Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
File:                     b87cvaA8OzbNfXA36tM5vLiMmiQ.mft (raw, json)
Hash identifier:          oW5KghTBrT8B3jHaga4ylFJcL7AuVp966OjK+A4TEQ4=
Subject key identifier:   35:99:09:08:3A:B6:DE:76:C8:0D:97:4F:28:84:1A:7B:1B:63:CF:43
Authority key identifier: 6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24
Certificate issuer:       /CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
Certificate serial:       019D99D017B7607B889AD1872405EF4092E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
Manifest number:          0C86
Signing time:             Fri 17 Apr 2026 05:00:44 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:44 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:44 +0000
Files and hashes:         1: Uc8-vtLFC1N8lVj4ndp6unkcS6U.roa (hash: UrDkg/Sd+X+UaUrCGrnxftMeAYE4D59TadpDzTu8j1Y=)
                          2: b87cvaA8OzbNfXA36tM5vLiMmiQ.crl (hash: Cn2arWcaEwDndB92s/4P+Rc6baU+aVi2/ELmqHnqSkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:17:b7:60:7b:88:9a:d1:87:24:05:ef:40:92:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
        Validity
            Not Before: Apr 17 05:00:44 2026 GMT
            Not After : Apr 18 05:00:44 2026 GMT
        Subject: CN=359909083ab6de76c80d974f28841a7b1b63cf43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b8:3d:84:0b:3c:4d:8a:d2:b2:10:8b:3e:86:
                    7b:9c:b3:59:4f:91:ee:94:d1:71:93:87:d5:48:ac:
                    9b:37:57:48:bb:7b:28:f6:f8:1b:61:1b:cc:ba:13:
                    8e:1f:68:f7:2a:51:b5:0e:c2:4f:7a:1b:ee:5b:d6:
                    c2:c4:d1:bd:0e:20:e0:6f:9d:c0:90:57:d8:ea:54:
                    a4:41:1c:8f:32:78:4e:aa:bf:35:8b:dc:17:cb:33:
                    50:87:40:4d:1f:80:aa:12:a5:5a:04:ea:ad:05:9a:
                    4c:f6:c5:94:57:89:70:a1:f7:3a:c1:5f:63:a3:c6:
                    6e:1c:13:1d:ee:3f:c5:0d:d4:01:4c:81:28:2a:ac:
                    70:46:11:6e:b9:ef:b9:e9:24:f9:e5:17:20:51:b4:
                    cf:86:da:dc:04:e7:82:84:90:2c:73:4b:9f:1d:4a:
                    0b:ec:8a:6f:b8:9d:47:3a:59:c1:be:a3:69:cc:96:
                    63:d7:81:5c:6e:43:d4:b5:ef:57:2b:3c:75:09:a1:
                    f5:ef:01:a7:06:f7:c6:43:64:4a:b2:19:e8:3a:a0:
                    75:ba:2d:3b:e4:ce:9c:23:2e:f0:ef:6a:68:54:a4:
                    1b:9e:8c:3b:e3:fc:2b:0a:37:5f:87:5d:10:99:0e:
                    60:f7:48:29:83:36:dc:25:45:5d:67:61:ef:8d:f5:
                    31:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:99:09:08:3A:B6:DE:76:C8:0D:97:4F:28:84:1A:7B:1B:63:CF:43
            X509v3 Authority Key Identifier:
                keyid:6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:74:78:94:c1:a5:94:bd:ba:bd:cf:7b:a6:58:a7:c2:f7:56:
         0e:5b:9e:9b:ca:3a:8a:78:fd:fc:b4:72:fa:1c:7e:a1:67:14:
         4b:8a:be:3a:2c:6d:7b:fc:2c:ef:ce:63:58:e1:b2:8f:60:16:
         50:2b:8d:03:2f:b5:ea:d5:4c:ed:c4:d9:5c:56:22:d0:e7:c1:
         c4:f7:54:94:75:f9:96:83:a1:63:9d:7d:9d:ff:c5:a2:c2:25:
         9e:c5:fa:e4:79:7c:51:7d:d6:cf:0a:77:61:1e:0c:bf:04:d0:
         99:11:0d:ac:8a:15:f0:8b:78:c1:7d:f8:47:f1:4c:8c:fa:60:
         e5:71:55:0a:d7:b2:5d:0f:96:7d:92:fd:81:09:c7:49:c1:48:
         56:d4:2b:85:3d:6c:fd:33:00:cf:4d:e0:ce:77:78:7b:68:d2:
         05:20:1a:cb:cf:7b:dd:bf:d1:91:af:0f:d0:68:1e:9f:59:3f:
         77:2c:40:2d:75:ec:c2:2b:ef:43:de:14:d8:84:5e:24:70:b1:
         89:46:6a:e7:54:73:cc:ed:be:37:b9:46:f7:5e:f4:46:73:aa:
         51:4c:b2:ad:82:d0:4f:76:3f:bc:39:86:d7:e0:b1:20:a4:8e:
         33:7a:87:99:c3:97:29:21:bc:32:fe:c8:0f:2a:8f:7a:e9:ab:
         95:ce:0d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:12:55 2026 by rpki-client