Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
File:                     9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft (raw, json)
Hash identifier:          7RZTHHVPAy4BsCqcRJ3cdMSZlZHHONhHZRQNLdV+UWM=
Subject key identifier:   11:77:9E:33:56:55:02:4A:1C:09:0C:2A:25:C0:4E:25:2A:FE:AC:AC
Authority key identifier: F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
Certificate issuer:       /CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
Certificate serial:       019D9A06D1B4DE0A1722EEE2AD9A355313BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
Manifest number:          06B5
Signing time:             Fri 17 Apr 2026 06:00:31 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:31 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:31 +0000
Files and hashes:         1: 9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl (hash: +WQTIzfOTbL467x6VjOJI7ethFb4l3rVNcJ0NzPBGQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:06:d1:b4:de:0a:17:22:ee:e2:ad:9a:35:53:13:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
        Validity
            Not Before: Apr 17 06:00:31 2026 GMT
            Not After : Apr 18 06:00:31 2026 GMT
        Subject: CN=11779e335655024a1c090c2a25c04e252afeacac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:41:89:db:6e:d3:92:c5:65:50:dc:99:5f:1d:
                    cf:49:d3:a2:a4:12:7f:6a:c6:b4:04:de:94:a7:f1:
                    ac:97:91:5f:70:87:81:a1:d2:cc:ee:e8:f8:8f:2a:
                    48:24:1f:40:c3:fc:2e:f1:61:f4:12:be:1b:f9:21:
                    27:5d:c1:6e:50:95:f4:77:10:28:60:c5:03:3e:03:
                    65:c8:d9:40:bf:35:2d:0e:35:ce:4d:5e:55:54:38:
                    61:e4:a2:82:39:3b:f4:1f:3d:1d:5f:45:1c:a0:f9:
                    fa:b8:dd:3c:7c:97:77:1d:4d:69:08:50:b4:87:78:
                    de:20:d7:ee:63:0b:21:7e:ec:2c:a2:cd:74:df:65:
                    f6:94:17:d1:02:64:a0:3f:de:39:88:3e:82:13:63:
                    4e:c2:36:2c:ae:d7:af:bf:a9:ae:2e:29:25:29:e5:
                    d8:c7:46:64:3b:15:34:12:f6:d3:36:6a:8d:c2:5e:
                    f1:75:5e:95:b3:09:f2:8f:dc:59:62:dc:2e:90:48:
                    be:e9:7a:74:5a:01:11:25:16:dd:2a:4d:55:5d:3d:
                    3f:85:06:2d:35:b3:d8:39:24:c5:e7:39:8d:33:ef:
                    14:0b:d3:c4:dc:3d:9b:e2:8a:28:41:c7:82:1a:e0:
                    0d:ae:bb:68:16:06:3d:ad:0b:88:21:0e:fb:ad:a5:
                    e2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:77:9E:33:56:55:02:4A:1C:09:0C:2A:25:C0:4E:25:2A:FE:AC:AC
            X509v3 Authority Key Identifier:
                keyid:F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:d3:e5:08:af:00:69:83:03:ed:33:45:0a:cc:54:b0:f5:04:
         17:89:db:67:a9:89:a4:70:34:10:05:16:c7:ac:c5:a4:88:76:
         63:a0:ff:e3:64:fd:1b:9e:e8:fa:a7:36:8f:20:c1:43:62:fd:
         07:e5:17:9d:d3:d2:a7:20:84:8d:ef:a4:8f:97:c0:22:81:40:
         b7:cf:9e:b5:a7:ab:f3:03:12:37:bb:52:cf:75:50:ac:37:bb:
         4d:70:e9:51:a2:0c:b5:66:9d:95:b2:d9:91:49:cb:c1:75:87:
         b8:0b:ee:f7:cd:76:80:1d:b6:d9:d2:67:22:84:90:fc:24:03:
         65:7c:f0:79:1b:3e:d3:11:44:1a:b6:8e:3c:6e:f4:eb:90:2d:
         b6:94:66:9e:a6:fb:42:00:be:b9:2d:fd:ac:89:8d:79:fd:f2:
         43:30:86:20:b4:34:a1:9d:04:97:01:3e:ae:f1:81:b1:90:29:
         12:c2:f8:cd:ea:8d:4f:67:db:ae:d7:2c:4a:4d:a3:d7:42:40:
         fd:74:8a:eb:6a:3e:0f:38:02:6c:9e:69:d4:e7:5e:7d:85:2e:
         5d:7d:0d:41:0f:d6:41:49:25:71:d0:47:23:7b:7b:cb:83:e7:
         5c:0e:b0:23:2f:0b:b8:b6:47:9f:5b:f7:1e:4b:a1:c0:c5:c0:
         cf:59:22:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:14:45 2026 by rpki-client