Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
File:                     E7myHACB0jxKIfYKCEp1y1-VvqI.mft (raw, json)
Hash identifier:          SjIRSwOBedQuq7A67kBa0cADGlLEXLn1HuxYDQLQaKs=
Subject key identifier:   6C:3B:E0:C4:EB:26:8F:95:34:7D:93:15:1F:10:40:DD:A7:75:D5:AE
Authority key identifier: 13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2
Certificate issuer:       /CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2
Certificate serial:       019D9B197F2C1E6D6A75FD08FB90B9DCF1CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
Manifest number:          09F6
Signing time:             Fri 17 Apr 2026 11:00:32 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:32 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:32 +0000
Files and hashes:         1: E7myHACB0jxKIfYKCEp1y1-VvqI.crl (hash: 5NdOqYeO1TqtqRDAVjoTqCBJWD0EVI1vW2FjSebZiOg=)
                          2: nBaSbmtZu4NrFhfgsgrmwUZYBbg.roa (hash: TGjV+Bn0STBLHDURzdnH0m2eTzhKRI7/ugPawErQAOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:7f:2c:1e:6d:6a:75:fd:08:fb:90:b9:dc:f1:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2
        Validity
            Not Before: Apr 17 11:00:32 2026 GMT
            Not After : Apr 18 11:00:32 2026 GMT
        Subject: CN=6c3be0c4eb268f95347d93151f1040dda775d5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:db:6a:80:fe:d1:a6:de:97:7a:d1:e4:6d:49:
                    bf:01:73:a4:69:2b:98:cc:0a:0b:3e:fa:f5:6c:77:
                    cb:8a:70:da:1a:09:12:00:b0:63:a1:74:99:96:f7:
                    08:7f:25:a0:d4:7e:e3:77:51:6b:50:02:d9:7b:8e:
                    d7:da:69:d2:ea:71:cd:66:ed:dc:59:16:ad:94:80:
                    23:55:a5:2c:7b:3f:29:7d:cd:4a:47:5d:fa:cd:0f:
                    a6:02:06:e1:1b:61:0d:39:5b:71:69:59:1a:fc:43:
                    05:f3:46:bb:4d:0f:d2:7c:9a:13:05:53:6d:4b:38:
                    7a:4f:50:96:96:66:db:d4:0f:12:62:9e:52:01:a0:
                    b6:58:9a:8a:7b:b0:7c:55:21:e3:47:45:73:82:08:
                    cb:1e:82:e0:9f:0c:50:0a:d7:73:4c:76:33:ae:2c:
                    76:a1:6b:d4:a4:3a:48:96:37:c6:c5:08:91:27:1e:
                    e2:56:8e:43:30:77:9c:77:36:b0:9c:da:4a:83:26:
                    d4:24:fa:05:ae:07:aa:96:bd:4a:2d:ca:8e:45:19:
                    cd:95:98:a9:4a:6c:67:af:42:01:c6:da:6f:cc:0a:
                    a2:33:8f:c9:ff:3f:7e:e0:7e:ba:3f:8c:00:58:e6:
                    f3:55:3e:66:ed:05:6c:43:d2:48:2b:fa:f9:d9:68:
                    3c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:3B:E0:C4:EB:26:8F:95:34:7D:93:15:1F:10:40:DD:A7:75:D5:AE
            X509v3 Authority Key Identifier:
                keyid:13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:af:d6:97:2e:d3:a1:91:9b:2e:08:aa:3f:00:d7:36:5f:b3:
         8e:e9:80:a0:77:b0:6d:68:b0:f4:8c:29:14:ba:26:0d:0e:38:
         87:7a:af:8d:ad:de:21:43:8c:49:b4:8b:d7:3f:0f:1c:a7:43:
         6a:c3:00:5e:9b:74:8f:67:ac:dd:32:22:d0:b1:97:b9:56:69:
         82:83:96:53:c0:19:bc:2a:db:47:d1:86:21:8d:bf:eb:6e:15:
         79:30:f9:5e:8e:91:ae:09:6f:6e:d4:f8:a4:0f:36:29:f5:54:
         c1:5f:ed:7e:ec:36:53:aa:0c:75:71:10:fe:3a:76:e1:6a:fc:
         35:27:40:db:d5:3a:6c:27:68:ca:e4:0c:2e:af:88:a7:46:60:
         95:53:78:cd:2f:80:ee:f9:3c:4f:b7:50:9f:94:8b:65:d0:42:
         c6:7c:cf:57:81:1e:d8:39:f6:66:ce:ab:77:61:9c:52:c1:af:
         62:c2:76:4a:73:e4:d9:0a:f6:13:e4:5c:29:32:50:d3:87:35:
         fc:07:3b:da:b6:18:41:84:23:5b:18:95:7d:83:91:1d:71:b5:
         b8:2d:64:40:da:f7:31:7f:0a:e7:1c:73:bb:fd:2d:db:b4:82:
         b5:18:22:f2:d7:c6:8c:9f:89:50:72:c0:0a:09:2c:43:02:a0:
         f3:ff:91:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:24:04 2026 by rpki-client