Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft
File:                     6rBQEXItJcEknmWLLK7MEYwp6CI.mft (raw, json)
Hash identifier:          LL8E/V0dcsj63gWcRoEWEUwKWzkgHyv/QclT0ZFC34g=
Subject key identifier:   68:88:40:5A:2F:53:B8:ED:54:90:99:3B:83:5C:97:DB:87:59:CA:63
Authority key identifier: EA:B0:50:11:72:2D:25:C1:24:9E:65:8B:2C:AE:CC:11:8C:29:E8:22
Certificate issuer:       /CN=eab05011722d25c1249e658b2caecc118c29e822
Certificate serial:       019DA454081D6250D9D0E94233AC4F588A0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6rBQEXItJcEknmWLLK7MEYwp6CI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft
Manifest number:          0645
Signing time:             Sun 19 Apr 2026 06:01:03 +0000
Manifest this update:     Sun 19 Apr 2026 06:01:03 +0000
Manifest next update:     Mon 20 Apr 2026 06:01:03 +0000
Files and hashes:         1: 6rBQEXItJcEknmWLLK7MEYwp6CI.crl (hash: Iso0pFo+nIycx2bVfMDUX33wX76vlB5cRn0stZ0RLkc=)
                          2: _qFWRZGsGHQ0Anl9EjQGEm1Dudk.roa (hash: V/uLoxzhE1hWseFAoWyuM6fnZrTDKbUDkcDJrITCvlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6rBQEXItJcEknmWLLK7MEYwp6CI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:54:08:1d:62:50:d9:d0:e9:42:33:ac:4f:58:8a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eab05011722d25c1249e658b2caecc118c29e822
        Validity
            Not Before: Apr 19 06:01:03 2026 GMT
            Not After : Apr 20 06:01:03 2026 GMT
        Subject: CN=6888405a2f53b8ed5490993b835c97db8759ca63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:31:e4:8d:f7:25:a6:86:2a:bb:75:7f:d7:88:
                    d3:79:4b:16:9f:1a:2c:b1:18:19:28:0e:ec:f6:17:
                    0c:f9:8d:18:cd:55:c0:31:5c:15:29:20:9d:f3:e4:
                    2c:e8:ae:e9:73:51:a0:25:cc:47:8b:0d:f2:92:bc:
                    d6:c9:ed:36:70:08:73:a7:2f:95:9f:6a:9f:f2:c7:
                    00:a0:ef:d7:de:2a:3d:8f:11:02:bf:22:ef:94:be:
                    65:83:53:00:3d:5c:66:95:86:1d:67:29:77:18:ea:
                    77:11:2f:25:72:90:8d:99:4b:76:1b:28:09:02:24:
                    b7:48:9c:71:fa:2b:89:e0:80:e3:6a:b2:cc:11:6d:
                    a0:4a:ef:15:bf:ff:f6:12:13:3b:52:f3:09:87:cd:
                    4c:39:7e:09:79:a0:f9:74:84:3f:72:9e:36:36:8b:
                    d6:a3:cc:82:bf:d3:d5:e2:9f:26:a7:26:2b:62:bf:
                    b7:3b:45:eb:05:58:95:82:8a:a8:7b:41:3b:41:0a:
                    50:58:73:cd:4c:ca:e4:ce:3a:48:58:e4:55:7e:34:
                    ae:e7:54:dc:a8:b6:b6:d0:0d:5e:1b:98:f1:83:93:
                    ba:7d:55:43:10:4c:89:41:4f:ba:e7:65:ad:ac:4e:
                    dd:a4:64:50:ae:de:de:e1:27:cf:fe:c4:aa:2d:cf:
                    e3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:88:40:5A:2F:53:B8:ED:54:90:99:3B:83:5C:97:DB:87:59:CA:63
            X509v3 Authority Key Identifier:
                keyid:EA:B0:50:11:72:2D:25:C1:24:9E:65:8B:2C:AE:CC:11:8C:29:E8:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rBQEXItJcEknmWLLK7MEYwp6CI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c0:90:92:83:70:3a:12:ae:e3:43:c6:db:37:99:2c:cc:39:
         04:83:bd:8e:ea:ac:0e:53:78:00:a5:da:08:43:3f:db:25:e7:
         1f:0f:de:76:62:69:98:90:60:84:f0:f9:2a:88:72:80:63:f2:
         e3:2e:df:32:ed:16:4d:d5:91:43:25:ae:eb:a4:57:96:52:d9:
         fb:bc:ec:ac:a3:3b:a8:e6:de:e3:66:02:b4:a4:17:eb:4e:15:
         4a:77:00:56:94:d9:91:69:3d:14:c1:b4:e4:67:20:00:8c:ad:
         a9:09:c9:49:95:5f:af:6c:38:44:d1:75:89:59:bd:2d:9e:07:
         4d:79:af:e4:4f:6d:4b:b6:a6:9b:07:88:d1:eb:e9:21:df:09:
         7b:ac:b2:9b:a9:c3:cd:86:96:2b:07:bb:f9:b2:3d:7b:0e:f7:
         98:88:f5:27:f1:35:6a:51:12:83:7c:38:6c:0f:19:b1:3d:8c:
         10:88:c9:5f:e5:31:42:c4:94:20:ef:c9:50:67:be:1c:2c:92:
         79:c1:d2:93:b1:34:b6:84:e3:89:d0:7b:a1:c6:64:72:60:d9:
         ad:53:cf:eb:25:3a:7b:bf:ee:6a:91:bd:ba:34:93:37:a2:c0:
         3c:d2:7c:cf:5d:ba:e2:25:02:5f:ed:59:d6:23:9c:21:b5:ef:
         7e:71:8f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:01 2026 by rpki-client