:8c:19:38:dd:
                    cf:0b:85:56:58:21:55:a3:31:9f:1b:ed:b5:a5:7b:
                    03:b0:50:60:71:3a:66:17:f7:d8:3e:a3:81:10:ff:
                    1a:40:f3:49:40:9a:f2:92:48:62:69:76:a6:6f:eb:
                    9a:b6:3a:f5:76:08:66:e7:d2:54:d8:c8:1f:7a:ea:
                    28:20:14:f0:10:59:3d:ab:fe:29:db:92:6d:38:50:
                    eb:fb:8f:44:d4:6b:81:1d:b4:87:31:08:2f:7b:18:
                    6d:18:62:15:19:aa:7b:52:fa:63:f1:10:71:14:07:
                    df:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:96:69:E5:DE:9D:74:88:2D:12:77:43:96:57:9E:63:EE:0F:AC:26
            X509v3 Authority Key Identifier:
                keyid:20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:16:92:0e:3f:6e:d7:ea:57:43:65:5a:59:34:6f:08:72:a3:
         c1:f5:be:23:02:24:94:b3:ad:53:71:67:f1:cf:61:65:fd:cc:
         2b:00:22:05:31:b9:a0:40:9a:89:19:3e:d8:6b:35:24:62:c6:
         c1:68:fa:d7:c4:56:e7:fd:79:e0:86:20:1c:b2:fc:ce:04:10:
         6d:a5:d5:c4:2d:f2:de:8c:28:83:1a:7d:4b:21:29:fe:3b:eb:
         5c:e7:db:b2:b6:8c:21:95:5d:9b:0d:22:aa:78:aa:16:cb:17:
         4e:6b:df:49:11:fb:e2:b1:d4:44:ec:b2:54:dc:61:6e:53:19:
         12:1b:52:e2:d2:9c:b6:d7:20:d1:3e:f0:d7:ad:3b:fa:29:46:
         2c:1f:6a:89:53:a0:b6:27:43:ff:10:d3:4f:65:e4:16:df:cd:
         4c:ce:a4:3e:4c:01:78:f9:dc:b2:6f:d0:cb:56:ad:61:b3:c3:
         88:be:aa:2b:8f:97:1a:33:11:3a:92:23:87:ca:ab:b3:ce:af:
         b2:0e:25:d0:1f:77:c7:6d:61:1a:a1:fa:cc:9d:87:ee:0b:6c:
         50:ec:ca:07:01:c8:4b:ef:5a:11:12:bf:e4:f2:c9:d0:cf:4c:
         e4:40:e5:e3:3b:1c:c3:df:ed:79:b9:d1:ae:75:71:5e:f8:c3:
         bc:11:e3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:30:19 2026 by rpki-client