Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
File:                     6D-DcLFcuReWVQPKADcyMthXqp0.mft (raw, json)
Hash identifier:          NxX5lUOOaAMjkRCmLWELRRCtZGyQGBW8ksrD6WIee8s=
Subject key identifier:   24:13:4D:36:1D:02:26:CA:4C:7A:16:03:6F:C5:EF:8D:42:BF:46:48
Authority key identifier: E8:3F:83:70:B1:5C:B9:17:96:55:03:CA:00:37:32:32:D8:57:AA:9D
Certificate issuer:       /CN=e83f8370b15cb917965503ca00373232d857aa9d
Certificate serial:       019D98F4AF8800BD90782ACD43D8C3BF23EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
Manifest number:          13B4
Signing time:             Fri 17 Apr 2026 01:01:05 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:05 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:05 +0000
Files and hashes:         1: 6D-DcLFcuReWVQPKADcyMthXqp0.crl (hash: 4a+HCv/Cl7z+tOEngvtpacSwlbn7W07ou9JmwO57P20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:af:88:00:bd:90:78:2a:cd:43:d8:c3:bf:23:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e83f8370b15cb917965503ca00373232d857aa9d
        Validity
            Not Before: Apr 17 01:01:05 2026 GMT
            Not After : Apr 18 01:01:05 2026 GMT
        Subject: CN=24134d361d0226ca4c7a16036fc5ef8d42bf4648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:04:79:ea:59:57:b6:b8:d4:91:51:ca:59:89:
                    36:5e:18:55:1b:db:e4:72:91:eb:6c:84:eb:aa:ac:
                    8b:0c:48:5a:a3:0d:13:b5:4c:35:00:bc:66:3a:04:
                    4b:3d:83:cc:03:fd:53:b0:3f:96:2f:98:6d:41:ff:
                    47:9a:79:c0:a4:83:25:02:c7:7d:03:89:db:f1:30:
                    7d:d4:59:90:8c:98:76:32:ef:5d:9d:3a:dd:2a:44:
                    5f:b5:19:ec:9d:5e:2f:f7:b7:9e:cc:6b:bf:12:c7:
                    c1:1a:03:52:16:5b:bc:a5:a4:bd:44:c2:34:b3:77:
                    c6:d3:f7:59:cd:b0:db:6d:4b:51:d1:28:47:c5:f0:
                    c2:52:be:ca:8f:da:48:2b:b4:c7:00:63:cd:91:1c:
                    6b:0a:bd:78:11:80:8c:ed:5d:50:38:86:44:91:34:
                    ee:f5:68:cc:29:21:8b:ce:e1:8d:7b:7c:0b:ab:18:
                    16:39:4b:3c:be:e1:b7:fd:13:75:3a:27:81:0f:0d:
                    ed:34:ca:87:10:0f:7a:5c:f2:f5:03:20:46:7a:e6:
                    69:ff:b7:e7:6a:6a:0e:76:56:7b:fe:22:85:4c:38:
                    77:f2:d8:a1:66:e6:fd:0f:c1:10:3b:b6:bb:58:46:
                    af:36:64:58:95:77:c9:a4:3a:e4:45:c0:49:15:a7:
                    e3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:13:4D:36:1D:02:26:CA:4C:7A:16:03:6F:C5:EF:8D:42:BF:46:48
            X509v3 Authority Key Identifier:
                keyid:E8:3F:83:70:B1:5C:B9:17:96:55:03:CA:00:37:32:32:D8:57:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:6a:1f:9d:97:3a:ee:49:a9:8e:6d:40:1f:4c:59:84:b4:ca:
         1d:f1:b1:bb:53:4a:f3:eb:8f:17:82:33:e3:80:47:a1:12:a0:
         e2:e4:a0:2e:47:dc:54:ec:c5:7b:c5:0b:74:eb:26:40:76:ec:
         ba:ca:7e:56:31:91:3b:3c:1a:b2:4d:c8:00:92:7f:e3:ca:d4:
         50:41:8e:b7:70:3d:fb:20:d2:4c:22:08:9b:23:7c:b5:2b:31:
         6c:27:c3:07:ef:e6:fd:cc:bb:bf:ff:b3:b2:4b:f7:27:16:29:
         2a:93:5a:b9:8a:ff:e5:37:ce:72:8d:63:80:74:06:63:de:ee:
         ae:fa:b4:61:c7:04:ce:3d:e4:d0:e1:55:53:be:93:cb:f4:d4:
         52:b9:72:ad:f9:fa:18:5e:09:cb:6f:d3:f9:1c:66:24:8b:59:
         40:47:e6:b3:c6:9f:06:02:dc:96:32:c8:7c:84:0a:ed:55:23:
         87:e1:ee:05:67:4e:18:72:a2:4c:8e:fa:7a:4f:9e:ed:1f:2c:
         6c:15:1f:6f:ed:96:ab:ad:92:a3:6f:70:a2:22:32:1f:24:0f:
         92:bf:e5:60:b1:fb:83:a7:4a:42:27:5d:2f:c4:4e:25:46:92:
         df:06:8f:4e:39:18:1a:22:33:38:b8:30:0a:8f:0c:a2:54:c0:
         1d:93:e1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:29 2026 by rpki-client