Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/6U0-NrddcSKgh9ezwPuSpnyc7bQ.mft
File:                     6U0-NrddcSKgh9ezwPuSpnyc7bQ.mft (raw, json)
Hash identifier:          DUaoEEGbLbEkJk0OzCLMqMQct5an8yqCVRYLB7hFrok=
Subject key identifier:   69:5C:D5:E8:38:7F:4D:C7:3F:D8:1B:A9:E4:F2:D2:3F:73:BE:47:F3
Authority key identifier: E9:4D:3E:36:B7:5D:71:22:A0:87:D7:B3:C0:FB:92:A6:7C:9C:ED:B4
Certificate issuer:       /CN=e94d3e36b75d7122a087d7b3c0fb92a67c9cedb4
Certificate serial:       019D9BBF497EF69F739E3B62F6D2CADB9675
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6U0-NrddcSKgh9ezwPuSpnyc7bQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/6U0-NrddcSKgh9ezwPuSpnyc7bQ.mft
Manifest number:          66
Signing time:             Fri 17 Apr 2026 14:01:37 +0000
Manifest this update:     Fri 17 Apr 2026 14:01:37 +0000
Manifest next update:     Sat 18 Apr 2026 14:01:37 +0000
Files and hashes:         1: 6RLqS0VIgIsN3V0yM0B0QaujAag.asa (hash: uUr/vp85N4XS3S8eyQsn/vKnyBqXe73xryosUfkTWdI=)
                          2: 6U0-NrddcSKgh9ezwPuSpnyc7bQ.crl (hash: 9bB9yH6t+zXzwqygpVHTfxhhciV+up1Vd9cj2l9V3hs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/6U0-NrddcSKgh9ezwPuSpnyc7bQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/6U0-NrddcSKgh9ezwPuSpnyc7bQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6U0-NrddcSKgh9ezwPuSpnyc7bQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:bf:49:7e:f6:9f:73:9e:3b:62:f6:d2:ca:db:96:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94d3e36b75d7122a087d7b3c0fb92a67c9cedb4
        Validity
            Not Before: Apr 17 14:01:37 2026 GMT
            Not After : Apr 18 14:01:37 2026 GMT
        Subject: CN=695cd5e8387f4dc73fd81ba9e4f2d23f73be47f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:95:55:4e:2f:09:55:55:96:ed:e5:12:17:60:
                    50:2e:9d:76:0b:62:fb:11:96:61:e7:f7:8f:b8:e5:
                    e2:8b:60:db:82:4b:06:4b:80:27:6a:63:b1:24:3b:
                    f7:90:c8:84:60:9a:e7:2c:0f:95:79:bd:6e:f2:63:
                    aa:21:fb:b9:d1:73:27:7d:60:19:56:49:61:e4:81:
                    fc:c3:66:4e:0d:31:8f:26:77:ee:4c:48:d0:6d:ba:
                    ac:57:a5:ac:49:f4:8c:aa:85:30:1d:a0:6e:cd:af:
                    84:66:0f:1f:10:25:bf:1e:81:d1:94:3f:14:4b:18:
                    3e:7a:15:52:76:c3:ad:0b:6c:b9:d5:81:d2:d8:94:
                    c6:9d:a6:bf:22:20:50:db:39:26:7d:f1:75:4a:74:
                    d1:2b:36:d6:9f:7e:ce:31:97:0a:d5:57:94:d2:ed:
                    eb:e5:f7:c5:7a:96:bf:a1:79:51:69:26:06:53:94:
                    57:31:c1:e3:70:f1:00:8e:c1:f3:05:58:bc:50:3e:
                    79:13:bf:47:1b:70:54:7c:3a:d6:65:5e:0e:ba:31:
                    f8:e3:1a:90:1e:0b:80:18:01:34:fa:2d:b2:10:53:
                    84:c9:ba:54:d2:fc:be:01:1b:29:95:7c:74:30:fd:
                    45:45:19:d7:f3:e8:dc:e3:54:27:3f:7d:3c:3d:34:
                    e2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5C:D5:E8:38:7F:4D:C7:3F:D8:1B:A9:E4:F2:D2:3F:73:BE:47:F3
            X509v3 Authority Key Identifier:
                keyid:E9:4D:3E:36:B7:5D:71:22:A0:87:D7:B3:C0:FB:92:A6:7C:9C:ED:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6U0-NrddcSKgh9ezwPuSpnyc7bQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/6U0-NrddcSKgh9ezwPuSpnyc7bQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/6U0-NrddcSKgh9ezwPuSpnyc7bQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:c5:97:96:5c:00:ba:df:4b:20:b4:8d:79:28:aa:fc:38:e0:
         99:1e:65:f2:12:31:fe:a7:96:83:52:b4:ed:cb:50:8e:55:84:
         c5:ff:e8:aa:20:44:8f:21:6a:f4:73:a2:1a:93:73:dd:b5:de:
         6c:f1:74:ec:90:ad:8a:b2:63:85:9a:81:6c:e7:30:0d:b2:4b:
         4e:b4:ea:45:71:a3:81:f7:4e:22:e6:ed:0d:5f:cf:f4:9a:11:
         ad:43:d1:24:c3:36:9f:9d:ab:c2:0a:a4:10:dd:2d:dd:dd:d4:
         b5:21:8a:27:7a:0d:03:69:c1:a0:88:7b:4e:50:a9:2b:2e:8f:
         da:84:da:8e:9e:24:d4:59:f0:cc:24:d8:a7:f8:48:10:6d:3e:
         82:12:70:66:69:f7:db:ad:0b:14:91:09:bb:d9:2f:32:0a:51:
         2f:e7:2c:a7:18:bc:2e:69:42:1d:ee:23:45:3d:1c:a8:1c:10:
         97:cb:e7:62:4b:6e:70:33:72:5e:e3:c7:69:25:76:0c:64:45:
         aa:42:1d:82:51:7d:6b:4a:2a:cf:1e:f0:20:0b:8b:6e:60:29:
         18:4b:9b:0e:03:6e:73:e2:e6:a0:a0:9e:7f:7d:ea:1e:94:8d:
         8b:f0:b9:30:e4:60:67:e6:63:19:10:f1:1f:ea:fb:a1:b8:0b:
         23:ea:04:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:40 2026 by rpki-client