Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
File:                     6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft (raw, json)
Hash identifier:          ewn67g+4v1vFJUxJcInYum8d+fr14c3OoaTwc2UW8g4=
Subject key identifier:   7B:9E:4A:A1:46:FE:7A:F7:8C:36:A5:AC:E5:04:5B:80:86:4F:4C:83
Authority key identifier: E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94
Certificate issuer:       /CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
Certificate serial:       019D9D3F34255DC7790E80850F22B5AE70E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
Manifest number:          1370
Signing time:             Fri 17 Apr 2026 21:00:57 +0000
Manifest this update:     Fri 17 Apr 2026 21:00:57 +0000
Manifest next update:     Sat 18 Apr 2026 21:00:57 +0000
Files and hashes:         1: 6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl (hash: dhqhwZfIDu57M3zbj1MG9OtmNE/41tHMk8bbrVOG2r0=)
                          2: geUvZA4ewTlG88hTMf-uSmrWhDQ.roa (hash: 2pWVSfUZrGtWyoII6+WIJ6jWbQPbI427Ph6KkMpwer0=)
                          3: jOZj1C3xGT3lCOMlr8mrVCcGvuU.roa (hash: xZbQL/ocO4+4b8f47kEc3Iqc1SZWkZf9JiGEHoGlE6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:3f:34:25:5d:c7:79:0e:80:85:0f:22:b5:ae:70:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
        Validity
            Not Before: Apr 17 21:00:57 2026 GMT
            Not After : Apr 18 21:00:57 2026 GMT
        Subject: CN=7b9e4aa146fe7af78c36a5ace5045b80864f4c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:54:6f:f6:0f:fe:f0:f7:e6:68:b1:9d:87:12:
                    03:f4:9e:2f:2f:2c:49:c2:d7:c3:5e:d7:34:c2:a9:
                    00:2e:6c:49:b7:db:01:46:bf:da:07:6d:ce:6f:f7:
                    53:f3:95:e8:7a:55:cd:25:6a:e7:ad:a8:ef:80:91:
                    84:05:a5:b2:78:98:96:8f:89:c3:f5:39:28:f6:c8:
                    ac:b8:bf:ff:a3:51:02:eb:ee:c3:56:66:4d:4f:0b:
                    c9:17:1b:6d:15:4e:a3:e7:04:49:39:e8:81:bc:35:
                    cf:3e:f0:cf:74:81:03:fa:d6:03:bb:b7:28:dd:09:
                    64:40:66:8c:f4:81:3e:e5:3c:6e:de:2c:27:b8:c1:
                    dc:de:af:22:78:74:8f:cc:86:43:80:70:94:cd:05:
                    9d:6a:5f:56:92:14:23:f2:6f:96:c3:63:9a:9c:e7:
                    7c:56:09:35:21:ee:da:4c:6f:55:cb:73:ed:85:2e:
                    4c:84:7a:1a:da:76:70:77:89:af:b2:c4:d5:f3:db:
                    d7:6d:e9:3b:6e:e0:03:64:3f:b7:03:75:3c:b0:82:
                    ff:8f:30:8c:01:4d:bd:45:c8:39:52:d6:bf:1c:c3:
                    ab:74:b4:f6:10:35:9c:8b:c6:b7:fd:34:25:79:c4:
                    3f:47:8a:b4:ae:d7:fd:5d:40:61:23:e9:c5:57:49:
                    f9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9E:4A:A1:46:FE:7A:F7:8C:36:A5:AC:E5:04:5B:80:86:4F:4C:83
            X509v3 Authority Key Identifier:
                keyid:E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:31:03:15:55:59:75:99:ba:9c:d6:b5:0c:2e:1b:bf:25:3c:
         5b:51:6c:b7:59:19:6d:17:cd:4a:67:f8:97:9d:c3:d0:80:60:
         de:e0:eb:ae:ce:27:0a:36:90:3b:f9:61:4f:98:4b:64:e1:3a:
         d6:c0:a6:36:32:c3:f9:57:8b:e4:d6:a1:50:81:33:3e:d7:5e:
         cd:61:c4:e5:64:f6:92:d5:73:90:52:62:24:71:0e:f2:c6:4c:
         b7:4d:35:f0:5b:a2:f9:01:4e:6b:ef:9d:a7:b2:31:97:cd:88:
         74:42:fe:78:c9:af:8c:bb:a8:2f:dd:9c:ea:36:3b:fa:ed:02:
         e9:f5:d7:cb:a6:38:d3:89:a5:bc:5c:b7:31:e0:78:cd:1a:6f:
         95:4f:56:a6:f9:44:01:d0:bf:6f:f1:0d:48:59:c7:69:8a:58:
         b2:3e:65:10:f0:a7:7b:19:3a:86:24:2b:9d:ed:e9:ad:0a:34:
         84:8c:91:58:18:db:c5:3e:09:c5:ae:24:84:7f:2a:a1:c6:b4:
         3a:89:42:35:5b:cd:2a:69:50:1c:02:0c:f4:8e:d7:6c:e5:f2:
         8b:88:de:55:b1:a1:d5:7b:9f:f2:75:1d:3c:c7:98:70:71:82:
         1f:57:3f:60:a6:ce:e3:d1:d7:03:21:ad:9b:97:7c:18:9a:4f:
         05:ef:34:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:33:45 2026 by rpki-client