Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
File:                     6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft (raw, json)
Hash identifier:          vauW5gV3F5abHkiT5x4QYWuvQR+5EQ1lAUv3ZrI8iqI=
Subject key identifier:   7A:86:89:35:0C:32:FE:51:F4:48:A5:2F:F1:A8:F9:27:CE:31:3D:55
Authority key identifier: EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0
Certificate issuer:       /CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
Certificate serial:       019D9AABBB7D862411BE426E46447DC0A174
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
Manifest number:          11C3
Signing time:             Fri 17 Apr 2026 09:00:39 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:39 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:39 +0000
Files and hashes:         1: 6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl (hash: q8h2kLfvCMlpEffiIN7X/Z7+x9+XtXqhIRulCDC72zM=)
                          2: JHZzuCbY7H0te7-M11FOsaEJkB4.roa (hash: KwT//EDVtL7MXcat5zcL7S0XiNpCz55laXIuKNdqZ68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:bb:7d:86:24:11:be:42:6e:46:44:7d:c0:a1:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
        Validity
            Not Before: Apr 17 09:00:39 2026 GMT
            Not After : Apr 18 09:00:39 2026 GMT
        Subject: CN=7a8689350c32fe51f448a52ff1a8f927ce313d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:00:3c:28:49:4e:5e:68:59:bd:ce:49:a5:82:
                    98:83:f7:a0:51:55:94:74:cd:31:f5:4f:21:fc:a2:
                    a8:92:e9:66:d6:15:38:ba:1a:d9:97:5b:e3:fb:7e:
                    0d:38:3e:77:23:7a:9f:c5:15:e9:0d:fe:6b:5b:b3:
                    ff:0c:16:bc:f7:3d:31:de:a7:48:d1:b4:6c:74:02:
                    55:56:1d:fa:2b:ea:e4:a4:05:58:9b:85:06:c1:c8:
                    8b:b8:37:3e:15:4f:0c:8d:bc:8d:2e:99:f9:23:82:
                    d2:1c:c7:fb:41:8c:f5:cc:69:fb:46:9b:a4:08:f8:
                    53:ef:e8:78:c5:37:c5:4e:5b:c0:95:31:1e:85:95:
                    76:35:98:0c:e2:ea:88:73:db:01:47:0d:91:e1:2b:
                    4a:76:14:e3:73:a1:89:a8:18:00:2a:56:8b:a4:1a:
                    47:20:72:34:34:db:b0:b2:8a:d5:a5:59:c8:2d:fe:
                    a7:69:9e:bf:04:07:85:f5:6d:87:e0:e0:bb:47:2b:
                    f4:3e:e2:f7:2b:91:e2:da:f9:cb:a6:c9:e9:72:22:
                    70:8c:f2:f7:77:80:68:5f:28:2c:f8:36:eb:46:dc:
                    77:f7:28:5a:6e:be:ba:43:db:c4:65:14:be:f9:35:
                    ee:eb:f9:ab:b9:0c:77:41:ab:ba:0d:f6:1c:5e:ce:
                    14:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:86:89:35:0C:32:FE:51:F4:48:A5:2F:F1:A8:F9:27:CE:31:3D:55
