Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
File:                     6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft (raw, json)
Hash identifier:          tBik+piNkOu1oN5k2cxXvLUG19j66K2feNA2GsbXpW0=
Subject key identifier:   FB:30:9E:06:CD:35:35:2F:3D:CC:9C:98:DF:36:E2:F4:71:36:27:5A
Authority key identifier: E9:6B:91:2B:4A:5A:0C:77:03:B5:CA:58:B1:86:74:1E:0D:53:35:B4
Certificate issuer:       /CN=e96b912b4a5a0c7703b5ca58b186741e0d5335b4
Certificate serial:       019D9A74DB45F94730511016DC194CBE1076
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
Manifest number:          12BA
Signing time:             Fri 17 Apr 2026 08:00:42 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:42 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:42 +0000
Files and hashes:         1: 6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl (hash: K7Pgkic5ubF3yjT9DzhNuFMVJ3bp6yuFFbfNdiIW8PY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:db:45:f9:47:30:51:10:16:dc:19:4c:be:10:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b912b4a5a0c7703b5ca58b186741e0d5335b4
        Validity
            Not Before: Apr 17 08:00:42 2026 GMT
            Not After : Apr 18 08:00:42 2026 GMT
        Subject: CN=fb309e06cd35352f3dcc9c98df36e2f47136275a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:89:69:f4:85:dd:25:f3:f2:01:73:1f:bc:fa:
                    b1:92:13:14:65:c0:1f:74:3d:0e:27:c2:29:4d:9f:
                    68:b4:10:a6:19:91:1f:11:17:d0:aa:5d:3d:41:92:
                    63:d6:01:9b:41:d8:ba:65:db:ac:92:4a:5d:5b:b1:
                    85:ac:53:4e:28:9d:4d:62:8d:d6:1d:36:c2:a6:33:
                    64:c1:6f:00:73:61:0e:24:6d:30:df:82:81:87:0e:
                    fd:0e:54:3e:63:9c:d1:6a:03:be:b5:fb:f3:f2:e1:
                    cf:7d:10:74:a3:ce:41:a9:61:6d:a9:7c:03:45:23:
                    73:1c:b9:04:71:47:2a:1a:07:33:a9:72:50:69:01:
                    a1:06:58:fb:8e:63:5d:01:51:b7:1f:36:da:d3:31:
                    c9:4a:9b:5d:0a:dc:8e:cd:b9:2b:1d:b9:e7:e9:be:
                    6a:1e:2d:96:7b:e0:6c:3c:5a:4a:bb:8c:d5:79:27:
                    88:50:19:5b:35:fb:fc:8d:04:aa:31:4f:28:da:cb:
                    99:e8:ed:3e:6e:03:c4:2d:73:99:0e:f1:a6:42:e5:
                    8e:26:a1:63:1a:12:59:29:3e:d1:c1:53:37:29:69:
                    86:5c:9c:c7:26:ff:79:75:a3:b2:df:75:df:f5:7b:
                    26:27:50:cc:e2:2d:1e:99:81:de:d0:fc:4f:44:99:
                    6f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:30:9E:06:CD:35:35:2F:3D:CC:9C:98:DF:36:E2:F4:71:36:27:5A
            X509v3 Authority Key Identifier:
                keyid:E9:6B:91:2B:4A:5A:0C:77:03:B5:CA:58:B1:86:74:1E:0D:53:35:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:5a:54:06:8a:43:42:15:dc:57:d0:27:81:26:50:4b:cc:01:
         02:c8:8a:48:d7:2d:0b:14:55:20:7d:d2:b6:ba:d2:c9:10:ac:
         2a:af:c7:1a:66:d2:40:9d:35:1f:28:7f:3c:60:38:53:08:82:
         15:5c:bf:32:b3:dc:86:12:9b:1c:e8:e1:80:77:7a:77:a5:bb:
         21:de:a0:4a:00:d0:52:d2:57:8b:4e:9a:4b:16:a4:6a:42:43:
         71:ae:67:3c:f5:c9:53:a9:e7:5c:8f:6a:b3:c8:9d:a9:6e:b3:
         64:05:07:8d:c5:56:64:c2:e2:f8:a5:dd:bc:0a:f3:e3:b5:53:
         5e:b9:c0:c7:43:dd:5a:20:da:c7:e1:61:75:e1:06:ff:86:61:
         46:cf:4e:da:13:1d:d5:d2:98:6b:f4:18:98:1e:81:95:09:a9:
         ff:4b:98:7b:46:46:c1:02:9f:e8:d5:d0:de:d3:09:8e:20:8d:
         e9:08:c7:b2:ad:26:07:ec:a7:a3:00:c1:c1:51:87:54:e6:ee:
         fe:2f:05:9c:3d:0c:96:74:eb:fd:68:d1:04:22:b7:f7:fe:fb:
         31:fb:3f:8d:34:2a:7a:a5:59:1c:3b:e2:ae:8c:c6:45:4f:83:
         84:a5:41:3b:da:ea:cd:79:65:27:56:5e:69:35:bc:0c:bc:91:
         7e:ab:11:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:52:24 2026 by rpki-client