Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
File:                     atcO8l5SLA0m6Xeh0k_3fq062hk.mft (raw, json)
Hash identifier:          4nPVQl6m08g8EpBtgndITo8P6jNPLjkdAN/TGw9djOs=
Subject key identifier:   9E:31:32:26:3E:95:17:2F:9C:F5:46:33:3E:5B:34:C9:20:5B:E2:A6
Authority key identifier: 6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
Certificate issuer:       /CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Certificate serial:       019D9886D56322765BBF063AE9293EDDE906
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
Manifest number:          0511
Signing time:             Thu 16 Apr 2026 23:01:06 +0000
Manifest this update:     Thu 16 Apr 2026 23:01:06 +0000
Manifest next update:     Fri 17 Apr 2026 23:01:06 +0000
Files and hashes:         1: atcO8l5SLA0m6Xeh0k_3fq062hk.crl (hash: SYFLrL6X7T4Sau87iD+wp7jYmSPqAbn/BeKU3CxYifw=)
                          2: w6aVtPi_QGLU8BO4yYE5hc26NUU.roa (hash: D1OzGspWySA2P+VWszH41u2S7emBKgssmNnj37u02no=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:d5:63:22:76:5b:bf:06:3a:e9:29:3e:dd:e9:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
        Validity
            Not Before: Apr 16 23:01:06 2026 GMT
            Not After : Apr 17 23:01:06 2026 GMT
        Subject: CN=9e3132263e95172f9cf546333e5b34c9205be2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a5:f2:7a:0b:0e:ce:b7:05:c3:1a:2c:b4:38:
                    f2:c4:3a:4a:d6:cf:b0:06:ce:60:5e:a3:b4:53:c2:
                    94:fd:e1:69:2d:08:16:6b:de:39:ac:a7:e8:db:46:
                    7e:83:72:1e:61:8b:89:5b:03:b6:da:bc:44:7f:d6:
                    78:56:e1:b1:f3:2d:c3:39:46:ad:e7:64:b0:e1:b6:
                    37:90:b0:f1:fa:d5:9c:27:2d:61:04:73:b7:15:36:
                    58:5a:58:d7:99:b1:0d:27:e1:8d:22:ae:cf:0d:6d:
                    02:9d:f8:ae:9b:ea:22:70:6b:28:d4:5a:ef:2d:16:
                    74:e4:fe:1d:5a:7d:49:57:b2:2e:27:75:01:a4:36:
                    79:20:a9:45:7c:92:5a:d8:97:ed:c4:53:9d:5b:af:
                    3d:5b:0d:a3:34:1a:36:cd:0e:56:96:09:d7:d1:25:
                    e5:99:36:18:de:be:44:f1:14:3f:20:48:a5:30:73:
                    88:fa:da:e0:87:52:bf:aa:27:e3:1c:45:bd:c6:71:
                    a0:cf:a4:6a:f6:80:2c:cd:bd:80:e0:7f:6e:ed:5e:
                    c4:a6:4d:e4:4a:fb:3d:35:d6:fe:10:46:85:21:a8:
                    3c:4b:aa:99:36:62:f6:38:83:89:a1:45:97:3b:65:
                    50:4b:5c:e0:6a:c2:17:3b:db:a7:42:9c:31:90:e7:
                    0a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:31:32:26:3E:95:17:2F:9C:F5:46:33:3E:5B:34:C9:20:5B:E2:A6
            X509v3 Authority Key Identifier:
                keyid:6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:f3:65:0e:fb:d9:77:56:e1:0d:61:07:b7:fa:84:94:fa:6b:
         65:4b:bf:09:1d:84:56:90:2a:f0:cf:96:bf:de:3e:35:c3:dc:
         c4:9d:e5:e5:be:e3:6a:d0:b1:d3:c9:41:cd:8f:55:45:46:1b:
         4a:e5:78:2b:f2:7d:a5:85:7b:13:18:d3:4b:08:41:15:48:33:
         a2:97:57:49:8b:88:7e:52:01:00:c2:7a:43:a1:d4:fd:4d:83:
         9b:e2:26:d5:ff:e4:ac:f9:ce:9d:4a:35:28:a1:46:a4:c6:1b:
         66:ef:ac:47:a8:f3:2a:0f:5d:11:85:e0:57:41:8f:dd:b2:f4:
         d4:a4:da:25:75:c2:3a:b3:5b:ec:41:e9:3f:66:23:56:27:0d:
         fc:90:a2:9f:44:4e:22:d1:f2:f0:a0:f4:61:3e:8c:0d:7f:bf:
         ef:b1:e1:90:cb:9a:03:dd:34:06:f8:95:33:62:e8:6c:19:7c:
         51:c3:0f:91:f4:a1:61:81:7d:dc:e8:76:27:30:79:dd:a8:05:
         a7:23:90:b7:3f:47:b0:39:c8:c2:2e:19:a5:4c:fb:5f:da:51:
         b8:17:9f:4c:a2:34:ac:8a:96:73:15:75:9d:2d:a8:a0:ea:45:
         e8:fd:62:7d:a8:ae:ce:30:62:6f:9b:91:3c:84:73:a2:d8:1a:
         18:43:c1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:40 2026 by rpki-client