Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
File:                     fGHj2B8FrLVr33mO1K4q9jd5QgE.mft (raw, json)
Hash identifier:          U/oOQAQDfQcj3IePRlTwxVswes43dW/E70z/Z6dFD3Q=
Subject key identifier:   B6:77:34:26:EF:87:9B:75:9C:A5:41:EB:DF:63:20:79:D4:F9:63:0D
Authority key identifier: 7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01
Certificate issuer:       /CN=7c61e3d81f05acb56bdf798ed4ae2af637794201
Certificate serial:       019D98BDE26AAF230B671476DE2852945ED1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
Manifest number:          0EE6
Signing time:             Fri 17 Apr 2026 00:01:14 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:14 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:14 +0000
Files and hashes:         1: OM1cSFU8Ho_5gGRm9_J5AM__9Vo.roa (hash: gWCTvEKc3tzachY7brHH1xI78OvzIY3uE0uOo2Zryuw=)
                          2: fGHj2B8FrLVr33mO1K4q9jd5QgE.crl (hash: himbB0CBFabz4LT6C5OzEETEd1vJ1J6Cj4KtEv8mPwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 00:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:e2:6a:af:23:0b:67:14:76:de:28:52:94:5e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c61e3d81f05acb56bdf798ed4ae2af637794201
        Validity
            Not Before: Apr 17 00:01:14 2026 GMT
            Not After : Apr 18 00:01:14 2026 GMT
        Subject: CN=b6773426ef879b759ca541ebdf632079d4f9630d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dd:30:46:39:b1:bd:1b:ed:e9:fa:6b:0a:9d:
                    f0:b7:54:ee:e3:9d:71:5c:39:08:7b:d3:fb:4e:91:
                    05:ed:4d:0f:05:74:c6:75:90:71:dd:23:c1:97:06:
                    02:60:8e:67:b4:a2:2f:71:8c:18:bf:82:97:ec:5b:
                    ee:5f:ec:d8:13:a4:3d:62:4e:dc:27:41:bf:ee:09:
                    cc:94:93:2a:d6:81:b6:34:ea:52:56:89:a5:c4:83:
                    c7:f3:3f:bc:bc:8b:e2:8e:0c:2c:fe:bb:99:0b:a6:
                    21:2c:8f:63:e8:c1:88:40:87:db:3a:02:15:09:5c:
                    68:31:2c:30:15:ff:83:bc:8a:ab:aa:7a:26:38:1e:
                    6f:95:05:73:6c:17:b7:fe:7a:21:67:1a:8e:2f:9e:
                    f7:5e:12:7d:53:70:88:1d:a5:5a:af:d9:4f:10:cc:
                    09:66:19:45:53:c3:4f:74:d8:14:55:bd:15:9f:28:
                    10:4c:1a:72:22:1f:14:a3:d9:81:51:62:19:7c:c7:
                    6c:b8:5e:6d:4c:0b:35:b7:3a:2b:eb:c5:c4:52:aa:
                    d1:0b:54:01:6f:f9:27:11:82:d0:0e:6c:ac:2c:50:
                    86:f7:23:76:36:8e:9d:f0:f7:25:32:0c:e8:e9:e4:
                    ef:a6:f3:84:c0:08:25:28:25:5e:f3:e7:5f:a8:3b:
                    94:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:77:34:26:EF:87:9B:75:9C:A5:41:EB:DF:63:20:79:D4:F9:63:0D
            X509v3 Authority Key Identifier:
                keyid:7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:16:63:8d:13:8f:81:82:90:62:07:d5:59:4e:53:e2:1e:3c:
         2d:8a:62:4e:20:13:02:07:84:bf:2f:f9:10:fc:75:46:d6:55:
         0c:b1:de:9d:d9:3c:15:23:21:3d:ea:89:50:8a:9d:26:79:3b:
         15:d3:a8:4b:76:2e:88:98:85:d4:9b:81:c5:36:cd:d9:74:6f:
         ca:9a:62:23:7f:ff:6c:72:13:96:1f:aa:29:93:8a:fb:80:87:
         e7:c1:3b:bb:3c:16:98:ab:3d:18:35:c0:e8:a7:5e:2d:cf:4b:
         64:e8:82:d7:4e:e8:cb:c8:19:dc:63:43:7d:2b:f6:70:ea:f2:
         d2:82:45:d1:f5:96:9b:e8:ca:3a:84:b1:73:af:f5:b0:0b:13:
         f7:71:c6:1d:30:7f:f5:b0:16:36:70:f5:25:28:6c:72:b0:10:
         dd:15:b2:30:ec:e4:d1:5b:c3:73:92:2c:4a:d5:a5:f2:d0:77:
         f2:2e:99:96:69:31:b7:5a:c5:6a:73:23:5e:1d:c2:4c:d8:3d:
         ff:f9:58:0d:8d:1c:5b:59:2a:c0:44:29:fb:b2:37:1a:4b:78:
         82:35:c9:f5:f6:e4:98:d7:3a:f5:59:27:97:b3:5e:5f:fb:69:
         be:18:c7:b9:fb:aa:33:4c:6d:cc:5d:6f:6d:ca:f9:77:f8:0b:
         35:13:99:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:35:33 2026 by rpki-client