Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
File:                     1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft (raw, json)
Hash identifier:          teoz/itwYXnoWh1AEPp1L9U+gSyqvHoIhYbQqPLlbM0=
Subject key identifier:   30:C1:27:1D:EA:50:A4:B7:98:4D:60:32:F1:02:06:C7:8E:F6:7C:E5
Authority key identifier: FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC
Certificate issuer:       /CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc
Certificate serial:       019DA453EE0AAA526D4CFD39E568EBB26069
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
Manifest number:          063C
Signing time:             Sun 19 Apr 2026 06:00:56 +0000
Manifest this update:     Sun 19 Apr 2026 06:00:56 +0000
Manifest next update:     Mon 20 Apr 2026 06:00:56 +0000
Files and hashes:         1: 1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl (hash: 2JPtBsW+Kv4l5C+xeYYjZoG199stJpFVyROhSEHkgJ0=)
                          2: rDbD36OC2clR1VcH9ybYG4X8bCg.roa (hash: KScj6dQC600LiAKS+yk/LqkmCh6S5faudW7dbCKNdtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:53:ee:0a:aa:52:6d:4c:fd:39:e5:68:eb:b2:60:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc
        Validity
            Not Before: Apr 19 06:00:56 2026 GMT
            Not After : Apr 20 06:00:56 2026 GMT
        Subject: CN=30c1271dea50a4b7984d6032f10206c78ef67ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:18:03:fe:63:2d:34:d8:bb:ad:c6:50:6f:
                    d6:a3:58:d0:8c:4a:88:f2:d0:38:ad:fd:8d:e9:a0:
                    b2:46:96:55:89:a2:87:9a:74:e5:e4:7f:06:b2:2f:
                    fb:eb:05:29:47:81:d2:a8:9e:80:f6:ae:11:32:d0:
                    9b:56:05:a5:92:25:7e:64:54:10:7e:cb:e4:23:53:
                    a8:01:ab:3b:62:7f:91:fe:11:c9:a0:5f:57:73:25:
                    c4:6e:c9:c5:b5:a0:cf:7d:94:08:51:8b:0c:55:e8:
                    07:ce:41:df:69:8a:f6:dd:70:93:26:47:fc:4b:d8:
                    db:8b:20:f5:bc:02:e4:f1:23:f3:1c:11:3a:32:69:
                    f6:c2:52:81:bc:45:13:80:99:4c:3f:99:d5:91:8f:
                    d0:e3:71:bd:a2:94:02:3c:b5:23:85:35:fd:39:e1:
                    0d:2e:ae:1d:62:a3:ac:de:a2:37:f4:8a:c2:21:d3:
                    6e:4c:c2:57:b0:a5:a8:1d:c9:86:c6:f5:4e:9c:64:
                    e8:4f:a0:d1:07:30:23:b4:9b:54:ed:4f:06:26:01:
                    5c:6b:61:7b:af:b0:30:8a:49:d2:c3:46:fc:20:a0:
                    dc:66:6e:82:dd:55:32:94:39:fa:cc:61:22:0f:1c:
                    97:f0:73:14:93:3a:1b:3e:c2:c3:37:9a:76:b3:cb:
                    6b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C1:27:1D:EA:50:A4:B7:98:4D:60:32:F1:02:06:C7:8E:F6:7C:E5
            X509v3 Authority Key Identifier:
                keyid:FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:76:48:5d:f7:5f:94:4d:29:06:81:9d:16:d6:e8:a5:c1:86:
         c2:8d:8d:3d:10:18:2b:c3:a5:4c:fd:20:8d:ee:3e:30:3e:5e:
         6e:55:79:18:cf:c7:ad:06:ee:f6:3e:35:28:33:ab:0c:a5:9d:
         cd:d6:dd:95:49:86:f9:33:8c:6b:33:c5:7d:42:45:b2:d3:2a:
         5c:4e:41:13:5e:f5:92:f8:ff:3d:be:1a:f8:11:83:87:3c:76:
         82:a5:34:3b:a0:9f:8f:1f:c3:87:fa:99:fc:bf:79:27:6c:57:
         4e:d4:b2:29:55:18:a6:91:2d:3f:9f:43:7c:f2:a6:9e:f1:a8:
         10:9f:98:83:36:61:d0:5e:2a:dc:50:30:c2:d9:06:b1:4a:13:
         d5:ce:5a:84:98:62:40:b6:9c:cf:77:86:98:b2:7b:56:63:c2:
         60:86:48:6f:32:d4:08:bd:32:fc:5d:38:ae:05:15:7a:ee:0b:
         3a:15:33:0b:08:7b:48:94:17:0c:73:d3:89:4a:01:45:c0:b1:
         47:31:06:ad:54:30:9d:e2:59:ee:b2:67:e1:ec:22:21:1b:aa:
         6e:cf:a2:95:e9:97:78:fd:7d:70:6b:eb:a1:34:db:97:f1:81:
         01:52:cc:18:9e:6b:a1:af:33:94:0d:da:8f:d8:0a:97:1e:78:
         5f:8d:02:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:25 2026 by rpki-client