Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
File:                     Bt76ExH1P2xEFGPaj6s0A61ogBE.mft (raw, json)
Hash identifier:          DFrquFjKOE4LAlrIOibslorFryvaOH+YVwZTOBdpY+I=
Subject key identifier:   62:EB:4A:EA:CC:A1:92:D9:C6:B0:5F:6F:EE:F5:49:57:8F:40:23:DD
Authority key identifier: 06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11
Certificate issuer:       /CN=06defa1311f53f6c441463da8fab3403ad688011
Certificate serial:       019D9A7544875065475BEAAC907D91B8FCB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 08:01:09 +0000
Manifest this update:     Fri 17 Apr 2026 08:01:09 +0000
Manifest next update:     Sat 18 Apr 2026 08:01:09 +0000
Files and hashes:         1: Bt76ExH1P2xEFGPaj6s0A61ogBE.crl (hash: 0s3rMggxVrb4pWpmAbg+z0TrGdFix7iXuaAsG41llu4=)
                          2: E7v6hMZAYWaHkRlbGtOj9vSPgCU.roa (hash: MiOCqZqr88ikQyLtncklUrXjnwaAx3E5tXyKQ8CA/ac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:75:44:87:50:65:47:5b:ea:ac:90:7d:91:b8:fc:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06defa1311f53f6c441463da8fab3403ad688011
        Validity
            Not Before: Apr 17 08:01:09 2026 GMT
            Not After : Apr 18 08:01:09 2026 GMT
        Subject: CN=62eb4aeacca192d9c6b05f6feef549578f4023dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:64:51:e2:19:11:c9:30:98:82:3b:0e:75:cd:
                    c8:27:d2:0c:bd:47:5a:80:8a:92:68:57:57:d9:e6:
                    45:b2:56:5e:2e:63:eb:17:56:fd:62:fb:45:b6:68:
                    ca:c2:9c:1b:94:0d:9a:a4:f9:a5:24:0c:97:6c:fb:
                    e5:75:1d:b3:aa:b4:19:f9:13:ea:76:b5:08:7c:ab:
                    5d:4a:e4:a7:ed:d3:5d:7c:55:45:33:6e:bd:43:38:
                    c3:5e:ca:56:08:7f:82:2f:8c:38:cf:be:a6:da:24:
                    a7:e6:ec:a9:8f:d5:0c:e2:b3:2a:97:21:98:89:6f:
                    f7:b6:df:ca:66:fc:f1:19:27:21:9a:dc:d7:93:48:
                    75:ea:19:43:1b:45:53:84:0f:15:27:37:bb:29:da:
                    4f:b9:e3:04:c8:4a:bc:de:0b:90:39:c0:b9:b7:f4:
                    4a:75:e2:ea:d4:29:db:f8:fa:4e:76:9c:3d:90:8c:
                    ce:63:6e:c0:a5:2d:98:5c:55:0f:f9:cc:3c:34:51:
                    37:96:d6:c9:0c:44:a5:68:52:3a:c6:8e:4e:0b:a9:
                    14:33:0d:66:5f:af:d5:18:ff:73:b1:35:da:a6:de:
                    3f:13:03:86:15:36:52:71:89:57:d0:17:6d:4c:6b:
                    f9:ad:65:8a:fa:6e:1c:0f:1e:31:3a:9d:ab:25:9e:
                    f2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EB:4A:EA:CC:A1:92:D9:C6:B0:5F:6F:EE:F5:49:57:8F:40:23:DD
            X509v3 Authority Key Identifier:
                keyid:06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:25:f7:f6:9d:f9:6c:8a:f4:63:31:c0:f7:10:db:91:f4:b5:
         ea:c8:1b:b8:21:54:58:04:5d:93:3d:74:cc:f3:17:36:71:c4:
         83:51:4a:48:fb:eb:c8:e4:b2:57:6c:7a:55:2a:10:7d:5b:bb:
         ba:0f:ed:fd:d5:41:f3:67:57:81:e4:e9:61:0d:e3:68:80:60:
         9f:13:4f:f1:6b:5d:c0:65:f3:7a:44:82:90:41:82:36:12:3c:
         b1:f8:db:60:98:07:e9:b0:90:59:b7:50:67:a5:d2:02:e1:8d:
         6d:43:60:6a:11:fa:0e:1f:f3:d3:18:ed:e9:d4:19:e5:d5:ef:
         29:ec:68:01:04:b6:25:af:e3:bb:b5:ed:ff:8e:a9:83:63:16:
         df:c5:8a:98:67:38:45:bd:e1:18:23:e8:3f:30:92:54:44:59:
         33:d3:f6:e0:7c:2d:dc:fa:d2:db:2f:d5:ff:1b:1c:9f:a3:52:
         34:49:d6:c3:7e:e8:2b:51:d6:da:33:ee:15:be:d6:d1:0c:8a:
         71:9b:db:72:b0:3a:54:67:73:ff:4b:8d:6f:0c:9a:f0:32:05:
         d2:22:6a:fd:f8:b5:e1:5c:00:24:14:52:39:3f:aa:09:a3:17:
         20:0e:62:3f:4c:3d:10:82:6d:3a:49:c6:42:57:9b:91:bd:3d:
         0c:34:45:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:47 2026 by rpki-client