Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
File:                     9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft (raw, json)
Hash identifier:          qeZoQ4bK0jRRRr5GNZKCk7NAGQEhTq9Ju1t/3M0x3yo=
Subject key identifier:   07:21:5D:A4:89:49:5B:59:15:31:26:51:7D:3F:C5:C0:49:7F:D2:61
Authority key identifier: F6:56:FA:18:B1:19:C3:A4:9C:BB:CC:56:A6:04:57:43:9A:44:92:CE
Certificate issuer:       /CN=f656fa18b119c3a49cbbcc56a60457439a4492ce
Certificate serial:       019D9962DD63578BD2DCE7CDE6095BE111FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
Manifest number:          184D
Signing time:             Fri 17 Apr 2026 03:01:26 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:26 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:26 +0000
Files and hashes:         1: 9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl (hash: DDUKpAGGHi9JfOUcW2LhsCSo9RA2ROBEjnyvxFXdwM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:dd:63:57:8b:d2:dc:e7:cd:e6:09:5b:e1:11:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f656fa18b119c3a49cbbcc56a60457439a4492ce
        Validity
            Not Before: Apr 17 03:01:26 2026 GMT
            Not After : Apr 18 03:01:26 2026 GMT
        Subject: CN=07215da489495b59153126517d3fc5c0497fd261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:27:f1:d3:50:bd:49:32:7e:eb:e9:2c:55:51:
                    c8:c5:1f:11:3a:52:d7:a1:b8:10:34:db:ad:b5:5c:
                    77:74:bf:3a:97:d1:1d:66:80:51:10:e8:13:22:44:
                    e3:a8:d0:f3:ff:23:69:b4:3c:f0:e7:39:79:4c:25:
                    fb:32:6f:50:33:5a:cf:9d:07:c1:82:6e:6d:e4:fe:
                    7c:4c:5b:09:27:b5:46:e2:32:7c:5e:93:e6:c9:71:
                    73:78:a5:81:eb:30:39:24:2b:f6:96:20:b4:ca:65:
                    18:4b:17:17:de:9a:c9:e9:d5:2c:dd:d3:59:bd:49:
                    d9:12:39:73:86:8a:1f:22:02:b8:d6:12:40:d0:15:
                    1f:00:61:67:d3:78:c7:40:84:0d:72:c7:ef:a2:9e:
                    4c:2f:d4:61:06:7d:c8:e7:b3:ca:cc:9a:18:4c:b0:
                    9f:8d:0a:7f:c7:ee:69:9b:03:f8:48:23:ea:28:b6:
                    aa:34:0e:d5:ee:af:e2:64:93:45:1a:71:06:ed:9e:
                    23:99:66:86:1f:ce:b8:0e:26:d6:df:59:ea:5d:23:
                    92:49:3e:43:f8:c8:12:59:d2:e8:ee:89:0c:91:04:
                    9c:a4:69:c9:87:f0:3a:c5:9d:5a:5d:4e:5e:d7:d2:
                    46:df:7e:ca:a9:8d:c7:5c:ba:2f:16:04:09:f1:a3:
                    69:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:21:5D:A4:89:49:5B:59:15:31:26:51:7D:3F:C5:C0:49:7F:D2:61
            X509v3 Authority Key Identifier:
                keyid:F6:56:FA:18:B1:19:C3:A4:9C:BB:CC:56:A6:04:57:43:9A:44:92:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ba:7d:fb:67:5a:0c:ee:3f:64:ea:01:d0:f7:5a:04:c1:d5:
         c7:7b:97:3a:59:b7:72:4a:f5:f9:54:58:57:6c:c9:ed:80:cd:
         52:c7:5d:70:89:f2:6f:d4:31:eb:bb:77:dc:34:df:ad:83:23:
         4a:a7:7f:8a:1c:1f:af:38:ee:93:2a:ec:34:ba:bb:b6:31:04:
         1c:34:de:84:f4:44:a7:ed:4c:ec:25:1c:e3:0f:a8:5a:cf:c1:
         62:4b:46:2a:d6:5a:56:fd:7f:d5:30:dd:ff:83:a8:3f:e9:39:
         86:62:d7:ab:a9:fa:04:f7:93:ad:b2:2c:91:6f:35:c2:0d:c2:
         51:27:c2:a9:91:4e:5d:07:8d:07:57:4e:ae:2e:69:73:64:32:
         85:db:8c:60:ec:dc:ba:f9:34:31:25:1d:2b:1a:d7:2e:a2:76:
         17:65:44:47:f6:6b:4b:4e:2f:ee:29:05:f5:27:c8:7c:92:49:
         51:a8:0f:05:06:59:c9:6b:98:09:87:fd:93:7e:f3:3f:4f:cc:
         95:9a:27:a1:ec:3b:b0:d1:68:4f:02:d0:f0:b1:93:9a:e6:6a:
         32:dd:b7:fc:86:9a:80:14:b0:ff:c3:38:bd:94:70:b1:da:20:
         93:92:a5:85:79:ab:9f:dd:67:19:9c:e0:8e:c1:a0:ca:e3:8c:
         0c:7a:82:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:07 2026 by rpki-client