Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
File:                     4N6QuLKkhGwldFi_G_tset6TLss.mft (raw, json)
Hash identifier:          gzyDkBbGgkiC5SQ4o9NqY1z46xkZy2eDD1+RukV7YBw=
Subject key identifier:   59:51:DD:CE:05:EB:35:67:D7:12:CB:74:A7:B5:E2:D7:04:7E:BD:99
Authority key identifier: E0:DE:90:B8:B2:A4:84:6C:25:74:58:BF:1B:FB:6C:7A:DE:93:2E:CB
Certificate issuer:       /CN=e0de90b8b2a4846c257458bf1bfb6c7ade932ecb
Certificate serial:       019D9A74FA4E47CDC605F8513823E4D2C877
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
Manifest number:          05B7
Signing time:             Fri 17 Apr 2026 08:00:50 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:50 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:50 +0000
Files and hashes:         1: 4N6QuLKkhGwldFi_G_tset6TLss.crl (hash: x7ZPv/VGCxxb7Xj39P0sBVmKGIwVs4FUr6Y55AGPH2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:fa:4e:47:cd:c6:05:f8:51:38:23:e4:d2:c8:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0de90b8b2a4846c257458bf1bfb6c7ade932ecb
        Validity
            Not Before: Apr 17 08:00:50 2026 GMT
            Not After : Apr 18 08:00:50 2026 GMT
        Subject: CN=5951ddce05eb3567d712cb74a7b5e2d7047ebd99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d5:e2:d5:ce:3a:6e:c7:7f:6c:49:b8:7b:45:
                    a7:84:a5:f8:15:4b:f6:d4:13:27:a4:99:07:44:f9:
                    a3:89:c1:23:e5:27:a9:97:6b:4b:9e:15:d9:43:df:
                    39:ed:76:a5:7b:e3:c5:b3:a0:62:91:e8:c4:f3:4c:
                    78:fc:84:a8:51:a4:73:32:06:f8:a8:48:e9:da:6d:
                    09:44:16:37:47:5f:99:ab:f5:e6:38:31:9e:ff:9a:
                    2b:5e:cb:07:e2:af:70:7c:5d:30:f8:40:1e:8d:c3:
                    18:2d:e2:cb:3b:71:84:cc:86:c2:78:d2:b6:cf:7c:
                    dc:ab:57:99:df:c6:95:2e:6b:19:50:13:78:73:8e:
                    22:15:75:9a:ff:70:72:05:10:0b:54:15:dc:7c:ad:
                    eb:20:f2:14:80:bc:68:6c:8c:5d:75:c6:bf:02:6a:
                    d1:f1:ed:21:e0:a1:b7:e1:83:fc:08:76:8a:e4:f3:
                    9a:95:75:7a:c3:84:36:1b:e2:12:c7:2b:d1:31:3f:
                    77:f5:11:64:51:de:cd:b8:e8:2b:9b:6c:0d:2b:5f:
                    96:b3:15:bb:c9:64:e5:38:27:6f:d7:82:f6:dd:fd:
                    55:64:a7:af:da:b5:4e:05:06:77:be:ee:ce:fe:0e:
                    b5:fe:94:14:f9:5e:f1:88:9b:61:d8:80:aa:b2:5b:
                    23:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:51:DD:CE:05:EB:35:67:D7:12:CB:74:A7:B5:E2:D7:04:7E:BD:99
            X509v3 Authority Key Identifier:
