Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
File:                     l6A46SAR7iaAaKFRfSRM4iwmVU0.mft (raw, json)
Hash identifier:          HxFsulyrVf7ZmDow6Tt08EJ0JJK8H9IjtMUym8HbZ1I=
Subject key identifier:   35:DB:4A:A6:28:5A:1D:69:57:78:FE:6C:14:DC:CB:E2:D9:C8:2F:DA
Authority key identifier: 97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D
Certificate issuer:       /CN=97a038e92011ee268068a1517d244ce22c26554d
Certificate serial:       019D999913B6E31226F3F64580390F086B13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
Manifest number:          0C2C
Signing time:             Fri 17 Apr 2026 04:00:39 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:39 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:39 +0000
Files and hashes:         1: l6A46SAR7iaAaKFRfSRM4iwmVU0.crl (hash: eoZSEwn698qP23g3QJdfAg9ttElxTFMFM9K7Ou/3564=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:13:b6:e3:12:26:f3:f6:45:80:39:0f:08:6b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97a038e92011ee268068a1517d244ce22c26554d
        Validity
            Not Before: Apr 17 04:00:39 2026 GMT
            Not After : Apr 18 04:00:39 2026 GMT
        Subject: CN=35db4aa6285a1d695778fe6c14dccbe2d9c82fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:33:01:57:42:c5:ba:f6:06:5c:87:b3:d6:80:
                    35:4b:22:3f:54:b6:3a:81:68:0f:5c:28:0a:a0:ac:
                    c8:61:da:7b:04:e5:27:4f:6a:c6:32:37:41:d9:30:
                    29:e7:d9:e5:9f:19:d9:e9:0f:c7:2b:3a:5b:55:c1:
                    c7:84:f3:14:0c:b5:9c:b4:87:8d:ec:09:39:c7:59:
                    74:d3:15:e9:e2:68:99:05:39:3f:de:a7:0c:03:d7:
                    18:d1:d1:c4:3e:6a:86:84:af:fb:17:63:8f:50:a2:
                    ba:59:a9:a7:25:ab:09:d4:b7:f3:a7:48:82:5e:39:
                    b0:61:13:47:50:d3:68:12:42:5a:6d:d1:00:d7:e1:
                    a2:92:53:e3:82:a9:13:70:b6:6f:cf:c1:a1:b9:6d:
                    39:56:e8:28:f3:44:d2:7f:cd:2d:b3:be:63:01:8c:
                    8c:bf:b5:31:32:69:4e:db:d0:4a:6f:60:92:80:c4:
                    db:f9:de:2c:64:96:13:97:1d:17:bc:8c:c5:52:06:
                    f1:7d:4b:55:bd:2b:f3:59:3b:73:c2:c5:29:9d:0c:
                    ff:36:5c:6f:e2:cf:a9:b2:21:fa:bd:b6:f2:f0:65:
                    44:86:8e:1a:ea:6a:a6:64:e8:5a:45:dc:83:4c:89:
                    10:bb:35:94:90:c5:8f:29:ce:25:c8:8c:a4:c7:5b:
                    0d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:DB:4A:A6:28:5A:1D:69:57:78:FE:6C:14:DC:CB:E2:D9:C8:2F:DA
            X509v3 Authority Key Identifier:
                keyid:97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:06:47:ce:e3:10:0e:74:82:36:59:10:d1:d7:f4:64:49:3c:
         0e:a9:16:90:0f:12:b1:fb:46:97:ec:e8:1a:44:87:57:3e:14:
         c6:fb:b8:97:98:31:bd:dd:8f:7f:13:cc:67:13:94:24:38:73:
         f6:f8:0c:74:41:18:59:a4:c6:be:61:23:0c:75:c1:60:0a:07:
         17:f9:1e:c5:17:de:6a:35:84:a5:f3:bd:a6:25:ce:7d:06:6e:
         ab:16:2a:f9:68:3e:ff:40:4d:e0:2c:7b:67:77:c1:f2:b3:a1:
         83:89:9d:07:14:c3:51:6a:95:1d:36:f9:76:d2:15:cb:47:87:
         23:f1:74:f8:22:a5:4f:81:c5:d3:33:16:04:e8:83:a2:72:94:
         f5:fd:7b:60:61:81:8c:93:d2:13:b0:37:fe:36:7c:aa:a0:ae:
         df:b3:93:8f:e3:cd:e8:ee:1d:96:97:9a:d9:4b:2f:13:b8:d3:
         55:de:04:35:15:5a:dd:37:83:e0:31:cc:fd:38:54:c8:9d:34:
         a7:4e:f1:70:cd:9e:5a:a5:75:31:12:b9:64:db:66:83:84:95:
         07:35:10:90:d0:2f:8d:87:01:62:4a:47:04:2a:4f:e4:a6:ea:
         8a:c8:f8:f4:5d:f1:40:5f:66:28:78:49:63:c8:36:26:ac:37:
         fc:0c:f0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----