Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
File:                     9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft (raw, json)
Hash identifier:          5cx+VVh6mPD7KkW0N6n6elCPAEQfpzdybDf5x9OA+nQ=
Subject key identifier:   24:6F:2F:96:E2:F7:E1:79:4D:92:A9:09:15:BC:16:AC:B1:11:06:B6
Authority key identifier: F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8
Certificate issuer:       /CN=f4c9baa4429da786591b72525852e6d97b32c1e8
Certificate serial:       019D98509BD2776EAA15D5E48BD409A10B7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
Manifest number:          15AF
Signing time:             Thu 16 Apr 2026 22:01:52 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:52 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:52 +0000
Files and hashes:         1: 3I73d1fm-asEDdpF_Iaed-Rn4iU.roa (hash: JVQe5Bz0aKgNMVzD3MTnR/M1jsbAbCwUE1ywEqxkXqI=)
                          2: 9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl (hash: MlcXBHHk3IkRZ1AAusMT9rHkrrcjB+izxwUKVlrYwAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:9b:d2:77:6e:aa:15:d5:e4:8b:d4:09:a1:0b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4c9baa4429da786591b72525852e6d97b32c1e8
        Validity
            Not Before: Apr 16 22:01:52 2026 GMT
            Not After : Apr 17 22:01:52 2026 GMT
        Subject: CN=246f2f96e2f7e1794d92a90915bc16acb11106b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dd:40:e8:83:06:83:9d:e8:47:9d:9c:8a:ba:
                    24:dd:f5:32:ae:b7:f2:69:e0:d2:64:ef:70:46:8e:
                    02:b6:81:b6:e5:f0:53:55:19:05:87:44:33:d0:6e:
                    94:52:b9:0e:61:aa:1f:af:87:3e:87:48:0a:21:88:
                    8e:ee:ae:b7:87:46:35:d8:4d:fd:53:b1:17:2d:8c:
                    39:a4:f2:94:81:73:18:aa:46:e1:0a:99:77:c9:dd:
                    60:02:f6:69:63:13:0f:c2:a6:1e:b3:9b:9e:87:ec:
                    15:80:d5:b2:9e:39:56:83:d6:6a:36:49:81:fa:68:
                    73:2c:4a:c1:9b:bc:66:63:75:94:af:5e:15:8b:f5:
                    2d:9e:9e:7b:96:25:fd:d6:10:01:11:61:db:23:c6:
                    64:ce:48:a3:64:e1:57:60:5e:31:81:e0:e6:47:5c:
                    8b:08:08:0f:ad:2f:69:fc:f0:8b:0a:6a:3a:21:fd:
                    b7:ee:39:19:e4:c3:15:28:f6:d2:b1:8b:24:fe:66:
                    23:41:fa:e8:14:c7:38:16:47:9c:c4:ec:b6:59:84:
                    97:5a:f7:1a:6c:9b:d5:4a:6d:2b:db:f4:f7:52:87:
                    74:35:46:11:25:3e:c7:02:9e:f7:b9:e6:6c:4f:ec:
                    d2:76:50:d6:2c:49:df:18:76:89:03:84:46:fa:b6:
                    7a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6F:2F:96:E2:F7:E1:79:4D:92:A9:09:15:BC:16:AC:B1:11:06:B6
            X509v3 Authority Key Identifier:
                keyid:F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:32:13:33:8a:3c:cf:47:08:58:05:5c:50:2e:09:32:5e:a5:
         8b:44:ab:70:11:71:2b:6b:65:76:14:b5:70:07:c2:9b:23:01:
         fd:79:5d:f9:96:41:51:1a:4f:a6:43:e3:23:2d:f5:1b:e8:b1:
         45:e1:fa:3c:aa:ab:84:54:2f:f0:c2:82:b2:29:76:a9:2f:e8:
         9b:9a:d6:cf:6d:29:01:d0:3c:38:1e:65:2f:33:98:f0:bd:38:
         79:12:83:b5:45:99:4c:0d:d9:8a:57:65:11:a8:d1:33:6c:99:
         f0:77:63:55:47:d1:c1:f9:e2:82:e8:71:60:7f:d5:a5:8c:20:
         98:d5:da:16:cd:8d:5f:ed:61:71:0d:84:b1:77:4d:8b:f4:ec:
         8d:23:40:94:76:86:6b:40:53:3d:13:35:de:bf:32:f3:42:bd:
         c7:26:0d:a3:df:70:9f:8c:fd:da:52:78:55:91:ee:7d:c7:31:
         fe:19:24:50:ad:76:f6:1d:5f:20:2f:5d:55:15:85:2a:e6:98:
         82:b9:89:8b:c9:89:5d:fc:94:13:63:4c:0c:1b:0a:64:3d:c3:
         86:db:62:77:be:72:e1:32:6f:59:87:bb:0b:e4:c0:89:6d:a5:
         c2:2e:6d:ad:18:ed:09:77:55:fd:b9:2c:1c:2e:dd:f4:83:03:
         ce:07:53:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:36:21 2026 by rpki-client