Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft
File:                     6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft (raw, json)
Hash identifier:          X2+ZmA88fjAE0D8dzelIbL0ROgPURs0PZkj9SmgPqSE=
Subject key identifier:   F1:C1:7A:7A:06:44:45:85:AB:A8:77:26:7C:0C:12:6B:3C:2E:3F:F7
Authority key identifier: E8:33:46:1E:9D:2B:DA:FC:C2:9A:D9:18:9F:B0:AC:F1:F3:39:60:A9
Certificate issuer:       /CN=e833461e9d2bdafcc29ad9189fb0acf1f33960a9
Certificate serial:       019D9886EA203FF55C84925165A01F554761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft
Manifest number:          17E8
Signing time:             Thu 16 Apr 2026 23:01:11 +0000
Manifest this update:     Thu 16 Apr 2026 23:01:11 +0000
Manifest next update:     Fri 17 Apr 2026 23:01:11 +0000
Files and hashes:         1: 6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl (hash: DEY9gEOhStwcfb+L6JH+g+kcUToVYdMPr9ckRQmDJ18=)
                          2: Q-XaXdYNyXwK0mc7YIVoepDORlM.roa (hash: d+yMV8SrvvLaa9ouz0mOIlebIPHpwRPv3zGG1GfdREw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:ea:20:3f:f5:5c:84:92:51:65:a0:1f:55:47:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e833461e9d2bdafcc29ad9189fb0acf1f33960a9
        Validity
            Not Before: Apr 16 23:01:11 2026 GMT
            Not After : Apr 17 23:01:11 2026 GMT
        Subject: CN=f1c17a7a06444585aba877267c0c126b3c2e3ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ae:82:a6:40:10:df:e9:08:c9:30:ac:6a:28:
                    68:8a:d3:24:68:63:8e:50:4b:71:e5:64:e7:6d:39:
                    38:13:14:f2:b4:b0:49:cf:ac:06:02:f5:84:39:9d:
                    64:8d:3f:1c:12:63:da:aa:51:5d:ee:ea:f8:f7:27:
                    3a:ce:6d:0a:e1:97:2c:c1:8b:5c:f0:ae:a0:dc:c7:
                    08:4e:2e:a7:ab:58:93:83:10:71:66:36:ed:80:f5:
                    bc:5e:7a:4b:f0:50:1c:13:90:00:a8:c2:21:7c:c7:
                    1a:b7:63:64:fa:92:2f:6f:30:4b:52:59:cd:69:56:
                    3a:66:fb:2e:5a:08:8c:18:f8:1c:89:b6:de:07:fd:
                    de:03:55:cc:4d:32:8b:41:5a:0d:15:35:6a:7b:09:
                    d3:05:0e:0b:c6:88:3e:e9:f4:5d:7f:12:d5:27:18:
                    c8:1f:43:81:c5:84:92:a7:77:ad:cc:36:19:b7:7f:
                    75:26:ab:9f:e1:e2:33:05:a8:9d:7a:02:35:25:da:
                    dd:80:dd:21:c1:d6:fb:78:bc:ba:73:63:b3:2e:6d:
                    00:cf:93:d3:2e:50:45:8a:e4:39:b7:ab:ba:f0:2b:
                    38:b2:78:13:f4:65:cc:48:de:b8:ee:8b:03:35:68:
                    18:43:ea:9f:fd:fe:80:c1:b9:c6:40:cb:97:5b:2a:
                    49:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C1:7A:7A:06:44:45:85:AB:A8:77:26:7C:0C:12:6B:3C:2E:3F:F7
            X509v3 Authority Key Identifier:
                keyid:E8:33:46:1E:9D:2B:DA:FC:C2:9A:D9:18:9F:B0:AC:F1:F3:39:60:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:66:cb:d1:87:89:e5:17:3d:c7:18:8d:e6:f9:2b:7d:c4:e9:
         da:a5:7a:30:40:af:20:e1:44:cc:0f:a6:27:7e:d6:09:24:2f:
         58:c4:c2:89:ee:d6:9e:99:b7:80:db:bd:36:7b:92:24:68:2f:
         d0:eb:94:9d:41:a4:ff:52:83:95:1a:7a:4d:f2:70:e6:b4:c8:
         fa:b6:7a:68:b0:96:79:8f:4f:c0:09:9d:0c:ca:b0:34:3d:f1:
         bb:7b:46:45:e7:10:5b:c0:b7:44:2b:fe:1d:87:15:04:87:27:
         b8:85:6b:61:db:d2:46:d5:fd:b6:b1:d0:72:13:56:1d:82:c5:
         a3:db:83:e2:da:94:49:ff:2b:45:89:b1:15:33:fc:22:fc:0d:
         35:bd:08:c4:dc:8c:84:03:a6:ee:24:0a:7b:ac:db:ba:de:8f:
         04:b7:51:25:7e:5a:0b:4a:20:f9:b5:35:3c:4d:80:a6:16:bb:
         18:24:c3:a1:17:0b:4d:9b:c5:bf:ac:5a:3c:ad:6d:d2:99:69:
         1e:5a:a1:3e:6b:5e:70:99:44:1b:3b:7a:1b:0a:a6:19:6f:54:
         b6:f9:b4:e5:7d:ec:04:9b:95:a3:59:5f:e8:48:34:3e:e7:f5:
         59:93:1b:7b:bb:01:44:37:e1:fc:67:32:b4:63:2e:55:82:35:
         67:18:73:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:58:08 2026 by rpki-client