Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
File:                     6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft (raw, json)
Hash identifier:          VqqiNJuZphMrXDBU95mFIlJ8KGrCNTP6cRjYwbL3Qgs=
Subject key identifier:   1E:AA:A5:DD:0A:C1:26:97:9A:C2:8B:A8:68:58:57:AF:76:55:E2:FF
Authority key identifier: E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00
Certificate issuer:       /CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00
Certificate serial:       019D98BD45ED9A37235A331003D7A8E48263
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
Manifest number:          0915
Signing time:             Fri 17 Apr 2026 00:00:33 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:33 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:33 +0000
Files and hashes:         1: 6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl (hash: lD6GAAK84dPOG7WEAQzGaY4qvx9q3qSYraMACPukHAc=)
                          2: sXWO_DWD7Ah_vMjGm35nvHivxBc.roa (hash: X3aJAsZQv/GuZjI5kdAfg34ET6Ft+aEdJbJSgzuBpEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 00:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:45:ed:9a:37:23:5a:33:10:03:d7:a8:e4:82:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00
        Validity
            Not Before: Apr 17 00:00:33 2026 GMT
            Not After : Apr 18 00:00:33 2026 GMT
        Subject: CN=1eaaa5dd0ac126979ac28ba8685857af7655e2ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3e:9e:31:b2:e3:5e:f4:a1:df:63:3e:9f:99:
                    f0:de:e3:7e:89:d8:8e:e1:6f:09:87:fb:eb:ba:2a:
                    29:18:83:8b:31:91:fe:19:2d:82:d2:7a:59:03:7b:
                    d6:51:c9:95:65:6d:95:10:ff:57:82:5d:1d:0a:da:
                    d0:d2:7b:da:f9:b7:72:93:3d:26:87:9e:94:f1:3f:
                    79:4d:24:9f:3e:5d:2f:dd:f8:90:49:69:71:92:76:
                    22:f3:dc:65:c3:f5:04:5e:33:69:46:2f:49:d4:38:
                    9c:a2:65:62:19:fb:31:6a:6a:42:4f:de:a7:e2:ee:
                    6f:73:60:c3:58:0a:0c:35:33:93:17:7f:f3:2f:5f:
                    93:e0:95:b1:25:24:82:c0:25:76:c5:e6:f7:27:d8:
                    70:93:87:ed:f1:87:46:f2:6e:aa:2b:52:80:5c:1b:
                    92:d6:38:ae:99:e3:8b:23:e9:79:46:3c:e6:0e:18:
                    20:7e:36:3a:1b:19:6c:dd:c8:38:1b:07:ec:09:0e:
                    49:7a:5a:37:35:50:20:67:3b:05:0b:2f:6d:76:54:
                    97:9e:c4:f6:45:c0:9a:73:38:bb:01:ca:64:27:f1:
                    79:6b:7d:b0:30:1b:74:4b:64:6c:e0:97:97:5c:03:
                    8e:13:0c:e8:49:12:c0:d9:61:63:d0:c2:f0:e3:06:
                    7d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AA:A5:DD:0A:C1:26:97:9A:C2:8B:A8:68:58:57:AF:76:55:E2:FF
            X509v3 Authority Key Identifier:
                keyid:E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:15:4a:0c:e0:8e:f5:c7:3e:04:c1:14:3c:c6:6e:84:46:74:
         b8:4d:78:b7:36:d6:9a:dd:46:3c:ec:ed:83:8f:7d:0f:3d:d5:
         bf:cd:1e:36:8b:09:dc:00:23:0e:e2:54:76:9c:90:a6:b9:b8:
         09:01:34:6f:6e:d1:38:82:9d:14:d0:13:64:c0:71:96:ba:22:
         d1:db:4d:a2:8e:58:54:87:9d:b1:bd:b6:6e:d0:0f:7d:f9:9a:
         46:53:90:50:99:3c:de:f5:14:5b:54:56:aa:48:ff:48:a9:77:
         f7:f5:4a:ad:08:80:dd:f8:7a:f7:5f:af:ec:0f:65:17:fc:97:
         1d:84:eb:81:3e:31:92:9f:cc:fe:c3:24:5f:2f:34:1c:42:c6:
         49:2a:01:01:1c:7d:71:10:59:cc:24:3e:c6:35:09:a9:f4:ca:
         37:16:56:88:57:da:b2:fa:92:df:1b:c6:25:f5:5c:4e:4b:c2:
         e2:5d:8e:b6:d2:37:0d:46:35:ed:49:9d:2a:d3:ef:d8:33:1b:
         c8:1e:b9:db:11:c3:12:fe:d4:90:00:e5:a9:51:64:94:30:7d:
         a2:0d:d0:d2:59:7e:f5:03:f3:50:3d:15:15:c8:28:04:aa:0e:
         51:2a:4f:24:a2:b0:47:50:2a:25:9e:5c:29:82:79:48:b7:88:
         6d:25:ee:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:07 2026 by rpki-client