Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
File:                     6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft (raw, json)
Hash identifier:          73JXb8zXt37R5/ru0PQIM4Nf8NedY2myspASskL+wU0=
Subject key identifier:   D7:A4:D9:9E:45:42:CF:E2:62:E6:2F:D6:EA:F8:30:56:A3:14:04:1B
Authority key identifier: E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C
Certificate issuer:       /CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c
Certificate serial:       019DA48B6304FABC90BB4E0FC7425ABD9B73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
Manifest number:          0F98
Signing time:             Sun 19 Apr 2026 07:01:31 +0000
Manifest this update:     Sun 19 Apr 2026 07:01:31 +0000
Manifest next update:     Mon 20 Apr 2026 07:01:31 +0000
Files and hashes:         1: 6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl (hash: +Fv2ySC9f7yw9bLs1jb9oLSMHer/xkrVoD8UXdvLbAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:8b:63:04:fa:bc:90:bb:4e:0f:c7:42:5a:bd:9b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c
        Validity
            Not Before: Apr 19 07:01:31 2026 GMT
            Not After : Apr 20 07:01:31 2026 GMT
        Subject: CN=d7a4d99e4542cfe262e62fd6eaf83056a314041b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:55:d5:16:ab:2c:d8:57:71:bf:fc:0e:c6:97:
                    fe:8e:9c:89:7b:22:44:7d:44:ca:8d:19:b4:10:3b:
                    59:02:37:20:0c:e8:a9:ea:d5:c1:b2:f0:e4:b7:7c:
                    38:e5:48:14:49:0e:54:0d:e0:9c:02:d6:11:1d:97:
                    de:06:49:20:10:cc:3a:16:19:97:e8:ea:cd:d8:51:
                    19:f1:e5:9a:9f:ab:4b:f8:ea:1d:4e:28:3b:9b:8f:
                    fc:fc:db:f8:7d:ec:3a:57:6f:fa:0a:e9:66:9b:c4:
                    b0:ae:49:29:c1:17:58:46:06:6e:36:ab:94:97:8b:
                    e7:bc:4f:67:6f:19:17:0a:89:fd:1d:80:53:89:d9:
                    97:15:ee:d7:6e:44:2c:34:c8:ad:74:d1:2a:08:3f:
                    3f:d8:41:cd:a6:1e:f2:d7:15:b5:5a:e1:53:5b:dc:
                    a9:d9:aa:eb:44:21:b6:e5:6b:f7:f3:9a:6c:3a:90:
                    f7:75:12:a8:91:7d:0a:fe:f9:63:8a:42:0a:be:75:
                    34:a8:83:ae:38:ba:01:24:26:a6:63:65:51:ea:94:
                    48:e0:cf:d8:29:75:8a:35:17:97:77:25:9b:8b:0e:
                    ce:0c:d5:7d:e0:5d:be:50:60:64:da:0a:dd:d3:0f:
                    2c:8d:99:24:ec:1c:65:9f:f1:ac:fa:19:bd:dc:3d:
                    74:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A4:D9:9E:45:42:CF:E2:62:E6:2F:D6:EA:F8:30:56:A3:14:04:1B
            X509v3 Authority Key Identifier:
