Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
File:                     6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft (raw, json)
Hash identifier:          2fMd94CTv97+MgT1EoS7Gg+KUXQjtdkGZo3vf1RKBD8=
Subject key identifier:   78:D2:A3:CC:30:C1:0D:7F:F0:24:4F:7C:F2:3E:2C:EC:89:15:B0:A5
Authority key identifier: E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8
Certificate issuer:       /CN=e8d878aa53081893ba528524ef143ea9271392b8
Certificate serial:       019DA3AF1BC859D503ACED10940C0DDCFB4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
Manifest number:          18C6
Signing time:             Sun 19 Apr 2026 03:00:55 +0000
Manifest this update:     Sun 19 Apr 2026 03:00:55 +0000
Manifest next update:     Mon 20 Apr 2026 03:00:55 +0000
Files and hashes:         1: 6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl (hash: rdK35LUQ9ew9UP9f8jOG/6zaFWIiPepPDYElDHqb1os=)
                          2: kyiZYLBaKIrj5tT8RkwqZracJC8.roa (hash: vKqajVq23PYVXFkY+10uAWZKmF5NFtLP9M4UhXMBcyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:af:1b:c8:59:d5:03:ac:ed:10:94:0c:0d:dc:fb:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8d878aa53081893ba528524ef143ea9271392b8
        Validity
            Not Before: Apr 19 03:00:55 2026 GMT
            Not After : Apr 20 03:00:55 2026 GMT
        Subject: CN=78d2a3cc30c10d7ff0244f7cf23e2cec8915b0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:da:58:b9:50:cd:8b:b0:73:2b:43:72:7b:8d:
                    1f:ed:33:fa:16:b2:b0:4a:c1:ac:34:b6:82:99:29:
                    eb:14:cd:88:50:95:a4:ab:84:60:86:f5:b7:a0:f5:
                    2a:1b:2c:7f:5b:0e:96:95:fa:60:2f:1e:f5:f9:84:
                    8a:e2:0f:2b:fd:ca:dc:d4:f4:e4:c6:02:7c:02:d9:
                    8e:07:d2:d9:3a:70:42:b3:9d:71:df:c8:9f:46:69:
                    13:63:2e:df:e7:92:a5:c8:38:be:02:87:b5:44:b6:
                    53:16:e3:9c:bb:1f:81:69:b5:5c:09:f3:f7:7b:48:
                    0e:03:89:a2:aa:81:40:3d:f0:a5:5c:7c:27:b1:2c:
                    fc:07:00:ad:22:6d:40:47:d2:f6:fa:89:19:41:b8:
                    83:22:33:ce:bf:48:38:70:42:c2:c7:03:70:94:f9:
                    c9:e2:1f:cc:b2:7b:64:95:9e:2d:65:08:b1:64:ea:
                    46:82:0e:68:5f:4d:ac:63:61:b6:45:af:e7:4e:58:
                    0d:33:2e:36:16:55:42:13:92:e9:c4:3e:ff:53:6b:
                    ec:ea:87:53:f4:64:9a:57:01:8b:f5:1b:2f:7c:a3:
                    77:6a:16:d0:ef:8d:e2:50:78:c8:6b:39:93:e4:15:
                    a9:fe:6c:8c:33:52:e8:88:45:57:d8:a3:a4:57:c5:
                    8e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D2:A3:CC:30:C1:0D:7F:F0:24:4F:7C:F2:3E:2C:EC:89:15:B0:A5
