Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
File:                     r6R0pepgHICSke55uuORiWTQhx4.mft (raw, json)
Hash identifier:          dPITMiecpROIQiclRM2QbulgGLBtDMeMpUpSSbaTRAM=
Subject key identifier:   74:57:10:8E:8F:D2:5B:13:37:B5:8E:5C:C8:46:41:2D:9B:65:9F:B6
Authority key identifier: AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
Certificate issuer:       /CN=afa474a5ea601c809291ee79bae3918964d0871e
Certificate serial:       019D98BD91743DDD382BCF202086618933C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
Manifest number:          0F95
Signing time:             Fri 17 Apr 2026 00:00:53 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:53 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:53 +0000
Files and hashes:         1: 7ukmnwXeoaMfb3hII_Cm1bM9Juw.roa (hash: AUUlni3UcNfoUVifNt5f8cw2030rnuTziXI1bU77ERs=)
                          2: r6R0pepgHICSke55uuORiWTQhx4.crl (hash: CD5UF0zFZzjmcCPh3AuDgQSXDQgOynE1s94Q8oVVF/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:91:74:3d:dd:38:2b:cf:20:20:86:61:89:33:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afa474a5ea601c809291ee79bae3918964d0871e
        Validity
            Not Before: Apr 17 00:00:53 2026 GMT
            Not After : Apr 18 00:00:53 2026 GMT
        Subject: CN=7457108e8fd25b1337b58e5cc846412d9b659fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:81:4f:3d:02:ba:5f:91:d6:9a:69:a2:21:3b:
                    99:e8:7b:18:5b:39:eb:d5:78:ec:4d:b0:01:ea:ea:
                    e1:83:4f:19:ea:18:2a:a7:2b:0f:7e:0e:75:b2:1e:
                    cb:08:e4:61:a6:e9:91:32:e1:95:ba:01:78:d3:ef:
                    3d:10:35:e6:1f:69:7f:14:b8:d4:fd:27:3c:90:0f:
                    9f:60:56:a9:df:4c:fc:aa:9b:1d:07:bc:62:6a:62:
                    5c:92:34:5f:f0:48:38:06:84:ef:12:85:6d:64:bf:
                    13:a2:e0:fe:b5:1f:6f:de:51:4d:b6:8a:83:b9:7d:
                    5f:78:2b:1f:b4:7f:67:54:9d:ab:02:bf:66:a7:d0:
                    6f:de:ab:46:2b:e7:63:b3:dd:45:ea:10:55:8b:45:
                    00:7b:0a:62:b6:97:25:f9:dc:69:73:13:51:c5:3b:
                    0a:18:a8:df:d3:ef:32:30:2f:37:3b:26:29:72:3e:
                    68:bb:a9:7a:f2:0e:51:8b:88:88:d6:13:cd:87:b3:
                    41:e1:f6:ec:68:f9:e8:38:8a:e4:3e:db:b2:6f:5d:
                    38:e4:dd:97:e0:2e:86:f7:08:1a:76:41:0c:fb:9b:
                    fb:4f:e1:55:8d:e4:21:fe:13:e9:69:6f:00:22:d6:
                    1a:1f:85:f7:92:85:f7:eb:f8:c9:a5:34:09:3c:a4:
                    0f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:57:10:8E:8F:D2:5B:13:37:B5:8E:5C:C8:46:41:2D:9B:65:9F:B6
            X509v3 Authority Key Identifier:
                keyid:AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:6f:5b:d9:03:bb:8e:08:8a:87:01:42:ff:06:da:31:91:74:
         dc:85:e4:ab:a2:f8:2e:ff:73:5b:5a:58:09:70:62:7b:a1:89:
         c0:aa:6e:2f:25:14:c3:ad:34:cb:16:c2:3c:b5:84:ed:f3:7b:
         96:17:fb:e5:7f:de:12:19:46:1d:2c:91:69:4f:23:ed:21:1a:
         c2:b8:69:d7:57:1b:aa:d7:c7:5a:ac:68:1a:7c:64:71:8d:e1:
         1c:90:76:c5:f9:15:89:de:f7:17:01:12:e5:51:4c:b8:c2:76:
         52:8d:dc:45:a8:e0:d2:dd:b5:04:43:c8:a9:29:db:6f:78:ed:
         41:db:45:9f:1e:14:e8:d1:ef:64:e4:a1:19:81:ba:41:c1:33:
         2c:1b:be:43:52:34:ed:5c:85:32:8a:2c:8a:27:80:70:e1:62:
         7a:6f:64:af:4a:d8:01:c9:b9:eb:6b:9e:72:c0:0e:ff:77:03:
         f0:2e:bf:28:f7:88:13:eb:a0:71:6a:8f:35:36:88:50:ad:59:
         97:91:54:0f:b9:1d:43:3d:72:ae:c8:74:e3:7a:29:9a:10:23:
         b0:50:06:40:e2:80:bb:c6:4d:a4:f9:cc:e6:33:17:15:0d:c2:
         f9:cc:d8:08:06:04:39:51:4f:b9:e2:ec:64:80:03:7c:2a:95:
         f6:79:13:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:31 2026 by rpki-client