Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft
File:                     B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft (raw, json)
Hash identifier:          ZPcXOize0peK6GKs4UbRZfx5YnRX+AZ0XTQYQgztAto=
Subject key identifier:   22:FB:38:C5:35:46:6E:93:C1:66:74:93:0A:FB:05:11:4D:52:1E:90
Authority key identifier: 07:AC:64:19:14:35:78:99:95:BC:5A:67:F5:B5:1D:96:85:00:28:15
Certificate issuer:       /CN=07ac64191435789995bc5a67f5b51d9685002815
Certificate serial:       019D9A751108FBDB62EA84D0CF93367A9AEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 08:00:56 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:56 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:56 +0000
Files and hashes:         1: B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl (hash: qW9tze8klKzJXcmMKAGzOLrzob57x3LXioVHa2Tx37w=)
                          2: OZ-4bdLigPBsZcaqqgq1vun0WQw.roa (hash: pGYKvg2Oo9KoFiiz7qQh+48XYCnScT9nFS878Hx3KLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:75:11:08:fb:db:62:ea:84:d0:cf:93:36:7a:9a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ac64191435789995bc5a67f5b51d9685002815
        Validity
            Not Before: Apr 17 08:00:56 2026 GMT
            Not After : Apr 18 08:00:56 2026 GMT
        Subject: CN=22fb38c535466e93c16674930afb05114d521e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ed:26:15:26:30:06:6c:ce:39:66:20:b1:36:
                    06:62:cb:61:8a:81:84:2c:37:4f:a1:d4:26:fc:f3:
                    3e:4c:0b:23:47:b1:53:81:a5:0a:15:e1:60:38:57:
                    4b:68:8e:3a:71:3d:c0:46:e3:02:42:a7:b0:6b:f0:
                    af:fe:af:07:3d:47:1b:26:cd:86:d3:d7:04:9f:54:
                    e5:97:8c:1e:6c:a1:27:ab:91:ee:65:7f:3a:1d:6b:
                    97:6b:2c:10:1e:d6:90:f5:c7:d8:49:07:88:d9:ed:
                    e6:9e:19:dd:f1:c6:34:38:ac:e0:13:1b:ba:4b:63:
                    df:7a:ae:22:75:52:84:ba:34:d3:dc:ce:47:03:87:
                    61:b6:db:22:51:68:2d:d3:39:5e:02:1c:fd:79:d9:
                    c6:13:02:b3:7c:a9:64:9f:d0:8c:bd:1b:00:1b:cc:
                    d0:fe:86:5a:fb:37:71:ad:d3:a8:8b:21:23:97:e3:
                    1a:b4:6d:8d:38:b6:f5:6e:5d:a7:58:e8:53:6f:6f:
                    7f:60:39:02:52:cf:0c:2d:51:f4:09:90:ad:7b:df:
                    cf:c8:10:f7:ac:e9:e5:8c:f7:78:ea:25:51:b7:01:
                    45:a9:b5:58:74:77:2f:e2:36:41:5b:8e:33:75:ab:
                    2f:7f:59:49:01:e2:1b:fe:f5:cf:2b:08:9c:0f:00:
                    75:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FB:38:C5:35:46:6E:93:C1:66:74:93:0A:FB:05:11:4D:52:1E:90
            X509v3 Authority Key Identifier:
                keyid:07:AC:64:19:14:35:78:99:95:BC:5A:67:F5:B5:1D:96:85:00:28:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:bf:1a:97:ca:76:f8:a6:76:9e:65:31:7d:d9:16:d3:26:19:
         6b:f4:ac:0a:69:41:32:91:96:94:ed:ea:8b:9a:3a:9c:ac:48:
         be:67:de:dd:40:30:1d:65:d6:44:f8:71:52:dc:40:ed:35:1f:
         28:3c:4d:71:ae:2f:1e:74:4c:30:94:45:bc:83:23:b3:be:84:
         41:e1:f6:44:37:69:f5:9a:91:7c:94:b1:86:35:f8:a2:63:04:
         fa:2b:16:d1:1c:e7:b1:76:f6:38:e7:d2:56:25:4e:57:6c:62:
         f6:ca:e6:86:5a:a5:2a:1f:05:72:4e:d8:ab:10:91:9f:bc:63:
         57:19:3f:6a:21:f9:58:08:25:e6:88:13:6a:87:2d:7c:89:3d:
         48:4b:e9:c9:62:a9:61:df:c4:46:f1:3d:20:b2:6f:1b:99:d5:
         e2:01:c1:01:d8:3d:41:94:73:4d:ac:f0:e5:25:d7:68:7e:b0:
         04:bd:2f:bc:f6:5e:26:44:02:0d:03:d3:62:03:63:1b:4f:1a:
         00:4f:6f:85:51:fa:c5:a6:d4:47:ce:65:49:6b:88:e0:4e:63:
         67:a8:2f:7d:30:11:4e:e7:7f:b7:36:78:e5:92:e8:3e:c2:06:
         a2:f5:ac:fa:7d:06:48:93:ac:ea:cc:5d:e6:6d:c7:b6:82:fa:
         b7:f3:aa:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:49:47 2026 by rpki-client