Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
File:                     6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft (raw, json)
Hash identifier:          Qhb2Z3bSB7hLX3+tY12XpAfLeeoY567C0Dio9MSpW54=
Subject key identifier:   AB:C2:6D:C5:6F:1B:E4:F7:27:7C:CF:D6:2F:B6:BE:82:00:4F:08:8A
Authority key identifier: EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C
Certificate issuer:       /CN=ea501a68d91093e7def2f4e031031d114d43ba3c
Certificate serial:       019D98F5486B6DFFF750EF749BA7C53B0C16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
Manifest number:          13A1
Signing time:             Fri 17 Apr 2026 01:01:44 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:44 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:44 +0000
Files and hashes:         1: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl (hash: aK/ysRyTGs3Y9p6EHXh2zxwcu+DcVlRsE2WLtucL/NI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:48:6b:6d:ff:f7:50:ef:74:9b:a7:c5:3b:0c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea501a68d91093e7def2f4e031031d114d43ba3c
        Validity
            Not Before: Apr 17 01:01:44 2026 GMT
            Not After : Apr 18 01:01:44 2026 GMT
        Subject: CN=abc26dc56f1be4f7277ccfd62fb6be82004f088a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9f:98:e0:e3:8b:5f:26:7d:51:6f:d6:3f:b6:
                    38:b4:b6:5d:37:75:c0:cb:42:66:11:80:4a:09:99:
                    d9:f2:a7:4c:e0:b1:98:71:72:d3:32:69:db:b6:e0:
                    f4:a4:2f:05:0a:82:52:d6:e8:0d:c8:6b:b2:28:e7:
                    1d:e0:2f:86:a3:5c:7d:92:c9:da:fc:cb:33:a2:9b:
                    39:11:be:b1:03:e5:22:45:14:3a:f6:73:6f:27:a0:
                    27:2a:b5:7f:b2:6f:30:90:8b:a7:5c:25:ad:2d:53:
                    2c:ef:fd:ed:69:cb:95:b5:3f:0e:5c:39:2f:7f:05:
                    ae:a8:d1:24:df:a2:ff:89:3d:0a:23:af:37:1f:c2:
                    6a:71:db:b3:0c:35:44:0f:1d:11:29:fb:3c:e3:06:
                    c3:d9:dc:4a:01:69:14:10:39:b4:c1:ae:0b:29:5f:
                    31:8c:40:01:f0:21:60:11:bd:3c:9f:af:aa:fd:d4:
                    03:78:46:53:5c:cf:fd:82:e5:ff:30:c2:01:0d:43:
                    a6:e3:e4:21:13:54:82:ac:15:32:6e:c4:7e:8b:46:
                    04:21:ed:27:c0:b0:fe:11:25:82:c1:11:a1:2e:7b:
                    bb:c8:16:56:41:d9:80:91:eb:55:c6:98:90:74:49:
                    e7:72:a1:b0:b7:92:7a:08:76:08:a1:5f:2d:48:37:
                    27:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C2:6D:C5:6F:1B:E4:F7:27:7C:CF:D6:2F:B6:BE:82:00:4F:08:8A
            X509v3 Authority Key Identifier:
                keyid:EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:2c:95:64:44:73:4d:04:d9:29:5e:2e:cc:53:77:0e:ab:46:
         59:69:cd:db:40:21:65:9d:2d:e0:9c:11:9b:af:fa:c4:d3:92:
         1c:b5:c8:44:87:49:f9:19:ba:30:f9:7b:09:74:b7:1d:88:f8:
         7e:e9:b4:80:c8:26:db:be:9b:ba:50:17:e2:a2:bc:10:8e:84:
         0a:75:98:c2:71:98:66:10:a2:a3:d0:34:4d:e0:e1:7e:2c:4a:
         d9:35:b4:99:ca:16:23:9f:ef:46:7d:88:b7:d8:d2:dd:ee:a2:
         0f:26:57:ec:04:8e:fc:9f:f9:ee:da:06:7e:e3:47:93:df:e0:
         d4:15:79:80:62:31:58:3e:f2:2f:6f:05:98:0c:6d:83:6e:4d:
         98:a9:a1:33:a8:d4:b0:17:50:3b:66:b8:89:37:c4:63:cc:60:
         05:b4:ce:04:8d:ee:fa:50:f4:03:79:f9:a3:b8:e5:f4:02:0a:
         b2:a0:14:a1:8f:35:ff:28:55:85:a6:9b:08:4b:8f:33:8c:42:
         d3:a9:b1:9a:65:ce:33:a8:f5:74:c5:9b:24:b1:4d:2f:ec:20:
         c9:af:93:97:79:b9:74:5c:e3:8b:4e:06:93:ef:95:28:a3:0a:
         ec:a4:2a:fa:d8:4b:57:66:5d:42:5d:6f:c9:ad:b4:f9:53:90:
         b6:3c:31:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:12:46 2026 by rpki-client