Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft
File:                     6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft (raw, json)
Hash identifier:          R7URIB/+acznVzj1NN+KSHReZPqk3Mj3+4nC8Ihb820=
Subject key identifier:   56:B4:FE:2D:7F:30:BB:4A:20:9A:3D:A5:E4:69:13:DB:3C:0F:B0:43
Authority key identifier: E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF
Certificate issuer:       /CN=e939540fd16b633501fbf7441a746fc56f9f59bf
Certificate serial:       019D9A3E6D3A481426305A804A83F7D76D8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft
Manifest number:          065D
Signing time:             Fri 17 Apr 2026 07:01:15 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:15 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:15 +0000
Files and hashes:         1: 19shtj0_KCo_k58mEzL-Sk6mRGQ.roa (hash: xuOwikXImEC2pDedtY4wQuROMk53ZN/s/drSCprgutE=)
                          2: 6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl (hash: t6aXX2ACofc+LmlQrALYVok+4zQgXyobxkfVA14vuLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:6d:3a:48:14:26:30:5a:80:4a:83:f7:d7:6d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e939540fd16b633501fbf7441a746fc56f9f59bf
        Validity
            Not Before: Apr 17 07:01:15 2026 GMT
            Not After : Apr 18 07:01:15 2026 GMT
        Subject: CN=56b4fe2d7f30bb4a209a3da5e46913db3c0fb043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:29:a1:0f:36:89:de:0c:51:58:e3:4f:ce:f1:
                    a4:b2:53:96:a6:ba:92:80:52:96:f7:a5:10:01:4e:
                    ed:e2:11:24:b4:ea:d0:1e:ac:c4:1c:8f:f5:87:81:
                    97:fb:e3:6d:e4:01:bd:4e:e4:7b:56:2f:aa:19:0a:
                    a6:02:e8:67:b8:f8:e8:0b:dd:0b:c9:59:aa:ce:3a:
                    49:53:ca:21:e5:60:02:9b:8c:51:e2:4e:fe:89:8c:
                    11:36:f2:46:4f:c6:02:0c:64:76:a5:08:63:42:e8:
                    ca:da:8b:b5:0d:f2:c2:f8:18:cc:b0:cc:1d:f7:8c:
                    77:57:a2:e6:cb:b0:fb:d0:1a:40:de:3d:06:f4:05:
                    7a:ee:16:ad:72:1b:e5:5d:11:f2:03:57:ab:b1:22:
                    41:67:52:fd:40:d0:e7:70:b9:ef:8c:f3:77:03:7e:
                    da:1f:11:01:a9:4b:b7:a9:ca:95:46:a8:58:ce:b3:
                    c3:69:09:21:ea:46:1a:13:8a:d4:17:5f:e7:a8:90:
                    7d:c6:b1:67:7e:ff:a7:ec:c0:6a:56:80:2d:a8:47:
                    70:b8:5d:d3:8c:1f:fa:20:58:c3:e3:4c:4d:6c:83:
                    d2:20:56:06:ae:27:30:a5:a7:48:cb:22:16:f7:2d:
                    4a:bd:85:9a:c0:9b:c5:80:df:08:74:05:c3:aa:08:
                    f1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B4:FE:2D:7F:30:BB:4A:20:9A:3D:A5:E4:69:13:DB:3C:0F:B0:43
