Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
File:                     1-6Cw8f3WQBTlBXuEihmiOehJ290.mft (raw, json)
Hash identifier:          X4g64d0uxjD7DHiVc0Kqcwuy6DIlT13Ohd/rKNEAzVs=
Subject key identifier:   25:73:51:F1:7A:77:07:E4:3D:CF:AA:C8:F2:31:62:33:1E:9A:83:D5
Authority key identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
Certificate issuer:       /CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Certificate serial:       019D9961EDC1E9B1E4AA5BC87E66D55B6779
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
Manifest number:          119C
Signing time:             Fri 17 Apr 2026 03:00:24 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:24 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:24 +0000
Files and hashes:         1: 1-6Cw8f3WQBTlBXuEihmiOehJ290.crl (hash: t8yQiJGUnicxJx+ldA94T75REzqNGhDCqfqRv4+ErT4=)
                          2: TbbaXC5Vr5TmaMd_xbm8WF6u2S0.roa (hash: +nAGfw2iTYghUOUt6Pu3fvtqpyelpRx/U3nYc4p6P9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:61:ed:c1:e9:b1:e4:aa:5b:c8:7e:66:d5:5b:67:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
        Validity
            Not Before: Apr 17 03:00:24 2026 GMT
            Not After : Apr 18 03:00:24 2026 GMT
        Subject: CN=257351f17a7707e43dcfaac8f23162331e9a83d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e3:2b:cf:16:23:b1:1f:3d:8d:13:b8:db:c9:
                    41:ab:c5:ce:b4:89:18:c4:e2:93:8b:de:98:f7:5c:
                    54:ba:d4:ee:3a:8d:86:15:fe:fe:8d:00:ad:63:12:
                    af:71:89:3d:e6:10:0f:af:02:9c:1c:9e:21:17:54:
                    f8:53:f2:69:e5:4d:8a:88:18:eb:80:94:bf:d6:4e:
                    d2:66:a3:a1:01:2d:a8:e1:c8:15:f5:2b:47:0a:0f:
                    eb:e8:e4:72:a0:e3:ff:13:ab:8b:40:71:d4:77:49:
                    b9:db:6e:16:38:75:54:e0:d6:69:8a:f7:33:ea:77:
                    59:86:e5:d4:37:f2:48:40:91:99:ac:ed:8d:ab:c6:
                    7f:2b:ca:bf:40:96:6e:11:d8:0b:15:8d:10:32:d1:
                    0c:5a:18:bd:7c:6b:ea:85:57:99:c8:7a:98:96:98:
                    9d:6d:ab:2e:b0:62:03:df:f6:b0:31:60:bc:84:0e:
                    67:9a:f5:70:21:e2:1e:cf:8f:a5:bb:a6:f9:1d:23:
                    3d:07:88:42:eb:e0:bb:0c:0e:c4:63:dd:e4:ff:83:
                    36:f7:02:f1:cf:21:61:d4:2b:f2:84:8c:91:b7:e1:
                    30:25:95:98:5e:04:52:37:c2:79:e5:80:dd:74:b1:
                    c9:65:8f:7a:40:82:4c:6d:fe:a0:ae:e6:ac:12:3c:
                    95:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:73:51:F1:7A:77:07:E4:3D:CF:AA:C8:F2:31:62:33:1E:9A:83:D5
            X509v3 Authority Key Identifier:
                keyid:FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a8:25:12:c7:c6:10:eb:e5:0d:39:1c:dc:0c:10:07:4c:e5:
         92:5d:1e:52:7a:b1:40:88:52:df:7a:9e:41:ef:93:49:27:67:
         b8:51:a1:0c:69:2e:04:f8:70:de:c0:d6:97:84:b3:43:04:6f:
         82:b7:a6:12:b3:f8:6b:b9:05:bd:93:99:a6:e4:cc:28:e4:9e:
         28:21:84:2a:8a:17:14:9f:4e:b2:12:74:78:a4:63:0c:bd:aa:
         ab:57:5b:82:41:cb:e3:1f:51:90:c7:d5:e0:fb:78:19:1c:4a:
         05:a6:98:3b:c3:53:f0:07:38:14:4d:18:96:05:81:88:3a:26:
         75:50:3d:a5:58:24:66:8a:75:db:9a:5e:c9:8f:a4:9b:8d:9d:
         fa:8f:53:03:aa:40:ad:39:ad:29:19:aa:d8:f8:8b:26:a5:3f:
         4f:58:fd:a9:72:33:31:e6:74:8a:2d:8c:7a:91:18:b5:cd:ba:
         c2:56:d4:51:13:e5:ac:99:52:df:d8:bb:9e:8c:e5:00:ba:44:
         6b:1d:99:a1:8d:c7:30:1d:94:41:4b:ed:60:14:74:de:ea:bc:
         20:4c:1d:de:2c:5c:b8:1d:a9:5b:1d:51:81:99:78:b4:94:70:
         ed:bd:6c:df:0c:81:05:6e:a4:e9:0e:a9:e7:a7:67:ea:5a:2f:
         9f:23:5d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:23:51 2026 by rpki-client