            X509v3 Authority Key Identifier:
                keyid:EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:3f:85:4d:0a:de:2c:21:12:7a:d4:35:44:2e:51:55:94:ef:
         57:15:fc:e0:55:cd:b3:19:62:12:c5:b0:15:e2:ae:2b:f1:ca:
         69:20:8a:f7:a1:8c:1d:d8:ec:fc:25:45:64:90:fa:f3:be:6c:
         ea:0a:af:54:f7:7e:48:3f:9f:f5:cd:1e:49:cd:1b:1b:53:d7:
         e6:f1:cd:1d:1b:80:98:77:2b:c7:41:b8:1d:45:1c:a1:d5:c1:
         b2:18:37:a4:9f:65:10:e9:f9:c9:7e:1f:b0:ef:26:c3:46:68:
         a9:3f:70:aa:28:68:0a:07:1d:d3:76:8e:8e:4c:5b:a3:23:d4:
         cc:84:a1:10:c0:e1:55:3d:41:0c:d5:3e:7d:c0:9d:30:89:7b:
         f7:6e:e5:cd:54:9d:da:b0:f2:90:fa:97:5e:cd:9e:5a:27:86:
         99:c1:53:c8:41:bc:95:1d:59:3f:1e:e2:a6:7d:88:72:7c:c8:
         2f:8f:96:e2:6f:2c:6b:22:89:2d:0c:4e:04:f1:a1:63:59:95:
         77:a4:0f:aa:f5:d6:0e:ae:53:48:81:90:94:cd:94:18:34:0b:
         27:a6:5d:ed:46:29:dc:e8:bc:dc:0c:5d:f9:97:f1:2b:92:05:
         97:f8:a7:b7:ab:d1:e2:90:43:d8:36:4e:64:52:c8:21:98:2b:
         29:93:f2:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq7t9hiQRvkJuRkR9wKF0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMzY3NzliMTNhZWM3ODBiMGQ0MzdmODQ0NGFiMGY0NDNh
MDVkZDAwHhcNMjYwNDE3MDkwMDM5WhcNMjYwNDE4MDkwMDM5WjAzMTEwLwYDVQQD
Eyg3YTg2ODkzNTBjMzJmZTUxZjQ0OGE1MmZmMWE4ZjkyN2NlMzEzZDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAA8KElOXmhZvc5JpYKYg/egUVWU
dM0x9U8h/KKokulm1hU4uhrZl1vj+34NOD53I3qfxRXpDf5rW7P/DBa89z0x3qdI
0bRsdAJVVh36K+rkpAVYm4UGwciLuDc+FU8MjbyNLpn5I4LSHMf7QYz1zGn7Rpuk
CPhT7+h4xTfFTlvAlTEehZV2NZgM4uqIc9sBRw2R4StKdhTjc6GJqBgAKlaLpBpH
IHI0NNuwsorVpVnILf6naZ6/BAeF9W2H4OC7Ryv0PuL3K5Hi2vnLpsnpciJwjPL3
d4BoXygs+DbrRtx39yhabr66Q9vEZRS++TXu6/mruQx3Qau6DfYcXs4UkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqGiTUMMv5R9EilL/Go+SfOMT1VMB8GA1UdIwQY
MBaAFOs2d5sTrseAsNQ3+ERKsPRDoF3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnpaM214T3V4NEN3MURmNFJFcXc5RU9nWGRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85ODY0ZmYtNjM0MS00MDA0LWFiNmQt
MGYzYjljMDVkZTQ1LzEvNnpaM214T3V4NEN3MURmNFJFcXc5RU9nWGRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC85ODY0ZmYtNjM0MS00MDA0LWFiNmQtMGYzYjljMDVkZTQ1
LzEvNnpaM214T3V4NEN3MURmNFJFcXc5RU9nWGRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeT+FTQre
LCESetQ1RC5RVZTvVxX84FXNsxliEsWwFeKuK/HKaSCK96GMHdjs/CVFZJD6875s
6gqvVPd+SD+f9c0eSc0bG1PX5vHNHRuAmHcrx0G4HUUcodXBshg3pJ9lEOn5yX4f
sO8mw0ZoqT9wqihoCgcd03aOjkxboyPUzIShEMDhVT1BDNU+fcCdMIl7927lzVSd
2rDykPqXXs2eWieGmcFTyEG8lR1ZPx7ipn2IcnzIL4+W4m8sayKJLQxOBPGhY1mV
d6QPqvXWDq5TSIGQlM2UGDQLJ6Zd7UYp3Oi83Axd+ZfxK5IFl/int6vR4pBD2DZO
ZFLIIZgrKZPyOw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:09:26 2026 by rpki-client