Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
File:                     6xU9o8JM4SNuIMRoYWNdyO-1apI.mft (raw, json)
Hash identifier:          KRErMP4ZvGMUUImwcCrhLHCp/AWgdr5yyWWa8NJA4eM=
Subject key identifier:   8A:39:B5:C1:2D:28:F8:40:CD:E2:F7:D8:0A:D7:78:F2:DE:1C:A7:93
Authority key identifier: EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92
Certificate issuer:       /CN=eb153da3c24ce1236e20c46861635dc8efb56a92
Certificate serial:       019DA48B387A6E82CD58B56CB0F868BE7AA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
Manifest number:          0FAE
Signing time:             Sun 19 Apr 2026 07:01:20 +0000
Manifest this update:     Sun 19 Apr 2026 07:01:20 +0000
Manifest next update:     Mon 20 Apr 2026 07:01:20 +0000
Files and hashes:         1: 6xU9o8JM4SNuIMRoYWNdyO-1apI.crl (hash: 8x0vOh617+nTin3dTBQycIBblY+PUt9iWfcihVFGV84=)
                          2: BHtYTKXAhvuK5qQH2dMZrKgOMHg.roa (hash: x0aDgSbM0k6Qn4DXz0HQEQO8d3rc25aCpgfGk0kEatY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:8b:38:7a:6e:82:cd:58:b5:6c:b0:f8:68:be:7a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb153da3c24ce1236e20c46861635dc8efb56a92
        Validity
            Not Before: Apr 19 07:01:20 2026 GMT
            Not After : Apr 20 07:01:20 2026 GMT
        Subject: CN=8a39b5c12d28f840cde2f7d80ad778f2de1ca793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:de:e7:38:e3:d5:aa:fe:1d:7b:bf:d4:91:f4:
                    2b:4f:2d:50:08:56:5a:d8:73:79:96:53:ab:aa:1f:
                    42:15:ef:d2:87:09:1a:55:83:52:c5:36:32:e8:83:
                    71:36:ce:d6:a3:ee:ed:af:57:3c:41:05:a1:73:37:
                    bf:fb:c9:ff:c5:4c:cd:91:ae:3b:60:dd:4c:c2:23:
                    98:4d:c9:10:15:ff:bb:d6:a8:6f:73:18:82:9f:7b:
                    d6:0f:12:71:e1:d9:fa:89:4a:29:6e:27:6b:47:69:
                    a4:54:3d:2e:6b:87:a7:e9:53:d2:a5:6a:03:02:1e:
                    02:bb:0d:17:7b:5f:cf:17:52:db:5c:62:53:07:96:
                    78:56:be:31:d9:eb:2f:6e:a7:59:3b:2e:b4:26:10:
                    3d:4c:eb:51:2f:b5:0f:49:dc:6c:a1:08:07:20:0e:
                    a9:61:8c:81:0e:a0:95:81:d5:4e:74:92:1c:a1:4b:
                    7e:82:16:ce:f9:5f:22:0c:4f:cc:14:20:b2:70:b5:
                    88:b7:99:bb:36:a2:5f:ab:dc:e7:15:6b:51:ba:c9:
                    ff:9c:22:25:2d:24:99:1f:47:20:56:fa:92:d6:d1:
                    c7:77:c1:4e:08:bf:c9:e6:dd:e2:e5:3f:70:31:c6:
                    86:08:b6:9f:f0:a5:0f:94:e4:9d:4c:31:22:c3:89:
                    1a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:39:B5:C1:2D:28:F8:40:CD:E2:F7:D8:0A:D7:78:F2:DE:1C:A7:93
            X509v3 Authority Key Identifier:
                keyid:EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:50:95:1a:25:4a:ed:e8:6d:7a:7c:8e:71:b2:2d:ff:93:3a:
         84:bc:33:e8:e5:b0:d8:dc:ae:32:05:8d:7f:23:3e:1e:df:6d:
         e1:5c:55:ad:7f:6c:f3:a0:72:04:3a:79:0a:c3:73:b8:c1:8d:
         a1:0e:4c:a8:46:c9:95:3a:20:28:80:0c:c5:3b:b1:ed:79:d3:
         f6:42:3b:27:b5:c6:e9:2d:de:51:38:b4:b7:89:15:a3:b7:40:
         8b:28:67:c9:1a:1f:b9:ae:b0:d6:30:4d:3e:d2:aa:45:31:e6:
         d1:0b:2e:92:da:7c:16:3a:9e:12:c2:8d:94:d2:08:56:64:0e:
         86:be:08:5c:67:c1:34:52:4d:f4:f2:61:6c:44:9e:a3:ec:79:
         f1:80:03:2f:d7:e4:aa:76:e7:ba:d5:5b:c2:67:bc:c9:73:44:
         a5:31:d0:06:59:90:c1:9e:39:b4:5a:03:21:c4:a5:2e:e1:af:
         7b:21:b3:83:85:8b:5d:40:86:cb:88:6b:ed:85:af:fb:d7:3b:
         05:29:4e:75:ec:7f:df:34:85:c3:6e:bf:cc:c7:5d:4e:fb:73:
         ee:cf:37:29:af:12:dc:8d:12:b0:92:82:d4:7f:7c:3b:3a:b8:
         b1:68:12:85:b3:11:22:1a:ac:b2:05:af:f0:fe:d4:bd:51:44:
         4d:40:af:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:16:13 2026 by rpki-client