Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
File:                     E_6bzrriKLNsiDwn6lUY5wTBCZE.mft (raw, json)
Hash identifier:          Bg6DzWgnFXypLBZpO+2GmjNrTLkMcEP1kHMc2jJce6A=
Subject key identifier:   2E:DE:4B:FA:D3:0E:CD:79:96:30:D6:71:91:39:D4:0C:72:10:0B:3C
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Certificate issuer:       /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial:       019D9C2D1FBBFCB922C3701FBD8E23261594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
Manifest number:          0CCE
Signing time:             Fri 17 Apr 2026 16:01:36 +0000
Manifest this update:     Fri 17 Apr 2026 16:01:36 +0000
Manifest next update:     Sat 18 Apr 2026 16:01:36 +0000
Files and hashes:         1: 3DD7IN1RUhoFtGejl5QLGTUPcbE.roa (hash: 9QU9RS48p4Gk8eFQ8qLmQJqFrlkSGfDL9zyv/+59Y7I=)
                          2: CCDVDQ2Oruym1KjDDrngcHA3Mew.roa (hash: chiL5mGQkOXPpO7ivyw1/1nTMgncbyhd+zfPcNA0gXQ=)
                          3: E_6bzrriKLNsiDwn6lUY5wTBCZE.crl (hash: ZYzkjX9px+JFAJbcT7toJFxu7JR5pqSyfDSkB1ei+Zk=)
                          4: QI46eicieX49OrM0OPKuHdePV44.roa (hash: WEPMgLFqdCTHxuIP+JQV+EA0WeN2b1pXmwAA9gvatUY=)
                          5: TMIETZCkfwkv20GhYgXVDmLAdSE.roa (hash: rj6hnXGmK4tKBpRVA2yKPqqLtv9PZV5O4KXBEttP6pM=)
                          6: mjsGoAp4e_kLXrUHiayaH4M0-CA.roa (hash: 6IO5CYtAunsKToiFXX8O2RjnhdZWB3faGoUCU5YD+Ow=)
                          7: n2nCI-ptzMTQlle8XBsEF_kBMlc.roa (hash: R677cLGAhKw+n+X1YDl+AhJzznYJjl/tMQGRlN03THg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2d:1f:bb:fc:b9:22:c3:70:1f:bd:8e:23:26:15:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
        Validity
            Not Before: Apr 17 16:01:36 2026 GMT
            Not After : Apr 18 16:01:36 2026 GMT
        Subject: CN=2ede4bfad30ecd799630d6719139d40c72100b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:11:a3:82:f2:aa:21:f0:1d:66:30:3b:2e:
                    82:ca:1b:50:11:8a:85:8c:f2:f1:86:72:86:62:6b:
                    47:81:7d:88:f6:20:f6:4f:80:72:7c:fe:fc:a6:7e:
                    17:00:9b:9c:b3:85:02:5b:a2:df:54:c5:f1:af:d9:
                    f5:b1:ea:24:28:69:1f:a1:23:65:b9:d9:08:39:98:
                    e4:22:de:c6:9b:4a:b8:4c:e4:29:70:c3:7f:c4:38:
                    c9:5b:c5:d3:95:f8:d8:87:3d:f5:2b:ff:e5:43:6f:
                    ab:0d:74:9b:24:fb:06:fc:af:17:98:a6:43:d7:df:
                    22:19:70:b4:2c:f5:de:d1:45:6f:93:64:9c:1e:65:
                    d4:55:f1:5a:31:7e:49:b1:96:6e:08:71:ab:a9:69:
                    0a:51:be:16:ef:f0:fc:8a:12:81:a4:1a:9e:2d:53:
                    54:5a:0c:2c:85:41:11:f1:02:f7:ea:73:de:52:c5:
                    b5:cb:5b:a7:21:ad:9d:53:16:b6:7a:02:d8:d9:3e:
                    91:84:14:1e:94:29:76:57:66:5d:74:ae:a3:cf:98:
                    02:74:3f:d2:44:9f:ac:2e:e6:2c:38:fc:dc:7b:f7:
                    b6:29:0e:15:e8:04:0e:24:e3:3e:84:1c:ef:dc:d4:
                    d8:96:bd:dd:41:29:a3:12:dc:f0:3c:a2:cc:ca:eb:
                    d2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DE:4B:FA:D3:0E:CD:79:96:30:D6:71:91:39:D4:0C:72:10:0B:3C
            X509v3 Authority Key Identifier:
                keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:10:f1:ca:af:7c:08:6f:4b:cd:4f:9f:04:60:c9:2f:ac:23:
         a1:46:fd:19:04:b0:70:3a:98:23:bf:6e:6b:a8:62:e7:b7:28:
         b6:ea:9f:50:55:68:fe:93:a3:55:9a:08:ef:64:5c:4c:39:42:
         61:03:9f:9a:0f:41:ed:5f:72:24:29:76:16:01:29:7e:32:a0:
         73:af:dd:73:5b:79:0e:64:6b:8a:e6:ce:37:5b:aa:2e:2e:67:
         fa:ab:a8:eb:0c:d7:01:be:78:e6:d8:47:f9:d0:69:30:aa:2e:
         49:65:1e:61:2d:29:a6:5f:c7:38:5f:2f:b9:4d:b6:64:09:52:
         8e:ec:08:6c:61:d1:ff:19:82:8b:59:59:6a:4a:50:35:89:c1:
         25:d4:45:74:90:00:c0:7a:8f:41:3e:72:58:8e:96:88:62:bb:
         97:bb:45:bb:8f:13:0c:00:74:0d:c8:51:36:d3:a5:bb:1a:27:
         53:62:7b:63:fd:00:b0:45:3f:25:23:d4:9d:33:69:82:fb:97:
         e1:76:fb:17:d8:67:83:96:5f:16:32:1c:82:2f:53:e4:bb:5d:
         67:d5:8d:89:5b:b7:a3:06:dd:1c:f8:1a:e4:cd:c2:19:27:e1:
         99:6d:3d:0d:dd:45:52:60:b1:22:69:66:25:9f:29:5e:39:47:
         bc:33:1b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:50:45 2026 by rpki-client