            X509v3 Authority Key Identifier:
                keyid:E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:0a:8b:46:d6:64:7c:f3:5d:3e:5d:6e:b4:be:e3:6a:10:9b:
         c6:71:0c:4e:c9:f3:43:eb:4d:fb:e8:d5:67:d3:7f:6c:50:de:
         4c:23:62:d9:4f:13:e2:06:22:e2:18:fe:23:3f:00:c5:9c:29:
         a5:12:ba:37:4b:16:76:a5:b3:cc:66:83:59:75:89:d3:3e:da:
         9e:1d:10:da:81:50:68:f9:4b:13:96:e3:7b:aa:d8:d1:78:65:
         1f:b5:58:8a:9e:b0:75:f2:d7:fd:45:e2:04:bb:76:4e:c4:97:
         3f:91:cc:23:0a:e6:28:b2:29:3b:4b:93:8d:74:c3:18:99:b5:
         aa:f6:54:7b:d5:0e:84:94:c2:af:d9:2e:1b:69:4d:41:25:25:
         10:de:a5:a8:dc:9c:4b:57:d0:06:9a:9d:50:ad:83:3d:ca:63:
         a2:15:99:ee:8b:6a:97:75:98:a3:dc:c6:4b:7c:cf:ea:54:3e:
         7e:b9:f0:c8:47:a5:f1:e6:3d:1f:cd:3a:2b:c2:8f:ae:3c:42:
         29:01:47:1c:95:2f:2f:bc:b9:39:f4:f5:a3:c4:ff:9a:d0:04:
         8b:76:38:e9:f8:f4:87:c0:85:46:43:0a:71:3d:d4:e3:88:56:
         d6:75:fa:9a:15:d0:c8:bb:59:92:07:50:95:9e:da:83:fe:a4:
         12:70:fc:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPm06SBQmMFqASoP3122OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5Mzk1NDBmZDE2YjYzMzUwMWZiZjc0NDFhNzQ2ZmM1NmY5
ZjU5YmYwHhcNMjYwNDE3MDcwMTE1WhcNMjYwNDE4MDcwMTE1WjAzMTEwLwYDVQQD
Eyg1NmI0ZmUyZDdmMzBiYjRhMjA5YTNkYTVlNDY5MTNkYjNjMGZiMDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzymhDzaJ3gxRWONPzvGkslOWprqS
gFKW96UQAU7t4hEktOrQHqzEHI/1h4GX++Nt5AG9TuR7Vi+qGQqmAuhnuPjoC90L
yVmqzjpJU8oh5WACm4xR4k7+iYwRNvJGT8YCDGR2pQhjQujK2ou1DfLC+BjMsMwd
94x3V6Lmy7D70BpA3j0G9AV67hatchvlXRHyA1ersSJBZ1L9QNDncLnvjPN3A37a
HxEBqUu3qcqVRqhYzrPDaQkh6kYaE4rUF1/nqJB9xrFnfv+n7MBqVoAtqEdwuF3T
jB/6IFjD40xNbIPSIFYGricwpadIyyIW9y1KvYWawJvFgN8IdAXDqgjxmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFa0/i1/MLtKIJo9peRpE9s8D7BDMB8GA1UdIwQY
MBaAFOk5VA/Ra2M1Afv3RBp0b8Vvn1m/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlRsVUQ5RnJZelVCLV9kRUduUnZ4Vy1mV2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81YWY0Y2UtMGVlZS00MTgyLTkwOTQt
OWY1MmM3MzBhY2RmLzEvNlRsVUQ5RnJZelVCLV9kRUduUnZ4Vy1mV2I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni81YWY0Y2UtMGVlZS00MTgyLTkwOTQtOWY1MmM3MzBhY2Rm
LzEvNlRsVUQ5RnJZelVCLV9kRUduUnZ4Vy1mV2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIQqLRtZk
fPNdPl1utL7jahCbxnEMTsnzQ+tN++jVZ9N/bFDeTCNi2U8T4gYi4hj+Iz8AxZwp
pRK6N0sWdqWzzGaDWXWJ0z7anh0Q2oFQaPlLE5bje6rY0XhlH7VYip6wdfLX/UXi
BLt2TsSXP5HMIwrmKLIpO0uTjXTDGJm1qvZUe9UOhJTCr9kuG2lNQSUlEN6lqNyc
S1fQBpqdUK2DPcpjohWZ7otql3WYo9zGS3zP6lQ+frnwyEel8eY9H806K8KPrjxC
KQFHHJUvL7y5OfT1o8T/mtAEi3Y46fj0h8CFRkMKcT3U44hW1nX6mhXQyLtZkgdQ
lZ7ag/6kEnD8zQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:02:32 2026 by rpki-client