Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft
File:                     xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft (raw, json)
Hash identifier:          eSGcFAKetd0QEjYXeCtk8bs6Q2Q1NTXw8fIuOoSFeCs=
Subject key identifier:   BC:89:41:FA:BF:4E:20:96:1E:C3:FE:D7:2A:D1:B2:72:F2:F3:F1:8A
Authority key identifier: C6:C0:0C:55:3A:54:DA:05:B9:36:35:A6:54:CA:DA:03:C6:D9:DF:2B
Certificate issuer:       /CN=c6c00c553a54da05b93635a654cada03c6d9df2b
Certificate serial:       019D98BD1A07245C9D6FDA0F36C679A2F6C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xsAMVTpU2gW5NjWmVMraA8bZ3ys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft
Manifest number:          0993
Signing time:             Fri 17 Apr 2026 00:00:22 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:22 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:22 +0000
Files and hashes:         1: 5Vieq-wulwB6FaJx0xDN_dm4FF4.roa (hash: QYUnQtWcGZ16DHSfHYt9mKOqdeXlb5mTBtNDg7p01bA=)
                          2: xsAMVTpU2gW5NjWmVMraA8bZ3ys.crl (hash: DkGqp1dOizWEA3ZVAyr5ijiMG6vya7nA3iZPP9ec0VM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xsAMVTpU2gW5NjWmVMraA8bZ3ys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:1a:07:24:5c:9d:6f:da:0f:36:c6:79:a2:f6:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6c00c553a54da05b93635a654cada03c6d9df2b
        Validity
            Not Before: Apr 17 00:00:22 2026 GMT
            Not After : Apr 18 00:00:22 2026 GMT
        Subject: CN=bc8941fabf4e20961ec3fed72ad1b272f2f3f18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1e:eb:eb:bf:42:08:8d:14:b5:d8:3a:db:ae:
                    92:ce:57:59:8a:27:8b:64:ce:07:ee:09:e2:1f:d5:
                    f9:69:62:8b:c5:6a:16:9b:15:89:d4:5e:4e:32:51:
                    91:63:b4:d8:78:5b:58:60:19:28:f5:fc:39:cb:8f:
                    a6:85:1b:34:b1:d0:c4:a2:71:ef:25:25:0d:db:06:
                    6f:47:0b:a7:d4:87:57:8e:6a:6a:a8:af:ff:e4:1e:
                    05:ce:58:7f:21:3b:9e:d9:95:e3:f9:eb:9f:62:41:
                    b4:f2:77:c8:c4:b4:67:c0:57:f9:a9:ed:71:af:2e:
                    3a:bc:33:b7:93:f7:1f:43:fd:cc:16:0c:d8:7c:4f:
                    55:67:4e:aa:09:15:59:e2:77:e8:7d:71:0c:af:47:
                    aa:00:ed:b0:6d:51:0a:99:c5:bf:86:41:e5:de:5d:
                    12:fb:07:18:ee:5c:1b:d2:40:8a:9c:d8:62:47:8e:
                    71:a0:7a:a3:37:48:fa:5f:ca:ff:83:5c:1b:38:68:
                    59:aa:5b:8f:6d:91:f9:35:f7:07:0f:1c:dc:37:b2:
                    f0:f1:83:f8:95:1c:e8:9a:75:97:a1:29:09:19:ed:
                    1a:37:44:86:9a:1e:21:42:30:51:e4:ad:c2:bb:fd:
                    df:93:4c:35:d2:ae:63:4d:fb:73:18:41:2a:ae:0b:
                    d9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:89:41:FA:BF:4E:20:96:1E:C3:FE:D7:2A:D1:B2:72:F2:F3:F1:8A
            X509v3 Authority Key Identifier:
                keyid:C6:C0:0C:55:3A:54:DA:05:B9:36:35:A6:54:CA:DA:03:C6:D9:DF:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsAMVTpU2gW5NjWmVMraA8bZ3ys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a2:93:ff:01:ce:a8:ca:b4:25:6b:f0:22:7f:e9:51:4c:31:
         62:a9:fe:eb:27:e1:a0:9c:3c:e2:35:ee:24:24:03:4a:ae:ba:
         5c:b8:43:62:e8:f2:5b:a3:a8:e1:c4:54:be:29:9f:4c:14:a7:
         a4:0c:86:25:68:cf:72:7b:fb:36:1d:8b:37:52:11:58:5a:d6:
         ec:43:16:15:02:39:b1:3e:5b:dc:54:59:ea:08:8f:32:50:3b:
         28:c0:de:fe:73:0c:e0:c6:81:a6:3e:b4:9f:e1:75:01:20:e1:
         23:ab:bd:78:0b:53:02:95:04:a0:ab:01:a2:2e:2f:d1:5d:09:
         6b:9a:84:02:f7:3e:92:ff:df:b5:9d:7e:2e:ad:18:2c:2e:8d:
         39:7d:40:7f:4b:a5:14:e0:04:58:27:d1:90:9b:e7:97:1f:dd:
         7f:ff:a4:6c:f8:4b:9a:12:63:50:6d:0b:4c:02:0c:96:bc:40:
         36:6f:2d:0f:f9:29:d4:6d:b5:b5:de:77:e1:71:2e:b9:78:f1:
         56:27:aa:3b:4c:f3:b2:e5:ca:a9:f2:63:8a:01:2a:80:3e:48:
         9e:22:fd:d1:dc:b7:b8:75:85:19:88:5b:f6:e6:0c:06:b0:e6:
         62:e8:44:33:c2:67:85:bb:d3:46:7a:f2:5c:55:20:e8:1e:a2:
         74:4e:eb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:19:12 2026 by rpki-client