Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
File:                     axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft (raw, json)
Hash identifier:          UhrOQYjKbaTCOp/yloNKPngbULjMAt0xaUS3Fns/OgU=
Subject key identifier:   EB:BF:48:2E:4A:FC:50:8B:87:5C:DF:18:63:84:DF:35:C1:3B:DB:81
Authority key identifier: 6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
Certificate issuer:       /CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Certificate serial:       019D9A3E88F92888827DBA2696AD69625CCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
Manifest number:          051B
Signing time:             Fri 17 Apr 2026 07:01:22 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:22 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:22 +0000
Files and hashes:         1: axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl (hash: mdbW9/FSFrvt1K6zbw7lz2fMF9GLWS62yxQylOhKgMM=)
                          2: nbQVjAOURx4Qwj5zIcKA26-Xktg.roa (hash: hXW2ndlgxtGzNC8sJFPsKR4NFW6NGQAmeQ9uAICL/bg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:88:f9:28:88:82:7d:ba:26:96:ad:69:62:5c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
        Validity
            Not Before: Apr 17 07:01:22 2026 GMT
            Not After : Apr 18 07:01:22 2026 GMT
        Subject: CN=ebbf482e4afc508b875cdf186384df35c13bdb81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:0c:28:d0:ca:f2:fd:68:e4:77:2e:de:f8:
                    ce:4c:33:da:31:62:97:c8:71:0a:2e:b3:cf:8f:27:
                    11:95:1a:41:9a:73:8f:c4:fc:7e:e6:30:a8:b3:64:
                    ea:c0:5d:7e:82:b4:56:d5:28:42:84:61:5c:b3:04:
                    84:27:b9:a2:af:16:1b:13:02:1d:7b:77:6c:1e:f5:
                    f8:96:ac:0a:42:b7:14:63:84:e9:df:bd:f7:0b:dd:
                    3a:1d:2f:1b:04:8c:94:d8:04:ba:ab:3a:c7:bf:09:
                    02:85:d1:21:e6:63:ad:ec:ab:70:38:3c:bd:2f:7d:
                    69:e1:3a:16:72:c9:14:70:00:c9:98:b5:28:4d:cc:
                    df:d5:dc:45:f6:ea:26:69:e1:8d:3e:00:0b:54:6e:
                    8f:fa:26:c8:5e:16:9b:eb:dd:07:54:ae:84:7e:c2:
                    3c:ad:c6:ee:27:66:04:6c:b6:fb:67:fc:d0:3a:76:
                    d1:72:51:1d:17:89:fa:bc:ca:e6:0e:8f:f4:e0:30:
                    3d:f4:a2:09:60:f2:9d:7b:79:71:3e:d0:98:4c:98:
                    d1:f4:28:c1:80:8a:09:51:eb:83:93:0e:9a:38:73:
                    71:95:04:fd:a2:f7:61:d9:51:56:4a:fe:51:e6:34:
                    ad:f2:c6:5d:d5:00:83:ee:da:0c:c5:9b:70:43:77:
                    cd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BF:48:2E:4A:FC:50:8B:87:5C:DF:18:63:84:DF:35:C1:3B:DB:81
            X509v3 Authority Key Identifier:
                keyid:6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:8e:0a:ae:7b:3a:ab:bf:9b:85:d5:c1:83:f0:91:bc:e5:f6:
         8c:5c:22:87:29:6e:f1:f1:7e:21:51:5e:9c:9e:3b:a4:0d:49:
         be:9a:3e:5d:99:76:f6:1f:de:f1:e3:56:23:cf:07:65:30:cb:
         a6:19:60:c4:5e:96:46:47:c8:8b:b2:1e:bb:9c:b1:f1:fb:2c:
         61:32:f7:8c:37:1f:9c:1b:15:09:41:ad:00:43:53:ba:d5:f4:
         68:c3:ce:90:bd:0b:44:23:b2:fe:30:b3:f3:b5:e4:43:ec:d7:
         35:83:b5:0d:d3:ad:f5:fa:a7:8b:6f:44:aa:a8:c9:16:70:7e:
         91:40:5f:f8:a2:72:09:2c:85:21:33:63:d9:ec:4a:88:f8:34:
         77:dc:a4:8d:53:04:a1:9e:d1:5f:f8:db:49:f0:c0:a1:fd:f4:
         53:15:9e:f6:cc:39:1b:e2:a7:29:76:15:54:83:31:93:c6:67:
         d8:ae:0e:43:e8:d2:0c:79:cb:c4:d9:79:25:60:7e:ed:61:f1:
         28:88:a5:74:2f:a5:80:be:77:8f:86:0c:77:fd:16:cf:c3:c0:
         8c:da:68:d7:12:08:d2:94:95:bf:21:90:f5:ac:5d:1d:e9:be:
         e7:8c:c7:83:9f:ea:92:7c:76:65:26:bd:a3:e8:36:91:2d:4e:
         59:07:0a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:20 2026 by rpki-client