Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
File:                     6po2KjoeqNaaLSY__8GA2rWjgck.mft (raw, json)
Hash identifier:          vyzX299JYHsLzM+IZiKmznqqiPrcWuSWlCUA/UU/mas=
Subject key identifier:   30:CD:02:9B:24:0D:EB:E8:F0:08:F0:41:33:A3:0F:69:AC:4E:58:31
Authority key identifier: EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9
Certificate issuer:       /CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
Certificate serial:       019D99629283AA03CC3898145CC129F24E7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
Manifest number:          0CB4
Signing time:             Fri 17 Apr 2026 03:01:07 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:07 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:07 +0000
Files and hashes:         1: 6po2KjoeqNaaLSY__8GA2rWjgck.crl (hash: V7jZsiiJQqzc1fDVzLC/OSgBrWPhs1TLkSqzmbARti0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:92:83:aa:03:cc:38:98:14:5c:c1:29:f2:4e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
        Validity
            Not Before: Apr 17 03:01:07 2026 GMT
            Not After : Apr 18 03:01:07 2026 GMT
        Subject: CN=30cd029b240debe8f008f04133a30f69ac4e5831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:01:76:cf:7e:ae:01:b3:b8:19:78:e6:b9:e2:
                    f7:46:45:7d:d2:a0:0b:94:22:1d:40:25:10:5e:6f:
                    aa:e4:7b:b7:4e:98:87:13:04:e8:5e:c7:8b:2d:0a:
                    1c:59:0d:cb:73:c3:96:8a:4a:35:40:66:92:1f:ee:
                    68:30:df:3d:e7:9f:54:c1:5b:0f:ae:42:bf:c6:fa:
                    20:18:5f:ac:0d:08:7e:a0:98:f0:fe:91:0a:58:2f:
                    a5:01:9f:75:e0:fa:f7:56:25:88:42:ba:f2:07:df:
                    58:14:e7:c8:02:91:c1:af:b5:71:7b:8c:0d:2f:cc:
                    c1:3f:3a:a3:b7:2a:46:1c:4a:db:8a:f0:f7:1d:a7:
                    7c:92:18:94:ac:02:35:9c:49:2b:4d:3c:55:e6:10:
                    b1:6f:1c:3f:0b:8d:05:c1:0c:f7:0c:37:32:f8:e3:
                    30:19:8d:50:d8:2b:93:ec:7a:b7:d9:b5:26:ab:ae:
                    32:47:7c:cd:82:7e:cf:3f:35:65:6a:55:29:f7:aa:
                    01:80:41:40:57:53:1d:af:96:f0:45:c8:c5:08:5b:
                    64:78:62:71:7b:8f:c3:38:ac:e6:5b:3a:47:57:e4:
                    ae:7f:28:f0:ab:98:e9:17:c3:e4:3c:f1:53:bb:9f:
                    03:b9:3b:ae:61:22:17:af:ed:71:04:45:9a:97:c3:
                    96:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CD:02:9B:24:0D:EB:E8:F0:08:F0:41:33:A3:0F:69:AC:4E:58:31
            X509v3 Authority Key Identifier:
                keyid:EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:0c:68:89:59:c9:38:41:bf:c9:ef:a8:78:0d:b2:ac:ad:8b:
         e7:07:71:33:54:65:34:45:ec:bf:02:c5:59:08:17:4f:df:e1:
         77:a0:71:ac:fe:be:0a:c4:12:4d:71:2e:41:c4:43:f0:80:23:
         59:4d:a1:49:63:1f:72:9a:90:65:36:a8:db:9c:4b:fd:48:83:
         c8:29:4f:1b:3f:22:b4:ee:4e:4b:23:90:7e:bc:35:5b:da:b6:
         89:84:a9:c8:5b:f1:77:72:ae:a4:57:d0:07:76:6c:a6:71:84:
         e5:ae:a0:14:90:e3:09:18:2e:f0:e2:81:93:55:cf:d7:b4:71:
         b5:cb:d3:45:69:4e:09:3f:4f:28:46:2e:bd:91:ef:05:6a:4c:
         41:48:ba:de:4a:53:76:a6:0d:b5:c2:9f:cd:bf:f4:8f:f2:12:
         e2:98:99:ed:6e:6a:be:5d:59:67:0a:50:bf:52:e6:cb:b0:5c:
         f0:c2:28:2e:d1:f4:2f:dc:f7:b3:71:d2:55:d2:d5:ea:8d:0b:
         4e:09:b6:7b:f1:4c:46:54:22:5b:f1:ad:26:fa:39:ec:63:12:
         cc:4d:56:5b:a1:ea:d9:52:71:d0:ef:ae:8d:65:51:76:f6:c7:
         58:02:a1:08:17:ca:32:db:c9:de:9a:71:22:6b:1b:09:9f:a0:
         7e:b8:c4:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYpKDqgPMOJgUXMEp8k5+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhOWEzNjJhM2ExZWE4ZDY5YTJkMjYzZmZmYzE4MGRhYjVh
MzgxYzkwHhcNMjYwNDE3MDMwMTA3WhcNMjYwNDE4MDMwMTA3WjAzMTEwLwYDVQQD
EygzMGNkMDI5YjI0MGRlYmU4ZjAwOGYwNDEzM2EzMGY2OWFjNGU1ODMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AF2z36uAbO4GXjmueL3RkV90qAL
lCIdQCUQXm+q5Hu3TpiHEwToXseLLQocWQ3Lc8OWiko1QGaSH+5oMN89559UwVsP
rkK/xvogGF+sDQh+oJjw/pEKWC+lAZ914Pr3ViWIQrryB99YFOfIApHBr7Vxe4wN
L8zBPzqjtypGHErbivD3Had8khiUrAI1nEkrTTxV5hCxbxw/C40FwQz3DDcy+OMw
GY1Q2CuT7Hq32bUmq64yR3zNgn7PPzVlalUp96oBgEFAV1Mdr5bwRcjFCFtkeGJx
e4/DOKzmWzpHV+Sufyjwq5jpF8PkPPFTu58DuTuuYSIXr+1xBEWal8OW6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDNApskDevo8AjwQTOjD2msTlgxMB8GA1UdIwQY
MBaAFOqaNio6HqjWmi0mP//BgNq1o4HJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnBvMktqb2VxTmFhTFNZX184R0EycldqZ2NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lN2Y0NDEtMTJlNC00MWMzLTgzMjQt
ZDRkOGY4OTZiZmYzLzEvNnBvMktqb2VxTmFhTFNZX184R0EycldqZ2NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9lN2Y0NDEtMTJlNC00MWMzLTgzMjQtZDRkOGY4OTZiZmYz
LzEvNnBvMktqb2VxTmFhTFNZX184R0EycldqZ2NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagxoiVnJ
OEG/ye+oeA2yrK2L5wdxM1RlNEXsvwLFWQgXT9/hd6BxrP6+CsQSTXEuQcRD8IAj
WU2hSWMfcpqQZTao25xL/UiDyClPGz8itO5OSyOQfrw1W9q2iYSpyFvxd3KupFfQ
B3ZspnGE5a6gFJDjCRgu8OKBk1XP17RxtcvTRWlOCT9PKEYuvZHvBWpMQUi63kpT
dqYNtcKfzb/0j/IS4piZ7W5qvl1ZZwpQv1Lmy7Bc8MIoLtH0L9z3s3HSVdLV6o0L
Tgm2e/FMRlQiW/GtJvo57GMSzE1WW6Hq2VJx0O+ujWVRdvbHWAKhCBfKMtvJ3ppx
ImsbCZ+gfrjEhg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:32 2026 by rpki-client