Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
File:                     6zlyC79FBhEPkD017RJJvUkeqLs.mft (raw, json)
Hash identifier:          m8fyjO3SZRmAgjrDKjkoUnjv8pIUemYCc0ysMQyicys=
Subject key identifier:   D2:28:52:5C:A9:69:E3:B8:49:39:97:8F:9F:5E:88:48:AE:1E:75:60
Authority key identifier: EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB
Certificate issuer:       /CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
Certificate serial:       019DA3AEF416764E4C53D48C88F7B30A8079
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
Manifest number:          7E
Signing time:             Sun 19 Apr 2026 03:00:45 +0000
Manifest this update:     Sun 19 Apr 2026 03:00:45 +0000
Manifest next update:     Mon 20 Apr 2026 03:00:45 +0000
Files and hashes:         1: 6zlyC79FBhEPkD017RJJvUkeqLs.crl (hash: XRVy16JvOlgv7AmdY3cAEg/BrRCSX7Bgbdx8Y0dFE7s=)
                          2: k8zQtdqeD4eCbj4bxGVWhtUSVqQ.roa (hash: mGgxLJKpdU4bJS/C0UsU5pVevvLL/1XTeMzy2EPtfmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:ae:f4:16:76:4e:4c:53:d4:8c:88:f7:b3:0a:80:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
        Validity
            Not Before: Apr 19 03:00:45 2026 GMT
            Not After : Apr 20 03:00:45 2026 GMT
        Subject: CN=d228525ca969e3b84939978f9f5e8848ae1e7560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:7f:5d:25:e4:7a:47:e8:17:f2:ff:29:a7:80:
                    1c:6f:b1:60:0d:8f:de:ae:4a:43:de:a7:55:ff:24:
                    2c:c8:78:e2:9d:fb:70:ae:1c:ee:d7:5b:b1:98:76:
                    ef:14:99:08:1b:aa:6e:58:56:c3:d5:65:76:4a:04:
                    e2:84:34:78:ad:21:71:84:d1:a4:26:31:9f:b6:38:
                    11:8c:f9:ba:c6:5a:a2:a5:23:36:ef:61:d2:2e:89:
                    be:82:ba:1e:6a:c4:03:88:36:c2:6c:42:a6:fc:1c:
                    f9:05:68:91:d3:0e:c7:ac:03:b2:92:a5:c6:db:8b:
                    f6:38:60:8a:2a:7c:ea:a0:76:d9:fb:71:78:ae:ae:
                    45:b5:a5:a8:a0:17:a5:ee:5e:95:9d:f4:88:44:53:
                    36:f0:1f:d5:87:25:ac:cb:55:be:36:84:e0:a5:4c:
                    50:66:b2:72:3e:40:d5:bb:9b:e1:89:81:20:66:9d:
                    b5:a9:31:8e:88:f5:92:cb:41:d1:71:1f:96:ed:b1:
                    99:d9:5a:45:a3:96:d3:ff:6b:c0:5c:aa:1c:51:08:
                    4b:17:ad:a9:47:23:c0:e2:cf:2a:f7:a1:d3:e8:0b:
                    5c:02:6d:b1:d6:aa:4c:cf:2d:aa:57:5d:a9:94:17:
                    9d:36:bd:6c:81:d1:c6:d3:44:d6:ca:4f:d2:d5:57:
                    e2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:28:52:5C:A9:69:E3:B8:49:39:97:8F:9F:5E:88:48:AE:1E:75:60
            X509v3 Authority Key Identifier:
                keyid:EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:2d:8c:72:88:c5:51:0c:49:a0:c9:cf:1c:3a:6c:7b:52:6f:
         34:f9:e8:b7:de:2a:6a:23:6b:50:5c:f0:ee:db:4a:0e:18:b3:
         19:47:a6:ba:19:40:e4:79:1c:b0:86:d9:16:89:21:f1:65:3b:
         14:b4:6d:b1:7b:83:78:dd:02:3f:ab:4e:60:b6:e9:6e:db:98:
         7d:8b:1f:35:cc:c2:08:bc:8c:43:d6:e0:49:d8:63:c7:ec:79:
         46:33:0c:46:f0:2a:79:b0:5d:39:d5:95:9e:22:94:bc:91:54:
         48:78:6e:52:8a:fb:d9:bb:39:36:68:31:4e:a4:24:9a:45:48:
         94:70:3d:5f:af:9c:14:cf:9e:ab:85:be:99:85:30:c3:60:e9:
         0c:8c:54:bf:42:6d:78:44:40:7d:2d:50:f2:29:b4:9f:a7:78:
         bf:23:f4:a6:b9:1c:93:68:4b:3a:a6:ee:83:83:5a:73:cf:d0:
         56:6e:35:a0:7c:04:b1:4d:47:e9:45:29:fa:96:bc:75:8d:9c:
         25:08:dd:13:16:87:a4:a7:81:c3:44:a1:50:ca:dd:d7:c3:1f:
         9b:cb:ee:b7:74:00:af:d8:bf:6c:db:88:ae:8d:b1:8f:a3:dd:
         c4:d6:38:ef:e8:14:f9:42:7f:55:84:8c:80:ad:d9:2c:bd:43:
         40:90:90:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:10:04 2026 by rpki-client