Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
File:                     x6gkb3CuGOc25OU5gUgNWGFq8ug.mft (raw, json)
Hash identifier:          vGL7fxoOEVbrmzoGgZh75QOeAD9y/fyDWTXggcl8vgY=
Subject key identifier:   15:A3:53:17:A0:D4:FF:EC:67:3F:35:43:C1:96:98:3A:82:12:AF:75
Authority key identifier: C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8
Certificate issuer:       /CN=c7a8246f70ae18e736e4e53981480d58616af2e8
Certificate serial:       019D999959AD0DB371ABD7A43DFF5D91C212
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
Manifest number:          127E
Signing time:             Fri 17 Apr 2026 04:00:57 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:57 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:57 +0000
Files and hashes:         1: WNvdK2G6VGfovAlyzdy5qA0oBTc.roa (hash: T/wqo/8dAPv9d0Xqoe1ZG886rDX3diZQucP4pDiIbtI=)
                          2: x6gkb3CuGOc25OU5gUgNWGFq8ug.crl (hash: fY33+O9lT+rKMRm3vvSx7wrWqctspOklhdLcWAQDpWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:59:ad:0d:b3:71:ab:d7:a4:3d:ff:5d:91:c2:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a8246f70ae18e736e4e53981480d58616af2e8
        Validity
            Not Before: Apr 17 04:00:57 2026 GMT
            Not After : Apr 18 04:00:57 2026 GMT
        Subject: CN=15a35317a0d4ffec673f3543c196983a8212af75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:69:93:66:54:d7:ef:c1:83:1b:d4:8f:3d:cd:
                    92:9f:30:57:d6:04:b2:48:2a:1f:9f:86:96:df:9e:
                    78:50:da:fc:fd:49:dd:34:07:88:1a:0b:0a:6b:d2:
                    8f:96:0e:cc:95:81:89:91:d0:d0:2e:d6:d7:3e:f2:
                    83:bf:6c:a0:e9:9c:ab:dd:47:10:df:99:bb:62:eb:
                    ea:ba:32:54:b4:9f:28:89:ff:08:18:a7:d0:3e:09:
                    bb:e6:33:05:14:81:43:7b:21:8c:92:c4:f2:21:85:
                    fc:80:fc:38:b9:fc:47:16:f6:0a:51:bb:e6:1a:7a:
                    a0:9c:54:ec:57:3d:6d:14:d9:50:dc:0e:21:2a:77:
                    66:80:bf:6c:66:35:d6:9f:63:5c:28:52:08:19:76:
                    2a:84:e7:64:dc:90:7a:e8:bf:fa:4b:49:f8:f1:42:
                    f7:23:d3:eb:80:e4:0a:b9:7b:f3:e7:20:0a:99:ca:
                    78:b9:83:c5:e6:a9:47:51:82:50:c8:fd:9b:bb:cd:
                    ad:5f:ff:71:e5:78:b1:0a:3b:f6:d2:1d:06:7b:ed:
                    8b:17:e9:71:ce:7b:f2:45:f4:fb:cf:14:22:a0:99:
                    4a:55:6f:f0:d9:5e:08:b7:4e:12:a4:d8:8b:22:13:
                    7f:21:0b:7a:68:3a:92:62:79:95:e3:d2:00:05:36:
                    c0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A3:53:17:A0:D4:FF:EC:67:3F:35:43:C1:96:98:3A:82:12:AF:75
            X509v3 Authority Key Identifier:
                keyid:C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f1:5c:3a:30:d7:29:50:98:75:51:7a:6d:d4:8e:df:a1:06:
         15:64:4f:1f:24:23:f7:b2:ed:92:c3:88:22:0c:13:76:c7:8a:
         bd:cb:95:1f:39:79:c8:70:41:b4:83:32:13:0a:47:52:55:cc:
         5e:ae:0e:a9:42:b0:75:61:9a:9c:24:c1:a6:ad:af:cf:e0:e9:
         73:ba:e3:d5:86:4b:dc:a9:68:2d:11:81:50:f5:6c:82:62:95:
         00:da:87:8a:60:5c:9a:c0:92:ab:38:2f:f9:06:54:e8:11:46:
         8b:94:fd:88:d6:13:77:ce:e3:d6:9a:b9:ab:00:b6:36:9c:51:
         34:1c:f2:03:27:80:48:3c:5c:ba:a0:f1:62:a1:cd:6f:8b:27:
         e0:55:40:74:b5:52:19:64:6e:63:59:bf:f2:dc:df:87:31:80:
         5c:11:82:a5:42:36:ec:67:a3:91:33:de:91:f9:f4:bd:cb:53:
         9f:0f:ae:ff:24:23:3e:f4:84:22:33:be:f7:ae:fa:6e:0b:3e:
         db:a5:31:1a:9d:28:70:01:ee:9c:14:72:16:f7:4f:87:d7:4a:
         0c:de:10:91:54:18:42:f5:80:f2:9e:f3:fc:2a:7f:ba:3f:20:
         87:63:0f:68:37:4e:05:81:cc:c8:b8:e0:eb:60:79:54:ae:42:
         a7:b8:44:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:33:41 2026 by rpki-client