Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
File:                     6sLBr9S97JgFBvoH33yGYtVU-kY.mft (raw, json)
Hash identifier:          f4dKERu3Rx4c9nKWUG0GcM4vWzU8KR0D5acMtTnZJm8=
Subject key identifier:   9B:DE:E5:F7:BE:1E:06:9C:54:2E:ED:29:CC:0A:A4:00:21:43:73:C1
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Certificate issuer:       /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial:       019D9A74BDDC38707A8BFE4992C04F2541DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
Manifest number:          12F9
Signing time:             Fri 17 Apr 2026 08:00:35 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:35 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:35 +0000
Files and hashes:         1: 1-4XTHBoNFNr1l-5DlJv7kCOEAsg.roa (hash: kxVoHYAy1StJ1GWwbeUY54WsYp9aXThsq2UtgssAUdE=)
                          2: 6sLBr9S97JgFBvoH33yGYtVU-kY.crl (hash: r1lMFpj8XqHpRsuoIpiQjn8uLYDFCBmtwlkrBUWKRhY=)
                          3: 8suHpidG1fhuELuUk5b3-OweTPg.roa (hash: 1eHJkoJhddFda4qCfEu1aQasvyxw+vlSo8SFBBVgpqU=)
                          4: FUuTK2fFAsqRcCumhRtIZo91RHY.roa (hash: sL7JcIGdywrGzv3v04y8pkGzCLFmkDsGBJu4wKma/MI=)
                          5: JVgD87VrB3I3B1RI_QRymmGn7SA.roa (hash: F5b1PPhQTronM+RJBcmWCczkWXAqsUY1bb/t+Vvj6js=)
                          6: LXIlN5E_-7FwagFmPTLTkaa9y5c.roa (hash: 6fdLU7tUE6uJypDCFnhQj74QKiyWE5+++0HOzxZo/Ls=)
                          7: SiI2SweNuMw3Zh5hN0AodnHSZK4.roa (hash: Ja7prbcEfWRWN6iJlFWBHvB00+46h6yhrgI24su9Th0=)
                          8: UzApq6EOLSmo_f-FmHtKYMlNkG8.roa (hash: uaHU4qHF04fH5UL/VGo93ZAzSiASc8qoSn8SilcNKx8=)
                          9: dMLf7oZA2glUWPaPF66AFPs0ZGA.roa (hash: vhl1uNOJ5DqCqIxVZTtmK9gZafgqapXEKNDgMZ+kKHE=)
                          10: e-PI40mcmW_4qj2wj51dZytuRJ4.roa (hash: IWJbxQ32owD5Lwd1nR2dmmdsgfysZX9pSs6x+OurREE=)
                          11: rCtSQ7fOIAO3hF-dZmFyOrblm2s.roa (hash: JkQ7BSC0RdZovffT+QwWvb+UrSCXmLKi6BtijI7KA5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:bd:dc:38:70:7a:8b:fe:49:92:c0:4f:25:41:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
        Validity
            Not Before: Apr 17 08:00:35 2026 GMT
            Not After : Apr 18 08:00:35 2026 GMT
        Subject: CN=9bdee5f7be1e069c542eed29cc0aa400214373c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:af:83:d3:13:5a:0a:45:e9:20:1b:af:18:1f:
                    b3:44:07:4b:e2:bc:fb:c9:aa:aa:09:75:ab:a6:32:
                    69:8e:8d:38:ba:da:c1:5b:79:e6:65:8e:12:e6:67:
                    5a:08:f6:fa:5e:78:75:cb:38:a0:44:2f:3d:37:67:
                    4c:a8:2f:68:7f:45:9f:eb:ec:5a:58:fd:7a:6f:1d:
                    64:c8:19:a6:b2:66:fe:cd:85:05:54:21:40:9a:bd:
                    ae:0f:3a:c2:54:01:0a:93:bc:7e:94:e3:00:e2:2c:
                    5e:69:b6:c3:29:5f:1b:49:49:3a:f6:a0:61:32:9d:
                    86:cd:42:72:92:d4:e0:e9:38:9d:f2:d1:76:b4:d1:
                    6c:03:77:46:53:72:cd:f6:ef:01:d0:8e:63:23:9e:
                    ab:68:1e:e3:f8:8f:34:44:d6:dc:e2:72:d2:60:52:
                    b4:f5:4a:f5:31:68:29:c7:3c:99:20:f4:76:06:3e:
                    7e:8e:26:7f:ea:76:0f:37:4e:e1:28:8e:ee:06:e9:
                    1a:89:b6:7a:f8:b2:33:60:e3:ef:8b:11:0b:34:7b:
                    d3:c1:59:98:65:5f:1f:7a:aa:50:04:d3:ed:ad:9a:
                    a9:b7:5e:0b:fa:da:62:b5:b3:eb:f9:05:33:cd:b1:
                    f6:54:b7:74:7c:fa:7f:19:c5:6b:9d:66:b7:47:22:
                    1e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DE:E5:F7:BE:1E:06:9C:54:2E:ED:29:CC:0A:A4:00:21:43:73:C1
            X509v3 Authority Key Identifier:
                keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:7e:b3:31:e1:0c:75:77:c2:d9:b0:9c:0b:52:49:34:dc:dc:
         5e:ba:ac:3e:cd:43:f7:4a:fc:65:11:ae:29:f2:1f:7c:5b:7e:
         5a:af:91:16:bd:5e:8e:81:49:2c:f4:3f:f5:06:02:b3:41:3f:
         89:fd:77:e3:82:48:47:d3:0b:ac:e8:99:4e:6c:47:a9:4e:7c:
         0d:a2:0d:80:f9:7f:30:8a:83:dd:75:e0:b9:e9:cf:f2:3a:3f:
         3b:36:4d:0e:88:b6:1c:2f:75:1c:aa:97:f4:29:ca:32:37:5a:
         a3:19:f4:f2:4b:21:a0:29:79:13:6f:26:87:9c:73:1e:8d:95:
         84:c3:0f:1d:cb:d4:84:69:79:9b:5e:84:65:0f:f7:1c:81:f4:
         90:4a:b0:a2:82:d5:bf:86:a2:96:51:22:65:b0:d8:8e:9c:d7:
         5f:e5:cf:90:11:9a:de:d7:b4:d1:2b:61:90:03:4f:a3:16:cf:
         db:69:b5:0f:5c:4e:ff:21:08:fa:6f:49:6e:34:ea:28:fa:e4:
         ba:90:e2:df:0e:59:9f:ac:1a:35:f7:8e:5d:b8:c9:b3:4e:c9:
         de:40:cd:bc:6b:3a:dc:ef:93:55:25:64:b6:be:f2:3e:60:1d:
         79:02:76:31:14:fb:84:e0:76:a3:49:55:50:c7:4c:27:5d:b4:
         96:6e:79:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:24:40 2026 by rpki-client