Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
File:                     INaBg9YBj1BMXm-uIo4bNQxvD-8.mft (raw, json)
Hash identifier:          p6gDxEF6ZiOJopIxJaMWku1sT3fwBSlPujicJGkZDtI=
Subject key identifier:   AD:AE:E1:77:BA:07:B2:EA:16:FC:9A:F7:5F:E3:15:24:92:B0:4F:01
Authority key identifier: 20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
Certificate issuer:       /CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Certificate serial:       019D992B37A1A508899E0621A287F254BC42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
Manifest number:          06B6
Signing time:             Fri 17 Apr 2026 02:00:39 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:39 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:39 +0000
Files and hashes:         1: INaBg9YBj1BMXm-uIo4bNQxvD-8.crl (hash: v3ojIhRirBeMa89rSt7VtWkapJ9rsvFmk/6mOpF8imE=)
                          2: Iqa6GV4LdxiGIroWsllGP7YjyE4.roa (hash: Q0wZliLvPv9FNmdy4NB+Qu2Fy5dB0KdoE1fdtaOiLGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:37:a1:a5:08:89:9e:06:21:a2:87:f2:54:bc:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
        Validity
            Not Before: Apr 17 02:00:39 2026 GMT
            Not After : Apr 18 02:00:39 2026 GMT
        Subject: CN=adaee177ba07b2ea16fc9af75fe3152492b04f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:69:4e:8c:a7:ee:38:0f:bb:b1:cf:5a:f0:00:
                    5a:c8:bc:31:a0:89:12:5d:55:2e:8a:6a:18:27:58:
                    cb:6a:07:a8:5f:28:c9:0a:f8:a2:87:2d:b7:2e:9d:
                    ca:af:f7:44:17:28:0c:e2:1a:f4:74:bd:62:84:c1:
                    33:8f:26:03:16:e9:1c:3e:57:dd:aa:c4:b2:1a:b0:
                    21:05:95:9d:94:76:22:fe:bf:82:07:ee:39:54:df:
                    f4:db:88:45:ef:8d:cc:87:36:96:9d:01:9d:96:c6:
                    35:a0:a9:69:b8:56:e6:78:90:b0:58:84:36:a8:a9:
                    e3:d2:7a:8e:68:f9:76:3d:5d:6b:fd:bc:55:73:87:
                    af:17:e1:f9:e4:55:0e:65:2a:cc:bd:04:48:35:06:
                    12:38:79:25:36:3a:7f:cb:99:17:3c:b2:42:17:4e:
                    08:93:4c:35:13:8c:42:72:af:6a:67:e9:58:a8:dd:
                    ad:92:72:a0:cc:3b:df:49:05:bb:54:0b:a9:7f:e4:
                    83:a5:94:02:d3:6e:96:fd:37:9e:2d:31:70:ce:66:
                    60:45:c3:92:7d:53:c8:aa:b3:56:f7:06:a5:cc:68:
                    62:b4:99:89:4e:c9:40:8f:47:df:b0:cb:ee:69:84:
                    71:30:3a:c8:fe:5d:66:bc:6c:86:52:ea:f0:9e:98:
                    91:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AE:E1:77:BA:07:B2:EA:16:FC:9A:F7:5F:E3:15:24:92:B0:4F:01
            X509v3 Authority Key Identifier:
                keyid:20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:8e:35:0d:1f:69:fb:ca:1f:5e:d0:80:91:24:a0:71:82:39:
         13:32:71:fe:d9:5c:a4:26:8b:48:59:a4:54:65:1d:08:81:ca:
         a0:45:eb:20:6f:ed:8d:ba:5c:d0:1f:38:f0:f2:ed:5b:81:c7:
         f8:b1:fb:17:04:a6:5d:ff:b8:6e:8c:58:56:ef:1b:61:96:6e:
         9d:5b:0b:56:7b:64:58:79:f5:77:de:b2:5c:c5:ff:7b:10:87:
         a6:99:ac:7e:34:c7:8a:b1:ae:34:74:97:04:41:c8:10:38:7e:
         78:ea:c6:64:dc:32:bd:57:28:cb:ae:2c:41:b0:98:0e:a4:e9:
         4b:d1:e6:8f:88:06:06:1d:0f:cf:b4:54:f8:e8:07:3d:fc:fd:
         37:e2:ac:9a:65:26:e8:fe:96:4f:c1:63:69:c4:03:1c:8f:4d:
         40:00:93:86:9e:94:07:f3:8c:1f:25:6b:fb:cf:7f:c3:ec:90:
         a6:ca:11:1a:88:71:70:e5:a3:9e:4d:a8:a9:48:d9:e6:f2:52:
         ba:e6:6c:4f:82:e3:fb:83:51:e9:9b:90:35:c9:95:94:0d:5d:
         8c:24:a6:36:82:49:d8:48:0c:4d:d0:f2:86:52:94:98:2a:f5:
         48:73:b9:f2:da:18:2d:f6:cc:f8:b8:2e:d5:18:7e:24:24:a3:
         03:f0:bf:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:24:44 2026 by rpki-client