Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft
File:                     B6_c1el6wcECR5yVTV-SKxJsvBQ.mft (raw, json)
Hash identifier:          vsxe0fVCtdxOoNOjPn06kN9iU55PtZImy+er7LJGHso=
Subject key identifier:   70:B3:A9:E6:1A:F7:5F:19:A6:2E:47:35:E9:DC:C3:A8:8F:D6:70:D1
Authority key identifier: 07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14
Certificate issuer:       /CN=07afdcd5e97ac1c102479c954d5f922b126cbc14
Certificate serial:       019D9D3F94EC3FB4977251934BF251138E47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft
Manifest number:          04E2
Signing time:             Fri 17 Apr 2026 21:01:22 +0000
Manifest this update:     Fri 17 Apr 2026 21:01:22 +0000
Manifest next update:     Sat 18 Apr 2026 21:01:22 +0000
Files and hashes:         1: 3OuolTqmnVs6LtXiOd0QS9vfCo8.roa (hash: GAosGByG2yWB3lnHWPHloQDBkOxUHG7WW4iZIv6/8iA=)
                          2: B6_c1el6wcECR5yVTV-SKxJsvBQ.crl (hash: +sQyAr5AbK9ugovyA67Kz/VYtIqd1oUAN8yWY2Cc/4w=)
                          3: JGFsu11gMw9F7k2pf3aoCr2qqgc.roa (hash: /VEyQYusggRI1neKRiaRdt+JnQjrF2mEYj/mhbapZW4=)
                          4: MGFMl29uIul04Dkcmid5PDEF1ZY.roa (hash: ++vse/hC6lI4DMbABO7vSgWLBZfrwdYx2oCRckLJX9M=)
                          5: aBvBIhagv1Eh6Jv4p0LVBwaqyvc.roa (hash: dc4tXzkN5KUEUJGZTtTk5sZozulR7ysWSoCkggZPqwU=)
                          6: j3LHCzy_F6bYYmeWSo0ZiTKih8U.roa (hash: d6PIjAHsMGIzhvIIwNAHH5wwnWUITwMg8K91/kfRdWQ=)
                          7: oR5Wj0GKTXMBG21ienfrWq8vGSM.roa (hash: WRzwTNKdQL5QAbJ2ozPhC4DWD0wEitc9Oj75KHVMQ+4=)
                          8: tyNPCkeOnMPE8ffpgSI6cQ46rco.roa (hash: 1bhYy/zNueI3junFzpZGGhw3wm4zlmN3upkt7WLic/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:3f:94:ec:3f:b4:97:72:51:93:4b:f2:51:13:8e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07afdcd5e97ac1c102479c954d5f922b126cbc14
        Validity
            Not Before: Apr 17 21:01:22 2026 GMT
            Not After : Apr 18 21:01:22 2026 GMT
        Subject: CN=70b3a9e61af75f19a62e4735e9dcc3a88fd670d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:22:5c:72:a9:91:a8:93:50:e6:16:22:fe:
                    d2:e3:eb:89:45:77:29:8b:ea:2e:c0:e4:ea:bf:88:
                    0c:5d:45:10:e6:b7:3e:dc:9c:5b:9b:fd:08:fe:bc:
                    22:59:21:ce:fb:1b:9b:4d:05:8a:4e:a4:a4:63:fa:
                    9a:e1:45:b7:d2:18:2c:ea:89:c0:5c:b0:4b:a7:6e:
                    3e:0a:f0:cc:7d:ad:67:75:7f:9b:f8:06:11:1b:38:
                    67:31:19:76:dd:9b:dd:30:24:a2:3d:91:06:a0:73:
                    84:60:5d:28:87:ed:f2:80:2b:bc:67:6e:da:94:1f:
                    2e:16:0e:15:34:09:93:7d:30:df:07:15:77:a4:ea:
                    3e:93:1e:13:95:4a:0d:4c:c5:d3:de:eb:bb:c3:84:
                    e0:96:14:92:52:2a:63:69:f3:3e:60:66:f0:d7:ba:
                    b2:f3:3f:e5:54:4a:6a:f0:ba:a5:86:de:e9:2a:25:
                    29:2b:d2:5c:7a:00:bf:4d:bd:e0:a1:87:1c:67:9e:
                    99:4f:0e:92:66:33:5a:d0:38:59:ff:fd:80:2f:b6:
                    ea:25:83:a6:06:60:cc:fe:7d:d7:ef:6c:3d:94:36:
                    6d:05:6a:cf:2c:4e:50:80:f6:ed:6a:4d:85:fb:cb:
                    99:f6:02:cd:9d:57:ca:e2:4e:b2:71:a7:f8:ea:66:
                    89:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B3:A9:E6:1A:F7:5F:19:A6:2E:47:35:E9:DC:C3:A8:8F:D6:70:D1
            X509v3 Authority Key Identifier:
                keyid:07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:8e:f3:02:62:c2:09:b0:88:14:ea:35:17:b8:68:3b:42:82:
         b4:bf:b5:64:8c:bc:07:97:dd:66:39:2e:8c:b6:64:be:c5:49:
         f9:7c:0b:84:29:7e:73:74:46:89:38:07:0d:63:37:a0:a1:ae:
         33:98:86:d2:b8:06:d3:f0:0b:3b:b2:5e:dd:24:01:17:83:61:
         c6:ad:a4:ca:e1:d6:67:2f:e7:98:9d:f7:29:07:a6:af:c9:a0:
         4c:b6:03:b1:4e:13:e7:8e:3b:e1:77:e4:6f:9b:7e:d7:cc:27:
         e3:6f:87:dd:1d:bd:89:4c:9d:2c:21:e8:52:0d:02:11:5f:f1:
         93:6f:55:ba:31:6f:11:fe:1d:03:84:2f:92:69:9b:fb:39:08:
         86:4d:ea:c6:76:92:a6:21:91:81:98:df:5d:65:15:53:c1:a4:
         71:32:74:c0:b6:10:d0:82:e0:9b:ee:04:49:4e:ae:eb:e8:3e:
         d8:64:b5:2b:2c:07:67:89:79:e7:db:94:c3:8e:2c:93:e7:0a:
         5b:ef:9f:76:dc:2a:60:59:36:37:9f:d9:ab:cb:ef:5a:c3:81:
         da:ac:22:b3:a3:08:68:87:b4:4f:39:c2:0e:3f:ee:34:dd:19:
         54:9c:ee:ce:0b:90:a1:fc:fd:f5:65:de:d4:4e:c6:38:61:57:
         e8:8f:ab:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:55:56 2026 by rpki-client