Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
File:                     1mc4qNrawtDTrt25NPggBmufX-s.mft (raw, json)
Hash identifier:          xE9W0roQsXSeIB1AdO5+gAByZuGzKtHAaBOuBaMN2GI=
Subject key identifier:   A7:10:87:10:9A:01:F7:54:A4:D6:CB:FD:07:19:08:22:39:EA:D0:0D
Authority key identifier: D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB
Certificate issuer:       /CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
Certificate serial:       019DA7C31D23DB4F214EE7D4CC0B84A6A3A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
Manifest number:          18CB
Signing time:             Sun 19 Apr 2026 22:01:15 +0000
Manifest this update:     Sun 19 Apr 2026 22:01:15 +0000
Manifest next update:     Mon 20 Apr 2026 22:01:15 +0000
Files and hashes:         1: 1mc4qNrawtDTrt25NPggBmufX-s.crl (hash: UFdXYIiwWFh7/DIl5EwwcBtaQQihwyCPgD0/CeJ1OAY=)
                          2: PvHMHD0aeuQ9T3MtfIs2XmJyQOY.roa (hash: EfRNqiHIBaBfAkezAxeKdTs07evzHPZKbuFa+2c+KMc=)
                          3: TIYeUVbpvuyDC2t31dkXKX77tpM.roa (hash: jq2yqV/pOREhu3bPBF+p4OSILcPoLvkCkURypiB0/n0=)
                          4: cOxS0E2XjVzTbopS5QPfLKjjtnk.roa (hash: mNaGGlEdJbAJ+qyD+c0RDVAtGl4B6iWrOcUapyB/UK4=)
                          5: pI-v5uJ1SgQhhfO7bCx9EJHVnoY.roa (hash: QNyQpokvQqLnIzlnj95bhIcxCT1zZNKDcQ4ODnYC8DE=)
                          6: rCFpqnF0TcjxMo0Y1C5GR4qc4ng.roa (hash: PMdlGjc9Af5sq4QJ2HwfDr1apnmai7YobB9Ga0B6v3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 21:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a7:c3:1d:23:db:4f:21:4e:e7:d4:cc:0b:84:a6:a3:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
        Validity
            Not Before: Apr 19 22:01:15 2026 GMT
            Not After : Apr 20 22:01:15 2026 GMT
        Subject: CN=a71087109a01f754a4d6cbfd0719082239ead00d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:22:b3:56:47:69:85:45:55:99:5a:98:d2:29:
                    2f:1d:52:fb:f8:5f:02:d6:d6:ff:76:9b:5d:a2:aa:
                    11:18:0e:a2:c1:c2:f3:f0:a1:40:59:e3:70:b9:3a:
                    bb:ce:2a:0c:41:03:47:7c:af:7b:ba:66:87:15:cb:
                    86:99:92:14:b6:91:3e:52:43:4b:30:7f:f2:2e:5a:
                    10:5c:16:fb:53:44:3b:c8:93:03:d1:e3:63:96:89:
                    9c:a0:4a:fd:2c:7d:80:bf:9b:63:a4:28:4a:cd:6c:
                    1a:92:2c:bd:5f:aa:16:a4:00:1a:4f:60:c8:3f:b0:
                    9c:a4:e9:69:4c:a4:86:30:90:c5:d0:01:31:4a:33:
                    b3:58:4b:5e:3e:62:3c:a9:f5:12:0e:4d:23:a2:80:
                    97:c5:d8:5a:9f:e0:03:e8:6a:1a:b8:9e:79:f1:2f:
                    aa:98:03:ed:84:d9:5e:ed:3a:9d:f7:24:fa:90:ab:
                    f0:8c:8f:f5:3e:5a:66:4b:32:3f:6f:29:35:bf:10:
                    d6:7f:66:c5:aa:7f:d7:7d:77:2b:72:ed:19:e8:9d:
                    a7:9b:17:a1:0e:7e:c0:2e:37:48:91:7d:54:e3:cd:
                    8e:62:b3:d3:a5:d5:41:07:41:68:6b:34:cf:11:35:
                    4e:eb:4e:81:9b:61:2c:85:ba:0a:ef:cc:7b:e1:19:
                    55:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:10:87:10:9A:01:F7:54:A4:D6:CB:FD:07:19:08:22:39:EA:D0:0D
            X509v3 Authority Key Identifier:
                keyid:D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:72:7b:ab:6d:fa:1d:03:a2:df:7d:21:77:68:67:00:d4:2e:
         f6:a3:31:41:37:77:f1:d7:bd:b5:81:74:ed:b3:4f:00:12:64:
         25:a4:1e:ec:62:71:b4:e4:b3:d8:77:49:48:8f:41:98:8d:fc:
         80:7c:fd:55:4b:1a:86:64:ea:41:87:32:1c:d1:ae:37:90:4f:
         0c:23:7d:e4:1c:38:dd:cb:1d:85:17:f8:de:db:c2:77:08:3e:
         c9:e0:6c:e7:16:4d:22:2f:cb:e5:87:2b:10:a0:d3:36:e1:2a:
         92:61:44:20:8a:1e:e5:37:a1:e7:62:9c:5d:7e:84:e9:1c:47:
         1b:14:43:24:75:ce:f6:02:9d:02:4d:fd:27:64:22:ea:a1:90:
         c4:ae:7b:81:f4:f3:05:7e:c0:8d:73:d4:b4:fc:18:15:91:ce:
         55:09:1b:e0:5c:9d:d5:b5:13:6b:fe:d5:3b:3d:cb:57:a4:94:
         5b:5b:a4:f9:ea:cd:a7:cc:e7:52:92:5f:8c:53:b1:72:78:6c:
         df:27:1a:5e:dc:68:01:f5:7b:90:69:37:31:9c:71:11:32:f8:
         93:34:22:25:c3:cf:26:e5:ec:16:f6:34:64:46:35:b6:53:9b:
         28:ae:f1:d8:04:86:db:14:37:dc:94:91:6c:72:5b:37:5d:a4:
         0d:76:a5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:27:24 2026 by rpki-client