Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
File:                     6sVEfAQxp17nu1lAohg8GEOOtrE.mft (raw, json)
Hash identifier:          yuQBQx2SPqE5LmaRgi8G671RUGURdDBiWPGV9xLfAZ8=
Subject key identifier:   5E:00:88:90:83:CE:EB:B8:AC:11:FD:80:FE:37:4C:38:68:69:80:9C
Authority key identifier: EA:C5:44:7C:04:31:A7:5E:E7:BB:59:40:A2:18:3C:18:43:8E:B6:B1
Certificate issuer:       /CN=eac5447c0431a75ee7bb5940a2183c18438eb6b1
Certificate serial:       019DA3418DA30E4073F0B2E62AB0FBAED097
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
Manifest number:          0827
Signing time:             Sun 19 Apr 2026 01:01:15 +0000
Manifest this update:     Sun 19 Apr 2026 01:01:15 +0000
Manifest next update:     Mon 20 Apr 2026 01:01:15 +0000
Files and hashes:         1: 6sVEfAQxp17nu1lAohg8GEOOtrE.crl (hash: cNqxtH8Tzw/tCgurFWY223oPlkYvv/KBwfvHLRejnRE=)
                          2: G-GZ443-EHFADO4B2PIjruGrydE.roa (hash: 1mWeGQkDzF19EY23jEdW/hmm8Hx4UKf+LzFcM45j8wE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 01:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:41:8d:a3:0e:40:73:f0:b2:e6:2a:b0:fb:ae:d0:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac5447c0431a75ee7bb5940a2183c18438eb6b1
        Validity
            Not Before: Apr 19 01:01:15 2026 GMT
            Not After : Apr 20 01:01:15 2026 GMT
        Subject: CN=5e00889083ceebb8ac11fd80fe374c386869809c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f6:b9:67:1f:80:ef:3a:80:57:c1:24:a2:a9:
                    98:59:99:72:8e:e8:8d:fe:8d:0a:40:b3:8c:e3:49:
                    3f:a1:ab:20:11:39:7c:2b:19:43:94:bc:5c:a4:b7:
                    56:90:73:e6:98:2e:a3:02:bd:a0:df:78:7a:63:0f:
                    49:4d:b4:ad:66:85:ef:20:d8:11:08:03:8a:de:57:
                    6c:80:10:67:ba:41:92:40:70:40:cf:15:e1:a2:ed:
                    0f:b7:6c:47:6a:16:a2:86:73:91:48:0d:b7:61:ba:
                    23:05:15:92:d0:77:0d:e6:a1:6f:e4:f8:b6:94:86:
                    47:c2:22:fb:16:25:93:3e:9f:29:b2:c8:d6:69:f5:
                    a1:90:f7:ad:55:43:92:b2:17:ad:08:e0:7e:d3:86:
                    48:9d:1b:70:18:f5:35:b9:1e:4e:53:7a:30:3b:26:
                    20:60:3c:0c:8f:d6:bb:5d:43:8e:4e:2a:12:13:bd:
                    f1:23:06:e3:ef:25:83:fd:60:aa:c8:c0:df:e2:65:
                    c1:2d:1e:87:e1:6c:3e:32:68:e0:58:d5:84:fb:9d:
                    ab:ba:74:df:ef:71:a5:32:4c:2f:60:0b:b6:7a:40:
                    93:17:79:f8:ca:1f:03:ed:05:f8:68:f4:64:74:0d:
                    de:6e:3f:18:70:41:4c:92:9c:08:04:8e:55:68:26:
                    5d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:00:88:90:83:CE:EB:B8:AC:11:FD:80:FE:37:4C:38:68:69:80:9C
            X509v3 Authority Key Identifier:
                keyid:EA:C5:44:7C:04:31:A7:5E:E7:BB:59:40:A2:18:3C:18:43:8E:B6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ed:72:95:97:d2:d0:94:aa:a4:5a:8f:8c:7c:b8:7d:b6:8e:
         93:d5:05:fa:41:5d:01:da:71:b4:dc:72:b9:bf:7f:86:d1:ff:
         52:63:f4:a2:64:05:d9:df:2c:4a:06:f8:56:2d:8c:5d:6a:d0:
         44:69:71:36:ac:d8:60:6a:46:86:6f:91:1b:55:3c:1d:14:fa:
         06:4b:68:bf:81:98:5e:7f:77:12:f0:b1:dd:c0:ef:2e:64:77:
         29:63:6b:44:0a:97:96:33:47:2f:c5:4b:f3:7e:1a:97:5d:f6:
         77:50:e5:74:0b:25:6f:4e:3e:81:33:c0:d5:2a:fc:d5:71:e7:
         1a:41:65:52:f2:24:e2:18:b2:64:1b:de:71:e8:5e:f6:b4:38:
         51:b4:da:c9:2d:76:b1:8c:e7:f6:d6:45:09:d0:18:8d:87:55:
         fc:5f:2d:da:b9:4b:ab:83:19:b6:5a:b8:ef:14:eb:31:23:7f:
         54:3b:f6:0b:2c:b6:a7:37:da:ed:3d:69:6e:24:26:bb:8a:33:
         39:f3:f4:44:c1:ad:57:9c:26:79:2f:31:ad:24:ca:0d:c8:6f:
         86:cd:dd:04:1b:08:95:1d:fc:a1:59:d6:dc:62:74:76:da:e7:
         c1:80:3a:00:24:03:6e:77:82:81:e5:c2:17:39:1a:38:31:82:
         c5:67:60:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:22 2026 by rpki-client