Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
File:                     a6TjY5dLLvkOywU0CvXa9rJBYMs.mft (raw, json)
Hash identifier:          EKB672Gfec7iMSXwtqxdMDGpBv3y/6QCMnnH8nLno3c=
Subject key identifier:   35:69:C1:81:46:CF:59:14:9E:73:43:7B:41:1C:1C:04:8E:4B:DC:52
Authority key identifier: 6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
Certificate issuer:       /CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Certificate serial:       019D99D078059258BE7938DD7B04553A6680
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
Manifest number:          0E0B
Signing time:             Fri 17 Apr 2026 05:01:09 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:09 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:09 +0000
Files and hashes:         1: FuIldjWwC771dcFJZ2BXXg7QNtE.roa (hash: 0/YvhnNfmrfW1rIeAImBgzBQVqK+XQUOllK6k6PziVo=)
                          2: a6TjY5dLLvkOywU0CvXa9rJBYMs.crl (hash: IQmxlaRN75ooVxeYG8aEldnlDQAnos4TOfOncjKR5zc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:78:05:92:58:be:79:38:dd:7b:04:55:3a:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
        Validity
            Not Before: Apr 17 05:01:09 2026 GMT
            Not After : Apr 18 05:01:09 2026 GMT
        Subject: CN=3569c18146cf59149e73437b411c1c048e4bdc52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b2:46:2f:20:b8:76:f3:f3:f4:ab:8d:73:28:
                    be:75:61:1c:ef:e4:b0:3d:8e:e1:80:22:e8:85:df:
                    ef:54:7d:c6:41:a2:6d:15:4f:26:05:a2:d6:e8:1e:
                    5d:af:39:62:47:05:8e:d7:d5:df:82:c4:84:a4:7e:
                    17:e3:d0:34:c9:85:35:d5:97:26:a6:47:dd:27:fd:
                    a0:8d:1f:b6:59:fc:c6:e3:c8:d3:15:8c:3a:19:a4:
                    97:0d:b4:5d:0a:74:3d:c3:a2:ea:11:3e:87:7a:c7:
                    7e:b2:3d:ce:6a:ac:04:79:de:cc:1d:ff:49:7c:68:
                    2d:bf:d7:5d:56:14:97:89:de:ae:ba:13:64:0f:69:
                    0f:a9:86:f5:0d:7c:89:01:b2:69:70:9b:c9:84:d4:
                    7d:7d:b4:fd:12:39:4e:f9:1f:d9:94:f3:ec:c3:04:
                    3e:2d:d2:85:47:3b:01:e2:a2:45:66:80:ce:08:4e:
                    b3:8e:d8:a6:ab:65:75:3e:67:57:07:93:7b:19:1c:
                    f1:37:8b:78:23:20:39:2b:d3:9a:04:bc:0e:bb:5d:
                    fb:86:89:77:f5:71:46:86:7e:7b:3c:77:68:7a:c7:
                    cf:4b:c9:6e:2b:36:df:88:d4:31:24:cd:af:94:1b:
                    52:f6:c6:d2:41:2f:a4:da:eb:95:82:3d:ae:a4:f9:
                    bd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:69:C1:81:46:CF:59:14:9E:73:43:7B:41:1C:1C:04:8E:4B:DC:52
            X509v3 Authority Key Identifier:
                keyid:6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:49:78:ff:26:d3:55:1c:24:1c:3f:05:0d:bc:64:76:7d:2e:
         f1:29:9c:ac:15:96:d8:40:0a:b3:13:d8:4c:e5:cf:65:08:43:
         9f:42:63:1c:84:a3:63:cb:76:ff:d1:a3:a4:97:3c:78:b9:a7:
         8b:8e:cd:89:55:fe:b6:0d:d0:a5:ef:8a:93:e0:ba:1d:9d:9f:
         49:2b:db:41:c5:ca:5a:67:65:62:27:2c:9e:87:a5:a4:4e:1c:
         bc:15:f0:b1:a3:00:e1:c7:dc:aa:60:56:25:e7:a2:14:2e:c3:
         4b:89:a2:a4:e2:fc:0a:0a:e2:02:b3:c9:56:f2:60:7c:48:f8:
         f5:16:75:e3:5b:fa:0b:52:bc:50:38:ac:a3:b0:96:a3:c0:83:
         1c:1a:80:8d:e9:07:fc:ce:33:74:88:1f:5e:8e:24:c5:1b:4e:
         02:05:08:56:97:75:a7:b9:07:3b:55:88:c7:37:ca:bd:fc:a7:
         45:53:d4:35:65:77:4b:82:33:4e:60:f7:7a:01:64:b7:f4:aa:
         17:ef:f8:c6:02:a6:c7:d8:0c:16:3b:4f:51:fb:51:81:27:b7:
         d0:e9:0b:20:04:2d:a6:12:cf:94:ad:c3:47:78:2f:f9:a6:1d:
         b8:e4:53:a3:9f:d0:42:32:a6:b7:6d:7a:41:bf:8b:fe:1f:07:
         f3:9d:1e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:23 2026 by rpki-client