                keyid:E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:29:59:97:b8:28:05:55:6e:97:b8:52:2c:8d:5a:87:3f:df:
         f4:fb:02:66:73:dd:8f:92:65:d3:37:2f:f9:41:41:a9:31:19:
         2d:03:3c:e6:29:20:d4:b8:ac:35:e1:ff:65:e9:3e:c6:26:4a:
         05:e5:c3:40:56:98:31:0c:bf:46:49:b6:83:e2:28:e6:f9:39:
         79:f4:5e:a7:8e:be:f3:52:e8:2e:86:17:47:bd:c7:69:df:36:
         d8:d5:b7:05:53:94:4b:f2:cd:83:a3:18:ec:ad:de:00:69:61:
         2b:00:27:c3:68:29:65:58:3e:d8:60:f8:a8:d2:67:ca:fe:0d:
         2c:b0:dd:5b:81:5b:5f:43:80:37:77:58:7b:eb:af:87:94:39:
         3a:36:9b:f6:b9:fb:50:11:c3:d0:30:52:4d:23:2a:11:35:d0:
         73:93:95:97:13:66:55:09:88:a9:73:c8:c3:07:a9:0b:5d:d3:
         6d:72:f3:f2:51:b4:cc:a1:b1:37:cc:8a:0f:b5:36:d5:d3:b0:
         71:43:49:f6:29:a6:c5:7b:b7:51:89:fe:65:d2:8b:35:63:de:
         2d:21:15:39:03:79:8f:14:a3:f6:e0:41:72:a5:4f:fa:f2:7e:
         63:4b:89:23:76:6f:74:7d:a5:8f:28:1f:3a:b1:b1:91:23:3a:
         82:73:4f:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ki2ME+ryQu04Px0JavZtzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NmIwMjEyZTMzMmRjYThmYzdkMWVlNWE4MTUwYmEzODU2
OTljOGMwHhcNMjYwNDE5MDcwMTMxWhcNMjYwNDIwMDcwMTMxWjAzMTEwLwYDVQQD
EyhkN2E0ZDk5ZTQ1NDJjZmUyNjJlNjJmZDZlYWY4MzA1NmEzMTQwNDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lXVFqss2Fdxv/wOxpf+jpyJeyJE
fUTKjRm0EDtZAjcgDOip6tXBsvDkt3w45UgUSQ5UDeCcAtYRHZfeBkkgEMw6FhmX
6OrN2FEZ8eWan6tL+OodTig7m4/8/Nv4few6V2/6Culmm8SwrkkpwRdYRgZuNquU
l4vnvE9nbxkXCon9HYBTidmXFe7XbkQsNMitdNEqCD8/2EHNph7y1xW1WuFTW9yp
2arrRCG25Wv385psOpD3dRKokX0K/vljikIKvnU0qIOuOLoBJCamY2VR6pRI4M/Y
KXWKNReXdyWbiw7ODNV94F2+UGBk2grd0w8sjZkk7Bxln/Gs+hm93D10IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNek2Z5FQs/iYuYv1ur4MFajFAQbMB8GA1UdIwQY
MBaAFOlrAhLjMtyo/H0e5agVC6OFaZyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNldzQ0V1TXkzS2o4ZlI3bHFCVUxvNFZwbkl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iMjA1NjEtODcwZC00ZTkyLWJjMGUt
OTA5MTAyNmFiYzcxLzEvNldzQ0V1TXkzS2o4ZlI3bHFCVUxvNFZwbkl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9iMjA1NjEtODcwZC00ZTkyLWJjMGUtOTA5MTAyNmFiYzcx
LzEvNldzQ0V1TXkzS2o4ZlI3bHFCVUxvNFZwbkl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkilZl7go
BVVul7hSLI1ahz/f9PsCZnPdj5Jl0zcv+UFBqTEZLQM85ikg1LisNeH/Zek+xiZK
BeXDQFaYMQy/Rkm2g+Io5vk5efRep46+81LoLoYXR73Had822NW3BVOUS/LNg6MY
7K3eAGlhKwAnw2gpZVg+2GD4qNJnyv4NLLDdW4FbX0OAN3dYe+uvh5Q5Ojab9rn7
UBHD0DBSTSMqETXQc5OVlxNmVQmIqXPIwwepC13TbXLz8lG0zKGxN8yKD7U21dOw
cUNJ9immxXu3UYn+ZdKLNWPeLSEVOQN5jxSj9uBBcqVP+vJ+Y0uJI3ZvdH2ljygf
OrGxkSM6gnNP/g==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:55 2026 by rpki-client