                keyid:E0:DE:90:B8:B2:A4:84:6C:25:74:58:BF:1B:FB:6C:7A:DE:93:2E:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:bd:3e:0a:4d:7f:3c:73:5a:ca:55:02:cc:f3:ec:d0:a2:09:
         53:4f:eb:72:bd:af:0d:37:89:e3:97:2e:3f:6b:95:44:37:c5:
         91:81:0b:9b:02:60:a4:7c:b2:67:4a:04:82:83:3c:dc:2b:8b:
         8d:d4:ae:e1:f9:bc:00:f9:fa:9a:99:e3:5e:15:4d:b4:f1:6f:
         17:95:ca:25:a2:eb:20:86:30:2d:be:99:83:41:f9:7a:a9:15:
         90:cf:06:f2:a8:59:28:e9:32:6b:99:c9:f7:01:51:8a:21:e6:
         9a:d4:83:4c:31:17:1c:2e:cc:89:8d:68:48:9e:9e:c3:6d:b4:
         1a:2a:e3:ee:72:c2:fb:99:56:04:83:65:ea:4d:5c:ab:f9:16:
         fe:61:4f:d2:8c:bd:a1:f4:4c:62:ce:63:7d:9f:c8:58:ff:4b:
         f7:e2:52:18:b5:ea:96:2c:6c:22:e2:c1:7e:07:bf:b3:e9:66:
         bf:8d:08:ff:55:07:b3:17:21:02:13:9e:2f:4e:92:88:6a:b9:
         9e:c7:91:da:9a:bc:30:85:95:77:14:96:08:92:fd:6f:9c:67:
         6e:b9:79:9d:3b:f4:52:a8:8a:9d:67:52:e2:c7:d2:19:d5:f8:
         bb:6b:64:92:1b:a9:31:e6:9f:17:ec:fc:ed:5d:1a:c2:e1:e3:
         45:87:5a:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adPpOR83GBfhROCPk0sh3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZGU5MGI4YjJhNDg0NmMyNTc0NThiZjFiZmI2YzdhZGU5
MzJlY2IwHhcNMjYwNDE3MDgwMDUwWhcNMjYwNDE4MDgwMDUwWjAzMTEwLwYDVQQD
Eyg1OTUxZGRjZTA1ZWIzNTY3ZDcxMmNiNzRhN2I1ZTJkNzA0N2ViZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NXi1c46bsd/bEm4e0WnhKX4FUv2
1BMnpJkHRPmjicEj5Sepl2tLnhXZQ9857Xale+PFs6BikejE80x4/ISoUaRzMgb4
qEjp2m0JRBY3R1+Zq/XmODGe/5orXssH4q9wfF0w+EAejcMYLeLLO3GEzIbCeNK2
z3zcq1eZ38aVLmsZUBN4c44iFXWa/3ByBRALVBXcfK3rIPIUgLxobIxddca/AmrR
8e0h4KG34YP8CHaK5POalXV6w4Q2G+ISxyvRMT939RFkUd7NuOgrm2wNK1+WsxW7
yWTlOCdv14L23f1VZKev2rVOBQZ3vu7O/g61/pQU+V7xiJth2ICqslsjqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlR3c4F6zVn1xLLdKe14tcEfr2ZMB8GA1UdIwQY
MBaAFODekLiypIRsJXRYvxv7bHreky7LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE42UXVMS2toR3dsZEZpX0dfdHNldDZUTHNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iNWQ3NzAtOGUzZS00MmY2LTlmZGMt
NDdkZjRhNTcxZjVhLzEvNE42UXVMS2toR3dsZEZpX0dfdHNldDZUTHNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9iNWQ3NzAtOGUzZS00MmY2LTlmZGMtNDdkZjRhNTcxZjVh
LzEvNE42UXVMS2toR3dsZEZpX0dfdHNldDZUTHNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU70+Ck1/
PHNaylUCzPPs0KIJU0/rcr2vDTeJ45cuP2uVRDfFkYELmwJgpHyyZ0oEgoM83CuL
jdSu4fm8APn6mpnjXhVNtPFvF5XKJaLrIIYwLb6Zg0H5eqkVkM8G8qhZKOkya5nJ
9wFRiiHmmtSDTDEXHC7MiY1oSJ6ew220Girj7nLC+5lWBINl6k1cq/kW/mFP0oy9
ofRMYs5jfZ/IWP9L9+JSGLXqlixsIuLBfge/s+lmv40I/1UHsxchAhOeL06SiGq5
nseR2pq8MIWVdxSWCJL9b5xnbrl5nTv0UqiKnWdS4sfSGdX4u2tkkhupMeafF+z8
7V0awuHjRYda/Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:49:37 2026 by rpki-client