Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.mft
File:                     6uJlMXnK_l_2ZRxgWLZ60tLISF4.mft (raw, json)
Hash identifier:          rbjHGp5LLVd97X5C3MRSXuOmcmjywPNk7k2u4UZIVCU=
Subject key identifier:   CE:59:0B:63:C2:85:A6:2D:63:2E:8E:59:CC:9F:2D:C2:84:11:62:53
Authority key identifier: EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
Certificate issuer:       /CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Certificate serial:       019D98F484F56BA1D2B4FCE1DC98548F0831
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.mft
Manifest number:          0C4C
Signing time:             Fri 17 Apr 2026 01:00:54 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:54 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:54 +0000
Files and hashes:         1: 3o1ZI6fxFoLS5eOhvdLrRlLz1tI.roa (hash: AgXfeLflwUyXHokNoe/oSAYdRjH74BmGTMx6XDivjKU=)
                          2: 6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl (hash: 1fXihXDqZQkZLN9E4EM9OKUMCc8BgsN/y2oGDunGi8A=)
                          3: 8TgZ1ezQTau0zguN7Ddhap1UtEM.roa (hash: vUGsoKyYaDO9yJpgoC4HYrCuKAT3mZ2cyxJ8r1fHfwQ=)
                          4: BmS_AQaxlhglywSE02RG2_rJiGY.roa (hash: tmqsvLGMWmGAehHm7bUNUAhfsU0S4H4ASFv4gNLmWaQ=)
                          5: Lx0K9lLnIS2XRE8KOCHplr3trIc.roa (hash: XcwrjUKLZLtCJShyhuwTmWJBM6qO1mrooCODnVbzvqg=)
                          6: t2mhnvuwx5-K-_bpa98aJwcKye0.roa (hash: d96WB+iB3jaPNFhGJaRDrsl5y/SFIzPBjsPOgBRfiDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:84:f5:6b:a1:d2:b4:fc:e1:dc:98:54:8f:08:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
        Validity
            Not Before: Apr 17 01:00:54 2026 GMT
            Not After : Apr 18 01:00:54 2026 GMT
        Subject: CN=ce590b63c285a62d632e8e59cc9f2dc284116253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ae:e9:9b:e2:ac:1d:1f:39:e1:49:21:ac:fc:
                    ed:87:91:e6:e6:fa:7a:5f:a2:0e:d8:61:a3:2a:ae:
                    5d:ea:d5:b8:5c:a8:50:58:7f:00:71:cd:5b:34:e9:
                    df:a1:8f:20:4d:82:5d:b0:ca:90:9d:af:17:3f:b5:
                    d2:ac:62:a4:b5:17:8c:1b:22:d3:ee:0b:76:52:35:
                    d8:c4:7a:76:a9:45:8f:7f:01:b4:53:5c:bc:98:14:
                    02:ff:b7:a0:e8:f9:a6:b9:75:e9:63:3c:01:dd:eb:
                    6a:b3:b4:97:16:a8:e8:9e:65:e6:4e:ba:6b:2e:b6:
                    d5:45:17:d7:49:24:28:f4:f1:fb:76:38:8d:03:bd:
                    0c:71:2c:ee:4a:77:84:c9:e6:0e:2a:0e:fe:e3:09:
                    53:98:2e:d0:e1:23:cc:68:a3:5d:30:35:d0:b1:25:
                    5c:49:2b:5c:26:b7:75:22:7a:e1:3f:09:fe:ec:17:
                    0f:a0:6b:c3:01:b6:ca:16:70:10:0c:71:ed:b3:1b:
                    f8:cf:a2:4e:3a:d6:0c:5a:a3:72:53:0a:e5:e3:c3:
                    54:cc:67:e4:1c:66:92:ea:1e:cb:a3:ba:24:ba:df:
                    ee:ab:2e:70:84:5d:b4:42:d8:c5:da:75:c1:10:d8:
                    dd:bd:42:80:a6:fd:2f:a1:98:3c:6c:e6:25:06:c2:
                    be:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:59:0B:63:C2:85:A6:2D:63:2E:8E:59:CC:9F:2D:C2:84:11:62:53
            X509v3 Authority Key Identifier:
                keyid:EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:6f:90:8a:c9:3c:6b:5a:58:73:aa:c9:1d:a6:3b:43:7a:ea:
         1d:92:e9:16:e6:63:6a:a0:0f:a3:2f:96:ca:34:c1:ce:e7:11:
         97:8c:dd:3f:9f:bc:1a:ce:e0:ff:a0:a1:dd:f6:cd:90:d1:f3:
         a8:a8:a7:9b:78:51:7c:bd:97:07:4c:28:0b:7f:e2:a2:d5:23:
         46:09:8e:b9:ac:9c:c7:42:f3:87:58:17:20:81:29:f1:ee:a3:
         89:a7:dd:24:dd:f6:bd:18:88:a4:57:49:6d:09:7e:f2:35:94:
         be:96:08:b7:98:fa:19:c7:a1:d6:3b:33:ec:5b:92:9e:a2:9a:
         94:b0:2c:b8:83:fb:1a:a4:bc:c6:42:80:a0:43:01:4c:b4:f1:
         a5:e3:f8:22:c4:d9:aa:28:a0:4e:7e:4c:39:f1:e3:45:6a:2b:
         1c:74:34:ef:2a:98:6f:d7:06:52:b6:15:b2:26:ae:d7:7f:8b:
         9d:28:f6:0c:83:cc:8f:73:2f:82:49:2b:93:18:2a:88:6a:e4:
         69:c6:60:ef:a6:a9:1d:c4:51:ca:6e:fc:a9:70:e5:f1:ff:43:
         5d:4e:d1:ab:da:c4:9c:b2:5c:0d:19:2e:b3:3a:55:19:50:80:
         c0:fe:d8:3f:83:3d:30:0e:05:72:8f:43:f0:7d:19:a7:8e:59:
         d7:7a:a2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:00 2026 by rpki-client