Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
File:                     6fxsgWY89vzpLoPl1mKLwOtqlNI.mft (raw, json)
Hash identifier:          I0BZJUlTUYdVidRECUjzuz0DhAUFQDqVVV/z2XT3gHk=
Subject key identifier:   4F:AA:7E:93:12:5B:2B:62:66:29:B0:48:02:9A:BE:65:2B:90:D7:2D
Authority key identifier: E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2
Certificate issuer:       /CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2
Certificate serial:       019D99D046ED7C82781AC156F718D9FE2DE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
Manifest number:          064D
Signing time:             Fri 17 Apr 2026 05:00:56 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:56 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:56 +0000
Files and hashes:         1: 6fxsgWY89vzpLoPl1mKLwOtqlNI.crl (hash: ApsoQNH6WZi4XDH2832lJXvrjIj/2+sxkfeoxbhauc8=)
                          2: vatD6IyOJfXLFso-oQNdkHZ0B5A.roa (hash: CF8afvvRrtxwksEOb+htGDBoa1bLNCvDnWuii8t0Lrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:46:ed:7c:82:78:1a:c1:56:f7:18:d9:fe:2d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2
        Validity
            Not Before: Apr 17 05:00:56 2026 GMT
            Not After : Apr 18 05:00:56 2026 GMT
        Subject: CN=4faa7e93125b2b626629b048029abe652b90d72d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:48:9a:ec:c5:b8:fe:af:1a:e8:79:53:a6:0f:
                    eb:67:74:bd:69:4e:ba:49:9f:ca:c3:21:f6:99:2c:
                    86:51:81:80:87:62:f0:ca:da:f5:12:e2:c5:7a:19:
                    bd:92:30:f8:fb:b8:56:dc:8d:1d:7c:ff:d4:65:01:
                    6a:f9:b0:1d:4f:6e:8b:94:01:af:bc:f3:5d:b9:08:
                    88:99:2a:3e:1b:a6:e0:aa:f7:77:4f:39:60:46:6e:
                    17:37:a6:f7:35:16:59:b3:b4:02:d4:94:67:5b:1b:
                    d5:ee:c6:54:63:62:15:3f:28:4c:12:a0:47:8b:ea:
                    24:dc:ad:ca:44:4d:a7:98:47:61:6f:40:e6:12:55:
                    e4:72:2e:67:bf:e7:ea:eb:dd:dc:b2:39:26:17:db:
                    11:07:d5:b6:1f:60:7d:a7:38:1e:03:19:27:d8:77:
                    4c:e8:7f:8c:f4:11:31:a3:1f:c5:47:43:cf:7b:1c:
                    5d:8e:7e:12:87:34:fd:b8:26:89:fc:59:f9:5f:47:
                    73:19:81:14:08:ed:82:54:dc:ad:98:1a:b7:95:15:
                    7e:52:dc:3b:af:82:3c:a8:9a:81:69:7e:65:9f:5d:
                    bf:04:4f:68:98:60:cb:75:29:89:83:cd:31:80:fa:
                    76:ad:9a:dd:26:1c:a2:95:64:c0:c2:12:c7:f9:5c:
                    2e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AA:7E:93:12:5B:2B:62:66:29:B0:48:02:9A:BE:65:2B:90:D7:2D
            X509v3 Authority Key Identifier:
                keyid:E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:10:3a:9f:13:37:76:43:03:1d:91:06:fd:7c:7b:94:a4:7d:
         f2:29:89:bf:49:a6:e1:56:50:d1:1a:15:60:dd:79:36:5f:98:
         35:ba:b5:05:2d:7e:38:57:ec:6a:68:5f:f3:60:eb:1e:cf:aa:
         c7:f0:7d:96:1c:97:28:b7:bb:86:a7:39:be:3e:a7:d3:70:76:
         00:c2:25:1d:60:2b:5c:52:55:bd:db:c0:b2:0c:70:b0:e8:43:
         1d:f8:4e:5f:b1:2d:3b:3b:d2:f0:f5:e5:b9:7d:61:ee:dc:1c:
         16:c9:d4:94:9b:6d:1d:8e:91:d8:01:27:2b:e9:1f:3d:e3:a7:
         28:e1:4d:59:c0:ad:ad:c9:b8:0b:43:9b:80:c3:47:60:79:2d:
         94:61:e8:03:26:e4:38:65:50:eb:75:79:c8:6b:a4:f4:1c:d5:
         fc:8a:39:fe:d4:b2:4a:de:cb:6a:fa:d6:06:45:b1:13:16:bd:
         3d:06:7e:fc:40:e1:f7:b5:04:a0:b3:4d:50:68:ab:91:83:6e:
         49:2f:d6:5c:1d:89:b3:05:d0:b9:ca:35:d8:2e:90:89:db:70:
         dd:e3:e1:8c:c6:8f:d2:43:2b:4a:12:0f:a8:8b:41:1c:13:98:
         ba:72:8c:c3:9c:29:45:5e:c7:12:25:4c:28:d0:b7:8b:98:51:
         d1:bb:bf:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:02 2026 by rpki-client