            X509v3 Authority Key Identifier:
                keyid:E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:9c:c4:72:68:bf:9c:db:f9:78:86:1b:24:64:2f:f1:cd:85:
         d0:15:01:bb:49:29:78:62:e6:ce:1c:a7:60:7b:08:f5:3f:e1:
         4f:48:22:f8:fb:0d:bc:d8:e6:26:ee:dd:4c:6e:a1:6f:33:c1:
         d5:6d:bc:a7:50:bb:1d:a1:a7:a6:42:bd:46:69:6f:81:4f:28:
         84:4d:4f:15:e8:5f:e8:71:de:67:8f:10:7a:aa:d9:32:d3:82:
         79:8b:f2:d8:c4:bb:41:c6:98:f7:9c:42:c9:39:a4:83:37:51:
         37:ac:bb:e0:f1:47:da:04:93:ca:f4:b5:d8:32:63:ae:c9:69:
         bd:41:52:de:74:4e:c0:6b:29:26:37:3a:63:cf:ce:12:6a:c5:
         82:6a:e7:d5:f5:57:44:a9:eb:03:2b:92:99:ac:94:86:f9:f5:
         15:6b:4b:48:b0:9b:3f:46:bd:80:f9:d0:c9:92:9e:16:1d:2a:
         85:a8:a0:96:79:a6:fb:ac:93:73:2b:56:ac:1a:e1:7c:b4:24:
         17:3e:bb:fe:34:14:4f:62:1f:5f:88:d7:54:ca:72:08:4b:d1:
         49:7d:63:06:3c:0d:2c:16:0b:c7:8e:73:2d:77:fb:4f:f6:da:
         06:99:e7:a2:16:a2:00:2f:0c:4b:93:ca:6c:03:14:f7:5d:97:
         b7:51:91:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jrxvIWdUDrO0QlAwN3PtOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZDg3OGFhNTMwODE4OTNiYTUyODUyNGVmMTQzZWE5Mjcx
MzkyYjgwHhcNMjYwNDE5MDMwMDU1WhcNMjYwNDIwMDMwMDU1WjAzMTEwLwYDVQQD
Eyg3OGQyYTNjYzMwYzEwZDdmZjAyNDRmN2NmMjNlMmNlYzg5MTViMGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytpYuVDNi7BzK0Nye40f7TP6FrKw
SsGsNLaCmSnrFM2IUJWkq4RghvW3oPUqGyx/Ww6WlfpgLx71+YSK4g8r/crc1PTk
xgJ8AtmOB9LZOnBCs51x38ifRmkTYy7f55KlyDi+Aoe1RLZTFuOcux+BabVcCfP3
e0gOA4miqoFAPfClXHwnsSz8BwCtIm1AR9L2+okZQbiDIjPOv0g4cELCxwNwlPnJ
4h/MsntklZ4tZQixZOpGgg5oX02sY2G2Ra/nTlgNMy42FlVCE5LpxD7/U2vs6odT
9GSaVwGL9RsvfKN3ahbQ743iUHjIazmT5BWp/myMM1LoiEVX2KOkV8WOwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjSo8wwwQ1/8CRPfPI+LOyJFbClMB8GA1UdIwQY
MBaAFOjYeKpTCBiTulKFJO8UPqknE5K4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk5oNHFsTUlHSk82VW9Vazd4US1xU2NUa3JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9hZDY0YmItZDUzOS00YThlLWIwZTYt
NWY4OWI4ODVmNzI5LzEvNk5oNHFsTUlHSk82VW9Vazd4US1xU2NUa3JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9hZDY0YmItZDUzOS00YThlLWIwZTYtNWY4OWI4ODVmNzI5
LzEvNk5oNHFsTUlHSk82VW9Vazd4US1xU2NUa3JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJzEcmi/
nNv5eIYbJGQv8c2F0BUBu0kpeGLmzhynYHsI9T/hT0gi+PsNvNjmJu7dTG6hbzPB
1W28p1C7HaGnpkK9RmlvgU8ohE1PFehf6HHeZ48QeqrZMtOCeYvy2MS7QcaY95xC
yTmkgzdRN6y74PFH2gSTyvS12DJjrslpvUFS3nROwGspJjc6Y8/OEmrFgmrn1fVX
RKnrAyuSmayUhvn1FWtLSLCbP0a9gPnQyZKeFh0qhaiglnmm+6yTcytWrBrhfLQk
Fz67/jQUT2IfX4jXVMpyCEvRSX1jBjwNLBYLx45zLXf7T/baBpnnohaiAC8MS5PK
bAMU912Xt1GRQw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:58:31 2026 by rpki-client