Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
File:                     N6VPsHvqPfVW41k0VNMg5PAO7yw.mft (raw, json)
Hash identifier:          cbU3jf3UQFdKdIGGa74br2aOfnHuqxtVL1ciuyILt5Y=
Subject key identifier:   AF:8C:8F:31:0F:81:A1:F1:5A:68:68:A9:89:8A:83:41:A5:4A:E3:E3
Authority key identifier: 37:A5:4F:B0:7B:EA:3D:F5:56:E3:59:34:54:D3:20:E4:F0:0E:EF:2C
Certificate issuer:       /CN=37a54fb07bea3df556e3593454d320e4f00eef2c
Certificate serial:       019D9BF520F51B1DAED985A9E5D9C340465D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
Manifest number:          06DA
Signing time:             Fri 17 Apr 2026 15:00:26 +0000
Manifest this update:     Fri 17 Apr 2026 15:00:26 +0000
Manifest next update:     Sat 18 Apr 2026 15:00:26 +0000
Files and hashes:         1: N6VPsHvqPfVW41k0VNMg5PAO7yw.crl (hash: z3dvIj/A4YpsU55OqXiviqMXd4VS+5VYuzqfe9fi9Ik=)
                          2: mTMV3JVVafTQbCI8fMfsYYbI-GM.roa (hash: OvidQY4NfhMTBeSM+DOJ+WEE6JBe1DZJww12CtdTTqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:20:f5:1b:1d:ae:d9:85:a9:e5:d9:c3:40:46:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a54fb07bea3df556e3593454d320e4f00eef2c
        Validity
            Not Before: Apr 17 15:00:26 2026 GMT
            Not After : Apr 18 15:00:26 2026 GMT
        Subject: CN=af8c8f310f81a1f15a6868a9898a8341a54ae3e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:97:a0:8f:d4:b2:62:ac:e1:19:26:c8:de:0e:
                    cc:bf:ed:57:c7:3f:70:ab:c4:5d:d5:bc:8a:5d:7a:
                    9c:62:3c:18:c2:a8:df:b7:17:43:76:13:39:ad:cc:
                    63:77:bc:ad:20:ee:d0:c9:76:f1:36:ff:63:46:ae:
                    27:e9:91:45:3b:81:ce:35:11:db:b8:ad:d0:e2:48:
                    43:50:17:c6:ba:2d:5b:4a:19:07:3d:7a:7c:31:76:
                    b4:49:35:95:01:93:90:57:9c:96:07:d7:a8:62:ba:
                    69:12:58:57:c1:51:39:e7:68:40:05:ae:0d:59:16:
                    79:f5:d7:77:29:25:5d:68:ad:6f:3e:99:23:99:d1:
                    05:7e:e0:34:4e:e5:ef:de:38:1f:46:e2:80:e0:87:
                    af:c0:f1:4f:e6:4f:e0:3c:11:56:48:f2:a3:0b:3c:
                    c5:e7:a2:2e:4b:70:92:97:7b:fa:5c:9a:3b:58:52:
                    a1:40:be:e6:77:fc:d2:7e:1b:c5:00:63:b9:f9:0d:
                    53:e5:8d:af:ff:7d:04:30:ef:d0:ac:d7:21:14:de:
                    97:4c:4f:c0:db:7f:f3:05:bb:fa:7f:86:34:67:bc:
                    48:7f:3c:ee:c3:39:bb:c3:2c:93:4a:11:cb:c1:eb:
                    b2:84:35:50:4f:86:5a:73:8b:d8:18:2b:33:bb:c8:
                    6d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8C:8F:31:0F:81:A1:F1:5A:68:68:A9:89:8A:83:41:A5:4A:E3:E3
            X509v3 Authority Key Identifier:
                keyid:37:A5:4F:B0:7B:EA:3D:F5:56:E3:59:34:54:D3:20:E4:F0:0E:EF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:36:66:89:2f:55:39:fa:1f:84:9a:11:31:aa:ad:5b:fe:fe:
         0a:7a:dc:35:30:9b:f2:0e:4c:17:46:50:17:67:33:d2:6b:1a:
         6c:f4:93:63:6f:07:22:2a:19:ff:00:88:28:4d:f3:bb:10:6d:
         44:27:3d:61:74:a2:0c:11:b4:a1:d3:49:33:83:da:46:fc:80:
         69:18:00:0b:28:6d:7f:1b:f8:4c:f5:d8:f6:7f:37:5b:00:1d:
         73:06:f3:97:f8:31:b1:8b:51:a2:21:1d:12:6b:38:0a:dd:dd:
         cb:cd:6b:26:ae:cb:7b:a9:9f:51:4a:35:83:ca:33:36:df:a8:
         b2:29:97:59:e1:16:b9:33:a9:eb:ad:b8:2c:f7:27:0c:08:29:
         19:54:1d:ac:42:c4:e5:c1:04:51:93:77:a5:11:eb:52:e5:07:
         0b:ba:62:a0:cf:d3:e7:b8:07:94:76:cc:24:46:bb:d3:91:4b:
         c2:59:91:62:58:fa:ed:20:82:8f:06:ac:88:e5:30:5a:c3:b1:
         6d:79:33:b3:a4:ac:ca:ea:c2:46:6f:df:ea:db:f4:ff:bc:cd:
         21:2b:bd:20:e6:01:3f:c6:d6:30:07:71:a7:7b:98:69:36:f6:
         7f:1f:9c:5f:73:1b:d3:26:98:9a:6f:20:a6:6a:5f:e9:83:0a:
         b8:2f:62:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:23:51 2026 by rpki-client