Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft
File:                     6_uNO-4VJTdjsHaqMuLium-eBcM.mft (raw, json)
Hash identifier:          bwm4pbWE6ceLMGo2PUKqy+YFH/YleFx85N4XIN4+2zc=
Subject key identifier:   4A:46:96:57:4A:B7:29:EA:03:B1:13:D5:EA:50:EA:09:CD:3A:EF:E5
Authority key identifier: EB:FB:8D:3B:EE:15:25:37:63:B0:76:AA:32:E2:E2:BA:6F:9E:05:C3
Certificate issuer:       /CN=ebfb8d3bee15253763b076aa32e2e2ba6f9e05c3
Certificate serial:       019D9773A8C65285A98016BAE532D4119848
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_uNO-4VJTdjsHaqMuLium-eBcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft
Manifest number:          0F9D
Signing time:             Thu 16 Apr 2026 18:00:32 +0000
Manifest this update:     Thu 16 Apr 2026 18:00:32 +0000
Manifest next update:     Fri 17 Apr 2026 18:00:32 +0000
Files and hashes:         1: 6_uNO-4VJTdjsHaqMuLium-eBcM.crl (hash: kKCJQ9OJhvClGDnnt0CcPk9OPa13sB1GN4BRJ33yf9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_uNO-4VJTdjsHaqMuLium-eBcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 18:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:73:a8:c6:52:85:a9:80:16:ba:e5:32:d4:11:98:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebfb8d3bee15253763b076aa32e2e2ba6f9e05c3
        Validity
            Not Before: Apr 16 18:00:32 2026 GMT
            Not After : Apr 17 18:00:32 2026 GMT
        Subject: CN=4a4696574ab729ea03b113d5ea50ea09cd3aefe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:88:37:98:90:32:25:e6:af:17:ed:44:77:c4:
                    e7:ec:df:61:9c:49:47:e0:a7:3c:8f:ea:61:7a:95:
                    eb:86:3e:fe:d5:e2:8f:ec:9b:76:d7:ba:5f:be:09:
                    a1:9e:6b:6f:1f:43:a8:5f:eb:06:46:3b:85:b9:d2:
                    b6:be:03:f8:ca:a5:00:b6:5b:d1:8c:d9:28:dd:1c:
                    34:97:76:27:90:99:6c:49:ba:46:98:32:17:9a:7a:
                    51:fd:63:39:c5:5a:0d:1b:1b:15:2d:58:e6:3b:a6:
                    09:65:68:ea:12:52:b5:04:c7:38:f1:ca:b6:c6:fe:
                    49:b0:49:14:06:99:7b:67:3b:72:9c:7d:e8:fe:f3:
                    aa:3c:79:29:71:f3:6b:b1:26:91:9e:94:2b:c7:47:
                    88:30:8a:18:87:8f:35:c5:fc:fe:e4:95:d8:00:e5:
                    08:b2:a2:fc:48:a9:20:a2:4c:ad:3c:39:f9:1e:3e:
                    7b:4e:c7:ef:61:97:08:68:c7:ef:9f:b8:4d:d2:a9:
                    e8:a9:98:3e:cc:34:b6:08:60:23:ae:a2:da:8c:0f:
                    2d:38:f8:91:a6:3d:ab:24:62:dd:a9:62:63:5c:50:
                    82:ae:34:5f:13:a6:6a:67:7b:c4:4b:d3:7e:3a:ed:
                    ad:7a:4a:0a:9e:90:20:d6:cb:a3:44:33:e5:9c:00:
                    57:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:46:96:57:4A:B7:29:EA:03:B1:13:D5:EA:50:EA:09:CD:3A:EF:E5
            X509v3 Authority Key Identifier:
                keyid:EB:FB:8D:3B:EE:15:25:37:63:B0:76:AA:32:E2:E2:BA:6F:9E:05:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_uNO-4VJTdjsHaqMuLium-eBcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:aa:44:4b:e4:64:f5:45:94:21:a5:1d:e8:50:cf:23:22:f6:
         74:7e:1c:5d:db:ab:ba:8a:40:b6:f8:c0:6d:69:08:72:29:61:
         ff:c5:18:11:6b:3a:1f:df:bf:46:29:af:48:0c:07:a8:06:c4:
         21:9e:9a:59:8f:88:76:fe:24:c5:5e:b4:b8:0c:2f:39:36:bc:
         f6:e1:01:03:31:3f:f0:29:af:3e:89:1c:16:90:00:c1:8e:ca:
         24:8b:28:fd:57:e8:59:f4:3e:b7:d4:82:c9:e1:c2:6f:da:7e:
         b6:dd:c9:69:8e:79:37:ff:21:cf:bb:a1:4d:6a:7b:72:49:4a:
         be:26:33:5d:b6:ee:6c:a8:11:ee:5e:39:17:84:2c:40:21:ae:
         3f:1f:2e:1b:7b:38:2e:ee:7b:72:3e:fc:c1:5b:49:21:cd:e6:
         3b:56:81:c5:5c:30:65:f1:22:61:72:1f:83:d0:0d:dd:5a:0e:
         22:2a:df:9c:27:b1:ed:82:4a:34:c7:da:d6:92:c6:73:8f:45:
         94:fd:f4:cc:f9:7b:41:38:62:43:45:d4:cb:fe:5b:7b:a8:95:
         73:b9:9a:49:90:98:39:03:3e:da:7b:93:a8:75:2f:21:c3:17:
         67:2a:18:2a:4f:d3:0a:32:85:81:7c:ef:90:1d:82:96:fb:e6:
         23:37:73:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:06:48 2026 by rpki-client