Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
File:                     E6D3FD_6IhE0QtyFie4TUuvj2qM.mft (raw, json)
Hash identifier:          +afCk+Vp50BrpLFIigWbPqUAhU8jlRnALiT++oBb6eg=
Subject key identifier:   96:C3:5C:D2:D9:11:9E:CD:D2:36:7C:F2:B6:6C:CB:37:01:6B:F6:07
Authority key identifier: 13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
Certificate issuer:       /CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Certificate serial:       019D9C99EDF2002E5BB1DC3553056F491E70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
Manifest number:          0F2A
Signing time:             Fri 17 Apr 2026 18:00:26 +0000
Manifest this update:     Fri 17 Apr 2026 18:00:26 +0000
Manifest next update:     Sat 18 Apr 2026 18:00:26 +0000
Files and hashes:         1: E6D3FD_6IhE0QtyFie4TUuvj2qM.crl (hash: HMY0zFlOzCVws9BoVewlpKF0g1hIXo12KjumLcarXF4=)
                          2: Lk2VNJqZZqeqOV-mRQdjI6qYn-4.roa (hash: zKEK4KKUZ3gGuC6GoGIG9wJZcEYp/lskXr6MfelP6ws=)
                          3: OPOHu4baKrOuoP3MheEFtHAeXko.roa (hash: A1lA/lI/7Nnxtr0SxEKDti+LjBheE5trX2b66xGDddo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:99:ed:f2:00:2e:5b:b1:dc:35:53:05:6f:49:1e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
        Validity
            Not Before: Apr 17 18:00:26 2026 GMT
            Not After : Apr 18 18:00:26 2026 GMT
        Subject: CN=96c35cd2d9119ecdd2367cf2b66ccb37016bf607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:94:45:ef:9c:3d:c8:7f:05:58:ca:ad:29:fe:
                    b7:57:33:a5:66:fc:2d:81:47:85:2b:8d:81:e6:9c:
                    77:b4:36:33:46:6e:37:3e:03:3a:4d:c0:34:1d:d8:
                    d4:25:7b:42:b7:1e:0c:91:8a:0b:c7:d8:a4:a2:2b:
                    89:0f:8e:ea:94:dc:a4:c2:c3:4e:1a:11:7c:3b:36:
                    9f:4a:45:3e:12:c8:d1:69:43:45:0e:f2:3f:16:a9:
                    e9:dc:99:97:19:51:45:39:b3:37:db:b3:81:da:57:
                    0d:85:27:99:5b:d7:5d:20:19:76:f7:04:0a:64:ec:
                    f8:90:9b:cf:ee:8c:cc:9f:88:5a:c8:2e:e3:50:fe:
                    9e:79:f3:5d:fd:2c:54:97:03:1d:74:ed:24:ef:00:
                    cc:88:04:15:93:8e:fc:2f:b6:03:75:c0:c0:16:03:
                    6b:b8:aa:db:fa:3c:75:b4:1d:f8:72:f2:16:2b:f5:
                    cf:04:38:5b:73:5f:46:fb:d6:28:05:25:aa:40:d0:
                    af:38:43:d0:8e:bb:37:07:ac:2b:6e:79:4d:a1:66:
                    8b:bf:1f:fc:51:b7:f8:63:b2:5f:fd:be:03:04:b3:
                    c2:7d:21:69:ec:9d:0f:2f:59:5e:34:26:26:5e:cc:
                    c2:70:bf:f4:d4:76:06:27:ca:f8:06:97:6e:d4:ad:
                    64:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C3:5C:D2:D9:11:9E:CD:D2:36:7C:F2:B6:6C:CB:37:01:6B:F6:07
            X509v3 Authority Key Identifier:
                keyid:13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:d8:64:e6:d9:a8:92:57:ea:ee:a8:12:47:66:7b:b5:9f:8f:
         a4:01:21:4c:6a:7d:3b:bf:88:a6:cf:1e:62:cc:f5:91:2e:d1:
         06:53:48:02:92:81:d6:dd:2f:bc:df:a5:e1:22:06:5f:c9:73:
         ce:e2:71:62:10:a4:4c:80:02:e2:16:75:f5:87:2b:5d:43:08:
         2e:39:23:6a:90:cf:b5:57:47:2c:4f:de:94:05:2e:ec:2b:9f:
         26:84:dc:30:b6:ec:62:ed:b3:3b:4c:89:24:50:30:9a:b8:6c:
         8e:a7:96:2a:a1:79:76:b9:e8:f0:6a:bb:0d:cb:28:7a:c3:78:
         e6:1d:22:a7:43:06:6a:69:01:49:37:09:af:5f:6b:d5:39:9e:
         57:d4:ab:34:1b:24:d4:64:ed:14:49:a4:fe:b4:73:a7:72:13:
         f8:60:26:18:d6:66:4a:c6:5d:6c:99:60:c8:10:b2:c6:3d:8f:
         5e:a3:1a:c4:4a:f0:2b:04:e0:18:20:ad:6b:49:88:0b:f4:28:
         cb:d1:6c:78:8b:13:1e:ba:29:e7:f0:91:42:cd:ba:87:42:7e:
         4a:98:ef:0a:8e:8e:06:b4:2a:b4:28:42:17:b3:71:11:57:b9:
         fd:f5:70:c2:e6:2b:80:14:54:5f:f0:8d:00:80:c3:96:77:ae:
         3b:08:50:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:37:06 2026 by rpki-client