Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
File:                     6T86Qea-UkEVxsK1WLwoAEOgIk4.mft (raw, json)
Hash identifier:          GxRAwjDikg/lf0tUjIPJmhHmJTJvsfeMXXHKIQ0+AWk=
Subject key identifier:   B3:C5:1A:F4:B4:56:79:31:BF:8D:ED:78:2B:81:1C:77:1A:01:8A:7E
Authority key identifier: E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
Certificate issuer:       /CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Certificate serial:       019D9A0763545C6094E5D00661A818D8EBE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
Manifest number:          18C7
Signing time:             Fri 17 Apr 2026 06:01:08 +0000
Manifest this update:     Fri 17 Apr 2026 06:01:08 +0000
Manifest next update:     Sat 18 Apr 2026 06:01:08 +0000
Files and hashes:         1: 1-uAgTFytjfQ2ckH7_TAX-TvGxDw.roa (hash: xn38BGRi79f6/jqPvFZVsKi+tmY/L4hGFFUPT+YH0JI=)
                          2: 6T86Qea-UkEVxsK1WLwoAEOgIk4.crl (hash: 2ZM0L5k3SK+KXB2/s2+5eJk2/xkdKSHcYn92LpAjWzE=)
                          3: M9gXh3Ye6TS9xUzQp1X1eJno0dg.roa (hash: lAB0vTky9FECb8JWHkfQm6v4LaD80/MiZF2Q6KaOlC8=)
                          4: jTpwteJckLxk88W-0IFWft0YYq0.roa (hash: qmbAR8GlWHjPRVsTXR8d6LEMmz3CLKUUkjmNaODWk7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:63:54:5c:60:94:e5:d0:06:61:a8:18:d8:eb:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93f3a41e6be524115c6c2b558bc280043a0224e
        Validity
            Not Before: Apr 17 06:01:08 2026 GMT
            Not After : Apr 18 06:01:08 2026 GMT
        Subject: CN=b3c51af4b4567931bf8ded782b811c771a018a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:38:9f:7a:a1:e5:bf:3f:18:f2:dd:a7:31:16:
                    c4:39:51:d6:bf:0b:7e:72:56:ee:95:91:92:d5:4a:
                    c3:b0:01:a3:65:9d:98:50:4f:f8:d1:f0:74:bf:ab:
                    4f:72:ce:3d:34:8b:cb:99:63:97:d8:71:41:8d:42:
                    a6:df:7d:40:b7:0b:d6:d0:0b:c2:7a:31:80:34:81:
                    e3:a9:e4:9e:ea:9b:d7:37:d4:1e:08:d3:81:e6:e6:
                    b7:c7:87:65:fb:79:9e:fd:48:7e:b9:01:57:88:fd:
                    7d:45:10:14:fa:33:f7:ef:26:a8:90:af:5c:79:5c:
                    8e:20:51:14:4a:65:78:7d:c5:ca:ec:09:2b:c3:9b:
                    8d:d1:9f:81:68:13:9a:aa:2f:9b:6b:15:b9:01:2d:
                    00:90:20:a7:05:7f:d2:0f:f3:9d:fe:44:6c:a8:0e:
                    79:fa:35:d1:a0:ca:79:73:29:0b:ad:ec:d2:09:1c:
                    d7:ca:15:06:e6:94:07:fd:7d:ce:c8:9b:cf:9c:c9:
                    a6:84:4c:24:a3:df:f2:14:98:da:9f:32:70:91:62:
                    87:e1:d3:08:cb:00:a0:2f:30:c2:3a:d6:cb:98:ab:
                    7c:b9:bd:96:21:f4:70:11:7e:cc:cf:d0:8c:d4:97:
                    b8:fa:c8:4e:94:33:96:2b:fa:42:c3:41:bb:b8:3c:
                    56:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C5:1A:F4:B4:56:79:31:BF:8D:ED:78:2B:81:1C:77:1A:01:8A:7E
            X509v3 Authority Key Identifier:
                keyid:E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:e6:c1:00:c8:f3:61:f3:0b:c5:ca:8a:ee:8f:16:5d:4a:7d:
         4a:ae:19:9c:d4:89:73:3c:e2:d7:44:85:3f:bc:92:87:96:93:
         1c:76:7e:ff:16:71:0d:33:2d:7b:04:54:d0:39:5a:4f:9e:36:
         66:81:00:b9:78:f5:5e:0e:b0:21:fb:83:f3:42:83:fb:c8:b3:
         76:10:4e:bf:5c:ce:33:5e:25:bb:04:d2:65:7d:aa:59:52:2d:
         2f:11:ed:c4:6a:91:ea:cf:1a:62:76:a2:48:7d:c7:0f:b9:8a:
         a2:21:eb:ba:27:ec:58:e2:ea:46:74:84:9a:08:85:54:72:30:
         32:56:1d:37:59:d2:d9:da:f3:6d:85:ac:1f:0d:6c:37:9d:82:
         6d:66:a6:e3:43:00:4d:8a:3f:ec:1b:ba:e6:3e:1e:01:a5:88:
         96:8f:d4:47:ed:4d:99:49:88:af:26:4b:87:d2:11:41:e9:e4:
         69:92:03:65:7b:5b:c7:11:8b:44:49:92:be:6e:a1:50:a4:fd:
         c4:12:73:d5:e0:9a:12:cd:27:a0:97:c9:68:b7:6c:61:70:71:
         2a:d7:20:07:c1:5f:fb:9f:9c:50:2e:1c:46:c6:14:bf:14:c0:
         b6:c5:92:92:96:90:0c:0e:4e:33:e2:3b:55:ba:ea:89:33:ab:
         da:d7:be:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:25:56 2026 by rpki-client