Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
File:                     fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft (raw, json)
Hash identifier:          Z6Q/KnBLo8I9G57ahMcVR5VosjiVt0YsKK7KLmd2IE0=
Subject key identifier:   30:71:CE:6E:59:BF:E4:2C:77:FD:39:1D:2E:FC:10:53:4C:30:67:A8
Authority key identifier: 7C:1E:84:E1:85:4B:16:60:C5:BD:02:81:9E:42:0E:9F:DC:C1:16:BD
Certificate issuer:       /CN=7c1e84e1854b1660c5bd02819e420e9fdcc116bd
Certificate serial:       019D98F4B47872B0F764F47042ADA897763A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
Manifest number:          18BE
Signing time:             Fri 17 Apr 2026 01:01:06 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:06 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:06 +0000
Files and hashes:         1: fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl (hash: qeB7feeM5Tb7wXjYU+lGlMNXxwiP/omHrSQqzllWZQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:b4:78:72:b0:f7:64:f4:70:42:ad:a8:97:76:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c1e84e1854b1660c5bd02819e420e9fdcc116bd
        Validity
            Not Before: Apr 17 01:01:06 2026 GMT
            Not After : Apr 18 01:01:06 2026 GMT
        Subject: CN=3071ce6e59bfe42c77fd391d2efc10534c3067a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e9:66:0c:c9:56:20:00:78:ee:69:fd:8b:06:
                    e1:bf:97:ac:10:56:7b:34:ca:82:de:db:af:e0:b7:
                    a2:11:f6:17:dc:32:2f:97:b8:92:ef:99:fe:c2:e4:
                    9b:36:82:0f:43:b5:eb:74:6a:3f:14:7a:df:74:e0:
                    db:cd:9c:34:40:5d:f1:62:fa:f6:08:d9:60:04:b5:
                    4f:56:44:a2:d7:84:c7:d3:db:48:15:db:42:1d:e5:
                    4d:e5:c1:8f:b8:f5:eb:16:26:97:82:34:c5:1a:d1:
                    72:91:6a:e3:14:68:8b:f4:11:b4:27:9a:55:c0:87:
                    9d:fd:f6:12:11:f7:a5:7d:13:96:f3:a2:6e:e1:06:
                    06:60:f1:55:cb:d5:a1:5f:8d:75:95:15:e9:d5:82:
                    f2:3f:00:01:9b:54:5c:5f:08:c6:b9:9c:e2:ff:dd:
                    67:df:b3:82:fb:d1:80:0e:16:a2:be:6d:ad:16:01:
                    77:45:8b:47:78:25:56:6a:75:ac:c2:f4:7f:61:62:
                    57:23:7f:55:c2:9c:17:87:ce:a8:aa:1d:6a:86:d4:
                    36:62:0a:b9:d5:4b:a2:8d:83:3c:ba:47:ab:01:a6:
                    0a:e9:29:3a:76:b4:08:2a:d1:40:1f:2a:11:18:24:
                    a7:6e:0d:06:e4:e5:40:d7:7e:59:68:48:fc:b2:91:
                    d9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:71:CE:6E:59:BF:E4:2C:77:FD:39:1D:2E:FC:10:53:4C:30:67:A8
            X509v3 Authority Key Identifier:
                keyid:7C:1E:84:E1:85:4B:16:60:C5:BD:02:81:9E:42:0E:9F:DC:C1:16:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e6:3f:da:fc:fc:60:27:d8:ef:87:92:07:2d:84:46:cd:02:
         7e:f9:18:2c:25:02:30:f2:0e:f5:cd:64:a9:f4:e2:a0:92:03:
         62:c4:c6:88:a2:66:7c:fe:3f:b9:44:9e:c8:59:19:f6:38:12:
         f9:b5:09:55:9a:5f:81:1d:65:6a:f6:b6:6a:18:b6:bc:a0:fb:
         0c:74:04:5c:28:9f:54:70:6b:4a:d7:fb:d0:b8:5f:06:b6:c6:
         76:20:bf:4f:6b:64:35:c2:67:71:74:fa:8f:d5:27:43:b6:be:
         3f:a0:17:8e:09:a7:d5:43:2e:bb:44:f2:d3:e0:86:cd:e4:2b:
         c4:ac:57:60:7a:33:13:3a:d2:d3:db:be:26:f3:f2:20:9e:f1:
         24:f5:33:5d:83:ba:ab:e2:04:ea:f7:90:80:86:70:02:0a:3a:
         e1:3e:94:8a:6f:cf:29:21:a9:90:f9:c9:b4:a9:ac:21:44:fc:
         da:f7:ad:21:de:ec:c7:79:c6:38:df:7e:2f:cb:93:f9:0e:5c:
         ed:e2:e3:6d:26:7a:cd:b2:45:20:c1:46:f5:50:f9:01:c1:6a:
         85:a6:09:70:6a:38:a4:03:d5:64:d9:80:1a:7d:7b:cd:bc:5d:
         7e:b7:71:f7:ea:d5:f2:d6:75:56:84:77:cd:83:0d:d1:43:57:
         c8:ec:3a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:27:02 2026 by rpki-client